$ rpki-client -vvf rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft File: gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft (raw, json) Hash identifier: SMjnN/IpJAuWwIe99lNr6j+vdmrKyhqnsOFDVNKcqmM= Subject key identifier: F4:1D:EC:C8:F2:13:65:53:09:1B:AC:6C:5F:6E:E3:57:D7:27:50:F5 Authority key identifier: 80:A4:B8:FC:AE:CD:01:1E:82:AA:4E:2D:72:17:3C:A6:3E:9C:4E:51 Certificate issuer: /CN=A9155D1E/serialNumber=80A4B8FCAECD011E82AA4E2D72173CA63E9C4E51 Certificate serial: 02BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft Manifest number: 02B6 Signing time: Sun 19 Oct 2025 03:37:38 +0000 Manifest this update: Sun 19 Oct 2025 03:37:38 +0000 Manifest next update: Sun 26 Oct 2025 03:37:38 +0000 Files and hashes: 1: gKS4_K7NAR6Cqk4tchc8pj6cTlE.crl (hash: 0FY3JqhTmiSmMoIF+e7q01jTF8et7wxqLAMxvaYsV18=) 2: C003531C10EB11ED9C882A38C4F9AE02.roa (hash: dtuYeScxI0cvK8sz9E/Cl0+96zsD1MptOKpsIJKXrl0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.crl rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 698 (0x2ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155D1E, serialNumber=80A4B8FCAECD011E82AA4E2D72173CA63E9C4E51 Validity Not Before: Oct 19 03:37:38 2025 GMT Not After : Oct 26 03:37:38 2025 GMT Subject: CN=68f45d02-103d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:90:f8:c8:e2:db:fa:11:91:ac:b2:9d:63:31: 0e:72:e4:f6:12:31:8c:0b:de:95:be:46:37:66:98: a0:8d:13:54:0d:89:53:9f:aa:74:6a:db:72:d7:4a: 10:9d:2c:ca:ac:f3:e7:c9:3c:d5:5c:d8:d5:b1:a5: ed:ec:6a:f3:b0:6b:5c:c0:be:f7:75:52:a7:f0:3d: bc:c5:b1:90:f5:3f:8b:a7:ff:db:9e:f1:b7:34:dd: e0:09:24:48:fe:0c:60:46:fd:03:b2:df:f9:2b:ad: ae:62:b2:4d:91:3e:cf:63:dd:0b:c2:5e:62:02:64: c7:e5:40:fd:e2:e4:c1:d3:e7:b4:68:71:30:0c:fc: 77:79:83:41:f4:07:b6:27:86:6e:f5:d0:2a:2e:64: ec:27:c2:ec:13:78:4b:b2:6f:a5:89:67:24:2a:9c: 35:24:9f:13:96:95:72:99:2a:79:12:ef:e9:df:d8: 45:dd:6b:a3:b8:e6:49:eb:9d:d1:6c:e2:8c:6f:08: 49:87:be:f3:e7:57:0c:33:c4:4c:42:72:65:03:4c: 70:c6:e1:98:32:a0:a3:28:9e:50:97:a7:a8:80:db: d1:ec:54:5d:9e:f8:0b:af:48:04:62:a5:cd:6b:b6: a2:26:18:07:e1:3a:25:a0:b3:59:11:33:6f:8a:da: 3a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:1D:EC:C8:F2:13:65:53:09:1B:AC:6C:5F:6E:E3:57:D7:27:50:F5 X509v3 Authority Key Identifier: keyid:80:A4:B8:FC:AE:CD:01:1E:82:AA:4E:2D:72:17:3C:A6:3E:9C:4E:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:fe:49:3b:fc:6f:eb:2d:45:21:14:3a:b4:3a:82:69:ca:bb: 