$ rpki-client -vvf rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft File: gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft (raw, json) Hash identifier: KWjKUWdj9QNZbbMWh+pQgj12Udyn0CQZNt7RX5uhEbA= Subject key identifier: 09:FA:7A:93:55:3E:8C:81:EB:22:6A:8F:36:AC:B2:9B:2D:FF:23:48 Authority key identifier: 81:A7:15:1B:17:75:92:F8:68:23:B6:9F:43:76:24:E9:C0:02:DE:41 Certificate issuer: /CN=A9175299/serialNumber=81A7151B177592F86823B69F437624E9C002DE41 Certificate serial: 0B70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft Manifest number: 0B5F Signing time: Sat 18 Oct 2025 20:03:57 +0000 Manifest this update: Sat 18 Oct 2025 20:03:57 +0000 Manifest next update: Sat 25 Oct 2025 20:03:57 +0000 Files and hashes: 1: gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl (hash: jLnBFtHw1CZCR4kp6SeyZ3YPvatoKF2DTypqJM/oNGE=) 2: 89340B10B5E011EE91DD4D53C4F9AE02.roa (hash: 4RpDGoas6qlBW19Q5SIFrbnYOe5op4thcR7lPfP6BCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:03:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2928 (0xb70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175299, serialNumber=81A7151B177592F86823B69F437624E9C002DE41 Validity Not Before: Oct 18 20:03:57 2025 GMT Not After : Oct 25 20:03:57 2025 GMT Subject: CN=68f3f2ad-11e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:62:08:6f:1e:dc:eb:64:f3:c3:0b:fb:ca:59: 86:23:e2:8f:42:73:0b:bd:5b:46:64:92:9c:36:fd: 23:93:15:4f:8c:32:c4:13:ad:35:13:8c:c5:0b:e4: 60:1a:b0:20:d2:eb:4a:60:4e:76:92:f9:52:98:91: 16:2c:ae:4b:39:11:99:5e:fa:13:86:3e:db:71:c6: 15:e2:7e:87:a3:57:81:2e:fb:e3:df:18:7d:63:82: ef:88:f1:c1:20:f4:f2:5b:16:22:75:73:01:b1:96: 6d:19:aa:b4:2d:3c:7d:10:4b:a0:35:23:d4:bf:23: c4:f1:63:e7:6a:a4:62:bd:67:da:7c:e9:c7:17:bb: dd:ac:60:07:72:db:4b:d1:b4:11:03:50:1d:57:9e: ea:8e:1d:b2:bf:a2:6b:8f:ce:4e:12:8f:f1:ef:27: 78:87:98:4b:56:90:a2:35:a2:c4:42:3b:d9:39:c1: 93:7c:92:f8:47:97:61:b8:1a:55:08:2f:d9:7f:bf: 32:39:84:b8:a1:f7:3c:0b:93:7d:a7:fc:a5:b5:b6: d2:59:6a:ad:4a:ab:2c:78:5e:37:64:56:4a:04:3b: 07:d7:d4:6c:e8:a0:5a:11:7b:00:45:88:10:25:24: 19:64:62:c9:e5:6c:c4:55:a0:a4:36:5e:76:a4:80: 8a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:FA:7A:93:55:3E:8C:81:EB:22:6A:8F:36:AC:B2:9B:2D:FF:23:48 X509v3 Authority Key Identifier: keyid:81:A7:15:1B:17:75:92:F8:68:23:B6:9F:43:76:24:E9:C0:02:DE:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:3f:39:85:bf:a7:80:8d:70:59:10:97:35:5b:74:44:5c:6c: 