$ rpki-client -vvf rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft File: gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft (raw, json) Hash identifier: X2eaolx4cMDBcb5TJnhcgGs3lng5NZ0kz3GIvs2ect0= Subject key identifier: 82:33:D7:66:05:DF:B8:50:E7:0B:13:D2:3C:1D:F1:0F:C4:18:C5:D2 Authority key identifier: 80:5A:AA:36:C0:17:E9:E8:6C:30:32:A3:DA:AE:8D:26:8B:DD:42:54 Certificate issuer: /CN=A9146EB7/serialNumber=805AAA36C017E9E86C3032A3DAAE8D268BDD4254 Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft Manifest number: 5B Signing time: Sun 19 Oct 2025 10:30:35 +0000 Manifest this update: Sun 19 Oct 2025 10:30:34 +0000 Manifest next update: Sun 26 Oct 2025 10:30:34 +0000 Files and hashes: 1: gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl (hash: Ku4YzalXGjJLW5Z1XuYjw8sKCjDed7mNluaxwexa/to=) 2: 04FD874E1FDF11F094B3136AC4F9AE02.roa (hash: 1VVixJvC9Ao+Yu3/0+4xin/rpRbqJh0O4hx1E0p4fGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:30:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146EB7, serialNumber=805AAA36C017E9E86C3032A3DAAE8D268BDD4254 Validity Not Before: Oct 19 10:30:34 2025 GMT Not After : Oct 26 10:30:34 2025 GMT Subject: CN=68f4bdcb-a78b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:02:e9:91:fa:74:10:c5:d8:61:95:24:40:6e: f3:2d:ba:6b:57:7b:8e:37:10:04:26:01:5a:fa:4a: 5d:73:e7:f8:86:69:11:e5:ed:7c:ee:ab:f3:43:9e: fe:fd:89:04:d7:48:9f:a8:12:b9:7e:63:8b:46:c9: cc:06:a0:2e:41:ea:81:d1:f3:df:4d:ad:68:5a:89: cd:ee:be:0e:56:32:4e:36:24:c8:08:91:0c:6f:41: 2b:59:63:9c:de:e8:d8:c3:8c:57:8a:99:5e:4a:c4: 65:13:a7:d6:55:61:ba:4e:ca:8d:cd:df:82:36:68: ab:28:3f:c3:28:ae:12:ad:8f:9d:4b:ff:7a:f9:f4: e8:33:b3:59:71:17:9e:d9:62:31:7c:b4:78:6b:98: 31:94:b8:d5:bb:df:26:3b:78:76:46:ef:90:d6:69: 20:2e:a7:20:81:97:ff:07:14:6b:4f:58:49:87:30: 73:41:3a:c9:c7:68:83:71:ef:cf:d4:60:3b:25:a0: fe:ff:64:d7:63:c2:d1:63:4e:38:4a:da:87:fe:0f: 92:2e:ee:4b:c4:41:ba:e3:eb:d0:a4:1a:b6:b7:4b: 91:f3:2e:39:0e:41:dd:53:b7:31:4a:64:e4:43:b6: 3f:9c:98:a3:7f:40:1a:16:f8:e2:7b:3b:f7:e1:33: 18:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:33:D7:66:05:DF:B8:50:E7:0B:13:D2:3C:1D:F1:0F:C4:18:C5:D2 X509v3 Authority Key Identifier: keyid:80:5A:AA:36:C0:17:E9:E8:6C:30:32:A3:DA:AE:8D:26:8B:DD:42:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:62:e1:6d:82:b8:d5:3a:fe:fb:8d:f9:a9:e1:65:e8:71:79: 