$ rpki-client -vvf rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft File: GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft (raw, json) Hash identifier: rM4K+nGU5ZxOYfveUzBHq3e7FrAAtG0VhwW0q9wp2k0= Subject key identifier: 26:F6:26:0F:05:67:57:66:4B:28:85:CA:6F:0D:07:AE:13:71:86:CC Authority key identifier: 19:A0:43:81:99:FD:FE:24:DC:F8:56:62:A4:8B:DB:57:51:E1:B5:D9 Certificate issuer: /CN=A918842E/serialNumber=19A0438199FDFE24DCF85662A48BDB5751E1B5D9 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft Manifest number: 35 Signing time: Sun 19 Oct 2025 11:03:47 +0000 Manifest this update: Sun 19 Oct 2025 11:03:46 +0000 Manifest next update: Sun 26 Oct 2025 11:03:46 +0000 Files and hashes: 1: GaBDgZn9_iTc-FZipIvbV1Hhtdk.crl (hash: 8+CzFMSCoCRCH9fF/wbdcmNGqVp9TEtNqhrZpBwBh/k=) 2: 51D222025DEF11F08A4EA06FC4F9AE02.roa (hash: jbmHjCRldQebtcE9n4Zv2veO89dDLab7PzgfvTloAZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.crl rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918842E, serialNumber=19A0438199FDFE24DCF85662A48BDB5751E1B5D9 Validity Not Before: Oct 19 11:03:46 2025 GMT Not After : Oct 26 11:03:46 2025 GMT Subject: CN=68f4c592-3452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:43:ad:4a:a8:3c:26:27:c5:f2:29:2f:1e:47: a9:8a:49:7e:b5:66:20:54:52:94:7c:f1:f6:24:b2: 13:77:90:f3:2b:3b:e4:aa:d0:86:f8:a3:3b:c2:06: 16:df:ba:d3:58:81:b7:4a:0f:09:00:f2:bb:c2:6a: 52:71:8a:76:04:ac:ca:10:d6:70:7e:dd:3d:22:d6: 39:cc:16:2d:1c:be:b3:e5:ac:a2:c8:8a:ff:bb:7a: 01:4b:24:d9:0c:1d:43:2b:88:82:69:eb:77:28:4c: ba:e8:ac:f1:4b:ba:59:43:4d:81:05:b8:a3:41:c8: b1:bc:93:3e:98:97:dd:e9:0b:df:e9:6d:80:7d:35: 8e:00:14:2a:71:56:78:95:fe:7a:64:c1:15:6e:a6: 41:9e:76:70:24:92:3f:34:94:ce:bf:f2:d9:53:27: 0b:04:af:32:1f:a2:70:f4:ae:6a:db:32:20:38:49: 63:78:3d:7c:6a:b5:4e:25:95:ef:87:c4:c2:20:3d: cf:74:2e:da:2e:42:84:5d:86:4a:58:5a:36:fc:4b: 23:46:de:02:4f:e2:cb:48:1b:d9:14:04:ec:f4:b0: 2d:e5:4f:43:be:14:5f:d2:60:68:de:c3:ae:5e:08: 02:36:bf:49:01:78:48:7c:e8:9a:7d:d6:b3:69:47: 57:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F6:26:0F:05:67:57:66:4B:28:85:CA:6F:0D:07:AE:13:71:86:CC X509v3 Authority Key Identifier: keyid:19:A0:43:81:99:FD:FE:24:DC:F8:56:62:A4:8B:DB:57:51:E1:B5:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:2d:ab:be:77:90:a8:5b:93:97:33:b7:69:b6:9b:2d:39:5e: 