$ rpki-client -vvf rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft File: ghDUN1ZlSxBwXVqz83vwGni3jEc.mft (raw, json) Hash identifier: Sgsu5quGIBEuL4s9OBpPuFCvA8jKHLxqv6jfebi+8+o= Subject key identifier: 2B:71:B4:2E:7C:78:58:3C:1D:09:59:C6:62:98:F2:BE:F9:B4:1C:AA Authority key identifier: 82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 Certificate issuer: /CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Certificate serial: 087F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft Manifest number: 083E Signing time: Sat 18 Oct 2025 21:59:44 +0000 Manifest this update: Sat 18 Oct 2025 21:59:43 +0000 Manifest next update: Sat 25 Oct 2025 21:59:43 +0000 Files and hashes: 1: ghDUN1ZlSxBwXVqz83vwGni3jEc.crl (hash: AbJ1wErGCFPxrt78CMRCKaOUSv340p3oDJqDPOKIcUs=) 2: 1361FD26EC2011EA8DFD251FC4F9AE02.roa (hash: AKMar7M+pQ4y6XoQFhZVW0JujFvWAFeIi5OqHavhpXY=) 3: FF0025F80B7811EEB2EFC643C4F9AE02.roa (hash: q8NO+KLP5CuELgICWVCpo8gcxUyHjK7jNGZWSmFkgjE=) 4: D8B25C54EC2211EA84C17E26C4F9AE02.roa (hash: blrAgl3fjG1pjrvf4Xs1bBFsczydDh5kF9/bkGOAsSQ=) 5: 36CDE30CEC2411EA8B0DDA2CC4F9AE02.roa (hash: kCdoRWjX7vh3I5Nidiix3CmYE03MKnq+oXPvSl8Xnds=) 6: F652771EEB7611EA8235FB4AC4F9AE02.roa (hash: e0wK1EfjjzOwAebCT+bRt55wU2Y1pEBpk2uJbmvJGI8=) 7: 5056827E1D1711EB9918046AC4F9AE02.roa (hash: QIJzT5GapeGSiWUEH6w75YrO1W7X/FkG1tF+eQj92Fk=) 8: 35A8CF1EEC2411EA8B0DDA2CC4F9AE02.roa (hash: Y77Vm4FDvzInxKFqdlF/vRWJ/K3yltYPE+Pe0UH2y2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2175 (0x87f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B536, serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Validity Not Before: Oct 18 21:59:43 2025 GMT Not After : Oct 25 21:59:43 2025 GMT Subject: CN=68f40dcf-8a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d4:41:07:98:a6:d8:b4:6e:e7:b6:74:d5:86: 09:d7:88:9b:f2:25:a8:ac:1f:77:c0:b6:18:07:d0: 7e:2e:ad:27:46:8c:3b:07:e0:88:e6:b9:43:f4:67: 28:3f:37:82:aa:6e:b0:51:e2:23:9a:82:c2:b8:c1: de:fc:51:eb:0f:a5:2c:40:86:d6:ae:c6:a3:3d:ce: 15:f6:68:ba:1d:40:fe:43:68:2f:9e:c0:0d:fb:31: 0c:10:89:7f:73:16:ce:62:56:e2:be:b9:f3:3b:62: 32:bf:1f:ae:b5:4c:5c:02:81:e4:42:fd:e4:3d:29: 93:b4:40:00:70:5b:f5:b1:ed:b1:d9:0e:67:60:86: 05:75:e2:14:ba:34:f5:72:43:50:b0:f6:80:f2:6d: d7:be:c3:c3:96:7f:cf:28:37:1c:60:03:57:c0:e7: 86:1e:be:f9:ac:a8:98:15:c4:16:8f:75:06:c0:52: 22:8a:b1:43:35:6d:60:88:a5:95:9e:af:7c:af:04: 3f:c7:30:40:31:ed:88:d6:2f:ed:ac:5a:cb:ce:62: 0f:68:02:b5:82:43:3c:63:bc:ab:a5:dd:55:e1:ca: c7:3b:d1:ee:5b:73:da:b4:36:4c:d5:6e:1e:03:fd: a8:a6:25:45:ac:8c:ff:ee:25:ad:87:f9:64:c9:24: 