$ rpki-client -vvf rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft File: GhajkdMlFwt7hcS_x4VaF300e24.mft (raw, json) Hash identifier: eQVr9UdNkkvr4TmYQ+EqCVb4POVDqhXVDpbywp9DZ9s= Subject key identifier: DB:7A:2D:9E:8A:18:1D:21:5D:35:5D:9A:FD:69:81:B5:EA:F8:49:2B Authority key identifier: 1A:16:A3:91:D3:25:17:0B:7B:85:C4:BF:C7:85:5A:17:7D:34:7B:6E Certificate issuer: /CN=A913B510/serialNumber=1A16A391D325170B7B85C4BFC7855A177D347B6E Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft Manifest number: 3E Signing time: Mon 03 Nov 2025 07:28:06 +0000 Manifest this update: Mon 03 Nov 2025 07:28:06 +0000 Manifest next update: Mon 10 Nov 2025 07:28:06 +0000 Files and hashes: 1: GhajkdMlFwt7hcS_x4VaF300e24.crl (hash: QFk3wwHHr2b4giELqtk7TsuU8RfZtjA8du0xSeQWAh4=) 2: 9CAF31CA5D8111F0A04DD550C4F9AE02.roa (hash: 92wZUBl6JW7t9Lz6VY8NqyCC30dn+5kR/99dMirbOek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.crl rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:28:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B510, serialNumber=1A16A391D325170B7B85C4BFC7855A177D347B6E Validity Not Before: Nov 3 07:28:06 2025 GMT Not After : Nov 10 07:28:06 2025 GMT Subject: CN=69085986-f8e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c3:8b:4a:c9:22:ed:e5:8c:5a:f4:19:94:fd: 94:1a:ab:f6:92:dc:5f:5b:9b:e1:b3:50:4d:31:0a: b9:b0:16:53:99:46:3e:ab:f4:8f:79:02:9c:37:c9: 7b:0b:4d:6d:3e:2c:ec:28:b3:d3:26:18:23:bd:0b: 77:05:3a:42:83:b0:a3:33:cf:fc:64:c7:f8:a2:e1: f0:04:7a:27:ee:d7:e8:7e:54:21:36:dc:fd:ca:83: d2:62:d0:c9:ba:80:c9:18:44:bf:d1:9b:8c:7b:83: 76:59:30:3e:c1:4e:4b:87:8f:48:96:33:3e:63:9c: 04:7f:fd:2f:e4:c7:fb:f5:8e:94:30:a4:c1:4e:09: 3c:54:0f:4e:10:7b:4e:e4:18:24:2a:8d:74:55:18: ed:a7:9b:eb:d8:f8:cf:ea:cb:a8:fd:6b:7a:74:3d: cf:3b:d4:49:81:65:d8:d0:e6:94:3c:af:f7:3a:4e: c9:ed:43:a4:28:55:95:1d:ed:24:e9:5c:22:03:e4: 9f:21:4e:b6:37:56:a9:cf:4a:56:bb:27:77:e1:68: a0:09:de:f5:16:1b:f5:7d:fd:bc:c2:bb:cd:6b:41: 5b:f0:55:ff:46:72:1f:ca:9a:94:12:cd:0c:7d:09: d6:1d:fa:57:c0:d1:0f:17:5c:7e:a8:25:e7:fc:d1: eb:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:7A:2D:9E:8A:18:1D:21:5D:35:5D:9A:FD:69:81:B5:EA:F8:49:2B X509v3 Authority Key Identifier: keyid:1A:16:A3:91:D3:25:17:0B:7B:85:C4:BF:C7:85:5A:17:7D:34:7B:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:61:47:2d:05:44:4c:09:ff:fb:67:97:97:f8:3e:af:d9:bb: