$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft File: GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft (raw, json) Hash identifier: 65XEJteDnqEOS5bM3e7BIozCbuDg2L1B/KMzq6zST9s= Subject key identifier: E4:05:5D:26:D1:87:01:47:65:9A:0B:DC:95:EB:5B:15:26:C5:6B:66 Authority key identifier: 1B:04:16:05:D6:D8:38:6C:F7:22:5D:67:9B:41:03:48:99:1F:E2:33 Certificate issuer: /CN=A9174C93/serialNumber=1B041605D6D8386CF7225D679B410348991FE233 Certificate serial: 0C78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft Manifest number: 0C70 Signing time: Tue 04 Nov 2025 18:37:33 +0000 Manifest this update: Tue 04 Nov 2025 18:37:32 +0000 Manifest next update: Tue 11 Nov 2025 18:37:32 +0000 Files and hashes: 1: GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl (hash: JOtyeereUdxwv0spx68+8aVYgUO96JykLLnUZsWyEwY=) 2: C300B2460C2811EAA5153045C4F9AE02.roa (hash: NG87DnznnSO4SFH6RPE3pwKGFEdLouyBdOYhn2LMujw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:37:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3192 (0xc78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C93, serialNumber=1B041605D6D8386CF7225D679B410348991FE233 Validity Not Before: Nov 4 18:37:32 2025 GMT Not After : Nov 11 18:37:32 2025 GMT Subject: CN=690a47ed-7d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ea:ce:71:a6:78:ce:f5:71:5e:2b:11:26:56: 5b:8e:d6:32:e0:87:ed:cd:a0:a4:5f:2e:9f:14:cb: 21:a0:50:f1:72:df:ef:db:24:58:2b:dd:f0:8d:1b: ca:f5:18:56:be:7b:e0:38:f7:73:6d:c0:d5:11:e5: 0b:45:2c:0c:a6:0c:87:db:1c:ec:f1:5f:3c:99:32: f2:3f:2f:6b:54:80:33:4a:e6:a1:c3:b4:3f:f2:07: 0d:68:e4:ea:9d:af:31:0f:7a:d9:79:76:f9:a6:87: 44:76:dc:0b:2a:ec:d4:f4:3e:c7:05:fe:79:da:fd: 64:26:f9:02:56:29:60:14:59:87:22:5d:46:88:8c: 2d:ec:f9:7e:ce:b5:76:b9:80:cc:9b:c7:51:d9:d4: 9b:43:2d:4e:05:a4:ea:8d:02:53:b8:4a:ee:e0:4c: ac:4d:e9:81:86:fa:0f:f6:90:b2:50:42:d4:2a:0b: 15:4c:ca:84:1e:24:b7:dd:01:60:2a:00:53:27:94: 73:bc:d3:22:3c:9c:4b:01:44:39:68:f9:ca:a7:50: f6:ad:53:4a:55:59:a6:7d:ef:ef:77:ac:58:ee:1e: 82:54:9e:64:a7:21:44:88:ac:f0:63:18:90:63:76: 2c:50:98:b9:c9:3a:87:e5:e3:8c:22:8d:01:6a:a5: 6c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:05:5D:26:D1:87:01:47:65:9A:0B:DC:95:EB:5B:15:26:C5:6B:66 X509v3 Authority Key Identifier: keyid:1B:04:16:05:D6:D8:38:6C:F7:22:5D:67:9B:41:03:48:99:1F:E2:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:7e:ae:34:62:17:55:cd:ad:6d:a6:e4:7f:35:69:68:f2:92: 