$ rpki-client -vvf rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft File: gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft (raw, json) Hash identifier: OyL22hmm2P2TdGcSRt/u4Iu31D0baXxQw87sL6yx0a0= Subject key identifier: 01:30:5E:25:67:AA:3E:37:4B:C1:53:84:7F:B6:19:56:36:66:73:67 Authority key identifier: 81:6A:47:8D:86:E7:E2:1B:F3:17:85:10:B8:58:53:25:58:34:30:EE Certificate issuer: /CN=A919D08A/serialNumber=816A478D86E7E21BF3178510B8585325583430EE Certificate serial: 016D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft Manifest number: 016C Signing time: Sun 19 Oct 2025 06:30:18 +0000 Manifest this update: Sun 19 Oct 2025 06:30:18 +0000 Manifest next update: Sun 26 Oct 2025 06:30:18 +0000 Files and hashes: 1: gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl (hash: Njae9KW/Zf+7httLLJHxwLzLaerwkBKEPCy0BHNOSVw=) 2: 2DBBD9E2788D11EEA502B350C4F9AE02.roa (hash: OAmPRTah7XdC92cyaOL1VT2tDGpsaJQwQAJo+nqjJlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D08A, serialNumber=816A478D86E7E21BF3178510B8585325583430EE Validity Not Before: Oct 19 06:30:18 2025 GMT Not After : Oct 26 06:30:18 2025 GMT Subject: CN=68f4857a-47c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:43:9a:6b:0c:b4:a6:f3:ec:97:20:09:78:e7: 82:58:d7:8a:22:e0:2d:db:20:e2:95:e3:40:7a:25: a2:47:92:c1:4e:d5:21:45:91:b3:3b:58:72:9c:fd: 30:d2:01:b8:34:af:05:e2:dd:1c:49:c4:37:ce:3c: af:4e:64:6e:bb:79:dd:c6:65:2d:9a:5f:96:44:d9: 12:b1:3f:68:20:7d:d3:37:50:74:c2:50:60:5c:0a: ad:62:cd:33:40:42:fd:34:ec:b4:42:5d:a3:dd:55: 3a:fb:65:14:a3:73:ec:08:77:55:7e:3c:83:24:79: 23:c3:de:ee:54:d7:01:14:9a:14:44:08:d2:3e:ff: c3:10:14:90:4e:ae:5d:5b:01:24:b6:a1:a6:bd:fa: bd:51:9b:35:a1:5b:cf:89:45:c5:00:14:d8:03:83: 39:64:8b:c9:12:f8:1a:28:bf:b6:fb:6d:c1:b6:6f: 05:d8:61:e0:67:11:44:eb:d7:41:ef:39:00:d6:e0: a1:54:45:09:1a:be:1a:ad:a5:6d:20:d9:5f:d7:da: a6:c4:67:ba:33:70:9d:bb:3d:fe:1e:c6:ae:92:45: db:88:40:55:61:f7:6d:40:3e:63:f2:95:0f:a3:18: b2:96:f1:6b:c9:a1:8c:54:d1:3a:53:14:22:d2:b2: 04:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:30:5E:25:67:AA:3E:37:4B:C1:53:84:7F:B6:19:56:36:66:73:67 X509v3 Authority Key Identifier: keyid:81:6A:47:8D:86:E7:E2:1B:F3:17:85:10:B8:58:53:25:58:34:30:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:44:62:b4:8e:24:1e:13:a0:b8:2e:4c:6e:87:7a:39:8a:31: 