$ rpki-client -vvf rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft File: GySJViTA9S0agjsvKdrcCOKmJmE.mft (raw, json) Hash identifier: XoyilwnFT4zdhgfMJ2Ek0Kpy4xQmfR21bseNnPZealk= Subject key identifier: 3D:F6:6C:94:D3:65:AA:D9:9E:C9:C4:19:41:8E:B0:66:51:0C:D0:78 Authority key identifier: 1B:24:89:56:24:C0:F5:2D:1A:82:3B:2F:29:DA:DC:08:E2:A6:26:61 Certificate issuer: /CN=A9136385/serialNumber=1B24895624C0F52D1A823B2F29DADC08E2A62661 Certificate serial: 018E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GySJViTA9S0agjsvKdrcCOKmJmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft Manifest number: 018C Signing time: Sun 19 Oct 2025 06:05:31 +0000 Manifest this update: Sun 19 Oct 2025 06:05:31 +0000 Manifest next update: Sun 26 Oct 2025 06:05:31 +0000 Files and hashes: 1: GySJViTA9S0agjsvKdrcCOKmJmE.crl (hash: XDmd0JvGThia4a2j3UFoOm4kn3ynYXVo++cd7LB7KM0=) 2: 557745EE4E1B11EEBA53316CC4F9AE02.roa (hash: kc35Syn08c4EtuwoQYpFr9xOBj5+HU59IWuBenhwr1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.crl rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GySJViTA9S0agjsvKdrcCOKmJmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:05:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 398 (0x18e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136385, serialNumber=1B24895624C0F52D1A823B2F29DADC08E2A62661 Validity Not Before: Oct 19 06:05:31 2025 GMT Not After : Oct 26 06:05:31 2025 GMT Subject: CN=68f47fab-e6f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ef:26:b0:5e:18:b8:6a:16:45:02:0a:06:44: 9d:10:68:9b:a2:ef:50:0f:e1:1a:68:c2:9b:79:11: ea:e8:a5:70:1d:68:c8:c1:3d:e3:29:74:a6:d4:05: 35:cb:ff:4a:71:24:57:ae:c1:97:25:e2:9f:39:e0: 0e:f3:c4:0d:f7:d3:13:90:4e:99:f8:81:be:53:4c: 10:50:2a:2b:52:8c:80:c5:26:bb:a1:5f:84:d5:39: d8:3a:98:c2:9c:60:21:c8:26:9f:61:03:d7:92:6d: c1:d6:38:56:06:b9:a6:0d:de:c0:71:52:5c:31:02: 76:e3:27:df:b8:70:cd:f4:73:2b:ad:6e:79:e6:0e: 38:92:36:1b:ee:6f:35:9a:3f:5b:e2:0e:4c:c4:ae: 27:31:87:2c:36:4a:95:75:98:f7:8d:b9:27:9c:6f: 86:3e:8e:3d:13:a5:ba:a1:b9:c8:2a:60:7a:f1:8e: da:37:79:11:38:41:d1:69:21:92:2b:43:d2:6a:08: 42:5e:65:9d:42:bf:ae:5b:c5:7a:48:5a:1a:b5:40: d6:6f:a4:40:b8:57:15:e3:a9:ab:15:6b:68:35:4f: 49:f6:ce:e0:4a:fb:de:91:9f:b5:1a:89:0d:20:13: 55:da:8e:50:b2:65:88:2a:8d:79:d2:37:9a:ab:52: 30:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F6:6C:94:D3:65:AA:D9:9E:C9:C4:19:41:8E:B0:66:51:0C:D0:78 X509v3 Authority Key Identifier: keyid:1B:24:89:56:24:C0:F5:2D:1A:82:3B:2F:29:DA:DC:08:E2:A6:26:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GySJViTA9S0agjsvKdrcCOKmJmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:cc:6c:2e:99:5b:d7:15:b5:4d:5c:87:63:4d:fb:9b:3d:38: 0d:e5:da:fe:51:69:32:06:1b:74:20:e0:7e:21:db:10:1d:14: 61:b8:6f:b0:f4:d0:cf:5f:d2:9e:47:4b:32:59:b5:c5:27:71: 6d:c7:f2:4d:98:87:55:1f:23:85:b9:b8:33:46:28:a6:c3:29: 1c:7d:90:0b:2c:96:20:4f:49:66:ba:33:84:37:fa:a5:5f:50: 57:c2:bd:8f:cb:83:a4:37:94:97:9d:38:79:e3:35:f6:fe:c7: 0b:13:85:cf:99:9d:6f:11:b6:8d:59:bc:7d:c0:fd:d8:f5:c8: df:3c:9f:f7:28:f3:4c:a1:37:7e:e1:2e:e2:62:ed:c2:eb:b0: 7f:9f:06:ad:1b:f5:76:1b:8b:3f:97:0e:d5:be:fa:de:fc:d5: c0:6c:e3:cd:c6:db:9d:77:63:01:6d:3f:95:ad:25:b8:e8:54: 0a:b5:5e:75:4f:dc:07:55:80:ae:c4:5b:2c:1c:63:cf:38:c2: 1b:d5:d2:e8:4f:2f:24:0e:c3:7a:16:5b:64:37:fc:1c:08:9c: 6b:96:4b:fc:c0:90:f2:17:f8:27:ba:c0:02:72:b5:ef:ff:09: 95:1c:70:32:4d:3e:cc:8f:8e:08:19:a0:17:52:2f:45:b5:f7: ab:3f:68:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYzODUxMTAvBgNVBAUTKDFCMjQ4OTU2MjRDMEY1MkQxQTgyM0IyRjI5REFEQzA4 RTJBNjI2NjEwHhcNMjUxMDE5MDYwNTMxWhcNMjUxMDI2MDYwNTMxWjAYMRYwFAYD VQQDEw02OGY0N2ZhYi1lNmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyu8msF4YuGoWRQIKBkSdEGibou9QD+EaaMKbeRHq6KVwHWjIwT3jKXSm1AU1 y/9KcSRXrsGXJeKfOeAO88QN99MTkE6Z+IG+U0wQUCorUoyAxSa7oV+E1TnYOpjC nGAhyCafYQPXkm3B1jhWBrmmDd7AcVJcMQJ24yffuHDN9HMrrW555g44kjYb7m81 mj9b4g5MxK4nMYcsNkqVdZj3jbknnG+GPo49E6W6obnIKmB68Y7aN3kROEHRaSGS K0PSaghCXmWdQr+uW8V6SFoatUDWb6RAuFcV46mrFWtoNU9J9s7gSvvekZ+1GokN IBNV2o5QsmWIKo150jeaq1IwewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD32bJTT ZarZnsnEGUGOsGZRDNB4MB8GA1UdIwQYMBaAFBskiVYkwPUtGoI7Lyna3AjipiZh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjM4NS83QjIyQzc0MjRF MUExMUVFOTNEQ0Q3NjdDNEY5QUUwMi9HeVNKVmlUQTlTMGFnanN2S2RyY0NPS21K bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d5U0pWaVRBOVMwYWdqc3ZLZHJjQ09LbUptRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjM4NS83QjIyQzc0MjRFMUExMUVFOTNEQ0Q3NjdDNEY5QUUwMi9HeVNKVmlUQTlT MGFnanN2S2RyY0NPS21KbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqzGwumVvXFbVNXIdjTfubPTgN5dr+UWkyBht0IOB+IdsQHRRhuG+w 9NDPX9KeR0syWbXFJ3Ftx/JNmIdVHyOFubgzRiimwykcfZALLJYgT0lmujOEN/ql X1BXwr2Py4OkN5SXnTh54zX2/scLE4XPmZ1vEbaNWbx9wP3Y9cjfPJ/3KPNMoTd+ 4S7iYu3C67B/nwatG/V2G4s/lw7Vvvre/NXAbOPNxtudd2MBbT+VrSW46FQKtV51 T9wHVYCuxFssHGPPOMIb1dLoTy8kDsN6FltkN/wcCJxrlkv8wJDyF/gnusACcrXv /wmVHHAyTT7Mj44IGaAXUi9FtferP2gS -----END CERTIFICATE-----Generated at Mon Oct 20 17:08:22 2025 by rpki-client