$ rpki-client -vvf rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft File: gg9wML6sbUnxCbqOwlplvyNprS8.mft (raw, json) Hash identifier: Kf1gnTdG4fjqDG8Nsz0RmRUnBTAsZ2LCRaXM/mNi+4o= Subject key identifier: 27:E8:13:3F:BC:23:71:B3:63:A8:FA:D8:73:40:D5:BA:3E:DB:FF:3E Authority key identifier: 82:0F:70:30:BE:AC:6D:49:F1:09:BA:8E:C2:5A:65:BF:23:69:AD:2F Certificate issuer: /CN=A9146DAA/serialNumber=820F7030BEAC6D49F109BA8EC25A65BF2369AD2F Certificate serial: 01F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft Manifest number: 01EC Signing time: Sun 19 Oct 2025 05:00:23 +0000 Manifest this update: Sun 19 Oct 2025 05:00:22 +0000 Manifest next update: Sun 26 Oct 2025 05:00:22 +0000 Files and hashes: 1: gg9wML6sbUnxCbqOwlplvyNprS8.crl (hash: AVdXVl3az+NWW72JRLN7Fuqiwn57VfH/9TqelvEUjCQ=) 2: 08E67270C19611EDBDEEFD0BC4F9AE02.roa (hash: +GbHVgs4RJ2wAESQgEWiA4cM6Z9oouqKwHYBrLXZcc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.crl rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 497 (0x1f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146DAA, serialNumber=820F7030BEAC6D49F109BA8EC25A65BF2369AD2F Validity Not Before: Oct 19 05:00:22 2025 GMT Not After : Oct 26 05:00:22 2025 GMT Subject: CN=68f47067-343f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9f:8d:a7:6e:39:59:7e:6b:4e:7a:e2:87:5b: dd:49:72:47:2c:88:06:4a:f1:bf:69:f0:20:39:af: fc:5c:92:de:5a:fb:61:35:12:9a:b8:9c:f5:22:0e: f5:ce:14:85:7a:ed:d9:c2:b1:36:6e:ce:e8:92:8d: f2:6b:ba:fd:bf:01:36:99:79:f4:80:61:36:c6:a4: ab:41:dc:a0:18:54:fb:7b:4b:1c:5d:90:08:6b:64: 5f:60:b5:f6:aa:d3:99:3f:77:62:7a:f6:40:8b:55: a2:53:ff:b1:e9:59:25:ff:bc:c4:0f:c5:7a:99:96: 08:3a:40:e1:23:30:e0:b5:27:36:a2:8e:ac:c2:ff: 63:84:c9:7f:6f:d9:d9:40:6b:b2:53:3b:2f:63:9c: 31:77:fc:27:28:0b:57:f5:01:8e:2a:07:c2:47:0b: 37:b8:b8:75:8b:25:1d:ed:06:7d:d2:e4:62:74:cd: 63:17:ca:e8:56:63:7c:e4:6d:d0:57:b1:7f:5c:0c: f6:0a:2d:b7:49:aa:59:81:6c:73:b6:81:05:e7:23: ce:01:e8:54:f0:15:b5:9a:c1:55:bd:f3:88:bf:bb: 03:37:5f:3c:51:a7:41:b4:d0:37:ae:87:2d:5e:9f: 8b:b5:c9:93:cb:ff:3d:82:8e:b3:c3:43:0f:15:c1: 30:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E8:13:3F:BC:23:71:B3:63:A8:FA:D8:73:40:D5:BA:3E:DB:FF:3E X509v3 Authority Key Identifier: keyid:82:0F:70:30:BE:AC:6D:49:F1:09:BA:8E:C2:5A:65:BF:23:69:AD:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:f5:da:38:e8:c4:cc:1f:88:69:7b:bb:be:4d:2f:3d:58:fa: 