$ rpki-client -vvf rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft File: GaNgWeMX739niFziUq7bkZWPXmg.mft (raw, json) Hash identifier: 6kr648WCb+i9hULdeoyro27VnsIFxvfPrynI+AxEF7I= Subject key identifier: 00:C9:D8:70:39:9A:67:10:D8:F4:A8:09:A5:F4:81:D6:3D:A3:D9:01 Authority key identifier: 19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68 Certificate issuer: /CN=A917D857/serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68 Certificate serial: 018F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft Manifest number: 018C Signing time: Sun 19 Oct 2025 06:05:48 +0000 Manifest this update: Sun 19 Oct 2025 06:05:47 +0000 Manifest next update: Sun 26 Oct 2025 06:05:47 +0000 Files and hashes: 1: GaNgWeMX739niFziUq7bkZWPXmg.crl (hash: PSDBh8gNh5x1uCeSLq4IUTg5rbRgAR31bXO4ljXgKys=) 2: BD9131004E2811EEBC65304DC4F9AE02.roa (hash: mDyA8en4O2HoFPMoiw1GIv6+nKDmPcew5/y5uXwGm88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:05:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D857, serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68 Validity Not Before: Oct 19 06:05:47 2025 GMT Not After : Oct 26 06:05:47 2025 GMT Subject: CN=68f47fbc-c070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f0:21:1e:fb:d3:4f:5f:7d:13:e0:9f:04:0e: 71:da:36:b5:ab:9f:e2:40:e4:70:f0:52:23:16:67: 92:5d:85:02:50:6c:2c:15:7e:01:47:a9:10:22:95: 10:40:5a:c7:7a:6b:bf:2c:be:2b:9e:a4:af:d1:27: c9:03:80:7e:d1:73:47:d8:f8:1a:be:60:1a:06:6f: 32:76:30:65:35:cc:27:75:fe:77:18:42:b2:e5:a6: c3:89:48:a0:4f:6c:d1:be:e8:ab:8f:1e:fb:fa:78: e1:4f:ac:29:2e:3e:dc:e0:4a:74:05:f6:17:50:ff: 55:54:ec:d4:e5:06:72:bf:c9:0b:18:8c:d3:96:29: 0b:46:a8:a6:a2:6e:3a:1e:ba:f6:f5:9b:50:92:cf: ca:31:61:76:d0:71:e7:9f:77:7e:0f:a6:a6:d1:91: 56:b4:e4:56:55:bb:43:84:e1:3a:a4:2c:08:4e:f2: 75:26:45:fa:54:6a:1a:13:73:62:9b:48:08:8e:d5: 0a:65:63:4c:1e:b1:3a:96:2f:54:40:bf:b6:27:d7: 29:c4:98:6f:e5:c9:65:93:89:e3:f2:ac:ff:f3:16: 23:31:ca:a3:09:2c:8d:1b:28:bd:8c:af:c7:ee:6c: 62:0b:26:b6:6d:28:9a:23:f2:84:93:84:5e:8a:ca: 7c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C9:D8:70:39:9A:67:10:D8:F4:A8:09:A5:F4:81:D6:3D:A3:D9:01 X509v3 Authority Key Identifier: keyid:19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:b5:83:84:58:5f:e2:c0:40:14:58:d2:34:18:97:97:24:0a: 6b:4a:77:71:fa:e1:05:0c:30:76:5d:d3:2e:a4:94:9a:e4:08: 8b:21:f1:16:8a:16:85:eb:f4:5e:49:21:a3:14:5d:a3:c7:78: 8a:15:36:31:0d:3d:c5:2e:ba:29:f2:71:2a:58:24:72:ae:3e: 31:a9:54:e8:84:7f:75:c3:c3:5a:a3:6b:75:b5:a0:7f:5c:5f: 6e:9e:7c:b1:5a:bb:dd:e2:de:83:89:2f:b3:62:5c:f3:03:3f: 6a:72:ef:c3:f6:11:4e:79:d9:b3:64:49:c8:4f:08:ce:a9:0d: 83:a9:74:96:45:ac:e8:45:2b:80:3a:0e:6b:86:70:25:99:28: e1:1d:5b:88:7c:05:9c:30:3a:ba:a0:ec:dd:ec:d0:7f:00:eb: 92:14:d4:13:b4:f5:6e:8b:a0:ef:70:3d:87:99:a7:4f:82:0c: 41:5d:62:84:b5:36:85:46:68:07:5e:2f:48:9b:d4:de:a4:78: 86:9d:b8:e7:69:3e:49:a8:5a:de:0d:3b:77:b9:d1:31:88:2b: f4:b6:23:2f:e5:b9:31:f7:61:c9:57:4d:59:0c:a3:ee:82:d2: 43:3d:17:c6:56:91:8d:8d:80:62:45:0b:24:38:83:fe:bd:17: 53:9f:f8:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q4NTcxMTAvBgNVBAUTKDE5QTM2MDU5RTMxN0VGN0Y2Nzg4NUNFMjUyQUVEQjkx OTU4RjVFNjgwHhcNMjUxMDE5MDYwNTQ3WhcNMjUxMDI2MDYwNTQ3WjAYMRYwFAYD VQQDEw02OGY0N2ZiYy1jMDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnvAhHvvTT199E+CfBA5x2ja1q5/iQORw8FIjFmeSXYUCUGwsFX4BR6kQIpUQ QFrHemu/LL4rnqSv0SfJA4B+0XNH2PgavmAaBm8ydjBlNcwndf53GEKy5abDiUig T2zRvuirjx77+njhT6wpLj7c4Ep0BfYXUP9VVOzU5QZyv8kLGIzTlikLRqimom46 Hrr29ZtQks/KMWF20HHnn3d+D6am0ZFWtORWVbtDhOE6pCwITvJ1JkX6VGoaE3Ni m0gIjtUKZWNMHrE6li9UQL+2J9cpxJhv5cllk4nj8qz/8xYjMcqjCSyNGyi9jK/H 7mxiCya2bSiaI/KEk4Reisp8oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADJ2HA5 mmcQ2PSoCaX0gdY9o9kBMB8GA1UdIwQYMBaAFBmjYFnjF+9/Z4hc4lKu25GVj15o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDg1Ny82MUM1Q0RCODRF MjgxMUVFOTRGREIzNENDNEY5QUUwMi9HYU5nV2VNWDczOW5pRnppVXE3YmtaV1BY bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dhTmdXZU1YNzM5bmlGemlVcTdia1pXUFhtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDg1Ny82MUM1Q0RCODRFMjgxMUVFOTRGREIzNENDNEY5QUUwMi9HYU5nV2VNWDcz OW5pRnppVXE3YmtaV1BYbWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHtYOEWF/iwEAUWNI0GJeXJAprSndx+uEFDDB2XdMupJSa5AiLIfEW ihaF6/ReSSGjFF2jx3iKFTYxDT3FLrop8nEqWCRyrj4xqVTohH91w8Nao2t1taB/ XF9unnyxWrvd4t6DiS+zYlzzAz9qcu/D9hFOedmzZEnITwjOqQ2DqXSWRazoRSuA Og5rhnAlmSjhHVuIfAWcMDq6oOzd7NB/AOuSFNQTtPVui6DvcD2HmadPggxBXWKE tTaFRmgHXi9Im9TepHiGnbjnaT5JqFreDTt3udExiCv0tiMv5bkx92HJV01ZDKPu gtJDPRfGVpGNjYBiRQskOIP+vRdTn/iK -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:25 2025 by rpki-client