74:6e:cb:ad:95:43:6b:7f:c9:6e:10:92:a2:d1:ed:e6:15:a0: b6:da:14:6e:76:c7:fa:86:2c:81:f4:57:f9:f4:85:4c:d7:7e: 33:14:4c:ed:08:2f:fa:6d:5d:c7:ee:e2:75:95:84:3f:ae:be: c2:75:9f:69:7b:94:41:b1:14:8a:41:7b:9c:d1:bb:ef:3f:7a: 21:1a:e5:97:95:20:9e:66:2f:c9:14:5e:cc:f2:a6:f6:29:07: a5:83:2e:3c:95:97:9d:01:e8:66:aa:0b:3e:f1:db:de:b3:d7: ee:5f:05:65:44:f7:3a:7e:c1:30:a7:63:90:51:19:71:fe:96: c9:fa:33:45:2a:ee:c7:13:ab:ab:c0:7b:fc:10:3e:ea:1e:cb: 7e:a4:80:52:ef:22:ab:d2:9d:a2:77:11:6a:1f:24:f8:0a:c5: 7c:3a:4f:aa:a4:98:4f:91:47:70:9c:91:ea:b0:ea:ae:8b:29: ea:ef:a3:6d:bc:72:f6:0a:18:46:83:e6:60:f0:36:67:2a:88: 30:e9:65:b5:93:a5:a7:b3:43:ff:ad:d8:ce:56:8f:fe:a0:5f: 6e:b2:3e:07:68:0b:3e:13:ec:87:0b:c7:69:3d:1c:c6:2e:5a: 54:78:5a:08 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NkVCNzExMC8GA1UEBRMoODA1QUFBMzZDMDE3RTlFODZDMzAzMkEzREFBRThEMjY4 QkRENDI1NDAeFw0yNTEwMTkxMDMwMzRaFw0yNTEwMjYxMDMwMzRaMBgxFjAUBgNV BAMTDTY4ZjRiZGNiLWE3OGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeAumR+nQQxdhhlSRAbvMtumtXe443EAQmAVr6Sl1z5/iGaRHl7Xzuq/NDnv79 iQTXSJ+oErl+Y4tGycwGoC5B6oHR899NrWhaic3uvg5WMk42JMgIkQxvQStZY5ze 6NjDjFeKmV5KxGUTp9ZVYbpOyo3N34I2aKsoP8MorhKtj51L/3r59Ogzs1lxF57Z YjF8tHhrmDGUuNW73yY7eHZG75DWaSAupyCBl/8HFGtPWEmHMHNBOsnHaINx78/U YDsloP7/ZNdjwtFjTjhK2of+D5Iu7kvEQbrj69CkGra3S5HzLjkOQd1TtzFKZORD tj+cmKN/QBoW+OJ7O/fhMxjHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgjPXZgXf uFDnCxPSPB3xD8QYxdIwHwYDVR0jBBgwFoAUgFqqNsAX6ehsMDKj2q6NJovdQlQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2RUI3LzgzMUE4NDJBMUZE RTExRjBCOTY1NDcxN0M0RjlBRTAyL2dGcXFOc0FYNmVoc01ES2oycTZOSm92ZFFs US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ0ZxcU5zQVg2ZWhzTURLajJxNk5Kb3ZkUWxRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2 RUI3LzgzMUE4NDJBMUZERTExRjBCOTY1NDcxN0M0RjlBRTAyL2dGcXFOc0FYNmVo c01ES2oycTZOSm92ZFFsUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI5i4W2CuNU6/vuN+anhZehxeXRuy62VQ2t/yW4QkqLR7eYVoLbaFG52 x/qGLIH0V/n0hUzXfjMUTO0IL/ptXcfu4nWVhD+uvsJ1n2l7lEGxFIpBe5zRu+8/ eiEa5ZeVIJ5mL8kUXszypvYpB6WDLjyVl50B6GaqCz7x296z1+5fBWVE9zp+wTCn Y5BRGXH+lsn6M0Uq7scTq6vAe/wQPuoey36kgFLvIqvSnaJ3EWofJPgKxXw6T6qk mE+RR3Cckeqw6q6LKervo228cvYKGEaD5mDwNmcqiDDpZbWTpaezQ/+t2M5Wj/6g X26yPgdoCz4T7IcLx2k9HMYuWlR4Wgg= -----END CERTIFICATE-----Generated at Sun Oct 19 23:27:07 2025 by rpki-client