$ rpki-client -vvf rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft File: gmqoO74CQNE5BqurRkMX6eercO8.mft (raw, json) Hash identifier: WBfhDeydwNlNRcA6pUz3GJnUPl27mPupSn/QqaPpwWc= Subject key identifier: E9:B3:AE:CF:DA:1D:4A:80:26:B3:A9:90:D2:11:3E:F4:C5:D7:91:57 Authority key identifier: 82:6A:A8:3B:BE:02:40:D1:39:06:AB:AB:46:43:17:E9:E7:AB:70:EF Certificate issuer: /CN=A916C473/serialNumber=826AA83BBE0240D13906ABAB464317E9E7AB70EF Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft Manifest number: 35 Signing time: Sun 19 Oct 2025 11:03:21 +0000 Manifest this update: Sun 19 Oct 2025 11:03:21 +0000 Manifest next update: Sun 26 Oct 2025 11:03:21 +0000 Files and hashes: 1: gmqoO74CQNE5BqurRkMX6eercO8.crl (hash: ljByesHMTL2RCN1bqnWXE2usZ4iq3CDZxfi2otlPgA8=) 2: DA98BA4C5DE011F0B1CD4C75C4F9AE02.roa (hash: x4FID5zbs9gmZN9FkmWfh+nLmyFuv96NIL9YO3x5RdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.crl rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C473, serialNumber=826AA83BBE0240D13906ABAB464317E9E7AB70EF Validity Not Before: Oct 19 11:03:21 2025 GMT Not After : Oct 26 11:03:21 2025 GMT Subject: CN=68f4c579-2079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2a:47:ad:68:28:11:93:ff:a6:f3:62:b3:5c: 70:78:c8:f4:12:a9:dc:8f:0d:69:f4:da:17:c4:13: b9:c1:40:c6:bf:19:b0:a3:23:25:60:4a:68:67:0f: ae:f3:e5:37:cf:e2:39:59:64:89:2a:2c:85:d3:9f: d3:48:2c:9d:0e:e1:c5:d8:36:0b:b5:89:2a:02:da: 61:d7:45:d3:c7:41:f8:88:93:6a:fb:be:9f:9c:c7: 2c:43:80:bf:9f:14:5f:46:72:11:71:17:13:d8:58: 2e:a3:96:1a:76:ad:9d:c1:e2:0b:6a:e6:3c:d4:90: d9:7e:b2:7e:f8:f0:94:37:d5:2b:27:f5:77:f0:e2: fe:a3:ef:13:b3:67:a9:dc:13:f7:87:83:57:ef:61: 7c:82:03:f0:4d:02:74:5d:64:e2:a0:47:f7:b1:35: 6b:8d:50:60:73:ea:5e:6a:aa:68:92:d4:ac:94:6c: e2:b6:00:3e:ea:8a:e0:06:06:b8:a4:5e:ef:0a:38: 15:f4:51:f0:78:30:50:86:d3:16:d9:5a:5b:d5:2d: 6b:1d:2f:3f:51:1d:af:63:36:e6:0a:78:7c:c1:38: 74:8c:4a:3b:f9:64:e6:79:13:0b:fd:89:9e:d5:18: 12:44:c4:41:ec:37:c6:28:fb:27:ed:d6:2b:2e:58: 68:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B3:AE:CF:DA:1D:4A:80:26:B3:A9:90:D2:11:3E:F4:C5:D7:91:57 X509v3 Authority Key Identifier: keyid:82:6A:A8:3B:BE:02:40:D1:39:06:AB:AB:46:43:17:E9:E7:AB:70:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:6f:4c:50:51:e9:2a:f0:dc:c1:7c:40:93:45:fa:46:ac:36: 