$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft File: GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft (raw, json) Hash identifier: EypY8/SrhL3K0ojZzZwTTGsRwn/8mPsVNjzR2FSIz3M= Subject key identifier: 26:D8:00:5F:B2:09:65:20:5D:A4:49:8B:B3:12:CD:BD:78:C3:98:8B Authority key identifier: 1B:04:16:05:D6:D8:38:6C:F7:22:5D:67:9B:41:03:48:99:1F:E2:33 Certificate issuer: /CN=A9174C93/serialNumber=1B041605D6D8386CF7225D679B410348991FE233 Certificate serial: 0C6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft Manifest number: 0C67 Signing time: Sat 18 Oct 2025 19:18:12 +0000 Manifest this update: Sat 18 Oct 2025 19:18:12 +0000 Manifest next update: Sat 25 Oct 2025 19:18:12 +0000 Files and hashes: 1: GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl (hash: /JcYNmXRyLcqb931iA/oN37XY1Pa+4O+pd4o8K5rcN0=) 2: C300B2460C2811EAA5153045C4F9AE02.roa (hash: NG87DnznnSO4SFH6RPE3pwKGFEdLouyBdOYhn2LMujw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:18:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3183 (0xc6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C93, serialNumber=1B041605D6D8386CF7225D679B410348991FE233 Validity Not Before: Oct 18 19:18:12 2025 GMT Not After : Oct 25 19:18:12 2025 GMT Subject: CN=68f3e7f4-654f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:99:d8:9c:f9:ee:e2:4a:3c:18:3a:ea:46:9d: a7:f9:5c:ce:e8:94:eb:86:c8:de:c1:50:4d:dd:f2: 65:21:90:41:e8:63:77:62:13:24:f3:61:85:09:c1: e4:c7:cc:c7:fb:f6:d7:1a:bf:38:4a:cc:64:66:94: 09:1b:2e:d1:6e:7a:d9:b0:7d:23:1a:0f:fe:27:1c: e5:6f:5a:f6:51:1f:c6:cc:67:40:04:95:b3:50:76: 75:9f:2f:0b:1b:5d:9f:89:ec:6a:d8:cb:2d:6c:1b: 65:29:8f:6d:ff:e6:1c:bc:85:31:b1:1d:8f:03:bb: d3:6f:69:ce:12:c6:9e:db:a1:a6:33:0e:5e:28:77: b4:91:16:10:01:9a:04:d3:28:79:d3:42:a3:ca:f5: 0e:14:7a:6a:d7:5c:48:0b:37:32:92:4b:16:d0:94: eb:76:3b:83:49:e0:71:e1:b5:0f:09:0a:50:49:2f: 2b:58:11:13:3e:4a:23:bf:31:19:87:0b:b4:44:b7: 17:44:a8:01:7b:5f:65:54:88:a8:77:fb:cb:77:03: 2f:72:95:3a:c4:d7:44:cf:0b:fe:ba:86:dc:02:f9: 72:f8:d7:05:cb:aa:e5:57:5a:bf:c3:28:1b:98:54: 5f:10:33:ba:15:eb:ee:43:8a:d5:e8:d0:9c:4a:72: e7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D8:00:5F:B2:09:65:20:5D:A4:49:8B:B3:12:CD:BD:78:C3:98:8B X509v3 Authority Key Identifier: keyid:1B:04:16:05:D6:D8:38:6C:F7:22:5D:67:9B:41:03:48:99:1F:E2:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:e6:c0:e8:b2:72:77:a2:03:84:69:c6:ab:96:51:97:17:6c: e4:2d:d3:4a:03:98:44:1b:39:be:61:aa:54:6f:5a:ee:b4:d0: 07:82:7b:86:80:ed:8d:e3:48:59:59:61:e6:ca:93:93:e7:8d: 4e:73:70:3b:bb:3e:07:75:ab:4b:c8:07:c2:0d:cb:ce:6a:b5: 3a:5d:17:7c:f6:4a:29:6d:88:f3:b7:43:88:4f:3e:8e:6b:71: 2d:9e:72:65:5f:78:85:56:47:fa:86:5e:89:e7:ac:40:a0:9d: 23:39:6e:24:83:84:2a:6e:24:06:fe:44:1a:41:75:ca:ea:2a: 4b:8c:ba:50:18:e2:9d:f9:39:54:23:41:aa:ea:a4:f0:8b:24: 67:7c:5c:86:64:be:f9:76:c7:3c:cd:0f:fe:8d:84:86:79:a8: 8f:94:d1:78:8b:6c:41:e8:8d:46:f3:02:a2:4e:fd:32:e4:2d: 25:8b:ff:3e:91:30:6a:df:0e:17:0b:2b:51:ec:b2:7f:c3:57: 3a:85:0e:fa:70:d2:3f:53:43:54:b3:57:a8:ec:1d:b4:0a:a0: 26:c5:5e:f4:35:82:d6:98:93:16:7e:a5:db:e3:7e:e6:6f:2a: ad:cf:91:3f:10:6a:2c:ef:26:97:36:d3:d6:11:14:fc:7a:a2: a4:51:0e:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDOTMxMTAvBgNVBAUTKDFCMDQxNjA1RDZEODM4NkNGNzIyNUQ2NzlCNDEwMzQ4 OTkxRkUyMzMwHhcNMjUxMDE4MTkxODEyWhcNMjUxMDI1MTkxODEyWjAYMRYwFAYD VQQDEw02OGYzZTdmNC02NTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZnYnPnu4ko8GDrqRp2n+VzO6JTrhsjewVBN3fJlIZBB6GN3YhMk82GFCcHk x8zH+/bXGr84SsxkZpQJGy7RbnrZsH0jGg/+Jxzlb1r2UR/GzGdABJWzUHZ1ny8L G12fiexq2MstbBtlKY9t/+YcvIUxsR2PA7vTb2nOEsae26GmMw5eKHe0kRYQAZoE 0yh500KjyvUOFHpq11xICzcykksW0JTrdjuDSeBx4bUPCQpQSS8rWBETPkojvzEZ hwu0RLcXRKgBe19lVIiod/vLdwMvcpU6xNdEzwv+uobcAvly+NcFy6rlV1q/wygb mFRfEDO6FevuQ4rV6NCcSnLnEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCbYAF+y CWUgXaRJi7MSzb14w5iLMB8GA1UdIwQYMBaAFBsEFgXW2Dhs9yJdZ5tBA0iZH+Iz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEM5My9DOEU4QjFGNjBD MjYxMUVBODBFRjQwNDFDNEY5QUUwMi9Hd1FXQmRiWU9HejNJbDFubTBFRFNKa2Y0 ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d3UVdCZGJZT0d6M0lsMW5tMEVEU0prZjRqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEM5My9DOEU4QjFGNjBDMjYxMUVBODBFRjQwNDFDNEY5QUUwMi9Hd1FXQmRiWU9H ejNJbDFubTBFRFNKa2Y0ak0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV5sDosnJ3ogOEacarllGXF2zkLdNKA5hEGzm+YapUb1rutNAHgnuG gO2N40hZWWHmypOT541Oc3A7uz4HdatLyAfCDcvOarU6XRd89kopbYjzt0OITz6O a3EtnnJlX3iFVkf6hl6J56xAoJ0jOW4kg4QqbiQG/kQaQXXK6ipLjLpQGOKd+TlU I0Gq6qTwiyRnfFyGZL75dsc8zQ/+jYSGeaiPlNF4i2xB6I1G8wKiTv0y5C0li/8+ kTBq3w4XCytR7LJ/w1c6hQ76cNI/U0NUs1eo7B20CqAmxV70NYLWmJMWfqXb437m byqtz5E/EGos7yaXNtPWERT8eqKkUQ7J -----END CERTIFICATE-----Generated at Mon Oct 20 13:35:29 2025 by rpki-client