$ rpki-client -vvf rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft File: gxqJE23hJ6AKadPgb9DTcX986Zo.mft (raw, json) Hash identifier: vBWqTEQgzotmvAtjMZl6dfxQ2z6sqAOHQ8JDL+5Xgsg= Subject key identifier: 95:B4:24:B7:2E:24:61:5E:F0:B5:E7:6D:83:2F:E0:BB:0D:CD:9B:9A Authority key identifier: 83:1A:89:13:6D:E1:27:A0:0A:69:D3:E0:6F:D0:D3:71:7F:7C:E9:9A Certificate issuer: /CN=A9175964/serialNumber=831A89136DE127A00A69D3E06FD0D3717F7CE99A Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft Manifest number: E1 Signing time: Sun 19 Oct 2025 08:30:36 +0000 Manifest this update: Sun 19 Oct 2025 08:30:36 +0000 Manifest next update: Sun 26 Oct 2025 08:30:36 +0000 Files and hashes: 1: gxqJE23hJ6AKadPgb9DTcX986Zo.crl (hash: MfB38Xm635Kqk6LmGsnnukD/XV5A5VAPCvtQd9ZMqc8=) 2: ECF347EC790211F0AEB6EC56C4F9AE02.roa (hash: LgOIgdmSarx/xdDFooMMCDoHTaRTWDIl0zWZh3dLWpk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.crl rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175964, serialNumber=831A89136DE127A00A69D3E06FD0D3717F7CE99A Validity Not Before: Oct 19 08:30:36 2025 GMT Not After : Oct 26 08:30:36 2025 GMT Subject: CN=68f4a1ac-b16d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:17:06:f3:1b:43:50:25:6c:aa:55:a2:89:ef: 8d:5c:94:16:6e:86:92:f5:f9:11:c9:4a:8d:b2:3f: 5a:47:cf:25:fc:c5:37:5f:93:10:70:f3:be:d5:87: e3:52:b5:c0:ea:cf:30:85:5e:02:17:ab:22:a7:3f: ed:f4:08:e6:10:6e:64:7a:1e:50:da:10:dd:da:5e: 0f:1e:1e:21:54:4b:af:e5:eb:77:d7:e3:34:ec:fa: ef:f7:67:56:d9:ff:c3:89:5b:a0:36:b4:79:9a:63: 4e:6c:10:3c:1d:d8:1b:8a:04:f6:a4:fe:81:31:cc: f8:24:f5:e0:47:ad:e3:90:44:f1:c4:91:86:89:41: 4a:26:ab:82:82:8f:4b:4a:63:a3:91:20:5d:14:fe: ff:43:bb:b6:41:10:3f:e4:38:66:11:c8:d5:cd:de: 43:54:79:39:c1:70:e6:50:e0:48:36:05:a9:25:a2: 14:d4:83:94:a1:35:90:9e:f4:f4:94:fa:df:04:98: fd:40:ce:eb:69:b2:8a:6f:79:e7:48:5f:5a:72:50: 6a:8a:af:50:1f:6e:7b:bc:12:0d:b2:6b:65:91:b6: 56:3e:6f:cc:62:24:16:c1:bc:c7:b9:2e:24:fe:5d: a8:59:80:89:28:6f:9f:2d:9e:3d:21:2c:73:c3:7f: c8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B4:24:B7:2E:24:61:5E:F0:B5:E7:6D:83:2F:E0:BB:0D:CD:9B:9A X509v3 Authority Key Identifier: keyid:83:1A:89:13:6D:E1:27:A0:0A:69:D3:E0:6F:D0:D3:71:7F:7C:E9:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:89:28:4b:f7:3c:41:ae:24:3d:8e:da:f3:69:4e:89:df:9f: 