6f:f4:3c:a8:da:13:d6:98:9b:d0:c6:2e:d8:e8:13:ef:41:64: b7:93:af:ee:83:63:e6:c2:00:e3:96:1d:29:8c:8d:5d:1d:95: c1:11:3a:d1:61:f7:f7:c5:d1:66:a3:b3:c7:1a:c4:0a:5c:0f: ae:4c:42:cf:31:cd:1a:b4:b0:3d:f0:d5:20:0a:0a:df:69:e0: 62:85:48:75:65:78:0b:95:8b:88:08:7a:fb:68:50:f9:9d:26: fa:44:6b:d2:79:d6:8e:12:c6:0c:d4:bb:89:09:3a:8a:27:5c: e3:3f:f3:12:00:7d:68:bd:ba:2f:e2:cb:82:e8:a5:6f:1d:84: e3:b0:76:e9:aa:86:e1:6d:e4:53:9f:a9:64:f4:56:40:01:c4: 39:d8:07:a9:e2:9f:17:e3:26:51:f0:82:f5:29:e2:57:62:6a: 18:e1:af:0f:80:c4:2d:ee:ec:b8:d2:da:53:21:d9:f0:02:d1: fc:ac:a7:95:1a:22:35:85:5a:96:1f:69:66:0f:fb:9c:74:bb: 12:e5:60:1f:e4:e8:9b:0b:fa:71:9d:1d:5e:76:7d:67:c1:15: af:b0:d4:5d:f9:46:48:61:65:bf:c0:93:c8:8d:0f:6a:c7:39: 0f:af:ff:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUyOTkxMTAvBgNVBAUTKDgxQTcxNTFCMTc3NTkyRjg2ODIzQjY5RjQzNzYyNEU5 QzAwMkRFNDEwHhcNMjUxMDE4MjAwMzU3WhcNMjUxMDI1MjAwMzU3WjAYMRYwFAYD VQQDEw02OGYzZjJhZC0xMWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6WIIbx7c62Tzwwv7ylmGI+KPQnMLvVtGZJKcNv0jkxVPjDLEE601E4zFC+Rg GrAg0utKYE52kvlSmJEWLK5LORGZXvoThj7bccYV4n6Ho1eBLvvj3xh9Y4LviPHB IPTyWxYidXMBsZZtGaq0LTx9EEugNSPUvyPE8WPnaqRivWfafOnHF7vdrGAHcttL 0bQRA1AdV57qjh2yv6Jrj85OEo/x7yd4h5hLVpCiNaLEQjvZOcGTfJL4R5dhuBpV CC/Zf78yOYS4ofc8C5N9p/yltbbSWWqtSqsseF43ZFZKBDsH19Rs6KBaEXsARYgQ JSQZZGLJ5WzEVaCkNl52pICKzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAn6epNV PoyB6yJqjzasspst/yNIMB8GA1UdIwQYMBaAFIGnFRsXdZL4aCO2n0N2JOnAAt5B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTI5OS8yNjg5MEVEQTQy QzUxMUVBQjI2Q0ZEMUJDNEY5QUUwMi9nYWNWR3hkMWt2aG9JN2FmUTNZazZjQUMz a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dhY1ZHeGQxa3Zob0k3YWZRM1lrNmNBQzNrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTI5OS8yNjg5MEVEQTQyQzUxMUVBQjI2Q0ZEMUJDNEY5QUUwMi9nYWNWR3hkMWt2 aG9JN2FmUTNZazZjQUMza0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZPzmFv6eAjXBZEJc1W3REXGxv9Dyo2hPWmJvQxi7Y6BPvQWS3k6/u g2PmwgDjlh0pjI1dHZXBETrRYff3xdFmo7PHGsQKXA+uTELPMc0atLA98NUgCgrf aeBihUh1ZXgLlYuICHr7aFD5nSb6RGvSedaOEsYM1LuJCTqKJ1zjP/MSAH1ovbov 4suC6KVvHYTjsHbpqobhbeRTn6lk9FZAAcQ52Aep4p8X4yZR8IL1KeJXYmoY4a8P gMQt7uy40tpTIdnwAtH8rKeVGiI1hVqWH2lmD/ucdLsS5WAf5OibC/pxnR1edn1n wRWvsNRd+UZIYWW/wJPIjQ9qxzkPr/9G -----END CERTIFICATE-----Generated at Mon Oct 20 03:54:31 2025 by rpki-client