$ rpki-client -vvf rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft File: zGkjHByhW84A7o1F08z_3kUtS5I.mft (raw, json) Hash identifier: mxtpWbtF9xvnrY4/u+vhDOEgpMTXdo/WTCxhGjpDyDI= Subject key identifier: 0C:99:C2:EA:BA:AB:35:AA:B2:04:47:19:E6:3E:64:73:C7:C8:E7:E3 Authority key identifier: CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92 Certificate issuer: /CN=A9144436/serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92 Certificate serial: 1504 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft Manifest number: 14E3 Signing time: Sat 18 Oct 2025 17:18:32 +0000 Manifest this update: Sat 18 Oct 2025 17:18:32 +0000 Manifest next update: Sat 25 Oct 2025 17:18:32 +0000 Files and hashes: 1: zGkjHByhW84A7o1F08z_3kUtS5I.crl (hash: PwX+ccu7jKoIWU1CiQ6eLmteBtV7JQXt/SFUpxnhekU=) 2: 186C59282D8B11EAA862AD56C4F9AE02.roa (hash: UtrqO+yyN3jQsZkVGkE+EUMbuUP0oNyEiC15gg1DC58=) 3: 59D3C5822AF711EE8EDEA185C4F9AE02.roa (hash: MomDGDWZ7/59k4xIjitSMBPT+iM+rJRkaviOBJD4QO4=) 4: 1086CEC42ACA11EE88AEAE19C4F9AE02.roa (hash: xOWh/5c3MDcOPKKPOs5E2JDhcK3EitSd5z0mZVQAmn4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:18:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5380 (0x1504) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144436, serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92 Validity Not Before: Oct 18 17:18:32 2025 GMT Not After : Oct 25 17:18:32 2025 GMT Subject: CN=68f3cbe8-ee94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c0:57:bc:da:a6:73:c5:35:b5:8b:ce:5a:f5: d3:f2:76:3c:e5:f3:84:d3:e5:16:e5:27:20:aa:dc: 8d:04:36:ed:36:9c:30:19:7a:5d:84:9b:61:18:37: 66:c1:5e:b9:27:b7:6a:09:c3:57:40:f5:34:0b:49: 0d:30:af:d9:f4:f9:eb:bd:6c:7d:7f:4a:f2:5e:e5: 6d:33:e6:f9:b2:68:ef:21:a8:34:4e:f2:79:40:d1: 8f:24:de:b8:b8:c3:bd:ce:b8:07:c6:96:81:03:e5: 73:3c:3a:86:60:68:76:3d:cb:85:04:4b:ba:4b:6a: 5a:a0:18:77:c4:ec:ab:93:1f:32:99:84:a7:59:90: 7a:57:79:ed:7e:62:19:85:ed:ff:71:fe:a8:a6:e3: da:b4:ec:bb:e7:7a:78:7b:6e:ff:6f:d8:aa:ef:8f: 0c:32:98:52:8d:74:2e:a8:6e:2c:e1:c9:33:c5:be: 5e:41:78:fd:c0:69:a1:4c:16:28:98:70:8d:bd:3a: 49:2d:a2:96:dc:7e:ee:fc:e5:0d:78:ff:ed:82:5a: e7:d7:f3:3e:ef:a3:2d:c1:d1:fa:2c:76:91:b7:3d: 7d:3a:83:e5:73:2e:99:96:e3:13:26:ab:69:60:a5: 3d:8e:80:3e:81:e6:8a:75:bd:e3:8a:07:87:66:23: cd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:99:C2:EA:BA:AB:35:AA:B2:04:47:19:E6:3E:64:73:C7:C8:E7:E3 X509v3 Authority Key Identifier: keyid:CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:8c:5b:9d:4d:aa:74:54:c5:36:2a:4f:ad:49:ba:d7:d0:7f: 81:e0:08:e4:68:b2:85:b3:28:e7:32:f7:ca:13:ae:f9:8f:34: b6:e3:e9:e6:0a:3b:68:23:1d:b1:0e:7a:e2:ea:cb:b1:84:da: 52:8d:70:19:13:f0:f4:85:3d:64:d4:15:8d:8b:e3:9f:df:5c: 57:f3:13:34:59:0b:fa:e3:9a:92:50:77:cb:7c:cf:8e:e7:0e: 49:01:4b:18:6e:0f:5a:90:28:a4:7d:9a:5d:e1:5a:e2:66:3a: e0:5b:04:81:ad:0d:6e:16:ee:2d:3b:1d:c8:71:0c:12:0e:f3: d8:97:74:aa:d8:e0:39:2b:97:81:a3:f8:63:ea:f4:e3:26:d7: e0:aa:60:5a:d6:49:56:b4:31:9f:bb:1a:50:6b:a9:00:76:54: eb:25:a2:1c:00:30:8c:85:c4:70:85:31:94:f7:4d:bd:af:f2: ba:6a:7a:f6:91:59:4f:f1:12:44:23:64:a6:c3:63:51:be:fa: ba:00:d6:91:0c:fa:f2:41:d3:82:2b:ec:c1:79:de:82:d0:5b: 7a:a2:02:ae:48:7a:29:1e:ed:59:de:df:7b:b4:bf:29:af:5e: a8:c1:cc:7f:19:1b:c0:08:96:f9:49:3f:f0:f5:74:23:91:ab: be:43:6d:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ0MzYxMTAvBgNVBAUTKENDNjkyMzFDMUNBMTVCQ0UwMEVFOEQ0NUQzQ0NGRkRF NDUyRDRCOTIwHhcNMjUxMDE4MTcxODMyWhcNMjUxMDI1MTcxODMyWjAYMRYwFAYD VQQDEw02OGYzY2JlOC1lZTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8BXvNqmc8U1tYvOWvXT8nY85fOE0+UW5ScgqtyNBDbtNpwwGXpdhJthGDdm wV65J7dqCcNXQPU0C0kNMK/Z9PnrvWx9f0ryXuVtM+b5smjvIag0TvJ5QNGPJN64 uMO9zrgHxpaBA+VzPDqGYGh2PcuFBEu6S2paoBh3xOyrkx8ymYSnWZB6V3ntfmIZ he3/cf6opuPatOy753p4e27/b9iq748MMphSjXQuqG4s4ckzxb5eQXj9wGmhTBYo mHCNvTpJLaKW3H7u/OUNeP/tglrn1/M+76MtwdH6LHaRtz19OoPlcy6ZluMTJqtp YKU9joA+geaKdb3jigeHZiPNVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAyZwuq6 qzWqsgRHGeY+ZHPHyOfjMB8GA1UdIwQYMBaAFMxpIxwcoVvOAO6NRdPM/95FLUuS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDQzNi82NDA3RTA2NjY1 RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4NEE3bzFGMDh6XzNrVXRT NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pHa2pIQnloVzg0QTdvMUYwOHpfM2tVdFM1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDQzNi82NDA3RTA2NjY1RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4 NEE3bzFGMDh6XzNrVXRTNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+jFudTap0VMU2Kk+tSbrX0H+B4AjkaLKFsyjnMvfKE675jzS24+nm CjtoIx2xDnri6suxhNpSjXAZE/D0hT1k1BWNi+Of31xX8xM0WQv645qSUHfLfM+O 5w5JAUsYbg9akCikfZpd4VriZjrgWwSBrQ1uFu4tOx3IcQwSDvPYl3Sq2OA5K5eB o/hj6vTjJtfgqmBa1klWtDGfuxpQa6kAdlTrJaIcADCMhcRwhTGU9029r/K6anr2 kVlP8RJEI2Smw2NRvvq6ANaRDPryQdOCK+zBed6C0Ft6ogKuSHopHu1Z3t97tL8p r16owcx/GRvACJb5ST/w9XQjkau+Q22f -----END CERTIFICATE-----Generated at Mon Oct 20 13:34:12 2025 by rpki-client