3e:64:74:a6:f0:73:75:49:53:fc:b1:83:59:ad:c7:e0:14:9d: 10:7e:69:1a:cf:b9:e2:3d:ab:e3:db:98:97:5f:64:54:0f:d9: f9:9f:e3:7a:cd:5a:93:8b:74:8a:80:73:ff:d6:07:61:0a:ca: b2:57:05:f0:70:d3:28:f8:a9:e4:9b:2c:34:d4:a1:85:32:dd: e0:79:6a:2f:05:00:9d:b7:8d:42:06:4b:40:ad:d3:0b:32:a8: 46:5b:32:c4:02:9f:1d:07:bf:b5:ae:15:dd:f8:3b:5f:ec:3b: 20:25:88:8d:98:b9:f5:39:a5:fd:34:6e:9e:2c:c7:c3:ea:30: 5e:77:8a:53:76:35:f9:9a:35:3c:ce:c4:d5:17:f3:0e:7f:15: 7f:fa:bf:7a:c5:d1:5e:6e:53:34:70:7e:93:30:ad:78:eb:e9: 0a:0a:fb:e1:20:b7:be:3f:32:ec:8f:fa:03:45:2b:38:b8:ea: 0e:e5:ab:1b:6f:34:3e:46:dc:17:40:e0:3f:e1:83:c4:da:9e: 90:ca:85:bd:c8:60:79:25:c8:0c:1c:6c:0a:e2:a1:4b:0c:1f: 8b:20:75:29:61:c4:53:10:67:46:70:e5:de:82:62:dc:8d:f2: 2c:b3:18:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU5NjQxMTAvBgNVBAUTKDgzMUE4OTEzNkRFMTI3QTAwQTY5RDNFMDZGRDBEMzcx N0Y3Q0U5OUEwHhcNMjUxMDE5MDgzMDM2WhcNMjUxMDI2MDgzMDM2WjAYMRYwFAYD VQQDEw02OGY0YTFhYy1iMTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyRcG8xtDUCVsqlWiie+NXJQWboaS9fkRyUqNsj9aR88l/MU3X5MQcPO+1Yfj UrXA6s8whV4CF6sipz/t9AjmEG5keh5Q2hDd2l4PHh4hVEuv5et31+M07Prv92dW 2f/DiVugNrR5mmNObBA8HdgbigT2pP6BMcz4JPXgR63jkETxxJGGiUFKJquCgo9L SmOjkSBdFP7/Q7u2QRA/5DhmEcjVzd5DVHk5wXDmUOBINgWpJaIU1IOUoTWQnvT0 lPrfBJj9QM7rabKKb3nnSF9aclBqiq9QH257vBINsmtlkbZWPm/MYiQWwbzHuS4k /l2oWYCJKG+fLZ49ISxzw3/IzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJW0JLcu JGFe8LXnbYMv4LsNzZuaMB8GA1UdIwQYMBaAFIMaiRNt4SegCmnT4G/Q03F/fOma MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTk2NC9GRDNFMzg5RTVC MTQxMUVGQUM5NzQ0NjFDNEY5QUUwMi9neHFKRTIzaEo2QUthZFBnYjlEVGNYOTg2 Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d4cUpFMjNoSjZBS2FkUGdiOURUY1g5ODZaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTk2NC9GRDNFMzg5RTVCMTQxMUVGQUM5NzQ0NjFDNEY5QUUwMi9neHFKRTIzaEo2 QUthZFBnYjlEVGNYOTg2Wm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBViShL9zxBriQ9jtrzaU6J358+ZHSm8HN1SVP8sYNZrcfgFJ0Qfmka z7niPavj25iXX2RUD9n5n+N6zVqTi3SKgHP/1gdhCsqyVwXwcNMo+Knkmyw01KGF Mt3geWovBQCdt41CBktArdMLMqhGWzLEAp8dB7+1rhXd+Dtf7DsgJYiNmLn1OaX9 NG6eLMfD6jBed4pTdjX5mjU8zsTVF/MOfxV/+r96xdFeblM0cH6TMK146+kKCvvh ILe+PzLsj/oDRSs4uOoO5asbbzQ+RtwXQOA/4YPE2p6QyoW9yGB5JcgMHGwK4qFL DB+LIHUpYcRTEGdGcOXegmLcjfIssxjS -----END CERTIFICATE-----Generated at Tue Oct 21 01:04:13 2025 by rpki-client