$ rpki-client -vvf rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.mft File: GepbRfAegL4KdtzayZJrbmdC8iE.mft (raw, json) Hash identifier: 1v2NCL0jBlsbpNiPRE9UzO26HzER4jsXvXTsnWe8Xgg= Subject key identifier: 44:20:82:93:F0:81:0B:2F:73:9A:B9:6A:34:28:F7:AA:25:36:6C:07 Authority key identifier: 19:EA:5B:45:F0:1E:80:BE:0A:76:DC:DA:C9:92:6B:6E:67:42:F2:21 Certificate issuer: /CN=A915617D/serialNumber=19EA5B45F01E80BE0A76DCDAC9926B6E6742F221 Certificate serial: 07C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GepbRfAegL4KdtzayZJrbmdC8iE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.mft Manifest number: 07BB Signing time: Sat 18 Oct 2025 22:36:36 +0000 Manifest this update: Sat 18 Oct 2025 22:36:35 +0000 Manifest next update: Sat 25 Oct 2025 22:36:35 +0000 Files and hashes: 1: GepbRfAegL4KdtzayZJrbmdC8iE.crl (hash: jQ5QTuFNIjP5zSwbhq8Gq7h0PuNeo+IQZuyuDn0Hkyc=) 2: B2356D1A180911EB962CB216C4F9AE02.roa (hash: RbLdN/sBiJ5TXTjTcsJOAhQn9KJyZmQ2QyPUKPhkRDw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.crl rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GepbRfAegL4KdtzayZJrbmdC8iE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1987 (0x7c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915617D, serialNumber=19EA5B45F01E80BE0A76DCDAC9926B6E6742F221 Validity Not Before: Oct 18 22:36:35 2025 GMT Not After : Oct 25 22:36:35 2025 GMT Subject: CN=68f41673-4c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ca:4b:e8:d9:89:8b:66:35:69:ec:42:9c:46: df:20:53:b5:f1:a5:e2:99:96:b8:b5:68:f0:07:9e: e5:2f:63:c4:d8:f6:41:29:4b:7d:39:2e:27:5f:8a: 0c:6d:57:50:a1:47:3a:52:2e:f4:e4:9d:52:ad:f6: 03:38:9e:74:b4:15:f4:d1:67:3e:65:66:46:fe:2d: 0b:1b:f2:46:bb:02:d3:f5:5c:76:ec:97:b4:d4:c0: ec:51:24:bc:bc:33:90:8d:89:47:f9:d2:ff:e3:21: e5:9a:d4:5a:9c:90:ff:d5:8e:b0:ab:79:6c:c6:0d: 4b:ba:42:99:10:51:43:1b:a2:35:df:9b:47:c8:16: 3d:3a:80:2d:17:6e:31:eb:6e:21:4e:13:7d:ea:ab: 5e:99:7a:24:2e:b0:f1:64:06:ce:78:e2:4a:dc:08: 29:34:41:7b:1f:b0:e8:18:21:71:a7:f8:57:82:78: 58:c7:21:59:b4:ba:9e:b4:5e:92:79:5a:f5:5d:41: 02:f3:0c:b2:9b:88:9c:59:d2:72:1f:33:72:a8:e5: f3:9a:5f:9f:0b:a1:69:d7:be:81:f0:85:6c:8c:ef: 8a:71:28:fb:59:a2:a7:e8:e4:48:34:1b:74:60:98: b9:a7:f8:a6:f1:49:1e:ea:cf:55:53:bb:67:c9:3b: 1e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:20:82:93:F0:81:0B:2F:73:9A:B9:6A:34:28:F7:AA:25:36:6C:07 X509v3 Authority Key Identifier: