$ rpki-client -vvf rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft File: Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft (raw, json) Hash identifier: pPqTJMpmxkWQm7/2le5ZQ2f0l7aJ6DjOFFBX0/7Lzas= Subject key identifier: A0:4A:95:5C:2F:1F:D0:BB:FC:BA:36:AE:7F:4C:56:76:52:81:22:34 Authority key identifier: 1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99 Certificate issuer: /CN=A914FC2C/serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99 Certificate serial: 039C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft Manifest number: 0389 Signing time: Wed 05 Nov 2025 00:54:14 +0000 Manifest this update: Wed 05 Nov 2025 00:54:14 +0000 Manifest next update: Wed 12 Nov 2025 00:54:14 +0000 Files and hashes: 1: Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl (hash: ZQFgfbWZLjceyxF2rmsxpJbzgYqLGvcqKLZVyFm+p9k=) 2: F6542C72C53511ECA64F3010C4F9AE02.roa (hash: p0+cMHyUatjT2WLso8zM+Qkj3qxalubJRFVPjXCEC7c=) 3: 6E32028AD48511EF8239D526C4F9AE02.roa (hash: AA5WeVvXVNFXQwzizIn+RSDzp541QHk6IiOY/0z6xeo=) 4: F6D63384C53511ECA64F3010C4F9AE02.roa (hash: OVxLUiCstDCJM1i8OMKxBPVWt9kugvVdd+GEnlwY4Bo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 924 (0x39c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FC2C, serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99 Validity Not Before: Nov 5 00:54:14 2025 GMT Not After : Nov 12 00:54:14 2025 GMT Subject: CN=690aa036-b70c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9b:4c:58:e4:d6:2b:e9:a5:4b:3a:31:ea:9c: a2:74:69:3e:32:a2:14:fb:75:7c:20:2d:93:bf:3b: f5:1b:9d:d3:8b:2c:3c:e3:98:87:92:51:9a:e7:2f: a5:40:a5:19:84:62:c6:a7:98:e7:54:05:f0:33:54: 54:e0:80:d3:7c:4e:3f:48:c8:10:cc:50:9f:99:50: 28:c6:48:6f:34:a1:ba:0e:e3:57:97:8b:36:e2:6a: 44:7c:f2:08:12:88:13:61:13:06:7f:9b:5a:cf:af: 3a:ed:e8:6f:87:d7:f7:97:b1:ae:d0:db:d2:4d:d3: d1:1f:9d:09:38:ca:10:a9:65:4b:52:9a:78:8c:93: 56:3a:8e:3b:b5:04:f1:bf:60:3a:22:b0:73:7d:7d: 60:d1:c2:b8:25:ad:d0:c8:55:63:34:24:48:88:fd: cb:51:4c:a1:90:22:5e:dd:59:0d:e1:94:d6:93:0f: 8a:0b:64:9b:b9:75:db:58:10:23:6a:b4:b6:45:5d: a1:15:25:e9:e0:36:92:e2:2f:eb:6d:8a:11:1b:36: 63:e6:0e:4f:f0:d6:a3:7e:85:01:12:55:c7:a0:8e: 13:ea:66:1e:b3:70:77:77:c6:99:b8:e4:6b:72:d2: 7a:ba:0b:88:98:fa:9a:66:0b:6d:b3:77:47:d7:68: a0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:4A:95:5C:2F:1F:D0:BB:FC:BA:36:AE:7F:4C:56:76:52:81:22:34 X509v3 Authority Key Identifier: