$ rpki-client -vvf rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft File: GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft (raw, json) Hash identifier: B7G5TwiYs3/iHOkMJ7Ahd5bX1N4cKAQqY4RIQcAlQxc= Subject key identifier: EF:82:F0:DE:48:0C:B6:73:F5:44:D7:3F:BE:F9:EC:8E:65:4B:C0:DE Authority key identifier: 18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93 Certificate issuer: /CN=A9127D58/serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft Manifest number: 2B Signing time: Mon 03 Nov 2025 07:42:10 +0000 Manifest this update: Mon 03 Nov 2025 07:42:09 +0000 Manifest next update: Mon 10 Nov 2025 07:42:09 +0000 Files and hashes: 1: GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl (hash: Bvz4fZ/KGkCaFyYy2w50rDbJZrTZ+UlCct42TenI75k=) 2: 7B86E2347F0711F0B9016941C4F9AE02.roa (hash: wZT27F3LQkOVM0f/2rSyNQsd/VoaPgZq7TdT9xnpo2w=) 3: E09D5D9C7F0711F092740742C4F9AE02.roa (hash: CfbrIA0HCJd5bnnoqk4fH/y8a3ECzbTG+URIorF3jYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:42:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127D58, serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93 Validity Not Before: Nov 3 07:42:09 2025 GMT Not After : Nov 10 07:42:09 2025 GMT Subject: CN=69085cd1-ab7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:41:68:d3:7c:7c:01:d2:89:50:32:d8:9e:c3: 06:2b:f4:4e:18:37:5a:e2:49:aa:fa:31:79:2f:83: bb:68:e1:51:c9:f4:12:82:9b:c9:e1:9d:08:53:25: cc:a6:ae:85:82:f5:6a:89:13:59:fd:e7:30:aa:4a: ff:b7:86:d8:7f:22:ef:5d:44:c7:9b:22:61:65:e6: e1:de:2c:b4:91:ed:74:50:ae:1a:1b:af:9b:41:5a: 7c:30:6b:dd:aa:c7:fe:90:9e:99:80:3c:c2:83:75: 79:4a:80:96:19:76:57:a9:af:4b:a9:0a:91:5c:10: 4e:2d:41:6a:ba:de:3e:80:27:b7:de:30:db:81:16: 9f:25:bb:3a:c1:6c:2c:be:96:8d:61:d6:ba:48:03: 13:dd:be:bf:eb:2a:d9:85:a8:b4:5f:c0:2a:74:0a: 46:08:8b:63:e0:0f:e3:47:6d:88:90:ea:4c:f6:92: d9:08:3e:73:8f:d3:8e:00:11:c3:81:dc:33:bb:bb: 17:99:bd:ba:3e:41:f2:ea:ce:f9:cf:99:4c:84:54: 5a:ff:87:25:bf:b1:14:0f:5c:71:08:00:5e:84:07: 22:cc:d9:bf:28:6f:b5:24:84:2e:e2:b8:32:3b:82: 06:6f:fe:16:6e:1c:41:80:05:5a:8c:c6:87:02:14: 45:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:82:F0:DE:48:0C:B6:73:F5:44:D7:3F:BE:F9:EC:8E:65:4B:C0:DE X509v3 Authority Key Identifier: keyid:18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:ed:af:2b:ef:66:a4:73:14:f1:d3:b4:81:a5:a2:ec:e0:ee: 