$ rpki-client -vvf rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft File: GHkad7eTMW9ffev2Atp8TmnIvGs.mft (raw, json) Hash identifier: wUH6CFVFV3NEyjnTx3qr+3Nuxr/EEMeZOh99Xhxy0ZY= Subject key identifier: 34:88:EF:A7:93:3D:09:93:4A:93:D7:8D:1D:B2:2D:75:9A:F9:BF:67 Authority key identifier: 18:79:1A:77:B7:93:31:6F:5F:7D:EB:F6:02:DA:7C:4E:69:C8:BC:6B Certificate issuer: /CN=A9185259/serialNumber=18791A77B793316F5F7DEBF602DA7C4E69C8BC6B Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHkad7eTMW9ffev2Atp8TmnIvGs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft Manifest number: 0C Signing time: Sun 19 Oct 2025 11:35:11 +0000 Manifest this update: Sun 19 Oct 2025 11:35:10 +0000 Manifest next update: Sun 26 Oct 2025 11:35:10 +0000 Files and hashes: 1: GHkad7eTMW9ffev2Atp8TmnIvGs.crl (hash: dBFrHwuAzVdnP+28j3IMczMvVS29g0laBHvzDTI8WgU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.crl rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHkad7eTMW9ffev2Atp8TmnIvGs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185259, serialNumber=18791A77B793316F5F7DEBF602DA7C4E69C8BC6B Validity Not Before: Oct 19 11:35:10 2025 GMT Not After : Oct 26 11:35:10 2025 GMT Subject: CN=68f4ccef-53b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ab:f1:e2:d4:ff:77:25:57:39:07:4e:85:9f: 0d:5b:38:17:77:6f:05:cf:04:89:88:a5:d1:9c:e1: fe:6c:7b:8f:bd:a2:f1:87:df:98:ee:3b:b2:09:e0: 96:80:e5:52:e1:c0:2f:c6:6b:bd:b8:68:33:68:2b: 22:8b:31:ee:47:f1:73:3b:4a:b6:a9:2f:a4:e4:41: f1:d9:65:32:3e:2b:14:61:b7:87:ab:1a:d0:a7:ec: bc:65:8a:8b:e1:b9:7f:03:f0:e0:5e:71:a5:38:be: 4e:6b:6a:a7:93:7b:81:da:23:4a:fb:89:14:38:05: 99:ce:60:b6:38:49:77:5e:d8:af:6d:20:9b:73:bb: 41:74:a6:9b:48:f8:47:6d:58:4f:b7:46:1b:e8:73: 9f:ba:3c:63:ab:dc:65:8d:c9:7f:e1:97:e9:56:40: 80:8b:f6:1e:5d:56:2c:c9:25:96:06:b4:d5:ab:85: 82:2a:7f:c4:75:d0:cf:be:48:9a:73:ec:5f:4b:68: 62:33:29:5a:75:b1:e7:97:fb:78:75:bb:5f:10:42: 66:de:fc:44:d2:e4:6a:83:f6:21:35:d3:8e:6c:61: 61:64:1e:34:15:42:17:64:29:2a:c8:9f:06:df:a3: ab:bd:40:37:38:91:16:ca:3a:80:97:5a:96:23:56: ac:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:88:EF:A7:93:3D:09:93:4A:93:D7:8D:1D:B2:2D:75:9A:F9:BF:67 X509v3 Authority Key Identifier: keyid:18:79:1A:77:B7:93:31:6F:5F:7D:EB:F6:02:DA:7C:4E:69:C8:BC:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHkad7eTMW9ffev2Atp8TmnIvGs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:4e:6e:32:af:4a:77:fe:93:e0:76:5b:07:6a:e2:e6:eb:0a: 