$ rpki-client -vvf rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft File: gBcCvJze9z33Ob-31L0ve4iF4Hc.mft (raw, json) Hash identifier: 3PIxYQGq7fkniZu/sVduQs7RkY93OaQOfzd+ZeiiwmY= Subject key identifier: 8F:E3:2A:57:9F:51:25:60:41:DB:38:F6:D7:71:C6:2B:2F:B6:2F:D9 Authority key identifier: 80:17:02:BC:9C:DE:F7:3D:F7:39:BF:B7:D4:BD:2F:7B:88:85:E0:77 Certificate issuer: /CN=A9124731/serialNumber=801702BC9CDEF73DF739BFB7D4BD2F7B8885E077 Certificate serial: 04A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft Manifest number: 0492 Signing time: Wed 05 Nov 2025 00:08:55 +0000 Manifest this update: Wed 05 Nov 2025 00:08:54 +0000 Manifest next update: Wed 12 Nov 2025 00:08:54 +0000 Files and hashes: 1: gBcCvJze9z33Ob-31L0ve4iF4Hc.crl (hash: HpE2c01mqTRyeTWGF8jke+NyINqCMdZuc/5VtCjH8Gs=) 2: 271F3E9CFFE011EDA35F8946C4F9AE02.roa (hash: fDZa3ruyI4VluhDMo0toVdiGueuR7vLetk94+XTO6ag=) 3: 86BADBF8013511EE81A9F21FC4F9AE02.roa (hash: q2J6Vm5zrUF4ahQrDqnBO1G7RZdDw9Ce2kW75/uOQB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.crl rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:08:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1185 (0x4a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124731, serialNumber=801702BC9CDEF73DF739BFB7D4BD2F7B8885E077 Validity Not Before: Nov 5 00:08:54 2025 GMT Not After : Nov 12 00:08:54 2025 GMT Subject: CN=690a9596-c488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:7e:62:f2:bf:d6:74:4f:14:54:12:89:89:b0: f0:40:1d:30:49:b1:ad:50:27:58:bf:29:5e:2d:12: a2:4c:d2:94:d8:9d:b9:30:15:bd:6f:1c:da:7c:34: ec:e9:db:54:50:75:81:e9:db:bc:77:5e:2f:5c:b8: 93:70:43:89:78:7f:a6:94:9e:f2:a9:4d:fa:1a:fd: 73:7e:2f:99:cc:91:ab:d7:cc:c5:86:8a:45:66:4a: 84:d1:17:20:c1:69:71:11:3d:60:fa:cb:76:b7:ff: 4e:b1:5b:0e:21:d7:a0:2a:52:25:4b:1f:59:70:27: 34:61:a5:b5:86:32:23:42:29:f7:5f:10:ed:19:b4: 96:55:5b:35:8b:a2:9d:f6:c4:52:38:d1:44:07:f6: 92:03:68:ed:4f:f7:ce:ea:28:d0:c2:70:68:21:39: 91:2d:67:6f:30:0a:04:79:18:82:35:f6:c1:46:e5: b1:f2:06:06:dd:b7:61:d4:26:af:dd:17:87:5f:7c: 79:61:09:40:31:bd:96:da:c8:d0:00:51:91:bc:1e: ff:ee:57:28:ed:2b:88:4d:3d:71:a8:f3:2a:41:ab: a3:a4:10:05:41:9c:c7:96:04:66:00:b9:20:55:b3: 94:ae:b8:c4:aa:5d:a9:07:95:ff:97:d0:5c:e7:39: be:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E3:2A:57:9F:51:25:60:41:DB:38:F6:D7:71:C6:2B:2F:B6:2F:D9 X509v3 Authority Key Identifier: keyid:80:17:02:BC:9C:DE:F7:3D:F7:39:BF:B7:D4:BD:2F:7B:88:85:E0:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:0c:c0:71:ea:78:2b:97:53:0a:59:28:92:e4:d1:3d:be:f1: 7e:7d:aa:e9:7f:2f:41:e6:2a:ff:02:4d:db:7f:b9:15:73:62: 87:ce:cf:f1:78:76:53:49:8d:17:b3:05:eb:b5:30:db:82:3b: c6:aa:48:57:87:8c:60:62:ea:38:14:54:1f:43:0a:f6:67:04: 5a:3b:55:53:dd:b1:51:3d:be:84:77:8b:a9:82:3a:77:0d:a2: a7:8f:6c:5f:1f:7a:57:53:85:89:07:ac:4a:7e:e0:a7:44:64: f2:e3:5e:8f:77:a9:ce:71:54:22:3b:67:a9:4e:c1:2a:f3:8e: ba:5e:f9:68:63:d4:53:26:7b:ad:44:0f:03:f3:25:7b:d5:26: 94:7b:e7:9c:7e:8b:57:43:14:2c:3e:71:71:4a:77:97:8c:61: fc:e6:e9:31:1c:57:eb:99:a5:57:df:7d:56:a0:51:4a:f3:04: dc:38:0b:2f:1f:5d:01:ba:47:d6:e7:35:f2:f4:dd:fa:95:79: 29:13:6d:6d:8f:21:77:52:7f:c0:d6:2b:0e:57:d6:00:38:8f: 26:05:d4:93:4e:5d:15:1c:4a:2b:e4:7f:96:86:5d:da:3e:ed: 7f:58:bb:73:a8:30:78:af:59:df:ef:00:ac:a6:40:76:3f:ff: c3:70:e9:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ3MzExMTAvBgNVBAUTKDgwMTcwMkJDOUNERUY3M0RGNzM5QkZCN0Q0QkQyRjdC ODg4NUUwNzcwHhcNMjUxMTA1MDAwODU0WhcNMjUxMTEyMDAwODU0WjAYMRYwFAYD VQQDEw02OTBhOTU5Ni1jNDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9H5i8r/WdE8UVBKJibDwQB0wSbGtUCdYvyleLRKiTNKU2J25MBW9bxzafDTs 6dtUUHWB6du8d14vXLiTcEOJeH+mlJ7yqU36Gv1zfi+ZzJGr18zFhopFZkqE0Rcg wWlxET1g+st2t/9OsVsOIdegKlIlSx9ZcCc0YaW1hjIjQin3XxDtGbSWVVs1i6Kd 9sRSONFEB/aSA2jtT/fO6ijQwnBoITmRLWdvMAoEeRiCNfbBRuWx8gYG3bdh1Cav 3ReHX3x5YQlAMb2W2sjQAFGRvB7/7lco7SuITT1xqPMqQaujpBAFQZzHlgRmALkg VbOUrrjEql2pB5X/l9Bc5zm+OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/jKlef USVgQds49tdxxisvti/ZMB8GA1UdIwQYMBaAFIAXAryc3vc99zm/t9S9L3uIheB3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDczMS9CNkIwMTRCMjVE NkQxMUVDOEZGNjEzMUVDNEY5QUUwMi9nQmNDdkp6ZTl6MzNPYi0zMUwwdmU0aUY0 SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dCY0N2SnplOXozM09iLTMxTDB2ZTRpRjRIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDczMS9CNkIwMTRCMjVENkQxMUVDOEZGNjEzMUVDNEY5QUUwMi9nQmNDdkp6ZTl6 MzNPYi0zMUwwdmU0aUY0SGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiDMBx6ngrl1MKWSiS5NE9vvF+farpfy9B5ir/Ak3bf7kVc2KHzs/x eHZTSY0XswXrtTDbgjvGqkhXh4xgYuo4FFQfQwr2ZwRaO1VT3bFRPb6Ed4upgjp3 DaKnj2xfH3pXU4WJB6xKfuCnRGTy416Pd6nOcVQiO2epTsEq8466XvloY9RTJnut RA8D8yV71SaUe+ecfotXQxQsPnFxSneXjGH85ukxHFfrmaVX331WoFFK8wTcOAsv H10BukfW5zXy9N36lXkpE21tjyF3Un/A1isOV9YAOI8mBdSTTl0VHEor5H+Whl3a Pu1/WLtzqDB4r1nf7wCspkB2P//DcOnJ -----END CERTIFICATE-----Generated at Wed Nov 5 11:56:11 2025 by rpki-client