$ rpki-client -vvf rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft File: ggn985rwLDua5QPyJddH5nqjzfM.mft (raw, json) Hash identifier: pj3wTn+fqQayWPxOU6HyEq3koC15udN5r38iULXhu0A= Subject key identifier: 58:B6:7A:C4:74:E9:A9:EB:70:DE:EB:CB:B1:3C:78:A7:BD:1F:0F:59 Authority key identifier: 82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3 Certificate issuer: /CN=A9144788/serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3 Certificate serial: 018C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft Manifest number: 0184 Signing time: Mon 03 Nov 2025 03:39:00 +0000 Manifest this update: Mon 03 Nov 2025 03:39:00 +0000 Manifest next update: Mon 10 Nov 2025 03:39:00 +0000 Files and hashes: 1: ggn985rwLDua5QPyJddH5nqjzfM.crl (hash: PQWNa+/d5jEjMZtdBfzr5enN7i6tUzkVd3pBkMQ3ybw=) 2: 007AE4426C9311EEBEA0EB63C4F9AE02.roa (hash: btNm9lgvWpgU2p+BlBu9ugdzhnB1MwJxPbCJvAvXYk4=) 3: 4E87E6766C9311EEA3DF6E7FC4F9AE02.roa (hash: 0v/eXjEpWzRz29ZAhBrd/kYndqaDkG5i5cTyE+9QFnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 396 (0x18c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144788, serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3 Validity Not Before: Nov 3 03:39:00 2025 GMT Not After : Nov 10 03:39:00 2025 GMT Subject: CN=690823d4-cca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6d:0c:14:cb:8e:46:82:f1:67:78:7e:49:8a: 35:d3:a2:4f:ec:88:d2:71:2c:f3:3d:3f:04:65:e4: d5:60:67:d7:15:e1:66:e1:45:5b:c6:9b:8e:fd:dd: 4f:b4:82:67:38:88:13:52:49:2a:a1:35:cd:c5:fd: c3:53:df:a3:cf:f2:aa:27:44:35:4c:8b:95:23:64: 45:4d:79:80:c4:eb:99:36:c4:22:7f:d9:e6:e3:4d: ef:5e:54:0a:73:5d:e7:77:f6:4c:88:bd:3d:d2:df: ff:d9:70:a1:fb:e9:ae:72:5c:c9:04:ec:b1:cc:cb: 30:57:2f:74:a3:4b:0b:af:2d:a9:ea:09:7c:9e:48: 47:37:85:fe:d9:71:99:2c:32:5f:3e:d8:63:82:b5: 89:eb:f1:45:8f:70:a1:a7:58:81:7d:10:5e:78:c3: 11:74:67:77:31:a3:b6:98:b2:7f:df:93:44:94:f7: 39:5a:1f:b5:2b:98:3a:75:06:fa:f9:4d:11:f5:c3: e7:44:df:15:e0:e1:4a:ed:cd:e4:12:b6:94:b8:00: 1d:b4:44:38:c1:56:3d:94:c5:ab:62:f5:d6:c6:ac: 86:7a:a8:d7:5a:a8:5b:14:94:8d:4d:5b:6f:36:9a: 9a:c8:88:0f:00:67:d5:16:39:3e:7b:64:72:7d:4c: fd:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B6:7A:C4:74:E9:A9:EB:70:DE:EB:CB:B1:3C:78:A7:BD:1F:0F:59 X509v3 Authority Key Identifier: keyid:82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:49:24:0f:1d:c1:49:c6:27:28:40:33:ab:f2:c3:6f:41:08: b8:2d:eb:30:9f:51:36:6c:e4:2b:08:e3:64:21:c0:63:a5:e1: 9a:e8:3a:f1:7c:4e:8e:5d:93:32:da:34:7b:8b:27:00:3b:67: d8:36:3b:8b:5a:ac:1f:8e:f9:24:70:22:09:ae:26:a5:f5:58: a8:72:9a:5d:77:65:ab:fe:c8:00:f4:73:f6:fd:df:51:72:e8: 4f:96:0a:bb:68:8e:98:48:e5:e4:0e:cd:c0:2f:95:8f:82:44: ff:01:60:9c:9d:78:9e:b5:45:28:07:ac:47:b7:84:8a:ba:e3: 76:72:96:dd:5f:8e:73:9a:86:f4:93:3a:4b:b0:e3:89:6e:f6: 52:43:40:19:5f:de:7c:2d:bc:af:b8:27:49:f3:7f:2a:6c:de: 41:29:ab:3e:74:78:b5:98:fd:a2:f1:f0:88:12:d3:bd:a4:6f: 3c:8a:23:1c:79:0a:5e:c4:4f:82:3a:9e:e6:bf:4c:91:c7:88: 33:40:47:9c:cb:31:e4:7e:a0:32:ef:5a:e4:74:8b:0a:1c:33: 03:12:3a:dc:8b:04:06:81:c9:c5:83:1d:fe:c1:81:02:c6:22: af:9d:e5:dd:9a:75:47:2c:31:2b:ba:30:27:29:90:af:e1:ec: c3:e1:af:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ3ODgxMTAvBgNVBAUTKDgyMDlGREYzOUFGMDJDM0I5QUU1MDNGMjI1RDc0N0U2 N0FBM0NERjMwHhcNMjUxMTAzMDMzOTAwWhcNMjUxMTEwMDMzOTAwWjAYMRYwFAYD VQQDEw02OTA4MjNkNC1jY2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3m0MFMuORoLxZ3h+SYo106JP7IjScSzzPT8EZeTVYGfXFeFm4UVbxpuO/d1P tIJnOIgTUkkqoTXNxf3DU9+jz/KqJ0Q1TIuVI2RFTXmAxOuZNsQif9nm403vXlQK c13nd/ZMiL090t//2XCh++muclzJBOyxzMswVy90o0sLry2p6gl8nkhHN4X+2XGZ LDJfPthjgrWJ6/FFj3Chp1iBfRBeeMMRdGd3MaO2mLJ/35NElPc5Wh+1K5g6dQb6 +U0R9cPnRN8V4OFK7c3kEraUuAAdtEQ4wVY9lMWrYvXWxqyGeqjXWqhbFJSNTVtv NpqayIgPAGfVFjk+e2RyfUz9CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFi2esR0 6anrcN7ry7E8eKe9Hw9ZMB8GA1UdIwQYMBaAFIIJ/fOa8Cw7muUD8iXXR+Z6o83z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDc4OC8zN0YwMUIxQTZD OTExMUVFQTU2MDdCMjlDNEY5QUUwMi9nZ245ODVyd0xEdWE1UVB5SmRkSDVucWp6 Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnbjk4NXJ3TER1YTVRUHlKZGRINW5xanpmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDc4OC8zN0YwMUIxQTZDOTExMUVFQTU2MDdCMjlDNEY5QUUwMi9nZ245ODVyd0xE dWE1UVB5SmRkSDVucWp6Zk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3SSQPHcFJxicoQDOr8sNvQQi4Leswn1E2bOQrCONkIcBjpeGa6Drx fE6OXZMy2jR7iycAO2fYNjuLWqwfjvkkcCIJrial9Viocppdd2Wr/sgA9HP2/d9R cuhPlgq7aI6YSOXkDs3AL5WPgkT/AWCcnXietUUoB6xHt4SKuuN2cpbdX45zmob0 kzpLsOOJbvZSQ0AZX958LbyvuCdJ838qbN5BKas+dHi1mP2i8fCIEtO9pG88iiMc eQpexE+COp7mv0yRx4gzQEecyzHkfqAy71rkdIsKHDMDEjrciwQGgcnFgx3+wYEC xiKvneXdmnVHLDErujAnKZCv4ezD4a9L -----END CERTIFICATE-----Generated at Tue Nov 4 20:21:46 2025 by rpki-client