0c:55:9e:d6:b2:6f:30:1d:97:dc:d0:49:86:d5:d3:89:dc:f6: 06:13:11:a0:28:73:f5:7f:2e:9b:6c:d8:e8:65:4a:b9:b8:0a: 87:70:64:5b:b5:2c:bd:df:ca:d9:6a:f4:a0:e1:01:75:83:21: d7:14:bd:f4:b7:fa:3d:97:1b:bb:91:66:14:cb:1c:3a:b9:c7: 42:19:ba:a0:48:a9:a8:97:41:af:6a:60:2a:91:de:a3:f2:d7: 26:30:db:97:4a:37:ce:92:17:b4:31:90:27:2e:3c:6f:b5:e2: 88:dc:40:3d:04:43:f6:a8:7c:43:6e:db:db:f7:6b:be:5a:28: 22:27:06:13:e9:76:3c:c6:49:ae:34:e5:28:a7:a3:e8:08:27: 9f:e8:00:5d:26:e5:13:9a:c3:c2:f9:2a:62:41:2d:1b:bf:6e: 59:0f:0e:e0:95:99:9c:ea:4a:72:f8:74:4a:67:8e:a0:1a:fd: b6:9f:39:ef:2f:68:a8:24:97:60:c7:df:ed:a7:ac:fd:6f:08: 1c:4e:17:a0:f9:3a:02:92:8a:a0:57:32:a8:52:98:b7:67:b9: 86:a7:4f:0d:37:5c:9b:db:09:6b:4d:07:80:81:66:a4:36:8e: 2e:87:76:a4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QzQ3MzExMC8GA1UEBRMoODI2QUE4M0JCRTAyNDBEMTM5MDZBQkFCNDY0MzE3RTlF N0FCNzBFRjAeFw0yNTEwMTkxMTAzMjFaFw0yNTEwMjYxMTAzMjFaMBgxFjAUBgNV BAMTDTY4ZjRjNTc5LTIwNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwKketaCgRk/+m82KzXHB4yPQSqdyPDWn02hfEE7nBQMa/GbCjIyVgSmhnD67z 5TfP4jlZZIkqLIXTn9NILJ0O4cXYNgu1iSoC2mHXRdPHQfiIk2r7vp+cxyxDgL+f FF9GchFxFxPYWC6jlhp2rZ3B4gtq5jzUkNl+sn748JQ31Ssn9Xfw4v6j7xOzZ6nc E/eHg1fvYXyCA/BNAnRdZOKgR/exNWuNUGBz6l5qqmiS1KyUbOK2AD7qiuAGBrik Xu8KOBX0UfB4MFCG0xbZWlvVLWsdLz9RHa9jNuYKeHzBOHSMSjv5ZOZ5Ewv9iZ7V GBJExEHsN8Yo+yft1isuWGiHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6bOuz9od SoAms6mQ0hE+9MXXkVcwHwYDVR0jBBgwFoAUgmqoO74CQNE5BqurRkMX6eercO8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDNDczL0Y1N0QyMzMwNURE RjExRjBBNUJGRDY2RkM0RjlBRTAyL2dtcW9PNzRDUU5FNUJxdXJSa01YNmVlcmNP OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ21xb083NENRTkU1QnF1clJrTVg2ZWVyY084LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD NDczL0Y1N0QyMzMwNURERjExRjBBNUJGRDY2RkM0RjlBRTAyL2dtcW9PNzRDUU5F NUJxdXJSa01YNmVlcmNPOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIFvTFBR6Srw3MF8QJNF+kasNgxVntaybzAdl9zQSYbV04nc9gYTEaAo c/V/Lpts2OhlSrm4CodwZFu1LL3fytlq9KDhAXWDIdcUvfS3+j2XG7uRZhTLHDq5 x0IZuqBIqaiXQa9qYCqR3qPy1yYw25dKN86SF7QxkCcuPG+14ojcQD0EQ/aofENu 29v3a75aKCInBhPpdjzGSa405Sino+gIJ5/oAF0m5ROaw8L5KmJBLRu/blkPDuCV mZzqSnL4dEpnjqAa/bafOe8vaKgkl2DH3+2nrP1vCBxOF6D5OgKSiqBXMqhSmLdn uYanTw03XJvbCWtNB4CBZqQ2ji6HdqQ= -----END CERTIFICATE-----Generated at Mon Oct 20 21:26:30 2025 by rpki-client