62:8b:06:f3:36:59:b8:50:94:c1:1e:11:b7:1d:8c:41:35:c9: a2:11:82:d7:fa:42:e0:7f:4c:4c:9b:e6:64:7a:91:fa:85:0d: ef:0e:de:1e:ee:21:14:70:ea:8f:56:73:d9:26:dc:34:d9:01: 6a:50:31:44:b9:e1:8e:c2:10:d6:4d:be:4e:d5:37:ad:ef:ce: 7f:bf:4c:1d:d3:cb:5a:d1:23:e7:10:9c:c2:13:e9:a0:6a:90: cf:42:4f:e7:15:d4:49:fa:ea:64:f8:a9:31:d4:ab:3b:80:68: 32:f1:4e:28:de:14:07:f4:3e:22:7b:20:05:a3:16:52:3e:81: f5:c0:a0:af:a0:0e:a6:59:37:92:17:4c:b2:e7:82:33:1e:f3: eb:1e:23:43:78:7d:91:60:80:c0:c7:ae:76:11:32:34:a1:7a: 87:61:97:28:6c:4a:59:04:c2:79:d5:d4:99:8d:42:6a:3f:82: 2a:06:8a:01:4a:c3:e5:cb:b1:d1:0c:16:da:2f:72:66:61:c2: a2:68:dc:84:b6:6f:b5:21:d1:fe:b2:e4:37:e8:95:a3:d0:20: 7c:26:f0:ca:6f:8b:29:3b:f0:e0:fd:d0:63:9d:bc:db:97:2d: 4c:09:30:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0Q1ODExMC8GA1UEBRMoMTgzRkE5MERDMzU1NkMxRDE2NTY4RUJFQkIxOEUyRkM1 QTc4MUQ5MzAeFw0yNTExMDMwNzQyMDlaFw0yNTExMTAwNzQyMDlaMBgxFjAUBgNV BAMTDTY5MDg1Y2QxLWFiN2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZQWjTfHwB0olQMtiewwYr9E4YN1riSar6MXkvg7to4VHJ9BKCm8nhnQhTJcym roWC9WqJE1n95zCqSv+3hth/Iu9dRMebImFl5uHeLLSR7XRQrhobr5tBWnwwa92q x/6QnpmAPMKDdXlKgJYZdlepr0upCpFcEE4tQWq63j6AJ7feMNuBFp8luzrBbCy+ lo1h1rpIAxPdvr/rKtmFqLRfwCp0CkYIi2PgD+NHbYiQ6kz2ktkIPnOP044AEcOB 3DO7uxeZvbo+QfLqzvnPmUyEVFr/hyW/sRQPXHEIAF6EByLM2b8ob7UkhC7iuDI7 ggZv/hZuHEGABVqMxocCFEXzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU74Lw3kgM tnP1RNc/vvnsjmVLwN4wHwYDVR0jBBgwFoAUGD+pDcNVbB0WVo6+uxji/Fp4HZMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3RDU4LzU5RDA2QTEyN0Yw NjExRjA5NTIwNTkzQUM0RjlBRTAyL0dELXBEY05WYkIwV1ZvNi11eGppX0ZwNEha TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0QtcERjTlZiQjBXVm82LXV4amlfRnA0SFpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 RDU4LzU5RDA2QTEyN0YwNjExRjA5NTIwNTkzQUM0RjlBRTAyL0dELXBEY05WYkIw V1ZvNi11eGppX0ZwNEhaTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABTtryvvZqRzFPHTtIGlouzg7mKLBvM2WbhQlMEeEbcdjEE1yaIRgtf6 QuB/TEyb5mR6kfqFDe8O3h7uIRRw6o9Wc9km3DTZAWpQMUS54Y7CENZNvk7VN63v zn+/TB3Ty1rRI+cQnMIT6aBqkM9CT+cV1En66mT4qTHUqzuAaDLxTijeFAf0PiJ7 IAWjFlI+gfXAoK+gDqZZN5IXTLLngjMe8+seI0N4fZFggMDHrnYRMjSheodhlyhs SlkEwnnV1JmNQmo/gioGigFKw+XLsdEMFtovcmZhwqJo3IS2b7Uh0f6y5DfolaPQ IHwm8Mpviyk78OD90GOdvNuXLUwJMJk= -----END CERTIFICATE-----Generated at Wed Nov 5 02:15:14 2025 by rpki-client