$ rpki-client -vvf rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft File: GhajkdMlFwt7hcS_x4VaF300e24.mft (raw, json) Hash identifier: Jfw8HgraPh1BETS4ZqL0+PzmKQqh6C+5ela0heRQmsg= Subject key identifier: 6F:EB:31:57:BB:AB:B7:BC:DA:99:4E:B0:2B:96:51:9D:63:99:3D:65 Authority key identifier: 1A:16:A3:91:D3:25:17:0B:7B:85:C4:BF:C7:85:5A:17:7D:34:7B:6E Certificate issuer: /CN=A913B510/serialNumber=1A16A391D325170B7B85C4BFC7855A177D347B6E Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft Manifest number: 36 Signing time: Sun 19 Oct 2025 11:02:45 +0000 Manifest this update: Sun 19 Oct 2025 11:02:44 +0000 Manifest next update: Sun 26 Oct 2025 11:02:44 +0000 Files and hashes: 1: GhajkdMlFwt7hcS_x4VaF300e24.crl (hash: BcULo3MdX5jI/5KlbsoQgmCLw6/z0vSPvMwmX6AMmiQ=) 2: 9CAF31CA5D8111F0A04DD550C4F9AE02.roa (hash: 92wZUBl6JW7t9Lz6VY8NqyCC30dn+5kR/99dMirbOek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.crl rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B510, serialNumber=1A16A391D325170B7B85C4BFC7855A177D347B6E Validity Not Before: Oct 19 11:02:44 2025 GMT Not After : Oct 26 11:02:44 2025 GMT Subject: CN=68f4c555-e9bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e4:b3:51:00:da:20:7a:7e:7e:81:96:10:20: da:22:c7:f8:56:e9:2f:ea:27:b2:04:25:92:da:7a: 9a:9d:b2:fd:fb:19:8c:9c:03:14:5a:e9:58:53:9c: 95:c7:ee:fc:18:f5:c5:2b:c7:e2:00:d7:a9:d6:fc: c9:22:03:16:8d:cd:16:15:07:ff:95:b1:5c:99:38: 14:db:5f:5a:e7:6b:76:a6:3f:95:5c:24:58:ac:a6: eb:08:1e:b1:72:c0:bd:b2:3a:b2:d6:3c:f7:4e:e3: f9:e7:d5:55:98:f4:f5:e0:55:06:9c:d5:da:a0:66: 3e:13:1f:a2:9b:45:b8:e0:5b:6d:5f:91:b3:7f:99: 7e:4c:ad:dc:c2:91:81:da:39:83:1b:42:fa:76:54: 13:0d:bf:c1:a3:04:7b:20:31:54:dc:10:c5:f6:41: 64:e4:3f:50:eb:ef:63:61:1a:2d:c3:cc:13:d2:7f: ad:e8:0c:c2:e2:f2:ae:16:b7:e8:8e:56:cd:a2:8b: c7:2e:1a:60:a0:67:e7:4b:61:6a:e3:37:de:7a:f4: 17:13:4c:f3:be:8e:af:81:7e:76:48:bc:7a:90:aa: 73:09:5e:22:37:47:c6:b4:55:55:2f:42:c1:4a:67: 9f:b7:55:e5:ee:30:77:ba:1e:4a:8b:28:8a:cd:f9: c6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:EB:31:57:BB:AB:B7:BC:DA:99:4E:B0:2B:96:51:9D:63:99:3D:65 X509v3 Authority Key Identifier: keyid:1A:16:A3:91:D3:25:17:0B:7B:85:C4:BF:C7:85:5A:17:7D:34:7B:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:64:20:9f:3c:e0:ca:20:f1:8c:bb:04:52:61:d0:24:e8:81: 