6b:58:c4:07:c6:de:ea:b8:a4:9d:5b:2c:c3:b8:86:df:b3:20: bf:21:69:12:53:b3:e9:87:f5:3a:81:b1:05:74:86:ae:ed:c3: ff:f9:3c:6d:fb:0c:10:cb:33:25:bc:d1:b9:f8:23:c8:c8:a1: 26:08:85:8f:b4:a9:ca:13:e5:ee:6a:24:6d:4f:be:bb:c5:74: cd:dc:bc:dd:72:5e:79:43:55:26:a3:ee:da:84:26:ab:9b:7e: e1:e9:4c:02:35:e9:c0:d6:a3:0a:95:dc:1b:5a:eb:44:8f:cc: c4:2e:a7:92:18:91:32:2b:56:28:51:33:2b:ec:4b:f0:06:0a: 3d:7d:9e:32:e5:c5:18:f6:9a:49:7e:02:bc:a4:24:1a:d9:fc: 11:9a:80:74:ab:0e:3e:c1:57:5d:d3:11:98:d8:46:ba:07:c1: 7e:bd:57:97:47:78:27:4f:fa:1c:02:62:c8:c3:b6:e6:8b:f0: ab:ba:84:4a:93:a6:7c:c4:c2:79:b7:6b:15:89:59:f3:a3:13: fd:13:fa:23:47:95:12:eb:ca:4b:9b:70:0c:6a:42:f7:3a:8f: ea:0f:1f:86:05:18:43:90:96:b2:1d:0a:6e:a5:d6:4d:d2:8f: f3:fb:c3:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQwOEExMTAvBgNVBAUTKDgxNkE0NzhEODZFN0UyMUJGMzE3ODUxMEI4NTg1MzI1 NTgzNDMwRUUwHhcNMjUxMDE5MDYzMDE4WhcNMjUxMDI2MDYzMDE4WjAYMRYwFAYD VQQDEw02OGY0ODU3YS00N2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnUOaawy0pvPslyAJeOeCWNeKIuAt2yDileNAeiWiR5LBTtUhRZGzO1hynP0w 0gG4NK8F4t0cScQ3zjyvTmRuu3ndxmUtml+WRNkSsT9oIH3TN1B0wlBgXAqtYs0z QEL9NOy0Ql2j3VU6+2UUo3PsCHdVfjyDJHkjw97uVNcBFJoURAjSPv/DEBSQTq5d WwEktqGmvfq9UZs1oVvPiUXFABTYA4M5ZIvJEvgaKL+2+23Btm8F2GHgZxFE69dB 7zkA1uChVEUJGr4araVtINlf19qmxGe6M3Cduz3+HsaukkXbiEBVYfdtQD5j8pUP oxiylvFryaGMVNE6UxQi0rIENQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAEwXiVn qj43S8FThH+2GVY2ZnNnMB8GA1UdIwQYMBaAFIFqR42G5+Ib8xeFELhYUyVYNDDu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDA4QS9DMEY0RTg2NDc4 OEExMUVFQjA2OTI0NjFDNEY5QUUwMi9nV3BIallibjRodnpGNFVRdUZoVEpWZzBN TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dXcEhqWWJuNGh2ekY0VVF1RmhUSlZnME1PNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDA4QS9DMEY0RTg2NDc4OEExMUVFQjA2OTI0NjFDNEY5QUUwMi9nV3BIallibjRo dnpGNFVRdUZoVEpWZzBNTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwRGK0jiQeE6C4Lkxuh3o5ijFrWMQHxt7quKSdWyzDuIbfsyC/IWkS U7Pph/U6gbEFdIau7cP/+Txt+wwQyzMlvNG5+CPIyKEmCIWPtKnKE+XuaiRtT767 xXTN3Lzdcl55Q1Umo+7ahCarm37h6UwCNenA1qMKldwbWutEj8zELqeSGJEyK1Yo UTMr7EvwBgo9fZ4y5cUY9ppJfgK8pCQa2fwRmoB0qw4+wVdd0xGY2Ea6B8F+vVeX R3gnT/ocAmLIw7bmi/CruoRKk6Z8xMJ5t2sViVnzoxP9E/ojR5US68pLm3AMakL3 Oo/qDx+GBRhDkJayHQpupdZN0o/z+8Nh -----END CERTIFICATE-----Generated at Mon Oct 20 17:08:26 2025 by rpki-client