keyid:19:EA:5B:45:F0:1E:80:BE:0A:76:DC:DA:C9:92:6B:6E:67:42:F2:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GepbRfAegL4KdtzayZJrbmdC8iE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:5a:44:5b:97:07:d6:87:b1:00:5c:35:80:34:eb:29:8d:c8: be:79:cd:de:1c:81:c9:e8:3d:99:24:d2:59:75:78:15:39:5c: dd:ea:25:2f:c7:77:d3:9d:a2:f6:10:64:50:04:9c:dd:9a:cb: 3f:bd:57:a2:28:fe:c7:b6:c3:00:59:4f:b6:02:cb:07:58:a1: c5:66:f7:c9:f6:f9:e3:66:91:2e:8b:d7:e3:84:3a:44:e4:11: ba:b3:c8:2c:bb:9c:11:79:76:fd:c1:00:ba:f4:7b:73:89:82: 2e:8b:db:18:8a:01:13:f0:15:29:d1:8c:51:fe:21:fa:7f:a8: 3c:1b:78:82:ea:7d:1e:46:b4:35:80:bb:ea:53:41:7f:df:a3: 94:21:fe:35:f3:a0:4f:1e:7b:9e:2d:ca:27:b7:50:80:8f:3d: c3:74:ca:73:fa:1e:7b:cf:5b:4c:8b:4a:d5:62:fb:f7:a7:8d: 1e:95:01:7e:e9:b4:94:b7:95:20:f3:fd:59:48:5b:43:dc:03: f9:8a:c0:28:a4:c0:fe:b8:82:f4:b3:5a:f6:a2:2b:1a:2d:f3: be:e8:50:f0:fd:45:e0:5b:92:b2:c9:79:5d:32:73:d2:06:13: 19:bf:0c:7b:d1:82:b1:66:ea:56:96:01:d1:97:9e:f4:1c:e9: 79:76:43:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYxN0QxMTAvBgNVBAUTKDE5RUE1QjQ1RjAxRTgwQkUwQTc2RENEQUM5OTI2QjZF Njc0MkYyMjEwHhcNMjUxMDE4MjIzNjM1WhcNMjUxMDI1MjIzNjM1WjAYMRYwFAYD VQQDEw02OGY0MTY3My00YzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyspL6NmJi2Y1aexCnEbfIFO18aXimZa4tWjwB57lL2PE2PZBKUt9OS4nX4oM bVdQoUc6Ui705J1SrfYDOJ50tBX00Wc+ZWZG/i0LG/JGuwLT9Vx27Je01MDsUSS8 vDOQjYlH+dL/4yHlmtRanJD/1Y6wq3lsxg1LukKZEFFDG6I135tHyBY9OoAtF24x 624hThN96qtemXokLrDxZAbOeOJK3AgpNEF7H7DoGCFxp/hXgnhYxyFZtLqetF6S eVr1XUEC8wyym4icWdJyHzNyqOXzml+fC6Fp176B8IVsjO+KcSj7WaKn6ORINBt0 YJi5p/im8Uke6s9VU7tnyTsepQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQggpPw gQsvc5q5ajQo96olNmwHMB8GA1UdIwQYMBaAFBnqW0XwHoC+Cnbc2smSa25nQvIh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjE3RC8xOERDNTc0MjE4 MDgxMUVCQTg1NzMwMTJDNEY5QUUwMi9HZXBiUmZBZWdMNEtkdHpheVpKcmJtZEM4 aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dlcGJSZkFlZ0w0S2R0emF5WkpyYm1kQzhpRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjE3RC8xOERDNTc0MjE4MDgxMUVCQTg1NzMwMTJDNEY5QUUwMi9HZXBiUmZBZWdM NEtkdHpheVpKcmJtZEM4aUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaWkRblwfWh7EAXDWANOspjci+ec3eHIHJ6D2ZJNJZdXgVOVzd6iUv x3fTnaL2EGRQBJzdmss/vVeiKP7HtsMAWU+2AssHWKHFZvfJ9vnjZpEui9fjhDpE 5BG6s8gsu5wReXb9wQC69HtziYIui9sYigET8BUp0YxR/iH6f6g8G3iC6n0eRrQ1 gLvqU0F/36OUIf4186BPHnueLcont1CAjz3DdMpz+h57z1tMi0rVYvv3p40elQF+ 6bSUt5Ug8/1ZSFtD3AP5isAopMD+uIL0s1r2oisaLfO+6FDw/UXgW5KyyXldMnPS BhMZvwx70YKxZupWlgHRl570HOl5dkMj -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:05 2025 by rpki-client