$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft File: gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft (raw, json) Hash identifier: C8iBBd9XFvmA+e8T4krOcEEHyx9dJthwi/FmRF9yGBE= Subject key identifier: C1:94:79:C8:9A:07:18:0A:FE:5D:B3:EA:C7:2B:5B:2F:04:CD:D1:E5 Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB Certificate issuer: /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB Certificate serial: 045F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft Manifest number: 0436 Signing time: Sun 19 Oct 2025 02:17:54 +0000 Manifest this update: Sun 19 Oct 2025 02:17:54 +0000 Manifest next update: Sun 26 Oct 2025 02:17:54 +0000 Files and hashes: 1: gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl (hash: YhxfUQi5ybskHhRzSVd2nX9XGcuyH4Tf+MAldJ6yneo=) 2: 44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa (hash: nTBaw0rGVih7H0eMNeUxYSZWJEjBLwFwXSTskNS1M34=) 3: 8F9CB4448F3511ECB2182782C4F9AE02.roa (hash: dOvAjf7RAVetavYFS5Luk51Mj5sbART3WqfDlwnlFcs=) 4: 609BCC763D9311EE9B7BB945C4F9AE02.roa (hash: 4nZdHogouXv845c2l3vfkGTuWxNMa8pAfMwGWm9kiHw=) 5: F255CD0A5EC411ED810B8584C4F9AE02.roa (hash: auW4UnHxJ31+muxSOzUSAXH6xyqbP7eemMf3Mu9GQdY=) 6: 6873616CCAE811ECBB89015FC4F9AE02.roa (hash: lojbrXlAbJoktTwfX33XLdufJ12kkKQ5GKXYlfuRCPs=) 7: A5D75708E07111ED9601E941C4F9AE02.roa (hash: T8SCzZDhPByBJIpznoraQVY/oHtUVPl/FFL0kEBzTiU=) 8: 21ECD84A856011EC924B3E58C4F9AE02.roa (hash: vx+toULPOCZ0nASP5Ye7Mi6PO9RJnf/5+aW7CpW+qSo=) 9: 64782D1E607E11ED9CD7EF0FC4F9AE02.roa (hash: OgDcSpfZCaRldmBrtsqxGYkV57RYdOEs5Zd3oOYd/XU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1119 (0x45f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B4BF, serialNumber=8035090A057327E1200593C20C88C519A45C9ECB Validity Not Before: Oct 19 02:17:54 2025 GMT Not After : Oct 26 02:17:54 2025 GMT Subject: CN=68f44a52-64b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:26:3b:3f:e6:88:4c:08:06:4f:96:47:6d:0a: 68:6e:39:5b:90:dd:90:d8:e5:90:00:8a:1d:62:2e: dc:4e:8b:3b:ab:09:91:8c:7c:53:73:2a:54:21:6c: 89:b0:78:4e:b1:3c:c5:33:6d:f8:35:3d:05:9c:94: 32:84:3e:5f:6e:06:75:e9:21:49:66:b8:1c:64:7e: eb:16:f8:c3:51:c5:ff:40:e1:5f:e9:4c:b0:cb:07: 39:05:63:a0:62:69:b8:a4:a2:53:ff:d0:36:a2:8c: 8e:58:e6:f8:a7:67:bc:24:83:44:e0:de:74:6d:95: 13:91:89:39:10:14:e2:c4:62:84:7d:34:9a:0e:25: 04:44:e3:e7:0c:53:ef:e6:84:80:70:68:d5:ab:d1: ce:85:b4:20:7a:15:6b:d0:c3:d9:ac:88:ab:55:d1: cc:8e:b8:57:82:4f:cb:4b:4c:31:d8:1f:fd:b6:98: 89:ab:51:32:d9:4c:0c:41:ff:cc:73:06:62:b4:2b: 5d:66:c8:40:5d:32:b5:98:ee:2c:94:3e:5f:54:07: 08:9f:43:41:21:16:e3:bb:21:44:47:e3:e3:1b:12: 13:bc:ff:98:52:bd:2e:ef:4d:74:07:c3:82:70:72: dc:97:2b:93:17:e9:64:cd:f2:ed:ba:26:78:d4:96: 1c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:94:79:C8:9A:07:18:0A:FE:5D:B3:EA:C7:2B:5B:2F:04:CD:D1:E5 X509v3 Authority Key Identifier: keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:2b:51:52:27:c5:83:34:6c:ef:0b:f4:cb:f3:90:f1:36:48: 36:10:7f:c5:df:89:c1:e4:51:a6:d2:13:71:38:67:3f:ec:a0: 19:07:48:5d:82:65:dd:c9:2b:77:3a:5a:e2:e0:39:a7:6f:94: f5:75:fd:73:43:ad:be:97:f1:de:65:6b:4e:51:7a:7e:2b:98: be:75:0d:73:d5:88:66:77:8d:61:7c:68:ce:6c:2b:f0:14:cd: 2e:50:e3:9b:c6:1f:4b:27:cc:e8:87:94:eb:af:5b:b0:a7:80: 67:44:82:cd:9e:ba:c9:15:a4:d1:2e:8e:b6:a4:74:64:7e:4b: d4:e5:ae:fe:89:6d:3d:0d:08:89:6e:a7:96:0b:dc:cb:c8:c0: 77:76:0d:0e:c1:92:69:9c:bf:7b:f2:c1:32:43:03:e6:87:6b: 63:ed:a5:10:ed:6f:c4:96:a5:9b:3f:61:67:b3:ee:2d:51:55: 19:8d:e2:c7:b2:ae:d0:5e:ca:29:9f:98:60:ca:26:b3:52:63: aa:05:59:6a:49:77:e5:b4:1b:99:b3:51:b1:06:27:2d:64:32: d5:8c:e2:5b:72:69:f9:81:33:bb:98:48:a9:52:d4:85:64:cb: a1:00:27:93:cf:b1:73:ac:40:af:64:68:cf:06:ec:c0:5a:5e: 23:15:f0:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0QkYxMTAvBgNVBAUTKDgwMzUwOTBBMDU3MzI3RTEyMDA1OTNDMjBDODhDNTE5 QTQ1QzlFQ0IwHhcNMjUxMDE5MDIxNzU0WhcNMjUxMDI2MDIxNzU0WjAYMRYwFAYD VQQDEw02OGY0NGE1Mi02NGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0yY7P+aITAgGT5ZHbQpobjlbkN2Q2OWQAIodYi7cTos7qwmRjHxTcypUIWyJ sHhOsTzFM234NT0FnJQyhD5fbgZ16SFJZrgcZH7rFvjDUcX/QOFf6Uywywc5BWOg Ymm4pKJT/9A2ooyOWOb4p2e8JINE4N50bZUTkYk5EBTixGKEfTSaDiUEROPnDFPv 5oSAcGjVq9HOhbQgehVr0MPZrIirVdHMjrhXgk/LS0wx2B/9tpiJq1Ey2UwMQf/M cwZitCtdZshAXTK1mO4slD5fVAcIn0NBIRbjuyFER+PjGxITvP+YUr0u7010B8OC cHLclyuTF+lkzfLtuiZ41JYcOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGUecia BxgK/l2z6scrWy8EzdHlMB8GA1UdIwQYMBaAFIA1CQoFcyfhIAWTwgyIxRmkXJ7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjRCRi9COENDNjkzQzg1 NUMxMUVDOEUzQ0JCNTFDNEY5QUUwMi9nRFVKQ2dWekotRWdCWlBDRElqRkdhUmNu c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dEVUpDZ1Z6Si1FZ0JaUENESWpGR2FSY25zcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjRCRi9COENDNjkzQzg1NUMxMUVDOEUzQ0JCNTFDNEY5QUUwMi9nRFVKQ2dWekot RWdCWlBDRElqRkdhUmNuc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0K1FSJ8WDNGzvC/TL85DxNkg2EH/F34nB5FGm0hNxOGc/7KAZB0hd gmXdySt3Olri4Dmnb5T1df1zQ62+l/HeZWtOUXp+K5i+dQ1z1Yhmd41hfGjObCvw FM0uUOObxh9LJ8zoh5Trr1uwp4BnRILNnrrJFaTRLo62pHRkfkvU5a7+iW09DQiJ bqeWC9zLyMB3dg0OwZJpnL978sEyQwPmh2tj7aUQ7W/ElqWbP2Fns+4tUVUZjeLH sq7QXsopn5hgyiazUmOqBVlqSXfltBuZs1GxBictZDLVjOJbcmn5gTO7mEipUtSF ZMuhACeTz7FzrECvZGjPBuzAWl4jFfBG -----END CERTIFICATE-----Generated at Mon Oct 20 10:33:37 2025 by rpki-client