$ rpki-client -vvf rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft File: gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft (raw, json) Hash identifier: 4Aqr+zJsc3aY7mYlFv3ZQLjIjBMQ1pRnk0sBMIMLwHM= Subject key identifier: 0D:3D:12:C7:3F:D7:59:8A:67:CF:FF:28:4A:64:86:65:85:53:D3:B6 Authority key identifier: 80:21:B1:6B:92:42:1F:77:B7:26:0E:97:E6:AD:8C:1D:24:BD:29:9A Certificate issuer: /CN=A91936BE/serialNumber=8021B16B92421F77B7260E97E6AD8C1D24BD299A Certificate serial: 0853 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft Manifest number: 0847 Signing time: Sat 18 Oct 2025 21:56:10 +0000 Manifest this update: Sat 18 Oct 2025 21:56:09 +0000 Manifest next update: Sat 25 Oct 2025 21:56:09 +0000 Files and hashes: 1: gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl (hash: UZXvhoUUUHLR6s0XQWf5iSXpovNQ/SYud5fxUhZyo08=) 2: 538866F6E44B11EAA31DD984C4F9AE02.roa (hash: muRqFTnS2+oQQUYzYuXwP+mAhzn5jlwAwgRQL1uNMII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2131 (0x853) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91936BE, serialNumber=8021B16B92421F77B7260E97E6AD8C1D24BD299A Validity Not Before: Oct 18 21:56:09 2025 GMT Not After : Oct 25 21:56:09 2025 GMT Subject: CN=68f40cf9-a17f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8c:b9:8c:82:58:60:c7:6d:62:5c:2c:a8:3e: 13:1d:c1:e6:80:4a:47:05:9d:8b:ac:d7:1c:9f:8f: a3:22:b8:ba:b6:78:65:f2:0c:8c:af:70:b7:17:13: 43:f5:5b:e3:79:5e:88:dc:7d:07:db:86:4a:5d:a1: 32:62:f4:35:4b:39:79:79:c6:6f:48:c6:c6:e5:e7: 36:16:20:a8:09:a3:c8:89:d5:19:27:6d:ff:53:42: c4:a2:8b:70:59:c3:d6:13:3d:fd:db:bb:d4:40:c5: ca:c6:02:9d:23:0d:bd:02:e2:2e:ce:b2:d8:a7:36: 9f:4a:43:0a:86:a0:1e:12:8b:d0:a9:25:fb:0a:c6: c9:3f:ad:d5:50:6d:2a:a4:f6:5b:46:f9:29:33:22: 47:72:56:b8:7c:6c:3d:56:a0:eb:6d:d2:d8:31:78: 7e:d1:fd:a2:20:ee:d1:7f:de:e2:90:f4:5f:db:2d: 87:ef:ea:db:1f:94:fd:1c:d4:d7:be:02:60:35:50: a8:34:99:00:a5:a1:cd:64:38:1f:0a:0a:82:f5:6d: 5e:61:d6:2a:9f:1f:84:61:18:63:4a:33:f6:e4:67: ac:6b:ca:1c:8a:5f:ee:01:76:65:60:cd:04:cd:41: e7:30:3d:6d:dc:94:1e:06:9a:59:90:c5:01:6d:5d: a9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:3D:12:C7:3F:D7:59:8A:67:CF:FF:28:4A:64:86:65:85:53:D3:B6 X509v3 Authority Key Identifier: keyid:80:21:B1:6B:92:42:1F:77:B7:26:0E:97:E6:AD:8C:1D:24:BD:29:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:13:85:3f:e5:fc:43:0e:8f:39:29:35:7e:04:1e:01:3f:ec: b5:3a:20:ff:1c:1d:65:b8:7e:22:a7:fb:aa:d3:57:b9:f6:af: 35:db:80:3d:41:be:ef:b8:9e:9a:2c:8b:15:d4:a6:6d:c9:ff: d1:c7:dc:56:54:18:7e:4c:31:f2:59:0f:cf:6b:c1:d6:29:d4: 3c:8b:cb:99:5c:2f:60:f2:db:e3:4f:78:bd:15:55:6d:33:59: f4:48:45:2e:73:d9:1f:73:14:21:09:e6:47:cb:80:34:dd:83: a5:24:99:f3:57:dc:6d:3e:d4:3b:4d:84:15:14:66:36:fd:de: fb:c9:03:64:fd:4d:c7:ab:e0:24:63:35:96:d2:52:e9:48:58: ef:c6:42:06:28:0a:8a:d5:8b:d0:e2:fd:5b:2e:fd:08:bd:37: 6a:08:7a:5b:b8:96:fd:be:17:f4:02:ff:ea:e4:13:7a:95:91: 4a:84:d3:36:a2:d0:5c:be:b4:84:97:0f:1f:06:6d:d5:0f:71: f6:ac:96:14:9f:b1:96:f6:db:00:d6:b6:33:97:2f:4f:ad:eb: f2:ad:d3:1f:a8:7f:28:be:f3:52:23:39:73:e1:ef:e6:15:2b: 03:67:94:7e:13:b6:05:6e:e7:c6:af:0c:19:e4:0a:f8:90:89: 21:41:2a:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM2QkUxMTAvBgNVBAUTKDgwMjFCMTZCOTI0MjFGNzdCNzI2MEU5N0U2QUQ4QzFE MjRCRDI5OUEwHhcNMjUxMDE4MjE1NjA5WhcNMjUxMDI1MjE1NjA5WjAYMRYwFAYD VQQDEw02OGY0MGNmOS1hMTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqoy5jIJYYMdtYlwsqD4THcHmgEpHBZ2LrNccn4+jIri6tnhl8gyMr3C3FxND 9VvjeV6I3H0H24ZKXaEyYvQ1Szl5ecZvSMbG5ec2FiCoCaPIidUZJ23/U0LEootw WcPWEz3927vUQMXKxgKdIw29AuIuzrLYpzafSkMKhqAeEovQqSX7CsbJP63VUG0q pPZbRvkpMyJHcla4fGw9VqDrbdLYMXh+0f2iIO7Rf97ikPRf2y2H7+rbH5T9HNTX vgJgNVCoNJkApaHNZDgfCgqC9W1eYdYqnx+EYRhjSjP25Gesa8ocil/uAXZlYM0E zUHnMD1t3JQeBppZkMUBbV2pOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA09Esc/ 11mKZ8//KEpkhmWFU9O2MB8GA1UdIwQYMBaAFIAhsWuSQh93tyYOl+atjB0kvSma MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzZCRS9DQTA2NjY4Q0U0 NDgxMUVBODEwQjAzODBDNEY5QUUwMi9nQ0d4YTVKQ0gzZTNKZzZYNXEyTUhTUzlL Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDR3hhNUpDSDNlM0pnNlg1cTJNSFNTOUtaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzZCRS9DQTA2NjY4Q0U0NDgxMUVBODEwQjAzODBDNEY5QUUwMi9nQ0d4YTVKQ0gz ZTNKZzZYNXEyTUhTUzlLWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaE4U/5fxDDo85KTV+BB4BP+y1OiD/HB1luH4ip/uq01e59q8124A9 Qb7vuJ6aLIsV1KZtyf/Rx9xWVBh+TDHyWQ/Pa8HWKdQ8i8uZXC9g8tvjT3i9FVVt M1n0SEUuc9kfcxQhCeZHy4A03YOlJJnzV9xtPtQ7TYQVFGY2/d77yQNk/U3Hq+Ak YzWW0lLpSFjvxkIGKAqK1YvQ4v1bLv0IvTdqCHpbuJb9vhf0Av/q5BN6lZFKhNM2 otBcvrSElw8fBm3VD3H2rJYUn7GW9tsA1rYzly9PrevyrdMfqH8ovvNSIzlz4e/m FSsDZ5R+E7YFbufGrwwZ5Ar4kIkhQSqn -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:57 2025 by rpki-client