63:6e:ff:53:1f:4f:92:d4:cf:f9:40:b4:64:70:a3:51:44:be: e7:d3:96:e8:b6:36:8d:dd:fd:c0:9c:ae:2c:9e:5f:07:c7:d4: e7:e5:66:f1:fa:96:cd:db:28:66:be:60:3e:f1:65:9d:e7:af: fc:bf:77:2b:4c:28:96:92:29:b8:c1:52:ee:1d:00:13:44:bd: fd:82:f9:0f:9b:84:6c:e1:24:c0:60:c2:bc:b6:38:bc:59:e9: a8:79:9b:ba:3e:39:d7:8c:9d:cd:b2:8a:e6:15:87:5b:63:16: 0c:82:c2:2a:93:a8:45:84:80:18:fb:9b:7f:47:94:2d:dd:de: 0a:bf:4b:a5:76:51:0d:c1:40:ee:e6:53:5e:c3:41:fc:01:fb: 90:56:0b:0d:7d:3c:0e:32:08:92:0b:e4:1c:a1:14:84:e6:68: c1:ca:13:5c:51:4b:57:da:a1:e9:c1:9b:5b:3b:32:f0:63:6d: 3d:f9:eb:2b:db:41:a8:47:21:57:96:24:7f:6c:55:91:80:14: d1:61:b1:fb:60:85:19:a7:58:f0:83:c8:8c:ad:e0:8a:fa:58: 24:31:f9:b0:2b:40:a5:32:d9:6c:b6:ca:82:c9:d5:7a:e9:7b: 0c:4b:8d:95 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NTI1OTExMC8GA1UEBRMoMTg3OTFBNzdCNzkzMzE2RjVGN0RFQkY2MDJEQTdDNEU2 OUM4QkM2QjAeFw0yNTEwMTkxMTM1MTBaFw0yNTEwMjYxMTM1MTBaMBgxFjAUBgNV BAMTDTY4ZjRjY2VmLTUzYjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHq/Hi1P93JVc5B06Fnw1bOBd3bwXPBImIpdGc4f5se4+9ovGH35juO7IJ4JaA 5VLhwC/Ga724aDNoKyKLMe5H8XM7SrapL6TkQfHZZTI+KxRht4erGtCn7Lxliovh uX8D8OBecaU4vk5raqeTe4HaI0r7iRQ4BZnOYLY4SXde2K9tIJtzu0F0pptI+Edt WE+3Rhvoc5+6PGOr3GWNyX/hl+lWQICL9h5dVizJJZYGtNWrhYIqf8R10M++SJpz 7F9LaGIzKVp1seeX+3h1u18QQmbe/ETS5GqD9iE1045sYWFkHjQVQhdkKSrInwbf o6u9QDc4kRbKOoCXWpYjVqy3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNIjvp5M9 CZNKk9eNHbItdZr5v2cwHwYDVR0jBBgwFoAUGHkad7eTMW9ffev2Atp8TmnIvGsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1MjU5LzA4NEY5MjU2OUNG OTExRjA4ODEyREUxRUM0RjlBRTAyL0dIa2FkN2VUTVc5ZmZldjJBdHA4VG1uSXZH cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0hrYWQ3ZVRNVzlmZmV2MkF0cDhUbW5JdkdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1 MjU5LzA4NEY5MjU2OUNGOTExRjA4ODEyREUxRUM0RjlBRTAyL0dIa2FkN2VUTVc5 ZmZldjJBdHA4VG1uSXZHcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADpObjKvSnf+k+B2Wwdq4ubrCmNu/1MfT5LUz/lAtGRwo1FEvufTlui2 No3d/cCcriyeXwfH1OflZvH6ls3bKGa+YD7xZZ3nr/y/dytMKJaSKbjBUu4dABNE vf2C+Q+bhGzhJMBgwry2OLxZ6ah5m7o+OdeMnc2yiuYVh1tjFgyCwiqTqEWEgBj7 m39HlC3d3gq/S6V2UQ3BQO7mU17DQfwB+5BWCw19PA4yCJIL5ByhFITmaMHKE1xR S1faoenBm1s7MvBjbT356yvbQahHIVeWJH9sVZGAFNFhsftghRmnWPCDyIyt4Ir6 WCQx+bArQKUy2Wy2yoLJ1XrpewxLjZU= -----END CERTIFICATE-----Generated at Sun Oct 19 22:57:52 2025 by rpki-client