$ rpki-client -vvf rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft File: gaChhLnGJZNg6jO7KDyhtDIbsDU.mft (raw, json) Hash identifier: sI60Im6FsHUyPxKMCdp/blQ/UsTEfRhNwzuFSYQCuQA= Subject key identifier: 7F:73:6E:9E:04:16:E5:C1:5C:F2:E3:69:F6:3D:95:09:BD:60:47:76 Authority key identifier: 81:A0:A1:84:B9:C6:25:93:60:EA:33:BB:28:3C:A1:B4:32:1B:B0:35 Certificate issuer: /CN=A9114814/serialNumber=81A0A184B9C6259360EA33BB283CA1B4321BB035 Certificate serial: 0192 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaChhLnGJZNg6jO7KDyhtDIbsDU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft Manifest number: 018A Signing time: Wed 05 Nov 2025 03:43:23 +0000 Manifest this update: Wed 05 Nov 2025 03:43:23 +0000 Manifest next update: Wed 12 Nov 2025 03:43:23 +0000 Files and hashes: 1: gaChhLnGJZNg6jO7KDyhtDIbsDU.crl (hash: tDEEgMRXO0NIszCQk7FjVbVqbng8EDz6dS8uS2DdrkQ=) 2: F800BA84626111EE82BA5C5DC4F9AE02.roa (hash: 1By/MbbkjCjjWqbVaZd/4CDXKFgmbctBCGN70Tvq9pY=) 3: 0DAF90D261C011EEAEFEBD43C4F9AE02.roa (hash: LNlWSJZd3y6vHDkscBPq/ORoIGPntGhXrtydBgng1E0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.crl rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaChhLnGJZNg6jO7KDyhtDIbsDU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:43:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 402 (0x192) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114814, serialNumber=81A0A184B9C6259360EA33BB283CA1B4321BB035 Validity Not Before: Nov 5 03:43:23 2025 GMT Not After : Nov 12 03:43:23 2025 GMT Subject: CN=690ac7db-34b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f8:27:4e:b4:ac:e6:2e:fb:12:90:c5:a4:b3: 0f:f8:65:44:b5:ec:65:83:17:68:e6:32:13:9a:88: 45:11:9c:9e:c4:48:ad:63:2f:e1:1f:bf:a4:a3:39: 73:26:f6:d1:1b:6c:f2:69:6d:85:ce:b3:60:84:02: c5:51:2f:01:4b:f4:e3:c5:4f:cb:04:7f:78:c2:bd: 8a:97:2a:60:2a:b6:6d:aa:2d:59:18:17:88:c5:21: 27:c0:a1:28:8c:e9:b3:10:74:ea:41:96:c4:91:13: 19:54:2b:8f:88:8e:e3:9c:bb:e9:fc:96:e7:e2:8c: b8:0f:fc:12:fa:39:2c:f3:8a:83:ed:21:fc:18:85: 82:31:bf:7a:3a:c3:75:8c:1d:26:6c:6f:d6:0f:a6: 1e:34:91:a2:9c:35:e4:bd:e0:f1:dd:02:ce:ba:62: bf:6f:9a:69:1f:63:0b:34:cd:1b:cc:45:09:d5:20: 87:eb:90:cf:4e:cf:c3:2c:f3:3b:2d:84:94:a7:0d: 55:e8:9f:cd:e2:4f:13:c7:46:ad:2f:83:46:bd:89: d0:4d:75:61:0a:2c:70:8c:3e:0b:d3:7b:61:4b:fa: a7:6b:15:c2:60:a1:dd:ae:71:7c:6d:2a:2a:22:7f: 4d:60:06:30:c4:2e:5e:1f:56:12:a7:ee:80:b5:53: 8d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:73:6E:9E:04:16:E5:C1:5C:F2:E3:69:F6:3D:95:09:BD:60:47:76 X509v3 Authority Key Identifier: keyid:81:A0:A1:84:B9:C6:25:93:60:EA:33:BB:28:3C:A1:B4:32:1B:B0:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaChhLnGJZNg6jO7KDyhtDIbsDU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:27:e7:72:70:e4:9c:0d:61:0b:be:a1:ab:d3:16:35:6c:cf: 32:d4:f1:08:7e:57:69:13:e2:2c:e5:31:df:ae:d5:8e:ea:42: f2:c4:64:7b:54:36:59:51:50:4b:75:f6:2d:06:90:fc:46:ae: f1:7f:58:78:9c:72:91:8a:cc:82:33:41:e4:dd:b8:01:94:e2: d2:a3:67:88:4a:b5:22:81:d9:0a:f5:1c:bc:8a:53:ae:97:e0: cf:5c:64:45:0c:d6:98:c9:47:a1:69:95:f0:3d:09:a0:cd:71: 65:cf:b6:6b:d7:6e:05:c5:d2:c3:2a:29:3b:04:9b:aa:95:c5: e6:b7:9d:b7:60:a8:8e:d9:c5:28:b9:a6:87:d7:9d:c4:f9:4d: ad:a3:81:d7:bd:78:6b:5a:c1:e9:38:4f:1c:51:1c:dc:fa:f7: 55:20:01:19:55:a7:68:91:97:50:40:af:97:97:66:6f:35:70: e3:64:c6:dd:c8:d2:79:ca:8f:5f:03:1e:55:7e:15:37:0f:e7: 66:7e:4a:1f:71:a4:be:12:a6:9d:72:4f:04:06:8e:8b:28:78: ad:ee:c6:b1:73:d8:b7:de:43:56:4b:27:c5:e7:f1:67:8d:90: b5:a6:6a:46:02:35:4e:e6:f8:b5:c5:80:6f:69:3b:76:c1:e0: 01:3c:66:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ4MTQxMTAvBgNVBAUTKDgxQTBBMTg0QjlDNjI1OTM2MEVBMzNCQjI4M0NBMUI0 MzIxQkIwMzUwHhcNMjUxMTA1MDM0MzIzWhcNMjUxMTEyMDM0MzIzWjAYMRYwFAYD VQQDEw02OTBhYzdkYi0zNGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vgnTrSs5i77EpDFpLMP+GVEtexlgxdo5jITmohFEZyexEitYy/hH7+kozlz JvbRG2zyaW2FzrNghALFUS8BS/TjxU/LBH94wr2KlypgKrZtqi1ZGBeIxSEnwKEo jOmzEHTqQZbEkRMZVCuPiI7jnLvp/Jbn4oy4D/wS+jks84qD7SH8GIWCMb96OsN1 jB0mbG/WD6YeNJGinDXkveDx3QLOumK/b5ppH2MLNM0bzEUJ1SCH65DPTs/DLPM7 LYSUpw1V6J/N4k8Tx0atL4NGvYnQTXVhCixwjD4L03thS/qnaxXCYKHdrnF8bSoq In9NYAYwxC5eH1YSp+6AtVON4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9zbp4E FuXBXPLjafY9lQm9YEd2MB8GA1UdIwQYMBaAFIGgoYS5xiWTYOozuyg8obQyG7A1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDgxNC8xMDE2ODkyNjYx QkYxMUVFODYwMjRGM0ZDNEY5QUUwMi9nYUNoaExuR0paTmc2ak83S0R5aHRESWJz RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dhQ2hoTG5HSlpOZzZqTzdLRHlodERJYnNEVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDgxNC8xMDE2ODkyNjYxQkYxMUVFODYwMjRGM0ZDNEY5QUUwMi9nYUNoaExuR0pa Tmc2ak83S0R5aHRESWJzRFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaJ+dycOScDWELvqGr0xY1bM8y1PEIfldpE+Is5THfrtWO6kLyxGR7 VDZZUVBLdfYtBpD8Rq7xf1h4nHKRisyCM0Hk3bgBlOLSo2eISrUigdkK9Ry8ilOu l+DPXGRFDNaYyUehaZXwPQmgzXFlz7Zr124FxdLDKik7BJuqlcXmt523YKiO2cUo uaaH153E+U2to4HXvXhrWsHpOE8cURzc+vdVIAEZVadokZdQQK+Xl2ZvNXDjZMbd yNJ5yo9fAx5VfhU3D+dmfkofcaS+Eqadck8EBo6LKHit7saxc9i33kNWSyfF5/Fn jZC1pmpGAjVO5vi1xYBvaTt2weABPGbo -----END CERTIFICATE-----Generated at Wed Nov 5 13:30:35 2025 by rpki-client