9c:8a:70:21:76:f5:a4:73:9d:a8:2d:ee:11:28:75:11:5e:9a: b8:0b:25:ca:32:c5:44:4d:d5:f6:44:c9:83:fa:84:95:a1:21: 51:e2:54:58:e7:b1:7c:84:00:9c:46:8d:48:d0:1b:10:25:6c: 20:7e:55:aa:44:b5:56:21:bc:87:8c:b0:c3:7b:3b:94:c9:0f: ae:7d:d9:29:71:4e:fe:41:21:3c:d9:8a:fb:b5:45:3f:5f:7b: 89:87:3d:97:aa:89:87:23:ca:eb:64:f9:83:dc:72:49:a9:42: 18:eb:23:97:37:92:eb:c1:f9:40:72:38:17:00:a3:2f:2c:ea: 2c:6e:b1:5d:17:d7:c7:b3:2b:e3:9e:4e:6b:a3:cc:b8:19:bd: b7:23:d9:4f:5e:19:64:e3:04:22:d8:78:4f:62:15:82:3a:93: 8b:71:0e:3b:e7:11:9a:c1:6f:f8:6b:de:c2:df:ff:1b:c9:19: 03:58:61:aa:90:48:03:78:0a:5d:52:0c:f0:2e:6f:43:26:89: b0:c6:01:eb:c7:01:69:fa:2a:39:3b:cf:38:62:f3:9e:c3:53: 86:23:1f:ec:1e:8b:44:97:b0:58:c6:48:d6:4a:bd:ac:a2:24: 82:0d:a8:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZEQUExMTAvBgNVBAUTKDgyMEY3MDMwQkVBQzZENDlGMTA5QkE4RUMyNUE2NUJG MjM2OUFEMkYwHhcNMjUxMDE5MDUwMDIyWhcNMjUxMDI2MDUwMDIyWjAYMRYwFAYD VQQDEw02OGY0NzA2Ny0zNDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZ+Np245WX5rTnrih1vdSXJHLIgGSvG/afAgOa/8XJLeWvthNRKauJz1Ig71 zhSFeu3ZwrE2bs7oko3ya7r9vwE2mXn0gGE2xqSrQdygGFT7e0scXZAIa2RfYLX2 qtOZP3dievZAi1WiU/+x6Vkl/7zED8V6mZYIOkDhIzDgtSc2oo6swv9jhMl/b9nZ QGuyUzsvY5wxd/wnKAtX9QGOKgfCRws3uLh1iyUd7QZ90uRidM1jF8roVmN85G3Q V7F/XAz2Ci23SapZgWxztoEF5yPOAehU8BW1msFVvfOIv7sDN188UadBtNA3roct Xp+LtcmTy/89go6zw0MPFcEwJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCfoEz+8 I3GzY6j62HNA1bo+2/8+MB8GA1UdIwQYMBaAFIIPcDC+rG1J8Qm6jsJaZb8jaa0v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkRBQS83MUVCN0M1QUMx OTMxMUVEOUI4NjZCMEJDNEY5QUUwMi9nZzl3TUw2c2JVbnhDYnFPd2xwbHZ5TnBy UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnOXdNTDZzYlVueENicU93bHBsdnlOcHJTOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkRBQS83MUVCN0M1QUMxOTMxMUVEOUI4NjZCMEJDNEY5QUUwMi9nZzl3TUw2c2JV bnhDYnFPd2xwbHZ5TnByUzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/9do46MTMH4hpe7u+TS89WPqcinAhdvWkc52oLe4RKHURXpq4CyXK MsVETdX2RMmD+oSVoSFR4lRY57F8hACcRo1I0BsQJWwgflWqRLVWIbyHjLDDezuU yQ+ufdkpcU7+QSE82Yr7tUU/X3uJhz2XqomHI8rrZPmD3HJJqUIY6yOXN5LrwflA cjgXAKMvLOosbrFdF9fHsyvjnk5ro8y4Gb23I9lPXhlk4wQi2HhPYhWCOpOLcQ47 5xGawW/4a97C3/8byRkDWGGqkEgDeApdUgzwLm9DJomwxgHrxwFp+io5O884YvOe w1OGIx/sHotEl7BYxkjWSr2soiSCDajY -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:47 2025 by rpki-client