59:05:66:eb:78:fa:1c:20:cd:3c:60:c9:be:1b:0b:7b:f9:3e: 4e:e4:41:39:3f:21:b6:75:73:75:16:51:cb:ef:2e:4e:96:43: 66:e2:04:9f:2b:e3:92:5c:58:14:6d:3f:df:5c:45:e0:1e:45: 69:eb:25:d1:0e:93:6d:9f:29:cd:f9:78:d7:c6:29:a3:02:80: 09:87:7d:fe:4e:8c:f4:2f:30:3d:2d:f1:fd:8e:0d:fe:52:5b: 91:19:51:39:7e:2b:75:c2:47:9e:bd:18:15:3b:a6:7d:1f:9f: 7d:af:fe:b9:13:ba:1b:00:5a:42:1f:05:45:e7:81:bc:21:d6: 2b:ea:1d:6a:87:43:00:2d:b5:77:dd:6e:8a:bf:2c:24:c0:fd: 80:15:75:a5:81:df:f1:65:27:02:67:70:13:00:23:b0:00:90: 08:9b:9f:b0:2d:4c:4b:e7:49:83:74:3c:b9:a4:51:8d:10:3c: 4a:9d:45:bf:50:4d:33:f0:67:19:01:65:2d:50:5d:89:1c:37: 61:45:72:68:1c:fe:44:9b:07:70:fa:2f:2a:49:b9:eb:8d:a0: 2e:ad:66:ba:7e:73:cc:1d:dd:c0:3c:b7:a2:6f:71:2f:aa:8c: f0:66:f8:df -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 ODQyRTExMC8GA1UEBRMoMTlBMDQzODE5OUZERkUyNERDRjg1NjYyQTQ4QkRCNTc1 MUUxQjVEOTAeFw0yNTEwMTkxMTAzNDZaFw0yNTEwMjYxMTAzNDZaMBgxFjAUBgNV BAMTDTY4ZjRjNTkyLTM0NTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIQ61KqDwmJ8XyKS8eR6mKSX61ZiBUUpR88fYkshN3kPMrO+Sq0Ib4ozvCBhbf utNYgbdKDwkA8rvCalJxinYErMoQ1nB+3T0i1jnMFi0cvrPlrKLIiv+7egFLJNkM HUMriIJp63coTLrorPFLullDTYEFuKNByLG8kz6Yl93pC9/pbYB9NY4AFCpxVniV /npkwRVupkGednAkkj80lM6/8tlTJwsErzIfonD0rmrbMiA4SWN4PXxqtU4lle+H xMIgPc90LtouQoRdhkpYWjb8SyNG3gJP4stIG9kUBOz0sC3lT0O+FF/SYGjew65e CAI2v0kBeEh86Jp91rNpR1fhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJvYmDwVn V2ZLKIXKbw0HrhNxhswwHwYDVR0jBBgwFoAUGaBDgZn9/iTc+FZipIvbV1Hhtdkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4NDJFLzYxOTlCRDU0NURF RTExRjA4RkFBMkI2REM0RjlBRTAyL0dhQkRnWm45X2lUYy1GWmlwSXZiVjFIaHRk ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR2FCRGdabjlfaVRjLUZaaXBJdmJWMUhodGRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 NDJFLzYxOTlCRDU0NURFRTExRjA4RkFBMkI2REM0RjlBRTAyL0dhQkRnWm45X2lU Yy1GWmlwSXZiVjFIaHRkay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB8tq753kKhbk5czt2m2my05XlkFZut4+hwgzTxgyb4bC3v5Pk7kQTk/ IbZ1c3UWUcvvLk6WQ2biBJ8r45JcWBRtP99cReAeRWnrJdEOk22fKc35eNfGKaMC gAmHff5OjPQvMD0t8f2ODf5SW5EZUTl+K3XCR569GBU7pn0fn32v/rkTuhsAWkIf BUXngbwh1ivqHWqHQwAttXfdboq/LCTA/YAVdaWB3/FlJwJncBMAI7AAkAibn7At TEvnSYN0PLmkUY0QPEqdRb9QTTPwZxkBZS1QXYkcN2FFcmgc/kSbB3D6LypJueuN oC6tZrp+c8wd3cA8t6JvcS+qjPBm+N8= -----END CERTIFICATE-----Generated at Tue Oct 21 11:31:07 2025 by rpki-client