$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft File: gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft (raw, json) Hash identifier: O7rVamI4Z8++w+QbRz9xK/0BGoiLaHm1X7AFkxnunIE= Subject key identifier: A6:E2:2B:04:3E:4A:3E:E8:DB:0F:6E:82:06:BF:F3:0A:DB:77:75:63 Authority key identifier: 81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA Certificate issuer: /CN=A9149F3E/serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA Certificate serial: 34D7 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft Manifest number: 34D7 Signing time: Sat 18 Oct 2025 14:23:29 +0000 Manifest this update: Sat 18 Oct 2025 14:23:28 +0000 Manifest next update: Sat 25 Oct 2025 14:23:28 +0000 Files and hashes: 1: gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl (hash: SO8/v4cGUjXl45fuei6ZDcqM0sZNi+FmCUdmTPiVFPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:23:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13527 (0x34d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA Validity Not Before: Oct 18 14:23:28 2025 GMT Not After : Oct 25 14:23:28 2025 GMT Subject: CN=68f3a2e0-1747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f2:f7:de:d0:3e:a4:c4:ce:1f:c0:f4:95:0e: 5d:d1:a6:e3:ba:3c:00:31:d1:a4:4b:f1:e5:74:18: 2b:74:fe:2c:b7:7b:75:37:12:11:c1:6a:09:70:e6: 33:e1:f6:d4:84:dc:77:43:77:41:46:da:f0:65:17: 0f:07:3b:81:ce:a6:87:5a:8d:ad:55:cf:15:cf:7b: 52:8b:c6:63:81:98:3a:0e:b7:88:5d:6f:ac:8a:db: c0:8b:74:db:e3:d4:43:80:ac:26:13:2b:77:a7:eb: a5:21:91:2c:7b:8e:ca:5d:52:27:c6:8d:93:f6:6f: f6:59:10:fe:88:93:16:b0:4a:be:ac:63:35:6a:66: 97:1e:61:27:46:af:93:d8:c2:b7:a8:5b:ea:80:d5: 83:8e:f8:0e:ee:f6:52:15:c4:f3:2e:39:cd:43:fe: 0e:e4:83:2b:d5:92:fc:d1:6f:59:81:b0:ab:ef:96: 84:fd:b9:c3:e2:eb:bb:a6:1c:9f:fd:99:d5:4c:f3: ce:ed:e4:44:ba:25:ad:a2:bc:62:ce:6b:d3:0d:e4: 9e:f5:d6:84:c7:4b:bf:87:a7:64:26:2e:b1:59:d2: 23:fe:22:ea:76:e0:9e:1e:bc:63:89:ce:d2:e0:11: ab:ee:1d:af:7a:57:13:05:3d:8b:df:fb:34:ab:82: 47:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E2:2B:04:3E:4A:3E:E8:DB:0F:6E:82:06:BF:F3:0A:DB:77:75:63 X509v3 Authority Key Identifier: keyid:81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:02:7e:d1:fa:2f:fd:0c:61:d8:fe:51:01:d9:97:6a:c2:31: 46:33:3e:4d:e9:c6:cb:89:c2:f9:8c:3d:be:a5:ce:fa:28:e1: 07:e9:11:55:b5:5a:9c:63:43:88:da:f6:a7:9c:9d:47:4c:7f: c8:97:cf:25:f7:94:ef:02:6c:db:35:7e:69:14:a2:d4:c9:fd: cf:c2:a8:bf:6c:34:ae:9f:69:6a:d2:f3:8c:80:95:4e:a4:26: 32:55:f6:fb:23:39:e6:b6:63:70:0b:16:9b:26:e4:15:8b:f7: ae:4c:15:58:cb:9b:3d:ae:0a:15:95:a0:95:e8:75:76:fc:b4: cf:fe:3c:48:a5:c8:3c:b9:4f:76:83:a5:75:05:af:58:59:64: fe:2f:7d:36:36:64:ec:03:f9:e3:4f:d0:6f:16:d0:2d:03:b2: 05:68:31:43:24:72:51:a3:db:67:b8:c0:14:28:17:18:5d:67: f3:82:d2:cc:f2:c5:43:15:0d:57:88:3e:3f:79:91:1f:b7:28: 06:25:cc:c4:ab:9c:e1:d7:e6:43:25:3b:21:47:4e:c0:3e:60: e9:7a:b8:08:7c:d5:e7:55:f2:27:ab:bb:69:74:5f:52:08:bc: bd:0e:0a:73:79:49:6d:f4:42:70:27:0d:56:85:d3:5e:9b:61: dd:19:ed:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKDgxRkQ1NjNDQzY4NjVERTAyREE2QTgzRjJBMDFGMTE2 MTExRDBGRkEwHhcNMjUxMDE4MTQyMzI4WhcNMjUxMDI1MTQyMzI4WjAYMRYwFAYD VQQDEw02OGYzYTJlMC0xNzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3vL33tA+pMTOH8D0lQ5d0abjujwAMdGkS/HldBgrdP4st3t1NxIRwWoJcOYz 4fbUhNx3Q3dBRtrwZRcPBzuBzqaHWo2tVc8Vz3tSi8ZjgZg6DreIXW+sitvAi3Tb 49RDgKwmEyt3p+ulIZEse47KXVInxo2T9m/2WRD+iJMWsEq+rGM1amaXHmEnRq+T 2MK3qFvqgNWDjvgO7vZSFcTzLjnNQ/4O5IMr1ZL80W9ZgbCr75aE/bnD4uu7phyf /ZnVTPPO7eREuiWtorxizmvTDeSe9daEx0u/h6dkJi6xWdIj/iLqduCeHrxjic7S 4BGr7h2velcTBT2L3/s0q4JHHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKbiKwQ+ Sj7o2w9ugga/8wrbd3VjMB8GA1UdIwQYMBaAFIH9VjzGhl3gLaaoPyoB8RYRHQ/6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS84ODcxRkIyQzFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9nZjFXUE1hR1hlQXRwcWdfS2dIeEZoRWRE X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL2dmMVdQTWFHWGVBdHBxZ19LZ0h4RmhFZERfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS84ODcxRkIyQzFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9nZjFXUE1hR1hl QXRwcWdfS2dIeEZoRWREX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNAn7R+i/9DGHY/lEB2ZdqwjFGMz5N6cbLicL5jD2+pc76KOEH6RFV tVqcY0OI2vannJ1HTH/Il88l95TvAmzbNX5pFKLUyf3Pwqi/bDSun2lq0vOMgJVO pCYyVfb7IznmtmNwCxabJuQVi/euTBVYy5s9rgoVlaCV6HV2/LTP/jxIpcg8uU92 g6V1Ba9YWWT+L302NmTsA/njT9BvFtAtA7IFaDFDJHJRo9tnuMAUKBcYXWfzgtLM 8sVDFQ1XiD4/eZEftygGJczEq5zh1+ZDJTshR07APmDpergIfNXnVfInq7tpdF9S CLy9DgpzeUlt9EJwJw1WhdNem2HdGe2d -----END CERTIFICATE-----Generated at Mon Oct 20 13:42:24 2025 by rpki-client