86:f5:a1:6e:e7:1d:4e:01:3f:df:92:99:0d:cb:93:4f:99:24: b3:7d:c9:aa:22:e7:af:7c:9d:8a:b2:e1:54:87:39:b2:01:68: b0:07:8f:96:71:63:a2:3a:64:5f:e1:84:72:d7:ad:ee:f4:be: ae:96:23:06:c8:de:ee:9d:8d:a0:46:28:26:bd:80:05:6f:66: b2:79:df:5d:ec:99:e6:5b:5b:ce:24:66:f3:23:9a:2e:59:f2: 36:02:d4:c0:09:72:58:15:12:38:ef:16:22:d0:3c:80:d4:f8: 19:9f:df:92:9e:9f:63:b7:a8:f2:f0:81:a0:dc:a9:1b:53:77: 53:fa:0b:84:58:0a:4b:e9:b8:21:af:6e:65:3f:f0:82:62:43: 8d:2a:33:7f:af:02:a2:7f:3c:17:d9:fa:8a:37:5b:c3:de:26: 09:03:90:4b:2a:8b:40:1f:1a:e0:aa:ca:8f:81:69:cf:ec:78: c2:d7:80:3f:a2:7d:40:c2:be:f8:32:83:ec:55:f6:ae:97:e1: 01:1e:31:13:b8:9d:a1:88:47:c6:1e:72:a5:42:ae:b2:74:b2: 0c:d2:ab:17:af:b2:a1:6e:38:9e:cd:a6:cc:e9:53:91:c7:18: 2b:78:6d:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDOTMxMTAvBgNVBAUTKDFCMDQxNjA1RDZEODM4NkNGNzIyNUQ2NzlCNDEwMzQ4 OTkxRkUyMzMwHhcNMjUxMTA0MTgzNzMyWhcNMjUxMTExMTgzNzMyWjAYMRYwFAYD VQQDEw02OTBhNDdlZC03ZDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+rOcaZ4zvVxXisRJlZbjtYy4IftzaCkXy6fFMshoFDxct/v2yRYK93wjRvK 9RhWvnvgOPdzbcDVEeULRSwMpgyH2xzs8V88mTLyPy9rVIAzSuahw7Q/8gcNaOTq na8xD3rZeXb5podEdtwLKuzU9D7HBf552v1kJvkCVilgFFmHIl1GiIwt7Pl+zrV2 uYDMm8dR2dSbQy1OBaTqjQJTuEru4EysTemBhvoP9pCyUELUKgsVTMqEHiS33QFg KgBTJ5RzvNMiPJxLAUQ5aPnKp1D2rVNKVVmmfe/vd6xY7h6CVJ5kpyFEiKzwYxiQ Y3YsUJi5yTqH5eOMIo0BaqVs/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQFXSbR hwFHZZoL3JXrWxUmxWtmMB8GA1UdIwQYMBaAFBsEFgXW2Dhs9yJdZ5tBA0iZH+Iz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEM5My9DOEU4QjFGNjBD MjYxMUVBODBFRjQwNDFDNEY5QUUwMi9Hd1FXQmRiWU9HejNJbDFubTBFRFNKa2Y0 ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d3UVdCZGJZT0d6M0lsMW5tMEVEU0prZjRqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEM5My9DOEU4QjFGNjBDMjYxMUVBODBFRjQwNDFDNEY5QUUwMi9Hd1FXQmRiWU9H ejNJbDFubTBFRFNKa2Y0ak0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMfq40YhdVza1tpuR/NWlo8pKG9aFu5x1OAT/fkpkNy5NPmSSzfcmq IuevfJ2KsuFUhzmyAWiwB4+WcWOiOmRf4YRy163u9L6uliMGyN7unY2gRigmvYAF b2ayed9d7JnmW1vOJGbzI5ouWfI2AtTACXJYFRI47xYi0DyA1PgZn9+Snp9jt6jy 8IGg3KkbU3dT+guEWApL6bghr25lP/CCYkONKjN/rwKifzwX2fqKN1vD3iYJA5BL KotAHxrgqsqPgWnP7HjC14A/on1Awr74MoPsVfaul+EBHjETuJ2hiEfGHnKlQq6y dLIM0qsXr7KhbjiezabM6VORxxgreG1g -----END CERTIFICATE-----Generated at Wed Nov 5 00:23:04 2025 by rpki-client