$ rpki-client -vvf rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft File: GWzuJffRt-pwjOGIczcUM5LORxw.mft (raw, json) Hash identifier: j70HhCCS0lBd2vj0JEbby+vkFMY90xLUjoQvJWZrgHU= Subject key identifier: C2:05:97:2A:5E:ED:64:85:89:60:2B:78:FD:35:A8:CA:0E:74:3C:44 Authority key identifier: 19:6C:EE:25:F7:D1:B7:EA:70:8C:E1:88:73:37:14:33:92:CE:47:1C Certificate issuer: /CN=A9154340/serialNumber=196CEE25F7D1B7EA708CE1887337143392CE471C Certificate serial: 0659 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft Manifest number: 0653 Signing time: Sat 18 Oct 2025 23:58:12 +0000 Manifest this update: Sat 18 Oct 2025 23:58:11 +0000 Manifest next update: Sat 25 Oct 2025 23:58:11 +0000 Files and hashes: 1: GWzuJffRt-pwjOGIczcUM5LORxw.crl (hash: VjH9fwyXX5fGwpyoCMDxSCxYapVTgvtaKjMqj6JElM8=) 2: 8BF559B2A70111EBBAA7C612C4F9AE02.roa (hash: f8Wgv+IoxprOJRGqIQDg8nNXDjXWODO4WSnYU8FiMVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.crl rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:58:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1625 (0x659) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154340, serialNumber=196CEE25F7D1B7EA708CE1887337143392CE471C Validity Not Before: Oct 18 23:58:11 2025 GMT Not After : Oct 25 23:58:11 2025 GMT Subject: CN=68f42994-9552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2a:7b:77:4f:7b:fb:51:54:2d:19:29:8f:20: d2:0c:22:64:5e:35:40:00:ce:0c:da:9e:86:9a:41: 8c:b4:10:80:d0:ed:7d:a8:79:8e:8a:5b:b9:10:7e: d5:f7:ad:e6:81:50:a7:5a:e6:01:dc:eb:06:97:15: ec:da:74:37:a7:2a:27:21:f2:12:5d:ad:4d:54:2a: 06:a7:87:4f:68:5d:e8:45:76:bc:83:58:5a:f2:72: fd:dc:fe:e3:c1:83:22:7f:77:3b:05:ee:c2:6d:85: 1d:62:65:20:a5:26:cd:30:7c:bc:f0:b2:8a:51:8b: 60:55:f2:60:47:c6:44:67:21:b7:03:25:03:d5:09: d8:96:ae:1a:8d:05:1a:d0:f3:69:43:1f:df:02:62: 27:2d:0c:19:d4:60:56:cc:c8:65:57:91:98:6e:bb: bd:db:ed:ec:8a:84:bb:1e:83:0e:11:68:fe:b4:8b: 48:dd:13:51:76:3b:87:f0:64:bd:e7:20:f9:3a:0e: 24:b4:0d:96:84:30:a2:64:1e:6d:a9:02:fe:31:ba: 98:97:45:c9:af:f4:da:d9:66:92:d3:93:bc:7a:3d: 92:f9:16:3c:a5:21:96:31:66:0c:6b:b9:11:29:79: e8:56:55:35:29:e9:34:40:59:50:01:c3:dc:fb:a4: 3a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:05:97:2A:5E:ED:64:85:89:60:2B:78:FD:35:A8:CA:0E:74:3C:44 X509v3 Authority Key Identifier: keyid:19:6C:EE:25:F7:D1:B7:EA:70:8C:E1:88:73:37:14:33:92:CE:47:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:63:68:eb:e7:86:3f:42:2f:a0:da:ff:3f:17:4f:79:fe:2d: