$ rpki-client -vvf rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft File: gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft (raw, json) Hash identifier: 85Kd/6fBznKXn/LkSsel2izScb73LAZzIRtjnjVfdf4= Subject key identifier: 1B:07:5B:64:21:E3:22:1A:4C:9B:07:B6:2B:78:AD:96:29:EA:95:5C Authority key identifier: 81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4 Certificate issuer: /CN=A917092C/serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4 Certificate serial: E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft Manifest number: D7 Signing time: Sun 19 Oct 2025 08:50:13 +0000 Manifest this update: Sun 19 Oct 2025 08:50:13 +0000 Manifest next update: Sun 26 Oct 2025 08:50:12 +0000 Files and hashes: 1: gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl (hash: 0dSEdiadOn9xyutq/N8xRUBRjuYqTPZmbHcPQHtcuCY=) 2: E1F3085E777E11EFB3F75352C4F9AE02.roa (hash: KCUoweqEDh9jHcBtb7W3HaJWTeDZFQpve4LjGr9WIOQ=) 3: E3105D04777E11EFB3F75352C4F9AE02.roa (hash: cAiqdNWzTF0sxkzvHv6yM/PcMz/pHk5XzQwUuq8wOgo=) 4: 8E00FBF2777E11EF8D0ECC4EC4F9AE02.roa (hash: aNcYj3A/gGnj4dxbU3z5mV3zt63Nh4QrgMIUUabFzuw=) 5: E27B5862777E11EFB3F75352C4F9AE02.roa (hash: SHadC7K9t4sf0FTRuN25Sqtx5daSfJ2m5VktpFS9BJc=) 6: E3C4A4EE777E11EFB3F75352C4F9AE02.roa (hash: he2Yg9YLqUGBktzqkNPe9zTZfzSefhfrBKHZ0mm0MXI=) 7: 752774D616A111F0B2CDBC72C4F9AE02.roa (hash: 3FjaUGxyX9keX6h1j1EjjACKPn/PD276JgWOPNcm8Oo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917092C, serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4 Validity Not Before: Oct 19 08:50:13 2025 GMT Not After : Oct 26 08:50:12 2025 GMT Subject: CN=68f4a645-8991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f1:83:8f:32:4c:55:80:88:69:2f:0a:cd:50: 12:35:f4:20:3d:41:62:d5:2c:82:1a:1c:a8:c7:cf: f5:b4:e4:7e:17:2b:3a:b5:a2:bd:ff:8f:6b:ba:a7: 2b:9a:ea:63:f8:d1:a7:e1:79:d8:cc:3c:77:8e:d4: f6:0c:15:ee:0b:aa:b0:45:3a:c5:49:2b:47:37:bc: b5:c0:e6:99:f4:c7:49:91:7f:30:e6:b4:46:27:b5: b6:be:75:50:08:8b:eb:58:e7:09:5d:70:a8:85:23: 89:d5:1c:04:9e:18:80:b2:e3:d8:5e:32:8a:49:ed: 0d:d8:51:8e:06:77:e1:31:7b:57:08:54:72:72:d2: 48:8e:1d:ac:d5:c2:ce:19:3d:c4:36:57:e3:8f:30: b3:48:9b:03:5f:3e:d2:a4:8a:04:13:aa:c4:eb:75: 1f:a5:90:96:34:33:dd:66:00:26:4a:21:23:97:48: e4:b0:d6:d0:2b:c8:b6:de:29:03:5b:52:f1:16:87: a3:02:cb:f7:7e:a8:9b:cf:a1:1a:e5:e4:ad:92:a7: df:27:d6:54:89:83:49:b8:7c:14:95:df:26:3c:4b: 35:27:63:75:12:35:5d:d0:fa:df:5e:10:40:43:f5: e8:a0:33:e6:3f:2c:6e:07:6c:ed:36:93:0a:45:6e: fb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:07:5B:64:21:E3:22:1A:4C:9B:07:B6:2B:78:AD:96:29:EA:95:5C X509v3 Authority Key Identifier: keyid:81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:53:f1:fe:04:53:08:02:2c:81:8d:a3:50:c9:0a:ef:ac:9c: 45:7f:51:95:ce:bd:85:ed:c1:45:f3:0e:cf:63:a1:3e:89:47: 05:f8:9f:b9:98:76:08:7e:86:06:4b:20:b6:fa:cf:7a:91:c0: 4f:11:03:63:43:3e:29:e8:a6:88:00:6b:a0:b7:dd:d5:ab:d2: 3e:a0:38:a5:01:bb:34:f2:43:ea:3e:a3:8d:55:cc:98:11:6e: 64:01:81:b2:82:11:45:37:a8:94:fc:65:16:6f:71:3f:21:db: ff:c3:f4:db:bf:6c:8f:4d:57:48:a0:bf:b2:01:aa:e8:d0:58: e1:28:08:15:fc:b5:51:fd:87:b3:f0:2c:2f:09:d4:6a:3d:e9: 16:73:86:ce:c7:c4:f7:39:3f:0b:f3:48:ba:1c:e3:80:d1:f8: ff:ad:4e:b7:47:54:c1:e6:29:eb:39:51:a3:4f:48:af:0f:78: 26:24:87:c9:26:14:da:c4:36:a2:e4:e1:d3:e8:46:53:e8:70: 06:3e:ea:a2:5a:e1:fc:bc:a7:a7:00:d7:df:76:66:5c:cf:26: 3c:b8:02:b7:06:3e:2d:54:d8:4f:a5:8b:70:3d:a0:32:68:4f: 51:f5:d0:04:71:41:2a:dd:d9:a6:1a:5a:30:23:7a:e3:72:80: 69:81:d4:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5MkMxMTAvBgNVBAUTKDgxN0REMzgwMkYyNkU1N0VDRTgyNjVDRTg2MjZGQ0JC OUM2NEU5RDQwHhcNMjUxMDE5MDg1MDEzWhcNMjUxMDI2MDg1MDEyWjAYMRYwFAYD VQQDEw02OGY0YTY0NS04OTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6vGDjzJMVYCIaS8KzVASNfQgPUFi1SyCGhyox8/1tOR+Fys6taK9/49ruqcr mupj+NGn4XnYzDx3jtT2DBXuC6qwRTrFSStHN7y1wOaZ9MdJkX8w5rRGJ7W2vnVQ CIvrWOcJXXCohSOJ1RwEnhiAsuPYXjKKSe0N2FGOBnfhMXtXCFRyctJIjh2s1cLO GT3ENlfjjzCzSJsDXz7SpIoEE6rE63UfpZCWNDPdZgAmSiEjl0jksNbQK8i23ikD W1LxFoejAsv3fqibz6Ea5eStkqffJ9ZUiYNJuHwUld8mPEs1J2N1EjVd0PrfXhBA Q/XooDPmPyxuB2ztNpMKRW779wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBsHW2Qh 4yIaTJsHtit4rZYp6pVcMB8GA1UdIwQYMBaAFIF904AvJuV+zoJlzoYm/LucZOnU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDkyQy9FMkMwNzdERTc3 NjYxMUVGQjU1RUQyNzlDNEY5QUUwMi9nWDNUZ0M4bTVYN09nbVhPaGliOHU1eGs2 ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dYM1RnQzhtNVg3T2dtWE9oaWI4dTV4azZkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDkyQy9FMkMwNzdERTc3NjYxMUVGQjU1RUQyNzlDNEY5QUUwMi9nWDNUZ0M4bTVY N09nbVhPaGliOHU1eGs2ZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4U/H+BFMIAiyBjaNQyQrvrJxFf1GVzr2F7cFF8w7PY6E+iUcF+J+5 mHYIfoYGSyC2+s96kcBPEQNjQz4p6KaIAGugt93Vq9I+oDilAbs08kPqPqONVcyY EW5kAYGyghFFN6iU/GUWb3E/Idv/w/Tbv2yPTVdIoL+yAaro0FjhKAgV/LVR/Yez 8CwvCdRqPekWc4bOx8T3OT8L80i6HOOA0fj/rU63R1TB5inrOVGjT0ivD3gmJIfJ JhTaxDai5OHT6EZT6HAGPuqiWuH8vKenANffdmZczyY8uAK3Bj4tVNhPpYtwPaAy aE9R9dAEcUEq3dmmGlowI3rjcoBpgdTz -----END CERTIFICATE-----Generated at Mon Oct 20 14:13:43 2025 by rpki-client