8a:fe:db:22:db:a2:24:87:cc:6e:35:76:d5:31:14:dd:44:1b: 21:1a:96:de:a6:3c:46:e1:bd:84:2c:34:03:9f:f2:df:2c:74: bf:c8:e4:04:c2:ab:24:0c:1f:30:c3:77:87:e3:47:8a:68:7c: b2:5c:6e:c5:92:86:c4:9f:7e:6e:8e:f8:3b:bc:64:3f:02:12: 7d:82:b4:1d:f0:00:28:32:b8:c9:9c:ef:86:ca:51:96:57:e5: f7:ce:aa:0e:09:02:ba:96:43:75:87:e5:39:e6:28:a5:76:03: 5d:ea:bf:f5:ce:b2:05:01:91:ea:35:70:80:a7:aa:45:29:0c: 85:1b:77:26:08:e2:02:5a:5a:ad:0b:99:75:5d:fe:07:ec:59: f0:69:27:0b:78:97:f4:74:32:aa:fe:ed:63:5d:7e:94:0c:52: 7c:6b:63:bf:9c:19:f1:29:06:de:8d:aa:58:fe:52:e3:0d:9e: cb:7f:c2:d7:d7:01:77:c9:42:7f:86:81:38:bb:4f:ec:57:8d: da:e5:44:07:2f:05:9d:06:66:a6:90:ff:cb:25:e4:8d:cc:0e: db:ab:b4:19:b7:81:af:3a:e0:2e:c1:ac:9c:dd:a2:c6:2d:46: 6f:e4:e7:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QjUxMDExMC8GA1UEBRMoMUExNkEzOTFEMzI1MTcwQjdCODVDNEJGQzc4NTVBMTc3 RDM0N0I2RTAeFw0yNTEwMTkxMTAyNDRaFw0yNTEwMjYxMTAyNDRaMBgxFjAUBgNV BAMTDTY4ZjRjNTU1LWU5YmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC75LNRANogen5+gZYQINoix/hW6S/qJ7IEJZLaepqdsv37GYycAxRa6VhTnJXH 7vwY9cUrx+IA16nW/MkiAxaNzRYVB/+VsVyZOBTbX1rna3amP5VcJFispusIHrFy wL2yOrLWPPdO4/nn1VWY9PXgVQac1dqgZj4TH6KbRbjgW21fkbN/mX5MrdzCkYHa OYMbQvp2VBMNv8GjBHsgMVTcEMX2QWTkP1Dr72NhGi3DzBPSf63oDMLi8q4Wt+iO Vs2ii8cuGmCgZ+dLYWrjN9569BcTTPO+jq+BfnZIvHqQqnMJXiI3R8a0VVUvQsFK Z5+3VeXuMHe6HkqLKIrN+cZfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUb+sxV7ur t7zamU6wK5ZRnWOZPWUwHwYDVR0jBBgwFoAUGhajkdMlFwt7hcS/x4VaF300e24w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCNTEwLzE4ODJEMEU2NUQ4 MTExRjA5MTIyNkUzMUM0RjlBRTAyL0doYWprZE1sRnd0N2hjU194NFZhRjMwMGUy NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR2hhamtkTWxGd3Q3aGNTX3g0VmFGMzAwZTI0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNC NTEwLzE4ODJEMEU2NUQ4MTExRjA5MTIyNkUzMUM0RjlBRTAyL0doYWprZE1sRnd0 N2hjU194NFZhRjMwMGUyNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABNkIJ884Mog8Yy7BFJh0CTogYr+2yLboiSHzG41dtUxFN1EGyEalt6m PEbhvYQsNAOf8t8sdL/I5ATCqyQMHzDDd4fjR4pofLJcbsWShsSffm6O+Du8ZD8C En2CtB3wACgyuMmc74bKUZZX5ffOqg4JArqWQ3WH5TnmKKV2A13qv/XOsgUBkeo1 cICnqkUpDIUbdyYI4gJaWq0LmXVd/gfsWfBpJwt4l/R0Mqr+7WNdfpQMUnxrY7+c GfEpBt6Nqlj+UuMNnst/wtfXAXfJQn+GgTi7T+xXjdrlRAcvBZ0GZqaQ/8sl5I3M DturtBm3ga864C7BrJzdosYtRm/k5yM= -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:34 2025 by rpki-client