$ rpki-client -vvf rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft File: gqha_fMpJW9H4LcAstFHVqEEwRI.mft (raw, json) Hash identifier: xyQs5PRWmIX+X7YfZQsF3i0zWpbKbfi7EUSyJYMb3ik= Subject key identifier: BC:22:79:4A:E0:27:C0:08:B3:15:83:29:40:B6:74:32:66:41:6B:8D Authority key identifier: 82:A8:5A:FD:F3:29:25:6F:47:E0:B7:00:B2:D1:47:56:A1:04:C1:12 Certificate issuer: /CN=A9171C23/serialNumber=82A85AFDF329256F47E0B700B2D14756A104C112 Certificate serial: 05D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft Manifest number: 05CF Signing time: Tue 04 Nov 2025 23:08:12 +0000 Manifest this update: Tue 04 Nov 2025 23:08:12 +0000 Manifest next update: Tue 11 Nov 2025 23:08:12 +0000 Files and hashes: 1: gqha_fMpJW9H4LcAstFHVqEEwRI.crl (hash: 8vt8qvb9slrmjSQ4v/jdxH4uVBIf9TzZEqVs3eVS98c=) 2: 7CC19FBCDCAA11EBB87DAD44C4F9AE02.roa (hash: ZlGg1d2CMvxXbe2cdJaMpBCrBVtHW8eJFry9EmWD8kk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.crl rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:08:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1496 (0x5d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171C23, serialNumber=82A85AFDF329256F47E0B700B2D14756A104C112 Validity Not Before: Nov 4 23:08:12 2025 GMT Not After : Nov 11 23:08:12 2025 GMT Subject: CN=690a875c-1180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c5:f5:57:72:45:d0:6f:49:55:4d:33:c5:d6: 46:da:39:44:16:da:4a:83:07:22:4c:8c:1f:74:b6: 7f:5a:43:2c:96:e9:08:af:19:2c:5c:e7:9b:2b:b6: 1e:11:1b:f5:23:bb:14:fc:27:5b:d0:0b:52:b1:78: b7:1e:5d:60:1f:67:2d:63:fa:a9:15:7b:32:93:de: e3:8a:a9:ef:77:62:89:1e:19:8f:a4:65:db:01:4c: 92:1e:8b:62:b1:f3:49:c1:89:8c:b8:ee:b0:56:a4: 83:53:b4:6a:d5:67:57:dc:30:1a:da:81:19:b3:55: 56:be:fe:12:3b:f3:a5:10:1c:98:8d:49:6f:4a:e5: bc:ec:cf:e7:33:d6:97:38:09:ef:b6:c8:7c:7c:c2: d0:5f:fa:12:0b:52:ba:f7:6a:68:50:5c:0a:9c:ff: 8f:e7:af:e3:00:d8:cb:9f:97:77:97:80:ed:3e:8d: bf:9f:b1:63:32:23:ac:79:1a:a5:1f:25:44:11:68: 2b:69:e1:ae:1a:ef:30:6c:af:d3:a9:db:cf:1f:64: ba:94:69:61:94:aa:5a:9b:37:bf:19:76:20:8e:df: d3:92:65:54:80:30:8c:5a:2e:be:58:35:65:f6:4a: 05:1b:d1:35:3e:09:94:c5:8f:2f:7c:4b:c0:ef:47: de:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:22:79:4A:E0:27:C0:08:B3:15:83:29:40:B6:74:32:66:41:6B:8D X509v3 Authority Key Identifier: keyid:82:A8:5A:FD:F3:29:25:6F:47:E0:B7:00:B2:D1:47:56:A1:04:C1:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:d5:b4:a7:8f:da:50:ae:f9:2d:f7:eb:a9:9c:00:9a:90:34: bb:b1:5e:c9:31:91:32:f7:db:61:6f:68:b9:c6:2f:1d:76:dd: 3d:d4:7c:7a:cd:69:9f:09:a2:4b:03:3a:bf:3c:9c:77:9b:77: cd:86:af:be:9a:da:9e:a4:d0:c3:bc:50:3c:ae:e6:76:9f:bd: 83:91:02:14:49:ce:d8:4b:08:d7:0f:8a:1a:ed:8e:a3:23:60: e2:c9:81:a7:b5:af:06:aa:d2:d7:a4:97:51:75:2f:18:2e:87: 03:01:e9:cc:59:8b:2e:31:41:45:82:cb:f0:2e:db:31:91:d9: e0:7d:cf:2a:e1:2f:84:41:92:64:20:96:ce:4a:ff:83:e1:f2: c8:ed:ed:fc:a5:ee:64:02:3f:86:49:cb:8f:17:d5:1d:fc:8d: a6:a2:f7:04:04:44:4d:69:6a:da:4b:a2:b3:f2:30:69:1d:5f: 2f:7b:2e:b1:51:e5:69:ff:d4:39:4c:c6:ae:33:d2:60:a0:8c: fc:9a:97:2b:8f:80:81:08:ee:20:96:c9:1c:4c:0a:1e:52:02: c5:25:56:e6:11:a7:a6:1e:92:4f:ed:22:7b:05:b1:db:ca:37: 42:8c:03:75:af:66:57:74:74:86:25:5b:51:a0:92:c4:ea:ba: 80:f3:08:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFDMjMxMTAvBgNVBAUTKDgyQTg1QUZERjMyOTI1NkY0N0UwQjcwMEIyRDE0NzU2 QTEwNEMxMTIwHhcNMjUxMTA0MjMwODEyWhcNMjUxMTExMjMwODEyWjAYMRYwFAYD VQQDEw02OTBhODc1Yy0xMTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwcX1V3JF0G9JVU0zxdZG2jlEFtpKgwciTIwfdLZ/WkMslukIrxksXOebK7Ye ERv1I7sU/Cdb0AtSsXi3Hl1gH2ctY/qpFXsyk97jiqnvd2KJHhmPpGXbAUySHoti sfNJwYmMuO6wVqSDU7Rq1WdX3DAa2oEZs1VWvv4SO/OlEByYjUlvSuW87M/nM9aX OAnvtsh8fMLQX/oSC1K692poUFwKnP+P56/jANjLn5d3l4DtPo2/n7FjMiOseRql HyVEEWgraeGuGu8wbK/TqdvPH2S6lGlhlKpamze/GXYgjt/TkmVUgDCMWi6+WDVl 9koFG9E1PgmUxY8vfEvA70fe7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLwieUrg J8AIsxWDKUC2dDJmQWuNMB8GA1UdIwQYMBaAFIKoWv3zKSVvR+C3ALLRR1ahBMES MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUMyMy9DNkJEMUUyQ0RD MTIxMUVCOEMxREE2NEFDNEY5QUUwMi9ncWhhX2ZNcEpXOUg0TGNBc3RGSFZxRUV3 UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dxaGFfZk1wSlc5SDRMY0FzdEZIVnFFRXdSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUMyMy9DNkJEMUUyQ0RDMTIxMUVCOEMxREE2NEFDNEY5QUUwMi9ncWhhX2ZNcEpX OUg0TGNBc3RGSFZxRUV3UkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBL1bSnj9pQrvkt9+upnACakDS7sV7JMZEy99thb2i5xi8ddt091Hx6 zWmfCaJLAzq/PJx3m3fNhq++mtqepNDDvFA8ruZ2n72DkQIUSc7YSwjXD4oa7Y6j I2DiyYGnta8GqtLXpJdRdS8YLocDAenMWYsuMUFFgsvwLtsxkdngfc8q4S+EQZJk IJbOSv+D4fLI7e38pe5kAj+GScuPF9Ud/I2movcEBERNaWraS6Kz8jBpHV8vey6x UeVp/9Q5TMauM9JgoIz8mpcrj4CBCO4glskcTAoeUgLFJVbmEaemHpJP7SJ7BbHb yjdCjAN1r2ZXdHSGJVtRoJLE6rqA8wjk -----END CERTIFICATE-----Generated at Wed Nov 5 16:38:05 2025 by rpki-client