76:91:6f:57:b8:ab:df:78:f5:f3:55:8b:8f:9a:38:5d:5f:d8: bc:15:40:f3:7d:06:ae:bd:cc:6c:1a:4f:69:66:47:e9:20:dc: cd:2f:da:48:cf:b9:db:43:69:23:52:12:33:e9:d1:af:b1:a6: d2:0a:d4:55:53:54:52:6e:3d:3e:92:02:27:c7:e7:0b:3a:36: 4b:2c:64:4d:aa:8b:7c:6d:b8:f5:5c:77:93:3e:3f:52:d1:23: cd:85:b9:41:e5:a6:c9:76:41:4a:e7:c3:57:e8:ec:6c:71:30: a1:7d:35:15:f2:93:04:3d:76:da:da:f7:0c:8c:0d:a0:16:69: ee:2e:6b:55:91:8f:e2:3f:4d:42:76:de:fd:87:c3:de:af:e5: b9:89:a0:96:ea:d7:17:33:d0:20:75:b6:63:cf:0e:9d:59:b8: ec:2e:0a:4b:18:cc:58:84:5c:d8:12:77:d2:b4:88:a6:fc:31: 04:43:fd:cf:0a:04:f0:b2:a6:3a:67:4c:bd:be:d2:0c:35:1f: 24:cf:b6:fd:93:7b:a9:11:53:2b:d1:21:35:b5:85:dd:7d:51: 80:a8:40:9d:77:53:e3:a4:ef:e9:21:31:d2:0f:8a:df:e6:84: 74:57:38:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVEMUUxMTAvBgNVBAUTKDgwQTRCOEZDQUVDRDAxMUU4MkFBNEUyRDcyMTczQ0E2 M0U5QzRFNTEwHhcNMjUxMDE5MDMzNzM4WhcNMjUxMDI2MDMzNzM4WjAYMRYwFAYD VQQDEw02OGY0NWQwMi0xMDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJD4yOLb+hGRrLKdYzEOcuT2EjGMC96VvkY3ZpigjRNUDYlTn6p0atty10oQ nSzKrPPnyTzVXNjVsaXt7GrzsGtcwL73dVKn8D28xbGQ9T+Lp//bnvG3NN3gCSRI /gxgRv0Dst/5K62uYrJNkT7PY90Lwl5iAmTH5UD94uTB0+e0aHEwDPx3eYNB9Ae2 J4Zu9dAqLmTsJ8LsE3hLsm+liWckKpw1JJ8TlpVymSp5Eu/p39hF3WujuOZJ653R bOKMbwhJh77z51cMM8RMQnJlA0xwxuGYMqCjKJ5Ql6eogNvR7FRdnvgLr0gEYqXN a7aiJhgH4ToloLNZETNvito6bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPQd7Mjy E2VTCRusbF9u41fXJ1D1MB8GA1UdIwQYMBaAFICkuPyuzQEegqpOLXIXPKY+nE5R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUQxRS9BOEQ4ODNFQTEw RTMxMUVEQURBRkQ5MDlDNEY5QUUwMi9nS1M0X0s3TkFSNkNxazR0Y2hjOHBqNmNU bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dLUzRfSzdOQVI2Q3FrNHRjaGM4cGo2Y1RsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUQxRS9BOEQ4ODNFQTEwRTMxMUVEQURBRkQ5MDlDNEY5QUUwMi9nS1M0X0s3TkFS NkNxazR0Y2hjOHBqNmNUbEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAf/kk7/G/rLUUhFDq0OoJpyrt2kW9XuKvfePXzVYuPmjhdX9i8FUDz fQauvcxsGk9pZkfpINzNL9pIz7nbQ2kjUhIz6dGvsabSCtRVU1RSbj0+kgInx+cL OjZLLGRNqot8bbj1XHeTPj9S0SPNhblB5abJdkFK58NX6OxscTChfTUV8pMEPXba 2vcMjA2gFmnuLmtVkY/iP01Cdt79h8Per+W5iaCW6tcXM9AgdbZjzw6dWbjsLgpL GMxYhFzYEnfStIim/DEEQ/3PCgTwsqY6Z0y9vtIMNR8kz7b9k3upEVMr0SE1tYXd fVGAqECdd1PjpO/pITHSD4rf5oR0Vzgj -----END CERTIFICATE-----Generated at Mon Oct 20 09:30:47 2025 by rpki-client