$ rpki-client -vvf rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft File: gO0g9_wH3gyfPBuOKunNP85u2yE.mft (raw, json) Hash identifier: XjV3lYqMKa909jr7ThRg56r0c7lztjeZxrgBTEprO3Y= Subject key identifier: 81:D1:91:40:4A:6F:B6:5B:DC:B5:D7:8B:63:EF:E9:30:4E:CB:5C:4E Authority key identifier: 80:ED:20:F7:FC:07:DE:0C:9F:3C:1B:8E:2A:E9:CD:3F:CE:6E:DB:21 Certificate issuer: /CN=A915BE00/serialNumber=80ED20F7FC07DE0C9F3C1B8E2AE9CD3FCE6EDB21 Certificate serial: 0592 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft Manifest number: 058A Signing time: Sun 19 Oct 2025 00:55:22 +0000 Manifest this update: Sun 19 Oct 2025 00:55:20 +0000 Manifest next update: Sun 26 Oct 2025 00:55:20 +0000 Files and hashes: 1: gO0g9_wH3gyfPBuOKunNP85u2yE.crl (hash: /nnVoEE4QVMH5hV9v37IA/z/XJH1lqB8DmFzZICEVus=) 2: 972D6576112511F08AC1A549C4F9AE02.roa (hash: QOFOeJ0/TitkOVKuCtknVXKhDl8rDuqKOlqBjNU794M=) 3: 513D702E112511F081CC4E49C4F9AE02.roa (hash: Kg31LYu7Durk6j8slLyu/vJtO9Dfls9nej9ZAhspvEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.crl rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1426 (0x592) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BE00, serialNumber=80ED20F7FC07DE0C9F3C1B8E2AE9CD3FCE6EDB21 Validity Not Before: Oct 19 00:55:20 2025 GMT Not After : Oct 26 00:55:20 2025 GMT Subject: CN=68f436f9-f83a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c7:cb:5f:71:ad:d4:4b:08:0b:f1:c7:c6:05: 7e:0d:fb:74:f5:0c:25:e8:7f:e3:ae:89:41:75:77: 58:75:a1:43:a2:59:a9:38:2a:30:4a:87:91:4d:8f: 1c:a3:11:fa:59:ed:ca:ba:2c:d9:74:91:5c:6d:ce: 09:60:e8:4b:83:b5:9c:e6:07:48:3d:76:a1:78:3d: 79:80:3c:6a:03:b9:38:b0:a1:7a:ab:f3:1b:c3:94: b6:ce:a2:7c:ba:25:7d:a1:b4:90:5f:46:ff:ab:a2: b6:68:33:d6:9f:6c:1d:2c:e4:25:1f:97:dd:39:13: 10:83:e4:b8:ea:6e:c8:e8:fc:f6:35:c2:92:16:66: 44:03:ae:dd:f1:a8:75:46:5e:73:2d:9d:dc:cb:96: dd:5e:63:25:3f:c2:68:85:3d:58:2a:6b:21:77:5e: 11:47:75:b9:3a:9b:81:b8:eb:ce:c7:ae:2a:ab:cb: f0:65:f2:84:20:c7:8b:0e:aa:82:b9:fe:29:df:ad: 5b:07:f6:79:a1:bf:79:46:d6:12:ad:24:85:a0:34: dc:e1:e9:ff:94:a8:dd:fa:da:33:ee:74:40:44:4b: a6:a6:e3:db:e8:05:3f:ad:cd:9f:71:02:33:2e:be: 3a:94:53:04:49:1f:70:65:a1:2f:90:92:9c:98:91: 5b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D1:91:40:4A:6F:B6:5B:DC:B5:D7:8B:63:EF:E9:30:4E:CB:5C:4E X509v3 Authority Key Identifier: keyid:80:ED:20:F7:FC:07:DE:0C:9F:3C:1B:8E:2A:E9:CD:3F:CE:6E:DB:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:73:8b:6c:b4:ee:db:81:cf:8e:18:8b:3d:6d:0f:c9:31:ec: 3a:28:15:ac:02:8a:39:86:15:9d:f2:f1:84:b0:6e:dd:76:c7: d1:ed:44:66:88:d4:67:11:15:95:ef:83:71:e2:46:fc:35:16: a2:d2:66:bb:9f:28:e2:a0:b3:8e:52:c6:56:76:48:77:a1:02: 59:05:61:17:c3:6c:ca:d1:0d:33:53:d9:8b:fa:1d:7a:98:59: 76:62:52:f6:cc:f7:46:7a:2b:76:18:c6:da:3a:16:d2:ec:c9: 6c:46:14:19:3c:b7:d5:b3:9c:93:38:df:77:01:c6:a3:4f:7f: 41:b6:0a:ab:e0:9c:a7:8a:34:96:ac:63:f4:2b:1e:b7:cf:8c: 4e:0e:d6:7d:ac:49:5d:51:36:50:9a:94:a0:4b:c0:67:ef:6b: a1:3c:18:9e:09:ee:2e:4b:ae:ed:0b:7e:0b:a7:23:55:ba:30: 01:6f:6f:b5:f0:71:1f:a0:5d:63:b2:d6:8f:6f:cd:37:4a:a5: 3e:3f:f5:15:1b:63:1d:7e:86:38:80:b4:9c:25:d0:bc:50:93: eb:1c:1d:aa:f6:07:4e:e6:9c:37:d4:f2:e0:3c:81:42:f7:21: 30:c5:d9:6e:96:6a:ed:c3:4e:d7:92:a8:15:40:9e:b3:39:38: 3e:60:5d:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJFMDAxMTAvBgNVBAUTKDgwRUQyMEY3RkMwN0RFMEM5RjNDMUI4RTJBRTlDRDNG Q0U2RURCMjEwHhcNMjUxMDE5MDA1NTIwWhcNMjUxMDI2MDA1NTIwWjAYMRYwFAYD VQQDEw02OGY0MzZmOS1mODNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAosfLX3Gt1EsIC/HHxgV+Dft09Qwl6H/jrolBdXdYdaFDolmpOCowSoeRTY8c oxH6We3KuizZdJFcbc4JYOhLg7Wc5gdIPXaheD15gDxqA7k4sKF6q/Mbw5S2zqJ8 uiV9obSQX0b/q6K2aDPWn2wdLOQlH5fdORMQg+S46m7I6Pz2NcKSFmZEA67d8ah1 Rl5zLZ3cy5bdXmMlP8JohT1YKmshd14RR3W5OpuBuOvOx64qq8vwZfKEIMeLDqqC uf4p361bB/Z5ob95RtYSrSSFoDTc4en/lKjd+toz7nRAREumpuPb6AU/rc2fcQIz Lr46lFMESR9wZaEvkJKcmJFb0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIHRkUBK b7Zb3LXXi2Pv6TBOy1xOMB8GA1UdIwQYMBaAFIDtIPf8B94MnzwbjirpzT/Obtsh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkUwMC8zRDBCMjEyQUY0 RkQxMUVCQTUyQ0UyMTFDNEY5QUUwMi9nTzBnOV93SDNneWZQQnVPS3VuTlA4NXUy eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dPMGc5X3dIM2d5ZlBCdU9LdW5OUDg1dTJ5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkUwMC8zRDBCMjEyQUY0RkQxMUVCQTUyQ0UyMTFDNEY5QUUwMi9nTzBnOV93SDNn eWZQQnVPS3VuTlA4NXUyeUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEc4tstO7bgc+OGIs9bQ/JMew6KBWsAoo5hhWd8vGEsG7ddsfR7URm iNRnERWV74Nx4kb8NRai0ma7nyjioLOOUsZWdkh3oQJZBWEXw2zK0Q0zU9mL+h16 mFl2YlL2zPdGeit2GMbaOhbS7MlsRhQZPLfVs5yTON93AcajT39Btgqr4JynijSW rGP0Kx63z4xODtZ9rEldUTZQmpSgS8Bn72uhPBieCe4uS67tC34LpyNVujABb2+1 8HEfoF1jstaPb803SqU+P/UVG2MdfoY4gLScJdC8UJPrHB2q9gdO5pw31PLgPIFC 9yEwxdlulmrtw07XkqgVQJ6zOTg+YF00 -----END CERTIFICATE-----Generated at Mon Oct 20 13:40:37 2025 by rpki-client