$ rpki-client -vvf rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft File: gAcXZemLOWEliNN4VyFDLDJgf-4.mft (raw, json) Hash identifier: O92ZoFCkOZq7wNeqyIqiofXBU4adG1SMR17d4wQoPls= Subject key identifier: 7F:4D:F9:CB:55:A0:65:37:2E:91:8D:2C:84:3F:37:17:3E:5A:89:F3 Authority key identifier: 80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE Certificate issuer: /CN=A911F584/serialNumber=80071765E98B39612588D3785721432C32607FEE Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft Manifest number: 15 Signing time: Wed 05 Nov 2025 08:06:05 +0000 Manifest this update: Wed 05 Nov 2025 08:06:04 +0000 Manifest next update: Wed 12 Nov 2025 08:06:04 +0000 Files and hashes: 1: gAcXZemLOWEliNN4VyFDLDJgf-4.crl (hash: NHxYOTSKRdwzjUU7U17sYr3IKoq+7iSyODthqFUzYbE=) 2: D7E9A8C49DAA11F0A24E4963C4F9AE02.roa (hash: Ty3keWksVpROp5e1j4cINLe1/6qFn8g6RY9zGQ2Ec2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:06:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F584, serialNumber=80071765E98B39612588D3785721432C32607FEE Validity Not Before: Nov 5 08:06:04 2025 GMT Not After : Nov 12 08:06:04 2025 GMT Subject: CN=690b056d-d8fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b8:d0:ee:df:3a:f2:e5:a7:85:d2:0f:ef:fd: dc:ca:23:37:02:aa:77:a1:f7:33:a3:0a:93:ba:10: 09:4d:96:d5:06:a2:da:d2:bb:c3:56:63:46:ea:db: d2:fc:83:ee:b1:ac:57:a9:d8:28:c7:3d:71:c4:55: 1f:06:94:5b:9b:f9:2e:a6:43:34:4c:bb:67:54:91: 98:f2:49:86:a2:b6:e1:56:88:22:18:8c:66:c9:3e: 5d:30:98:af:d2:e7:b4:e2:e5:08:0a:89:7e:88:c7: 99:c8:84:d4:ab:1b:d3:70:1a:ef:a2:c8:15:d8:55: 28:1c:74:ff:e0:9d:b7:47:84:bb:e8:99:9e:56:06: 2e:58:de:d5:59:0a:6b:a7:fb:52:4a:2a:21:07:2d: d6:d2:7f:d8:55:ea:51:72:ec:da:69:93:c7:91:9a: a1:10:a2:a2:45:41:bb:e5:48:3d:20:09:1e:ff:f6: ee:ea:de:7c:fb:d3:a3:b7:d7:ad:a9:33:93:0d:3a: fb:ce:25:4e:b7:77:ad:d2:2f:47:ce:fc:89:a8:13: 50:30:71:96:ca:b1:c9:5f:07:25:62:d2:4a:e2:9e: c1:f4:ad:07:bd:30:79:84:99:79:04:59:5a:a6:c8: f0:e9:ff:bf:84:30:c9:35:29:72:61:9c:be:47:3f: 57:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:4D:F9:CB:55:A0:65:37:2E:91:8D:2C:84:3F:37:17:3E:5A:89:F3 X509v3 Authority Key Identifier: keyid:80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:e8:90:e5:65:54:4e:f4:41:5d:bb:ad:0c:01:de:7b:5d:7a: f5:a8:01:77:56:98:88:e6:e3:93:b0:a8:c5:d0:3e:24:5f:05: df:02:7e:d6:36:a8:94:be:8f:88:e7:53:83:e9:c0:77:1b:66: 09:4d:e5:91:a3:84:b4:24:a3:b9:8d:a1:5f:b0:c2:e2:95:3f: fd:36:69:19:fe:42:55:a8:67:1c:6f:ee:7a:b7:a1:f3:8b:af: 60:f6:12:97:bb:ed:f3:d4:d8:15:37:30:7a:d5:f4:3c:ab:05: 23:14:94:f9:91:24:7e:7b:fb:d4:68:3a:d1:f7:62:cb:bd:3f: bf:e1:c6:ff:28:a6:68:fd:c7:9a:e2:af:e5:ce:bd:e4:94:70: 9e:d2:e2:40:13:c1:dd:69:c7:a7:72:a2:64:47:b5:2f:0d:e8: 5f:d1:a7:f1:69:02:2d:75:38:67:41:18:eb:8a:7f:f0:4a:f8: 85:f6:72:a2:86:2e:df:d2:b8:98:ce:d3:c9:ea:5b:96:9b:10: 8b:92:3d:50:0c:26:e6:9a:f7:15:36:33:37:a0:ee:b7:af:c4: 2e:5d:b3:10:cc:d7:70:c9:96:0a:17:84:90:78:5b:c6:8e:2f: c2:95:39:5c:2f:76:81:e2:5b:20:7c:18:48:db:9d:32:09:b3: 61:cd:3c:88 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RjU4NDExMC8GA1UEBRMoODAwNzE3NjVFOThCMzk2MTI1ODhEMzc4NTcyMTQzMkMz MjYwN0ZFRTAeFw0yNTExMDUwODA2MDRaFw0yNTExMTIwODA2MDRaMBgxFjAUBgNV BAMTDTY5MGIwNTZkLWQ4ZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTuNDu3zry5aeF0g/v/dzKIzcCqneh9zOjCpO6EAlNltUGotrSu8NWY0bq29L8 g+6xrFep2CjHPXHEVR8GlFub+S6mQzRMu2dUkZjySYaituFWiCIYjGbJPl0wmK/S 57Ti5QgKiX6Ix5nIhNSrG9NwGu+iyBXYVSgcdP/gnbdHhLvomZ5WBi5Y3tVZCmun +1JKKiEHLdbSf9hV6lFy7Nppk8eRmqEQoqJFQbvlSD0gCR7/9u7q3nz706O3162p M5MNOvvOJU63d63SL0fO/ImoE1AwcZbKsclfByVi0krinsH0rQe9MHmEmXkEWVqm yPDp/7+EMMk1KXJhnL5HP1dvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUf035y1Wg ZTcukY0shD83Fz5aifMwHwYDVR0jBBgwFoAUgAcXZemLOWEliNN4VyFDLDJgf+4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNTg0L0ZGRjgwMjE4OURB ODExRjBBRURBM0YzQUM0RjlBRTAyL2dBY1haZW1MT1dFbGlOTjRWeUZETERKZ2Yt NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ0FjWFplbUxPV0VsaU5ONFZ5RkRMREpnZi00LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG NTg0L0ZGRjgwMjE4OURBODExRjBBRURBM0YzQUM0RjlBRTAyL2dBY1haZW1MT1dF bGlOTjRWeUZETERKZ2YtNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJXokOVlVE70QV27rQwB3ntdevWoAXdWmIjm45OwqMXQPiRfBd8CftY2 qJS+j4jnU4PpwHcbZglN5ZGjhLQko7mNoV+wwuKVP/02aRn+QlWoZxxv7nq3ofOL r2D2Epe77fPU2BU3MHrV9DyrBSMUlPmRJH57+9RoOtH3Ysu9P7/hxv8opmj9x5ri r+XOveSUcJ7S4kATwd1px6dyomRHtS8N6F/Rp/FpAi11OGdBGOuKf/BK+IX2cqKG Lt/SuJjO08nqW5abEIuSPVAMJuaa9xU2Mzeg7revxC5dsxDM13DJlgoXhJB4W8aO L8KVOVwvdoHiWyB8GEjbnTIJs2HNPIg= -----END CERTIFICATE-----Generated at Wed Nov 5 12:30:07 2025 by rpki-client