$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft File: g2LSOGrBMH7vi7_YdPc45tqjVXI.mft (raw, json) Hash identifier: Myt714fNgPXICxuwO/c8etw7Qm12TJOfi75ZyxZBnkY= Subject key identifier: BF:FB:A3:6F:9D:6B:73:98:01:3D:75:79:8E:A9:35:FA:A9:80:01:34 Authority key identifier: 83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72 Certificate issuer: /CN=A917C0F5/serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572 Certificate serial: 0D65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft Manifest number: 0D5E Signing time: Sat 18 Oct 2025 18:39:39 +0000 Manifest this update: Sat 18 Oct 2025 18:39:38 +0000 Manifest next update: Sat 25 Oct 2025 18:39:38 +0000 Files and hashes: 1: g2LSOGrBMH7vi7_YdPc45tqjVXI.crl (hash: BeKVNGZiDN1LcJR0J7YRkDYsfMv3a2RsSlvRl6xTL5c=) 2: D11C8B12DB7111E981104A54C4F9AE02.roa (hash: b+YvMULskW1aqcLGiau9z7PDlxuascZM6xtTvuLKH/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3429 (0xd65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C0F5, serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572 Validity Not Before: Oct 18 18:39:38 2025 GMT Not After : Oct 25 18:39:38 2025 GMT Subject: CN=68f3deeb-4130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6a:05:71:68:14:3a:6d:ec:51:a6:d1:e9:5d: 34:30:a6:6a:b1:bd:f8:5f:5d:b5:34:12:7a:d9:66: fa:c7:2b:06:f4:f3:4c:a5:e3:37:d7:56:ac:e1:20: db:88:d2:ab:03:c7:46:4e:1d:32:37:db:13:40:f1: d6:dd:f1:72:b3:89:05:af:b6:09:7d:8d:c3:9d:94: f8:66:6b:ee:b3:1e:96:44:4e:2d:82:d0:06:ac:3f: 71:f8:b6:a1:68:2e:72:3e:43:4f:95:db:3c:dc:04: 37:29:55:2d:04:77:ff:9b:34:73:74:f3:aa:df:35: 43:05:5d:62:28:45:ba:b2:3b:5d:a9:cf:bd:49:5b: e4:4f:b9:ba:c3:9f:ec:0b:9a:68:07:a2:1c:8c:2a: a2:3b:b9:1f:c7:25:5c:15:82:fe:07:64:1e:d1:5c: 82:d6:0b:fa:91:a2:0c:72:a3:81:10:5f:4b:0f:a2: 2c:51:fd:4a:cb:e0:24:dd:05:28:59:71:d8:30:5e: 5e:85:ae:ac:0a:9f:ad:47:56:73:fb:f0:0c:34:55: 6a:42:14:d1:99:fe:08:2a:c5:44:b9:30:93:8a:ab: 35:0b:b1:04:57:c5:9e:23:e2:a0:fe:e6:30:87:95: 68:e7:aa:ee:f6:21:55:2f:77:40:ca:11:1d:3c:9e: 6d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:FB:A3:6F:9D:6B:73:98:01:3D:75:79:8E:A9:35:FA:A9:80:01:34 X509v3 Authority Key Identifier: keyid:83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:48:e9:dd:b4:5d:98:7a:11:4b:d8:58:f5:15:aa:05:1e:a3: e0:3d:9a:4d:c1:08:fc:a8:ee:8d:d7:36:12:b9:67:fb:e7:6a: ad:d9:0a:de:ac:85:7d:71:12:4b:de:d4:8a:bd:8f:26:65:25: 15:39:1c:c9:e1:c6:7d:b0:ac:83:ac:81:0b:53:15:02:f0:4a: 99:8e:86:21:0e:f8:8f:67:da:a7:3c:58:c1:e6:c4:30:8a:fa: 31:c7:8b:15:ac:ac:10:c5:7a:1d:01:0e:67:ed:d6:b8:25:6d: 3d:9e:98:41:99:d7:04:48:f5:08:48:85:b6:ed:de:8a:ab:69: f8:8b:6c:da:e2:2e:ae:bb:7d:6a:8f:f3:54:87:cd:8c:6b:84: 90:2e:ba:5e:54:78:b5:2e:16:15:f4:a4:3e:f7:39:0c:83:f3: 37:30:3d:13:d2:ec:12:b0:d3:94:36:ca:41:99:35:3b:95:61: 32:bf:a9:06:eb:b7:46:9e:69:cc:89:c6:a8:87:af:f8:b5:db: c3:82:d7:35:e5:8f:13:b0:4d:77:95:e4:4a:84:a0:e9:34:a5: 01:15:da:2e:d3:0b:88:72:94:82:b4:5f:31:b2:da:3b:7e:b9: f9:9e:ce:d4:77:a4:19:0d:dd:40:c2:93:3f:9d:5d:f5:f6:a2: 61:51:22:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MwRjUxMTAvBgNVBAUTKDgzNjJEMjM4NkFDMTMwN0VFRjhCQkZEODc0RjczOEU2 REFBMzU1NzIwHhcNMjUxMDE4MTgzOTM4WhcNMjUxMDI1MTgzOTM4WjAYMRYwFAYD VQQDEw02OGYzZGVlYi00MTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3moFcWgUOm3sUabR6V00MKZqsb34X121NBJ62Wb6xysG9PNMpeM311as4SDb iNKrA8dGTh0yN9sTQPHW3fFys4kFr7YJfY3DnZT4Zmvusx6WRE4tgtAGrD9x+Lah aC5yPkNPlds83AQ3KVUtBHf/mzRzdPOq3zVDBV1iKEW6sjtdqc+9SVvkT7m6w5/s C5poB6IcjCqiO7kfxyVcFYL+B2Qe0VyC1gv6kaIMcqOBEF9LD6IsUf1Ky+Ak3QUo WXHYMF5eha6sCp+tR1Zz+/AMNFVqQhTRmf4IKsVEuTCTiqs1C7EEV8WeI+Kg/uYw h5Vo56ru9iFVL3dAyhEdPJ5tQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL/7o2+d a3OYAT11eY6pNfqpgAE0MB8GA1UdIwQYMBaAFINi0jhqwTB+74u/2HT3OObao1Vy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzBGNS8xRUM0RTA5QURC NzExMUU5QjYxMDUzNTNDNEY5QUUwMi9nMkxTT0dyQk1IN3ZpN19ZZFBjNDV0cWpW WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cyTFNPR3JCTUg3dmk3X1lkUGM0NXRxalZYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzBGNS8xRUM0RTA5QURCNzExMUU5QjYxMDUzNTNDNEY5QUUwMi9nMkxTT0dyQk1I N3ZpN19ZZFBjNDV0cWpWWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLSOndtF2YehFL2Fj1FaoFHqPgPZpNwQj8qO6N1zYSuWf752qt2Qre rIV9cRJL3tSKvY8mZSUVORzJ4cZ9sKyDrIELUxUC8EqZjoYhDviPZ9qnPFjB5sQw ivoxx4sVrKwQxXodAQ5n7da4JW09nphBmdcESPUISIW27d6Kq2n4i2za4i6uu31q j/NUh82Ma4SQLrpeVHi1LhYV9KQ+9zkMg/M3MD0T0uwSsNOUNspBmTU7lWEyv6kG 67dGnmnMicaoh6/4tdvDgtc15Y8TsE13leRKhKDpNKUBFdou0wuIcpSCtF8xsto7 frn5ns7Ud6QZDd1AwpM/nV319qJhUSKe -----END CERTIFICATE-----Generated at Mon Oct 20 04:18:41 2025 by rpki-client