$ rpki-client -vvf rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft File: gaZX6qx1VMq3oaKI9bP-7dilzEs.mft (raw, json) Hash identifier: GKCCyR078iwa/z7c8CbrUWyolboZrGv2KA40EU3e27w= Subject key identifier: 4A:12:38:1A:FA:92:F4:48:D1:08:0B:FD:A0:70:08:60:1D:1E:1C:CB Authority key identifier: 81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B Certificate issuer: /CN=A917DFDA/serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft Manifest number: 3D Signing time: Sun 19 Oct 2025 07:59:18 +0000 Manifest this update: Sun 19 Oct 2025 07:59:18 +0000 Manifest next update: Sun 26 Oct 2025 07:59:18 +0000 Files and hashes: 1: gaZX6qx1VMq3oaKI9bP-7dilzEs.crl (hash: 1vdXweEpyOI0mRHc0AhEr0tAg3AkgAn1lfs3QYj7EpI=) 2: A78653B2561F11F09624D128C4F9AE02.roa (hash: v13B1iQ4hhFI0k63jpGnWfr1WzzOqwI0W1kZRI7DnNY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:59:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DFDA, serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B Validity Not Before: Oct 19 07:59:18 2025 GMT Not After : Oct 26 07:59:18 2025 GMT Subject: CN=68f49a56-c22d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:1d:a1:62:e9:67:01:ed:81:d1:45:17:59:12: bd:32:37:f3:f6:79:f9:a0:44:04:6b:40:2d:b1:0d: 44:79:26:3d:a8:d4:ce:94:ee:30:5d:80:2a:46:77: e0:d4:73:0e:28:3d:fd:4c:38:19:09:b4:75:6d:27: 38:4f:38:49:53:ce:52:65:d8:76:f1:af:35:ed:02: d5:0b:b2:6c:4e:44:d1:19:a8:f5:1e:84:65:74:64: f1:2d:a3:e6:d5:fd:6c:e9:59:d8:9b:e7:c4:1c:e7: 81:6c:6e:71:fd:e3:3c:3c:7f:03:f0:0a:f9:11:fa: c4:03:b7:82:ee:fd:b6:f9:6c:4b:57:dd:71:e9:52: d9:3c:3c:dc:3e:b5:86:7d:49:f9:20:75:60:63:78: 18:98:1a:0a:9c:ad:0d:f4:df:d6:22:ce:a9:ed:fb: 48:e5:30:f6:7b:3a:7c:1f:23:87:c6:b0:05:e8:f1: 7c:45:31:f2:e1:ea:9d:f3:59:3e:21:aa:29:a0:e3: 19:60:62:d9:66:6d:88:0e:97:ea:cd:45:44:7b:f9: 41:73:cb:0d:8f:f6:26:65:39:e9:aa:e5:85:a0:a2: 3b:0b:80:46:e6:9d:e7:34:61:5f:5d:e2:ff:10:98: 09:9c:38:61:97:c9:c0:cd:6e:0c:7f:de:10:a1:e1: 3f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:12:38:1A:FA:92:F4:48:D1:08:0B:FD:A0:70:08:60:1D:1E:1C:CB X509v3 Authority Key Identifier: keyid:81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:a1:06:ae:5c:08:5e:88:35:49:3c:ee:44:54:45:43:f1:9b: bb:e7:ed:7e:73:ff:b8:55:20:e9:d0:40:18:c5:13:d4:05:1c: 5e:85:1d:85:29:ae:45:d6:ba:cf:4c:e6:b9:64:87:da:26:af: 5a:93:6c:4f:d4:b7:0c:2f:97:d0:23:51:c7:54:f9:29:9c:eb: b4:55:22:70:4e:ee:8b:7c:87:c4:fd:79:59:65:02:b7:e4:71: 56:c1:9a:fe:02:c3:69:b8:86:ef:87:a5:31:af:f4:ec:61:0a: 9b:3c:40:eb:6a:66:fe:cf:91:eb:1a:b8:7b:05:3b:a5:13:1d: 87:ae:d0:d2:52:e4:54:69:fc:11:1b:e8:85:85:0b:23:b1:11: 76:e5:de:d1:cb:67:c0:3f:c6:fd:f9:12:4f:7f:75:2d:35:4e: ff:65:43:b8:0a:15:60:0e:de:45:7f:fa:b5:f5:e5:8e:49:4c: c3:57:85:2f:c6:a3:22:2b:fd:4e:b3:20:7c:32:bd:e3:71:0e: ff:69:4d:30:7f:04:58:44:79:23:8b:50:91:06:5c:d0:06:ee: 1e:bc:2d:73:80:f6:52:7a:51:f9:18:2b:fd:af:61:cd:36:c6: f7:6b:c2:75:0d:7c:aa:8b:0b:59:0a:ae:e1:6f:b8:7d:53:98: d8:a3:40:39 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 REZEQTExMC8GA1UEBRMoODFBNjU3RUFBQzc1NTRDQUI3QTFBMjg4RjVCM0ZFRURE OEE1Q0M0QjAeFw0yNTEwMTkwNzU5MThaFw0yNTEwMjYwNzU5MThaMBgxFjAUBgNV BAMTDTY4ZjQ5YTU2LWMyMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD0HaFi6WcB7YHRRRdZEr0yN/P2efmgRARrQC2xDUR5Jj2o1M6U7jBdgCpGd+DU cw4oPf1MOBkJtHVtJzhPOElTzlJl2HbxrzXtAtULsmxORNEZqPUehGV0ZPEto+bV /WzpWdib58Qc54FsbnH94zw8fwPwCvkR+sQDt4Lu/bb5bEtX3XHpUtk8PNw+tYZ9 SfkgdWBjeBiYGgqcrQ3039Yizqnt+0jlMPZ7OnwfI4fGsAXo8XxFMfLh6p3zWT4h qimg4xlgYtlmbYgOl+rNRUR7+UFzyw2P9iZlOemq5YWgojsLgEbmnec0YV9d4v8Q mAmcOGGXycDNbgx/3hCh4T99AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUShI4GvqS 9EjRCAv9oHAIYB0eHMswHwYDVR0jBBgwFoAUgaZX6qx1VMq3oaKI9bP+7dilzEsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdERkRBLzc2MTNGMzE2NTMx MzExRjA4NURFQ0U3OUM0RjlBRTAyL2dhWlg2cXgxVk1xM29hS0k5YlAtN2RpbHpF cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ2FaWDZxeDFWTXEzb2FLSTliUC03ZGlsekVzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE RkRBLzc2MTNGMzE2NTMxMzExRjA4NURFQ0U3OUM0RjlBRTAyL2dhWlg2cXgxVk1x M29hS0k5YlAtN2RpbHpFcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHOhBq5cCF6INUk87kRURUPxm7vn7X5z/7hVIOnQQBjFE9QFHF6FHYUp rkXWus9M5rlkh9omr1qTbE/Utwwvl9AjUcdU+Smc67RVInBO7ot8h8T9eVllArfk cVbBmv4Cw2m4hu+HpTGv9OxhCps8QOtqZv7PkesauHsFO6UTHYeu0NJS5FRp/BEb 6IWFCyOxEXbl3tHLZ8A/xv35Ek9/dS01Tv9lQ7gKFWAO3kV/+rX15Y5JTMNXhS/G oyIr/U6zIHwyveNxDv9pTTB/BFhEeSOLUJEGXNAG7h68LXOA9lJ6UfkYK/2vYc02 xvdrwnUNfKqLC1kKruFvuH1TmNijQDk= -----END CERTIFICATE-----Generated at Tue Oct 21 05:29:52 2025 by rpki-client