$ rpki-client -vvf rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft File: gYE9avls8KB0gHHNux4nD2tcYRM.mft (raw, json) Hash identifier: 1/STcXDtT0QxiL5eTgtAU6pZevhdxDfcphdPP0nJeMk= Subject key identifier: 68:76:DD:79:02:6F:D2:25:14:CD:7C:B5:97:9A:35:26:4F:E8:81:55 Authority key identifier: 81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 Certificate issuer: /CN=A9128DE9/serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Certificate serial: 0C38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft Manifest number: 0C25 Signing time: Tue 04 Nov 2025 18:49:43 +0000 Manifest this update: Tue 04 Nov 2025 18:49:42 +0000 Manifest next update: Tue 11 Nov 2025 18:49:42 +0000 Files and hashes: 1: gYE9avls8KB0gHHNux4nD2tcYRM.crl (hash: ADG3FgVdR2K2coVY/LgPMEfvsVYq1MQLkAmg9g7BBYA=) 2: 1D77B4081BD911EAB49CC840C4F9AE02.roa (hash: vbaep3wET3+ifW71kGbMN+H4/YmdHdtnb1FCSwufM8U=) 3: B3148DDA1BD711EAB801703AC4F9AE02.roa (hash: qXQzrLjHLMEGSmHbPLY3DTrLOE6y6AG6P8s1JsWZiBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:49:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3128 (0xc38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128DE9, serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Validity Not Before: Nov 4 18:49:42 2025 GMT Not After : Nov 11 18:49:42 2025 GMT Subject: CN=690a4ac6-7e87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c2:4c:85:e5:35:ce:3c:2c:48:c3:fe:a8:45: fa:5e:4c:54:8d:97:69:f2:1c:18:e5:6f:2c:61:a4: cf:0b:4e:88:a3:38:c0:47:5e:ff:c9:46:76:3b:99: 80:77:b1:bd:39:8e:65:e9:79:34:87:71:3e:e3:0d: 12:b2:6e:f4:7c:cd:4f:4a:4d:92:d0:1f:f4:14:65: 00:4c:b5:bd:68:7d:53:3d:91:f9:c7:41:2f:eb:80: f2:68:a6:21:04:7f:2f:cf:aa:7c:b9:83:08:2c:54: 80:c4:2b:9d:7c:92:43:25:e7:31:74:1e:b8:1f:fe: b4:3e:dd:8b:ac:63:5e:47:dc:4b:d1:66:ed:9d:9e: b8:e5:78:95:30:fb:33:ce:fc:be:c8:3e:9b:19:a5: b7:0f:f6:f3:99:4f:ee:8e:0f:ca:f8:ea:e4:bb:74: 8a:e7:d7:8b:c6:55:69:51:f2:f2:e0:f2:6c:7f:6f: d4:fe:4f:0d:fc:13:52:9d:05:1d:d4:87:8c:df:4a: 97:08:3b:4a:78:de:c7:73:21:4d:9a:de:2a:51:14: 74:d5:00:7b:c9:f7:ec:05:29:18:b0:b6:ed:db:f3: 86:53:b7:c8:c4:79:a3:b2:8d:90:eb:6a:e4:23:8d: 25:22:85:cf:22:77:73:da:ff:58:63:ef:d2:de:15: 7e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:76:DD:79:02:6F:D2:25:14:CD:7C:B5:97:9A:35:26:4F:E8:81:55 X509v3 Authority Key Identifier: keyid:81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:fd:f4:85:dc:6d:a3:71:9d:dc:07:c9:97:29:52:ed:3c:72: 