ac:7d:23:c4:42:67:07:28:48:77:97:bd:25:d8:6c:c6:4d:a8: 4c:18:e2:9f:a0:b6:ae:fe:f6:4c:78:40:5c:39:83:05:9c:a8: 78:ad:db:14:63:5d:79:e5:fb:8f:8d:9b:c8:76:bd:bc:c5:13: af:f3:a2:25:41:7b:f0:8b:42:5f:ac:9f:fb:87:d1:6d:b1:18: 80:97:2c:01:25:8b:d9:15:dc:72:69:a5:16:f1:78:f0:08:63: f8:f0:27:10:44:da:f5:82:d3:e4:fc:28:e2:f2:31:1a:8d:43: 40:36:c7:0b:59:77:23:42:6b:5f:5d:cb:8e:65:9c:ff:71:63: 46:0f:9c:08:58:13:14:6e:36:d1:ea:68:0b:57:aa:ad:4a:28: 34:18:13:4c:02:75:5e:96:e9:41:33:32:2f:7e:8f:87:f7:fc: 3e:94:01:ea:5f:52:1c:9a:61:ec:b4:f6:3c:18:77:ad:b9:cf: da:19:02:31:e9:e8:33:d6:23:66:18:ba:4a:30:fb:c5:e6:66: 6b:0c:06:6d:81:af:7b:ec:cc:6e:f2:b9:39:7d:9f:b3:8a:31: 8a:94:65:40:fa:18:2f:e4:00:13:5e:22:3a:72:6f:66:bf:87: b7:e1:ed:a8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QjUxMDExMC8GA1UEBRMoMUExNkEzOTFEMzI1MTcwQjdCODVDNEJGQzc4NTVBMTc3 RDM0N0I2RTAeFw0yNTExMDMwNzI4MDZaFw0yNTExMTAwNzI4MDZaMBgxFjAUBgNV BAMTDTY5MDg1OTg2LWY4ZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/w4tKySLt5Yxa9BmU/ZQaq/aS3F9bm+GzUE0xCrmwFlOZRj6r9I95Apw3yXsL TW0+LOwos9MmGCO9C3cFOkKDsKMzz/xkx/ii4fAEeifu1+h+VCE23P3Kg9Ji0Mm6 gMkYRL/Rm4x7g3ZZMD7BTkuHj0iWMz5jnAR//S/kx/v1jpQwpMFOCTxUD04Qe07k GCQqjXRVGO2nm+vY+M/qy6j9a3p0Pc871EmBZdjQ5pQ8r/c6TsntQ6QoVZUd7STp XCID5J8hTrY3VqnPSla7J3fhaKAJ3vUWG/V9/bzCu81rQVvwVf9Gch/KmpQSzQx9 CdYd+lfA0Q8XXH6oJef80esLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU23otnooY HSFdNV2a/WmBter4SSswHwYDVR0jBBgwFoAUGhajkdMlFwt7hcS/x4VaF300e24w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCNTEwLzE4ODJEMEU2NUQ4 MTExRjA5MTIyNkUzMUM0RjlBRTAyL0doYWprZE1sRnd0N2hjU194NFZhRjMwMGUy NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR2hhamtkTWxGd3Q3aGNTX3g0VmFGMzAwZTI0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNC NTEwLzE4ODJEMEU2NUQ4MTExRjA5MTIyNkUzMUM0RjlBRTAyL0doYWprZE1sRnd0 N2hjU194NFZhRjMwMGUyNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALRhRy0FREwJ//tnl5f4Pq/Zu6x9I8RCZwcoSHeXvSXYbMZNqEwY4p+g tq7+9kx4QFw5gwWcqHit2xRjXXnl+4+Nm8h2vbzFE6/zoiVBe/CLQl+sn/uH0W2x GICXLAEli9kV3HJppRbxePAIY/jwJxBE2vWC0+T8KOLyMRqNQ0A2xwtZdyNCa19d y45lnP9xY0YPnAhYExRuNtHqaAtXqq1KKDQYE0wCdV6W6UEzMi9+j4f3/D6UAepf UhyaYey09jwYd625z9oZAjHp6DPWI2YYukow+8XmZmsMBm2Br3vszG7yuTl9n7OK MYqUZUD6GC/kABNeIjpyb2a/h7fh7ag= -----END CERTIFICATE-----Generated at Wed Nov 5 05:14:31 2025 by rpki-client