$ rpki-client -vvf rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft File: ggZKEDz1DwHRlFMAajhs04c5G-Y.mft (raw, json) Hash identifier: bIYfOxabmmlv254/ZrETNoJxrNKlH+9bHEK8Excko7g= Subject key identifier: FD:F1:1C:77:36:73:B0:EA:D6:70:18:DA:CA:73:65:0B:D8:78:74:E2 Authority key identifier: 82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6 Certificate issuer: /CN=A919CA1B/serialNumber=82064A103CF50F01D19453006A386CD387391BE6 Certificate serial: 021D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft Manifest number: 0217 Signing time: Sun 19 Oct 2025 04:26:56 +0000 Manifest this update: Sun 19 Oct 2025 04:26:56 +0000 Manifest next update: Sun 26 Oct 2025 04:26:56 +0000 Files and hashes: 1: ggZKEDz1DwHRlFMAajhs04c5G-Y.crl (hash: E+1Xf8wo6/9EXEj2zi6UTdkMVe6AL1S31UH3P4ZJJsc=) 2: D3B49A1676CA11EDAA4FE042C4F9AE02.roa (hash: MMkdhzYrtB2EaUzaUeaUoWgtYA29GMYgRCaFiVCPSo0=) 3: D318E67076CA11EDAA4FE042C4F9AE02.roa (hash: dCssZ98YqQlWBb/mCVwsQnrI9ONxqFmsNypt7KWWLSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 541 (0x21d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CA1B, serialNumber=82064A103CF50F01D19453006A386CD387391BE6 Validity Not Before: Oct 19 04:26:56 2025 GMT Not After : Oct 26 04:26:56 2025 GMT Subject: CN=68f46890-ab8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:36:69:7c:79:41:c0:b5:91:dd:19:e7:44:06: 79:fe:5f:25:0a:36:10:30:1b:a0:e9:9c:ad:d6:53: c3:9d:c3:22:c0:6b:02:a1:d5:a7:25:fa:97:51:cf: 7f:cd:47:e9:ed:0b:69:95:3f:14:49:48:5f:00:ff: f7:b3:b6:e9:6a:28:c5:38:cd:aa:03:39:a2:df:33: 11:ed:ac:80:34:e5:3b:37:82:35:bc:1d:55:3d:e0: 07:40:92:81:85:40:9b:bd:9c:8b:ad:28:00:a6:38: 9e:91:b5:30:78:18:0a:b1:58:df:a0:66:24:c4:7c: 63:cd:59:d8:69:f0:0b:e3:41:ad:4c:3c:ab:ed:f2: c9:52:ce:c5:10:e0:dc:2e:c8:34:3c:5c:af:21:9e: ee:10:9b:38:df:49:5c:d7:56:09:e8:db:7b:d5:3c: 61:07:e6:69:f7:71:b6:12:9c:1c:ea:f4:d0:9c:19: d1:2d:5b:d3:14:df:86:f6:09:ad:02:a4:ef:c1:56: df:1f:ca:5b:4a:12:22:bb:5d:b7:60:76:02:fd:17: 63:b8:d0:b8:d6:0a:22:7d:62:d3:01:f4:16:c7:4a: 37:51:f8:6c:b0:4e:22:3d:08:3a:7e:f6:a9:d7:9a: b0:cd:05:e5:b2:f1:29:85:ab:e0:4c:36:87:9f:02: 13:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F1:1C:77:36:73:B0:EA:D6:70:18:DA:CA:73:65:0B:D8:78:74:E2 X509v3 Authority Key Identifier: keyid:82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:ca:90:17:d5:84:83:12:85:47:34:3b:83:b2:16:b6:cc:5d: f0:ac:99:ba:10:9f:c4:d7:53:66:89:1b:f3:ac:2d:a2:14:55: 85:e9:09:7b:64:27:f7:ac:d6:6c:d4:11:89:07:7c:d9:15:43: 16:f2:4c:d3:c1:49:f0:31:d7:e4:4e:69:42:c8:53:73:00:61: 3c:6f:3a:a3:a8:e3:af:f6:a6:24:b8:38:db:7a:07:7d:16:f9: 67:d4:26:41:8d:5a:fb:1c:26:5c:50:a2:b6:31:f4:82:86:7d: ea:f3:5b:83:2a:da:58:5c:bd:97:ee:ce:62:13:fa:87:e1:ed: 93:fc:bd:38:b3:39:72:5c:ae:d1:a8:1c:9c:05:f1:58:3f:f5: f9:1e:db:bb:c2:28:24:2e:71:4f:d5:2f:74:b8:06:c8:b4:1a: 76:aa:58:2b:4d:f6:2d:06:9a:58:67:ba:77:51:7d:ef:f6:d9: 9d:57:9b:fb:ee:67:17:4b:c7:d0:ba:50:57:10:16:cf:bc:b2: be:b8:c4:9d:a6:9e:9a:ca:0b:6e:80:99:cc:83:3b:52:33:f5: 2a:7c:64:ef:81:7f:91:ef:0b:3a:1b:c5:fc:3f:63:7c:52:46: 54:89:68:bd:23:86:aa:de:a7:a8:83:06:8e:c3:90:4e:b6:0f: 30:38:cb:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBMUIxMTAvBgNVBAUTKDgyMDY0QTEwM0NGNTBGMDFEMTk0NTMwMDZBMzg2Q0Qz ODczOTFCRTYwHhcNMjUxMDE5MDQyNjU2WhcNMjUxMDI2MDQyNjU2WjAYMRYwFAYD VQQDEw02OGY0Njg5MC1hYjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0TZpfHlBwLWR3RnnRAZ5/l8lCjYQMBug6Zyt1lPDncMiwGsCodWnJfqXUc9/ zUfp7QtplT8USUhfAP/3s7bpaijFOM2qAzmi3zMR7ayANOU7N4I1vB1VPeAHQJKB hUCbvZyLrSgApjiekbUweBgKsVjfoGYkxHxjzVnYafAL40GtTDyr7fLJUs7FEODc Lsg0PFyvIZ7uEJs430lc11YJ6Nt71TxhB+Zp93G2Epwc6vTQnBnRLVvTFN+G9gmt AqTvwVbfH8pbShIiu123YHYC/RdjuNC41goifWLTAfQWx0o3UfhssE4iPQg6fvap 15qwzQXlsvEphavgTDaHnwITVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP3xHHc2 c7Dq1nAY2spzZQvYeHTiMB8GA1UdIwQYMBaAFIIGShA89Q8B0ZRTAGo4bNOHORvm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0ExQi8xNDQ3ODI5QTc2 QkQxMUVEQkI0ODk0N0RDNEY5QUUwMi9nZ1pLRUR6MUR3SFJsRk1BYWpoczA0YzVH LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnWktFRHoxRHdIUmxGTUFhamhzMDRjNUctWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0ExQi8xNDQ3ODI5QTc2QkQxMUVEQkI0ODk0N0RDNEY5QUUwMi9nZ1pLRUR6MUR3 SFJsRk1BYWpoczA0YzVHLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvypAX1YSDEoVHNDuDsha2zF3wrJm6EJ/E11NmiRvzrC2iFFWF6Ql7 ZCf3rNZs1BGJB3zZFUMW8kzTwUnwMdfkTmlCyFNzAGE8bzqjqOOv9qYkuDjbegd9 Fvln1CZBjVr7HCZcUKK2MfSChn3q81uDKtpYXL2X7s5iE/qH4e2T/L04szlyXK7R qBycBfFYP/X5Htu7wigkLnFP1S90uAbItBp2qlgrTfYtBppYZ7p3UX3v9tmdV5v7 7mcXS8fQulBXEBbPvLK+uMSdpp6aygtugJnMgztSM/UqfGTvgX+R7ws6G8X8P2N8 UkZUiWi9I4aq3qeogwaOw5BOtg8wOMvb -----END CERTIFICATE-----Generated at Tue Oct 21 00:10:59 2025 by rpki-client