fb:92:66:a3:62:a9:58:58:c9:37:e0:fc:3c:6c:48:20:32:d9: c0:91:a7:fb:6a:b2:d9:c5:35:c8:03:82:f1:53:c8:3e:05:b3: 31:8f:b9:c6:87:98:ca:f6:54:7e:10:9d:8b:db:02:48:57:21: 8a:ba:c0:68:23:b3:f5:fa:d9:fe:09:99:d9:70:bd:f7:e3:95: 79:93:8c:d2:9d:e1:08:7e:e4:10:08:8c:77:20:30:c4:98:17: b7:5c:50:bf:94:6a:a0:f0:d2:cf:1b:da:86:93:f1:1c:58:1b: 69:a3:ee:77:08:77:33:0e:56:80:bd:33:f7:56:43:d8:55:09: 0d:ed:39:cb:c4:7e:86:ef:19:5b:23:a4:24:d4:1d:0e:31:26: 41:47:93:a1:75:f6:54:fc:ac:13:d8:96:72:75:ce:39:d1:c4: 61:3c:8a:46:37:48:20:b6:41:d6:91:61:39:2f:40:68:25:9a: 57:52:5f:30:77:71:40:72:6d:26:4e:53:b1:3e:42:1c:f6:b1: 0d:af:04:65:5a:05:16:73:60:6a:ad:e5:ad:24:24:9f:36:59: 70:b6:6a:91:4a:04:85:be:fc:73:17:2b:5b:87:d2:cb:04:1d: 8c:ae:c2:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzNDAxMTAvBgNVBAUTKDE5NkNFRTI1RjdEMUI3RUE3MDhDRTE4ODczMzcxNDMz OTJDRTQ3MUMwHhcNMjUxMDE4MjM1ODExWhcNMjUxMDI1MjM1ODExWjAYMRYwFAYD VQQDEw02OGY0Mjk5NC05NTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ip7d097+1FULRkpjyDSDCJkXjVAAM4M2p6GmkGMtBCA0O19qHmOilu5EH7V 963mgVCnWuYB3OsGlxXs2nQ3pyonIfISXa1NVCoGp4dPaF3oRXa8g1ha8nL93P7j wYMif3c7Be7CbYUdYmUgpSbNMHy88LKKUYtgVfJgR8ZEZyG3AyUD1QnYlq4ajQUa 0PNpQx/fAmInLQwZ1GBWzMhlV5GYbru92+3sioS7HoMOEWj+tItI3RNRdjuH8GS9 5yD5Og4ktA2WhDCiZB5tqQL+MbqYl0XJr/Ta2WaS05O8ej2S+RY8pSGWMWYMa7kR KXnoVlU1Kek0QFlQAcPc+6Q6RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMIFlype 7WSFiWAreP01qMoOdDxEMB8GA1UdIwQYMBaAFBls7iX30bfqcIzhiHM3FDOSzkcc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDM0MC9GOEU3NjA3Q0E2 NzcxMUVCOEI0QkIxM0VDNEY5QUUwMi9HV3p1SmZmUnQtcHdqT0dJY3pjVU01TE9S eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0dXenVKZmZSdC1wd2pPR0ljemNVTTVMT1J4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDM0MC9GOEU3NjA3Q0E2NzcxMUVCOEI0QkIxM0VDNEY5QUUwMi9HV3p1SmZmUnQt cHdqT0dJY3pjVU01TE9SeHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvY2jr54Y/Qi+g2v8/F095/i37kmajYqlYWMk34Pw8bEggMtnAkaf7 arLZxTXIA4LxU8g+BbMxj7nGh5jK9lR+EJ2L2wJIVyGKusBoI7P1+tn+CZnZcL33 45V5k4zSneEIfuQQCIx3IDDEmBe3XFC/lGqg8NLPG9qGk/EcWBtpo+53CHczDlaA vTP3VkPYVQkN7TnLxH6G7xlbI6Qk1B0OMSZBR5OhdfZU/KwT2JZydc450cRhPIpG N0ggtkHWkWE5L0BoJZpXUl8wd3FAcm0mTlOxPkIc9rENrwRlWgUWc2BqreWtJCSf NllwtmqRSgSFvvxzFytbh9LLBB2MrsKH -----END CERTIFICATE-----Generated at Mon Oct 20 19:27:23 2025 by rpki-client