5b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:71:B4:2E:7C:78:58:3C:1D:09:59:C6:62:98:F2:BE:F9:B4:1C:AA X509v3 Authority Key Identifier: keyid:82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:6d:0b:f0:7d:1e:36:c0:ae:23:78:cb:97:2e:8a:07:10:17: 8f:99:47:89:4b:0e:84:ea:fa:97:01:06:3d:66:b5:37:54:3f: 3c:32:73:8e:4b:8e:b1:53:5b:b9:7e:79:40:41:44:00:52:c0: 64:c0:5b:35:aa:da:59:32:32:c9:e8:1c:e5:38:ba:f3:41:9d: d5:8f:0c:a1:8c:18:d1:55:85:b0:d3:28:78:e3:ec:3c:09:7e: 45:e4:c3:93:e4:9c:ea:b4:28:95:40:9c:19:5d:df:0a:5d:5c: ca:b5:a3:5c:23:47:bc:4c:38:9f:6e:fa:c4:33:12:62:53:dd: de:ec:c6:a7:f1:d8:d2:c0:f0:7d:e5:51:ac:62:d6:7b:35:31: 2c:6b:d5:0a:19:ab:07:2c:04:7c:c9:84:38:7d:95:a6:7f:0c: 2c:b6:5d:44:38:6a:c6:5e:0e:bc:82:63:25:31:1c:4f:5b:2c: 32:3e:22:cf:af:c1:28:88:13:15:ba:90:8f:b4:96:20:55:c3: 18:18:61:da:fd:bc:d5:55:a9:50:25:0b:58:7c:90:44:9d:44: ae:5b:42:bb:5a:b8:93:52:bd:1a:d1:87:e2:d4:f5:4b:70:a7: 78:03:0a:71:db:b5:e4:ff:cd:e7:33:b6:1f:0c:c6:a6:55:bb: ed:0a:eb:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1MzYxMTAvBgNVBAUTKDgyMTBENDM3NTY2NTRCMTA3MDVENUFCM0YzN0JGMDFB NzhCNzhDNDcwHhcNMjUxMDE4MjE1OTQzWhcNMjUxMDI1MjE1OTQzWjAYMRYwFAYD VQQDEw02OGY0MGRjZi04YTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3tRBB5im2LRu57Z01YYJ14ib8iWorB93wLYYB9B+Lq0nRow7B+CI5rlD9Gco PzeCqm6wUeIjmoLCuMHe/FHrD6UsQIbWrsajPc4V9mi6HUD+Q2gvnsAN+zEMEIl/ cxbOYlbivrnzO2Iyvx+utUxcAoHkQv3kPSmTtEAAcFv1se2x2Q5nYIYFdeIUujT1 ckNQsPaA8m3XvsPDln/PKDccYANXwOeGHr75rKiYFcQWj3UGwFIiirFDNW1giKWV nq98rwQ/xzBAMe2I1i/trFrLzmIPaAK1gkM8Y7yrpd1V4crHO9HuW3PatDZM1W4e A/2opiVFrIz/7iWth/lkySRbMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCtxtC58 eFg8HQlZxmKY8r75tByqMB8GA1UdIwQYMBaAFIIQ1DdWZUsQcF1as/N78Bp4t4xH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzNi9FNEM4ODk3MkVC NzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4QndYVnF6ODN2d0duaTNq RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2doRFVOMVpsU3hCd1hWcXo4M3Z3R25pM2pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzNi9FNEM4ODk3MkVCNzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4 QndYVnF6ODN2d0duaTNqRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpbQvwfR42wK4jeMuXLooHEBePmUeJSw6E6vqXAQY9ZrU3VD88MnOO S46xU1u5fnlAQUQAUsBkwFs1qtpZMjLJ6BzlOLrzQZ3VjwyhjBjRVYWw0yh44+w8 CX5F5MOT5JzqtCiVQJwZXd8KXVzKtaNcI0e8TDifbvrEMxJiU93e7Man8djSwPB9 5VGsYtZ7NTEsa9UKGasHLAR8yYQ4fZWmfwwstl1EOGrGXg68gmMlMRxPWywyPiLP r8EoiBMVupCPtJYgVcMYGGHa/bzVValQJQtYfJBEnUSuW0K7WriTUr0a0Yfi1PVL cKd4Awpx27Xk/83nM7YfDMamVbvtCuvy -----END CERTIFICATE-----Generated at Mon Oct 20 16:04:36 2025 by rpki-client