keyid:1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:6d:b1:6c:36:18:f1:43:89:10:64:3d:ae:f3:04:2c:39:d7: 68:db:7a:a9:29:48:c0:13:36:93:76:7f:24:43:98:d9:e3:72: e9:40:6d:20:0e:a2:bc:87:cd:12:bb:29:35:63:4c:d9:55:bc: 33:55:58:12:67:67:99:fa:3d:94:37:a0:85:9f:8b:59:ef:c7: 80:62:6f:b0:84:7d:e8:1a:6a:e6:db:6d:c3:ed:5b:a7:08:d1: d5:86:8e:ac:67:0a:84:db:c3:58:c2:e2:6c:d0:d4:c5:f4:10: fc:de:f7:c9:55:68:d4:4a:5b:b8:33:45:aa:bd:b2:43:58:ec: 25:37:67:72:d7:7e:d3:f0:94:ea:ce:23:61:5e:54:88:3d:d9: 63:46:05:b8:4e:86:ad:b5:c5:5b:a9:a5:21:62:0b:e3:c3:a1: 01:09:2b:27:df:4b:b1:62:ad:65:12:a4:93:92:a1:da:e5:63: ab:44:62:23:dd:56:76:a0:2b:ec:53:ec:ba:be:25:35:90:2a: d1:93:28:02:4d:53:9b:75:c5:58:9c:38:d4:70:48:17:9a:30: 04:8d:b7:ac:34:e1:0d:2b:3e:86:a7:76:98:38:b3:f4:49:e6: b1:fb:4b:4b:d1:2d:98:25:8f:f1:43:51:dc:9b:c3:dd:3b:cc: be:9b:2b:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZDMkMxMTAvBgNVBAUTKDFBRDlCRDlEQzc3MzE1QkQxMDJEQUY1QUE5RjkyNTY2 QjJDMkZCOTkwHhcNMjUxMTA1MDA1NDE0WhcNMjUxMTEyMDA1NDE0WjAYMRYwFAYD VQQDEw02OTBhYTAzNi1iNzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5tMWOTWK+mlSzox6pyidGk+MqIU+3V8IC2Tvzv1G53Tiyw845iHklGa5y+l QKUZhGLGp5jnVAXwM1RU4IDTfE4/SMgQzFCfmVAoxkhvNKG6DuNXl4s24mpEfPII EogTYRMGf5taz6867ehvh9f3l7Gu0NvSTdPRH50JOMoQqWVLUpp4jJNWOo47tQTx v2A6IrBzfX1g0cK4Ja3QyFVjNCRIiP3LUUyhkCJe3VkN4ZTWkw+KC2SbuXXbWBAj arS2RV2hFSXp4DaS4i/rbYoRGzZj5g5P8NajfoUBElXHoI4T6mYes3B3d8aZuORr ctJ6uguImPqaZgtts3dH12iglwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKBKlVwv H9C7/Lo2rn9MVnZSgSI0MB8GA1UdIwQYMBaAFBrZvZ3HcxW9EC2vWqn5JWaywvuZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkMyQy9CMDRFOTE5Q0M1 MzMxMUVDOTZERjMxMEZDNEY5QUUwMi9HdG05bmNkekZiMFFMYTlhcWZrbFpyTEMt NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d0bTluY2R6RmIwUUxhOWFxZmtsWnJMQy01ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkMyQy9CMDRFOTE5Q0M1MzMxMUVDOTZERjMxMEZDNEY5QUUwMi9HdG05bmNkekZi MFFMYTlhcWZrbFpyTEMtNWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZbbFsNhjxQ4kQZD2u8wQsOddo23qpKUjAEzaTdn8kQ5jZ43LpQG0g DqK8h80Suyk1Y0zZVbwzVVgSZ2eZ+j2UN6CFn4tZ78eAYm+whH3oGmrm223D7Vun CNHVho6sZwqE28NYwuJs0NTF9BD83vfJVWjUSlu4M0WqvbJDWOwlN2dy137T8JTq ziNhXlSIPdljRgW4ToattcVbqaUhYgvjw6EBCSsn30uxYq1lEqSTkqHa5WOrRGIj 3VZ2oCvsU+y6viU1kCrRkygCTVObdcVYnDjUcEgXmjAEjbesNOENKz6Gp3aYOLP0 Seax+0tL0S2YJY/xQ1Hcm8PdO8y+myvI -----END CERTIFICATE-----Generated at Wed Nov 5 12:24:06 2025 by rpki-client