$ rpki-client -vvf rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft File: ggn985rwLDua5QPyJddH5nqjzfM.mft (raw, json) Hash identifier: A8N/usm7TLra4Ll8pzCAWWWxYzJlIBm2D3ALQLupnc0= Subject key identifier: AA:D4:CC:67:2D:98:1B:3F:B7:87:14:05:78:79:16:5D:1B:AC:7A:F1 Authority key identifier: 82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3 Certificate issuer: /CN=A9144788/serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3 Certificate serial: 0185 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft Manifest number: 017D Signing time: Sun 19 Oct 2025 06:22:27 +0000 Manifest this update: Sun 19 Oct 2025 06:22:26 +0000 Manifest next update: Sun 26 Oct 2025 06:22:26 +0000 Files and hashes: 1: ggn985rwLDua5QPyJddH5nqjzfM.crl (hash: x/uB8ggDqtZ/cmCHk4cHa7AwkCCLk/S9EhKHxxfahl4=) 2: 007AE4426C9311EEBEA0EB63C4F9AE02.roa (hash: btNm9lgvWpgU2p+BlBu9ugdzhnB1MwJxPbCJvAvXYk4=) 3: 4E87E6766C9311EEA3DF6E7FC4F9AE02.roa (hash: 0v/eXjEpWzRz29ZAhBrd/kYndqaDkG5i5cTyE+9QFnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:22:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144788, serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3 Validity Not Before: Oct 19 06:22:26 2025 GMT Not After : Oct 26 06:22:26 2025 GMT Subject: CN=68f483a2-a101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:72:f9:5b:ee:65:66:41:67:c5:63:4c:4e:25: 23:d1:b9:0a:f4:c3:8c:30:61:51:d4:4d:6e:06:44: 24:8f:b3:ea:74:88:07:7c:11:dd:30:15:5c:b7:4a: c7:91:60:8d:46:1e:08:70:64:1a:5d:85:8b:b9:d6: ce:52:0d:74:4d:53:2f:b4:d5:b6:30:39:93:b2:2e: d6:ea:d4:88:1e:d5:4e:20:4c:77:5a:74:81:99:5d: 32:70:22:9f:9a:3b:fb:81:e7:04:8e:51:d9:f9:9c: d4:bf:31:91:ff:23:8f:78:99:e3:65:79:86:fe:25: 7b:37:57:f9:99:06:50:0b:ac:14:02:3d:c1:0c:bb: 86:50:81:cf:5b:64:38:5e:90:85:c4:41:27:b5:3e: be:01:de:98:f5:9d:6e:1e:6c:69:10:8b:ca:23:d4: 00:ed:6a:6b:ca:7b:2d:c7:c9:7f:c4:84:d6:ee:90: e0:fd:a6:23:33:08:a4:32:01:80:fb:89:80:c5:9e: 90:4f:00:7d:1c:fd:59:85:19:4f:43:69:39:e9:d4: fe:b8:68:a1:f6:46:66:7c:df:fd:07:0a:6c:b2:ad: f2:b6:b7:d7:79:6f:6d:a6:36:d1:b3:72:d2:87:23: 30:7d:f4:2b:ee:73:db:6d:7a:90:3d:09:3b:a3:57: 6d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D4:CC:67:2D:98:1B:3F:B7:87:14:05:78:79:16:5D:1B:AC:7A:F1 X509v3 Authority Key Identifier: keyid:82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:3f:4e:9b:71:e5:e9:f0:a5:d7:d9:5a:02:7f:62:3b:47:95: c2:f7:18:ca:9c:1d:04:1b:d3:c2:5d:c3:f8:c1:48:25:e8:54: 07:6a:d1:17:d4:ac:80:1c:ca:7d:71:92:9b:b9:cd:81:aa:2d: d6:1d:87:a7:c4:25:fe:2d:a6:f6:03:5d:86:8f:a1:c5:ec:6e: 85:f8:7e:dd:40:25:b0:40:ce:9e:74:69:8f:f2:c4:15:6c:11: 9a:57:53:b3:94:12:6b:ae:45:91:4d:e9:f7:1c:37:2b:fe:6e: e0:04:7f:94:95:5b:f9:f9:3c:0d:d7:48:6d:ea:44:14:f0:4a: 52:f2:62:27:b8:16:47:2a:95:09:d0:bb:34:ac:ad:e5:bc:c5: f7:1c:ac:a1:21:8a:45:c0:99:73:87:48:f5:5e:3e:85:49:b9: b9:3c:9f:c8:37:da:f9:8f:5d:f1:a3:17:9c:34:88:de:c6:a6: be:75:56:db:56:36:ff:bc:fd:33:22:da:ea:45:b9:d3:da:05: dc:f7:b2:e6:1e:bd:74:4a:3e:73:87:0d:fa:15:83:47:5a:d9: 98:5f:37:35:23:af:37:c7:4c:cd:1b:f1:d1:1e:8b:ca:03:45: bd:67:ee:f2:9e:b9:98:9f:36:d2:6a:83:22:f2:31:33:d6:c0: b6:16:fc:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ3ODgxMTAvBgNVBAUTKDgyMDlGREYzOUFGMDJDM0I5QUU1MDNGMjI1RDc0N0U2 N0FBM0NERjMwHhcNMjUxMDE5MDYyMjI2WhcNMjUxMDI2MDYyMjI2WjAYMRYwFAYD VQQDEw02OGY0ODNhMi1hMTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnXL5W+5lZkFnxWNMTiUj0bkK9MOMMGFR1E1uBkQkj7PqdIgHfBHdMBVct0rH kWCNRh4IcGQaXYWLudbOUg10TVMvtNW2MDmTsi7W6tSIHtVOIEx3WnSBmV0ycCKf mjv7gecEjlHZ+ZzUvzGR/yOPeJnjZXmG/iV7N1f5mQZQC6wUAj3BDLuGUIHPW2Q4 XpCFxEEntT6+Ad6Y9Z1uHmxpEIvKI9QA7Wprynstx8l/xITW7pDg/aYjMwikMgGA +4mAxZ6QTwB9HP1ZhRlPQ2k56dT+uGih9kZmfN/9Bwpssq3ytrfXeW9tpjbRs3LS hyMwffQr7nPbbXqQPQk7o1dtRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKrUzGct mBs/t4cUBXh5Fl0brHrxMB8GA1UdIwQYMBaAFIIJ/fOa8Cw7muUD8iXXR+Z6o83z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDc4OC8zN0YwMUIxQTZD OTExMUVFQTU2MDdCMjlDNEY5QUUwMi9nZ245ODVyd0xEdWE1UVB5SmRkSDVucWp6 Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnbjk4NXJ3TER1YTVRUHlKZGRINW5xanpmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDc4OC8zN0YwMUIxQTZDOTExMUVFQTU2MDdCMjlDNEY5QUUwMi9nZ245ODVyd0xE dWE1UVB5SmRkSDVucWp6Zk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoP06bceXp8KXX2VoCf2I7R5XC9xjKnB0EG9PCXcP4wUgl6FQHatEX 1KyAHMp9cZKbuc2Bqi3WHYenxCX+Lab2A12Gj6HF7G6F+H7dQCWwQM6edGmP8sQV bBGaV1OzlBJrrkWRTen3HDcr/m7gBH+UlVv5+TwN10ht6kQU8EpS8mInuBZHKpUJ 0Ls0rK3lvMX3HKyhIYpFwJlzh0j1Xj6FSbm5PJ/IN9r5j13xoxecNIjexqa+dVbb Vjb/vP0zItrqRbnT2gXc97LmHr10Sj5zhw36FYNHWtmYXzc1I683x0zNG/HRHovK A0W9Z+7ynrmYnzbSaoMi8jEz1sC2Fvy0 -----END CERTIFICATE-----Generated at Mon Oct 20 11:41:13 2025 by rpki-client