$ rpki-client -vvf rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft File: GWgoqCH0FqupzswxqnGjA_QhR3g.mft (raw, json) Hash identifier: psx/6Lhzzy5ZakA8QNBhhUwabe6yeIdf0jNMGHExm7Y= Subject key identifier: 99:8E:09:11:77:D9:EA:D8:F9:88:25:51:BD:C1:2E:4D:A3:D5:E4:BB Authority key identifier: 19:68:28:A8:21:F4:16:AB:A9:CE:CC:31:AA:71:A3:03:F4:21:47:78 Certificate issuer: /CN=A9197724/serialNumber=196828A821F416ABA9CECC31AA71A303F4214778 Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWgoqCH0FqupzswxqnGjA_QhR3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft Manifest number: BB Signing time: Sun 19 Oct 2025 09:05:51 +0000 Manifest this update: Sun 19 Oct 2025 09:05:50 +0000 Manifest next update: Sun 26 Oct 2025 09:05:50 +0000 Files and hashes: 1: GWgoqCH0FqupzswxqnGjA_QhR3g.crl (hash: vLX6hqfI6ZWz+D04we0OcW+dTAho9YvULXhSxIxSOCY=) 2: B5907D4E904E11EFA704CB22C4F9AE02.roa (hash: 6wPxK2kdtgMpw3LNHlmnVo9Jz/VjEWx8dJSDP8encJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.crl rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWgoqCH0FqupzswxqnGjA_QhR3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:05:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197724, serialNumber=196828A821F416ABA9CECC31AA71A303F4214778 Validity Not Before: Oct 19 09:05:50 2025 GMT Not After : Oct 26 09:05:50 2025 GMT Subject: CN=68f4a9ef-9292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c5:27:93:d3:48:cf:6e:93:30:4a:8d:64:15: b3:5f:63:76:41:dd:ec:7d:a9:24:5c:b4:e7:b9:0a: f3:bc:c9:d4:81:52:ac:4d:22:b0:1f:bb:1b:a5:20: 49:1f:48:78:ad:18:50:ac:a2:9d:92:b7:a5:96:c2: 2c:59:ec:01:94:da:e3:dd:ae:25:44:b9:6e:05:9b: 32:df:2d:53:93:e3:0e:1f:da:01:f5:5e:3c:a2:0e: 4c:db:b8:b3:ae:8a:6c:c8:17:d7:30:17:e4:05:21: 1a:2a:95:61:be:67:75:94:9b:66:55:08:35:b8:da: 45:78:22:e7:03:0f:44:bd:df:83:d6:1c:24:93:73: a9:88:56:63:4b:fe:cf:5c:e3:e3:87:e7:a3:b9:53: 2e:6b:f5:c5:c6:65:61:0a:ba:72:b3:14:f9:93:6d: 89:14:86:0f:6d:61:6b:69:e3:06:70:e6:07:b8:50: b3:4f:1f:f7:16:07:e4:94:c7:7d:d9:9c:e0:08:68: 21:1a:97:ae:4d:be:3d:71:1d:a1:e2:63:34:5c:9e: 6c:77:63:7c:d8:57:4f:4a:25:d4:99:39:db:1c:3f: 00:12:5a:d0:00:18:4a:84:1b:ee:e0:a5:03:13:39: 8b:cc:cd:61:86:05:97:f4:f5:f6:ce:40:32:d7:d1: 80:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:8E:09:11:77:D9:EA:D8:F9:88:25:51:BD:C1:2E:4D:A3:D5:E4:BB X509v3 Authority Key Identifier: keyid:19:68:28:A8:21:F4:16:AB:A9:CE:CC:31:AA:71:A3:03:F4:21:47:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWgoqCH0FqupzswxqnGjA_QhR3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:da:8f:65:a7:a8:d6:16:6e:54:59:af:79:6b:f2:51:12:df: fc:6f:5a:07:90:bc:81:11:f1:6c:e8:dc:4e:91:4b:c9:a6:df: ba:81:3b:7a:bb:f8:ba:bd:ad:ef:04:dc:d8:a2:55:40:11:17: bc:07:bd:29:8a:9d:c2:38:57:12:a7:3c:8d:65:ba:01:2c:93: 5f:c3:d3:c9:49:17:34:b5:68:88:7d:fc:c9:08:26:5d:c6:b6: 4e:1e:f6:0d:71:d3:0b:5d:5f:29:3c:6b:52:10:a7:a7:22:12: 9d:64:2a:83:05:47:73:c8:53:1f:68:39:b2:02:66:b6:f0:72: dd:76:c3:38:de:37:aa:2e:4a:3c:c8:4b:1f:c9:6b:4d:1d:04: 3c:f2:fe:77:bb:21:d7:12:18:51:85:e2:f6:8a:d4:65:ec:39: 42:d0:0e:3f:2f:1d:ae:d3:21:58:f1:a0:19:4c:b0:c5:0c:79: 26:ea:70:04:b8:b1:e1:3a:c3:c6:77:b9:a8:a9:f2:8c:b0:89: cc:41:d5:a6:bb:a6:75:f5:49:b6:1b:7b:0f:78:24:6e:51:ce: be:df:7f:a6:4f:46:63:c1:95:a0:97:02:7f:5c:d7:4c:9a:a7: 3a:a9:af:de:64:18:de:64:10:b0:ad:50:3c:64:89:57:12:02: 8d:22:53:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc3MjQxMTAvBgNVBAUTKDE5NjgyOEE4MjFGNDE2QUJBOUNFQ0MzMUFBNzFBMzAz RjQyMTQ3NzgwHhcNMjUxMDE5MDkwNTUwWhcNMjUxMDI2MDkwNTUwWjAYMRYwFAYD VQQDEw02OGY0YTllZi05MjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxcUnk9NIz26TMEqNZBWzX2N2Qd3sfakkXLTnuQrzvMnUgVKsTSKwH7sbpSBJ H0h4rRhQrKKdkrellsIsWewBlNrj3a4lRLluBZsy3y1Tk+MOH9oB9V48og5M27iz ropsyBfXMBfkBSEaKpVhvmd1lJtmVQg1uNpFeCLnAw9Evd+D1hwkk3OpiFZjS/7P XOPjh+ejuVMua/XFxmVhCrpysxT5k22JFIYPbWFraeMGcOYHuFCzTx/3FgfklMd9 2ZzgCGghGpeuTb49cR2h4mM0XJ5sd2N82FdPSiXUmTnbHD8AElrQABhKhBvu4KUD EzmLzM1hhgWX9PX2zkAy19GAwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJmOCRF3 2erY+YglUb3BLk2j1eS7MB8GA1UdIwQYMBaAFBloKKgh9Barqc7MMapxowP0IUd4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzcyNC81RjlDNkI5Mjkw NEQxMUVGQTExMDM4NjRDNEY5QUUwMi9HV2dvcUNIMEZxdXB6c3d4cW5HakFfUWhS M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dXZ29xQ0gwRnF1cHpzd3hxbkdqQV9RaFIzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzcyNC81RjlDNkI5MjkwNEQxMUVGQTExMDM4NjRDNEY5QUUwMi9HV2dvcUNIMEZx dXB6c3d4cW5HakFfUWhSM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAC2o9lp6jWFm5UWa95a/JREt/8b1oHkLyBEfFs6NxOkUvJpt+6gTt6 u/i6va3vBNzYolVAERe8B70pip3COFcSpzyNZboBLJNfw9PJSRc0tWiIffzJCCZd xrZOHvYNcdMLXV8pPGtSEKenIhKdZCqDBUdzyFMfaDmyAma28HLddsM43jeqLko8 yEsfyWtNHQQ88v53uyHXEhhRheL2itRl7DlC0A4/Lx2u0yFY8aAZTLDFDHkm6nAE uLHhOsPGd7moqfKMsInMQdWmu6Z19Um2G3sPeCRuUc6+33+mT0ZjwZWglwJ/XNdM mqc6qa/eZBjeZBCwrVA8ZIlXEgKNIlMi -----END CERTIFICATE-----Generated at Mon Oct 20 05:41:58 2025 by rpki-client