$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft File: GHAMs9ZQejMEuusnDe7RMBzj2QI.mft (raw, json) Hash identifier: oIjaS8s93vSasW9t5cuLhbGhP+h7HSdTQN29H9IpsC0= Subject key identifier: C9:26:53:25:50:0F:2B:50:32:F0:93:BF:DD:9D:55:43:94:2E:1D:CA Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 Certificate issuer: /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Certificate serial: 18AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft Manifest number: 1892 Signing time: Tue 04 Nov 2025 16:34:57 +0000 Manifest this update: Tue 04 Nov 2025 16:34:56 +0000 Manifest next update: Tue 11 Nov 2025 16:34:56 +0000 Files and hashes: 1: GHAMs9ZQejMEuusnDe7RMBzj2QI.crl (hash: p1rhKU2qAYwMZ+OvSOpJffxPV0ml7VnHhySablvyEZw=) 2: C2BE71E8AA9A11E7B4776E52C4F9AE02.roa (hash: QilVeNcrZMzdebQdu5lhKwqK5efz8FDEbIZ0Q0oTuqk=) 3: E8780C5EAC8011E79D9EAC60C4F9AE02.roa (hash: 2gFzBsEhEhcTbqin7FXKA5BqnV1mEmGbBayottd+FiM=) 4: BB9C86EA0B0F11E89DF24170C4F9AE02.roa (hash: J1isGAaAC1N3wCHlklcmvvBBqBFgE12sIwzwgEuPOdA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:34:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6319 (0x18af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBCF, serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Validity Not Before: Nov 4 16:34:56 2025 GMT Not After : Nov 11 16:34:56 2025 GMT Subject: CN=690a2b31-7ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:08:f6:3d:ad:46:c2:26:7a:5f:1d:54:21:6b: 32:05:ba:1b:9c:9a:45:16:7f:03:e5:55:a3:58:0b: c0:e2:56:9e:cd:8b:3d:56:f1:cb:2f:29:93:b3:80: 0f:d6:17:ed:de:1c:33:e8:4a:64:b5:b4:10:dc:bd: 0f:c2:13:54:58:76:1c:30:74:7d:76:6d:bf:b1:20: 8b:76:08:d9:5a:83:ed:ef:68:52:36:ab:a9:a8:69: 60:71:c1:82:20:b9:ee:80:e0:e4:54:1a:d7:05:e0: 23:e4:39:59:ae:7f:05:ac:3b:a4:22:df:87:7c:59: 29:70:15:cc:01:b6:60:77:c5:16:eb:84:8b:26:de: 62:0b:8c:a2:f5:ee:ca:ce:a9:a9:1e:9e:07:df:5e: c2:f2:8b:32:59:a0:5a:f7:f2:59:8f:29:e0:d1:69: 12:b3:ee:07:92:b7:1f:a5:72:3b:ee:d8:e0:c7:cf: ff:4a:ef:08:26:5f:90:3d:70:13:48:98:50:3d:49: e5:e8:59:46:78:cf:ce:5a:55:88:9e:72:4d:4d:25: 03:35:4e:03:07:81:da:c4:38:ce:52:3e:62:c6:bc: c6:9f:7c:6b:15:9e:8a:58:a3:17:7c:ec:46:e7:c5: d2:4c:fd:aa:6e:62:af:20:22:19:de:8b:e9:4e:c9: 17:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:26:53:25:50:0F:2B:50:32:F0:93:BF:DD:9D:55:43:94:2E:1D:CA X509v3 Authority Key Identifier: keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:a5:fa:10:09:b2:b4:38:2d:f1:4f:ba:8f:23:89:0c:8f:71: 2a:70:f1:82:14:71:f5:97:3e:4a:0e:1c:17:4a:a4:64:14:12: eb:3b:5d:ae:f7:7c:08:81:fa:22:67:28:82:d5:2e:4b:87:cc: 61:2f:4d:61:ea:45:56:fc:ef:19:83:b5:b3:37:7e:98:10:b3: ee:78:44:5e:90:17:72:fe:36:42:f2:13:45:ca:d8:4c:95:68: fa:59:f5:54:03:ea:8e:64:69:2c:a4:54:4d:ad:cd:65:36:f7: a2:b6:09:90:6f:11:7d:64:77:78:a2:e7:b3:26:ac:71:d6:47: 6e:11:bd:45:36:6f:e1:50:be:71:b0:a4:32:c0:4a:e2:ca:40: 13:04:24:43:a6:67:84:92:e0:93:1d:43:cf:03:a0:40:0a:22: d0:96:2c:52:29:22:31:2d:e0:32:8c:b8:d2:bf:94:11:ee:bc: 1c:a6:be:29:6a:fe:b5:cd:1d:4e:1a:c0:86:72:a8:a7:bb:24: 70:28:57:dd:b7:9e:5f:d9:8c:5e:b5:01:af:84:b9:c7:9b:2b: 6d:02:33:07:60:08:65:14:22:ef:92:37:a9:9a:de:ce:13:c5: 1a:e3:77:ef:a0:b5:72:e1:1c:36:ef:7e:02:6e:fd:36:42:15: a9:08:24:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCQ0YxMTAvBgNVBAUTKDE4NzAwQ0IzRDY1MDdBMzMwNEJBRUIyNzBERUVEMTMw MUNFM0Q5MDIwHhcNMjUxMTA0MTYzNDU2WhcNMjUxMTExMTYzNDU2WjAYMRYwFAYD VQQDEw02OTBhMmIzMS03Y2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Qj2Pa1GwiZ6Xx1UIWsyBbobnJpFFn8D5VWjWAvA4laezYs9VvHLLymTs4AP 1hft3hwz6EpktbQQ3L0PwhNUWHYcMHR9dm2/sSCLdgjZWoPt72hSNqupqGlgccGC ILnugODkVBrXBeAj5DlZrn8FrDukIt+HfFkpcBXMAbZgd8UW64SLJt5iC4yi9e7K zqmpHp4H317C8osyWaBa9/JZjyng0WkSs+4HkrcfpXI77tjgx8//Su8IJl+QPXAT SJhQPUnl6FlGeM/OWlWInnJNTSUDNU4DB4HaxDjOUj5ixrzGn3xrFZ6KWKMXfOxG 58XSTP2qbmKvICIZ3ovpTskXWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkmUyVQ DytQMvCTv92dVUOULh3KMB8GA1UdIwQYMBaAFBhwDLPWUHozBLrrJw3u0TAc49kC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJDRi80QUI1NzZCRUFB NUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVqTUV1dXNuRGU3Uk1Cemoy UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIQU1zOVpRZWpNRXV1c25EZTdSTUJ6ajJRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkJDRi80QUI1NzZCRUFBNUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVq TUV1dXNuRGU3Uk1CemoyUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnpfoQCbK0OC3xT7qPI4kMj3EqcPGCFHH1lz5KDhwXSqRkFBLrO12u 93wIgfoiZyiC1S5Lh8xhL01h6kVW/O8Zg7WzN36YELPueERekBdy/jZC8hNFythM lWj6WfVUA+qOZGkspFRNrc1lNveitgmQbxF9ZHd4ouezJqxx1kduEb1FNm/hUL5x sKQywEriykATBCRDpmeEkuCTHUPPA6BACiLQlixSKSIxLeAyjLjSv5QR7rwcpr4p av61zR1OGsCGcqinuyRwKFfdt55f2YxetQGvhLnHmyttAjMHYAhlFCLvkjepmt7O E8Ua43fvoLVy4Rw2734Cbv02QhWpCCTe -----END CERTIFICATE-----Generated at Wed Nov 5 00:22:11 2025 by rpki-client