74:63:db:96:89:72:7e:d4:dd:e2:d1:bf:3c:cf:73:30:26:12: 2e:56:04:96:39:56:e0:8f:54:f9:73:da:32:87:7b:33:cb:92: eb:f3:a6:ca:8a:54:8c:d9:9d:c1:94:b9:32:27:25:cf:2b:5f: 89:ad:20:41:b2:3d:1c:5b:59:0c:e2:94:16:55:50:6a:0b:ef: f0:0d:e5:76:ba:60:6e:e5:dc:8f:09:7f:8f:a2:23:a4:e6:55: 32:e0:f8:ec:18:45:24:df:80:90:5f:a3:f8:72:b9:92:5d:f9: e9:89:6d:78:13:22:37:56:4e:23:75:19:67:1b:15:be:af:02: c8:3f:08:5c:b1:bc:e8:ee:ee:55:ce:7a:cb:8a:eb:10:f5:f6: 3b:e5:d5:9e:aa:4a:e5:10:3c:73:22:a4:94:89:fb:bf:d2:5c: c6:f0:0c:19:28:22:97:74:68:c7:73:9f:aa:1d:be:78:e6:5c: 8b:0e:ed:1d:9b:e0:fb:51:7b:70:a8:f3:e5:0f:2b:a9:a4:a3: 9c:e3:36:f2:12:bc:6e:59:e7:0c:c4:fb:8f:e4:1f:7d:d0:78: 91:1f:6f:c1:92:29:12:df:30:8a:f5:e3:d2:29:84:d5:50:8d: 30:78:2b:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhERTkxMTAvBgNVBAUTKDgxODEzRDZBRjk2Q0YwQTA3NDgwNzFDREJCMUUyNzBG NkI1QzYxMTMwHhcNMjUxMTA0MTg0OTQyWhcNMjUxMTExMTg0OTQyWjAYMRYwFAYD VQQDEw02OTBhNGFjNi03ZTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5sJMheU1zjwsSMP+qEX6XkxUjZdp8hwY5W8sYaTPC06IozjAR17/yUZ2O5mA d7G9OY5l6Xk0h3E+4w0Ssm70fM1PSk2S0B/0FGUATLW9aH1TPZH5x0Ev64DyaKYh BH8vz6p8uYMILFSAxCudfJJDJecxdB64H/60Pt2LrGNeR9xL0WbtnZ645XiVMPsz zvy+yD6bGaW3D/bzmU/ujg/K+Orku3SK59eLxlVpUfLy4PJsf2/U/k8N/BNSnQUd 1IeM30qXCDtKeN7HcyFNmt4qURR01QB7yffsBSkYsLbt2/OGU7fIxHmjso2Q62rk I40lIoXPIndz2v9YY+/S3hV+vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGh23XkC b9IlFM18tZeaNSZP6IFVMB8GA1UdIwQYMBaAFIGBPWr5bPCgdIBxzbseJw9rXGET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOERFOS9ENjlCNDVFODFC RDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhLQjBnSEhOdXg0bkQydGNZ Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dZRTlhdmxzOEtCMGdISE51eDRuRDJ0Y1lSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OERFOS9ENjlCNDVFODFCRDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhL QjBnSEhOdXg0bkQydGNZUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCn/fSF3G2jcZ3cB8mXKVLtPHJ0Y9uWiXJ+1N3i0b88z3MwJhIuVgSW OVbgj1T5c9oyh3szy5Lr86bKilSM2Z3BlLkyJyXPK1+JrSBBsj0cW1kM4pQWVVBq C+/wDeV2umBu5dyPCX+PoiOk5lUy4PjsGEUk34CQX6P4crmSXfnpiW14EyI3Vk4j dRlnGxW+rwLIPwhcsbzo7u5VznrLiusQ9fY75dWeqkrlEDxzIqSUifu/0lzG8AwZ KCKXdGjHc5+qHb545lyLDu0dm+D7UXtwqPPlDyuppKOc4zbyErxuWecMxPuP5B99 0HiRH2/BkikS3zCK9ePSKYTVUI0weCth -----END CERTIFICATE-----Generated at Wed Nov 5 15:17:27 2025 by rpki-client