$ rpki-client -vvf rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft File: gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft (raw, json) Hash identifier: qAtQWgeMKvDpO5VYeXpvQa/y/1/cpB23YsAqWFq1c8A= Subject key identifier: 46:30:0D:49:A6:0D:99:3A:BC:33:94:EC:54:96:15:F6:C6:6E:14:06 Authority key identifier: 80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00 Certificate issuer: /CN=A9175155/serialNumber=80084A34FD4F3B932C092182407B8905D9406500 Certificate serial: 0680 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft Manifest number: 0656 Signing time: Sun 02 Nov 2025 22:41:46 +0000 Manifest this update: Sun 02 Nov 2025 22:41:46 +0000 Manifest next update: Sun 09 Nov 2025 22:41:46 +0000 Files and hashes: 1: gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl (hash: 4XQZ7rRhUU2vH/Fy+abLAnm6vp/wLdUKZ8Z/PFGkoKU=) 2: A6C94076624711EC9B815772C4F9AE02.roa (hash: XosrUy+Xd/y9+zlNKWBW88xmxi0w+unp/BWLX4a8k/0=) 3: 86F4D41881C811ECB5F90D48C4F9AE02.roa (hash: jcE65YGPbY23C0JRfHdMvEfT+xppldiedci4zrgXKQc=) 4: 899A5138691611EFBED13942C4F9AE02.roa (hash: VYrhe6Mi0RTaO+P8HqkxU1Qva61wirf2XWWIcdNAN4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1664 (0x680) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175155, serialNumber=80084A34FD4F3B932C092182407B8905D9406500 Validity Not Before: Nov 2 22:41:46 2025 GMT Not After : Nov 9 22:41:46 2025 GMT Subject: CN=6907de2a-97fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6b:c9:00:36:b3:f5:de:bd:80:05:30:f3:49: 81:04:09:e2:96:07:f4:76:4c:ff:5c:9c:a5:5c:e3: 5d:ed:6b:38:4e:1f:69:77:db:7e:bd:60:9d:84:28: e7:6d:d5:9b:64:8b:af:44:76:3d:d0:11:62:c5:3a: 7e:83:4d:d7:c2:83:fb:97:73:89:37:88:d8:f1:52: ae:0c:01:38:83:b4:92:35:ad:89:a7:17:3a:29:48: 46:d8:83:4b:13:93:2c:5b:f8:0f:c6:66:74:2c:0c: 7e:42:9c:b5:66:02:5a:47:86:a9:ee:19:bf:d3:19: bd:52:92:87:b3:83:41:bf:08:77:15:49:89:c4:65: 69:6d:95:3f:1a:2a:ae:2d:78:d5:a0:a7:70:2c:ee: f6:90:34:15:a5:3f:ed:9a:25:52:d9:04:dc:6b:40: 1a:6f:71:57:ae:34:fd:86:a9:a0:37:ed:3b:74:50: 59:36:30:96:a9:d8:09:d5:ff:5a:13:ef:1c:60:c8: 82:56:39:fc:78:c0:ec:52:cc:a7:4d:f5:6c:b1:88: e3:cf:ef:09:ae:af:b2:b6:9c:b2:52:a7:69:0c:11: 0e:78:11:54:57:12:2d:e4:ba:98:d7:95:2d:e2:fa: 7e:58:c5:00:de:f9:22:43:3d:0f:1e:f4:28:e3:ec: eb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:30:0D:49:A6:0D:99:3A:BC:33:94:EC:54:96:15:F6:C6:6E:14:06 X509v3 Authority Key Identifier: keyid:80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:cb:06:01:69:24:de:28:19:0d:aa:a6:87:0d:44:0e:16:06: e1:12:8b:7f:35:02:56:69:68:37:ec:13:67:9f:74:f0:1e:da: 3f:c6:51:ae:01:c1:fb:43:b5:ad:69:ee:c8:97:a0:fe:d0:ed: 8b:7f:2e:14:8a:75:cb:f2:25:01:c5:87:3a:1a:fe:fd:44:af: 2c:5e:a8:ab:3b:fd:50:50:b4:d8:db:17:22:44:f3:0a:82:f6: 49:77:60:a3:73:3a:69:14:d3:86:40:65:91:4a:60:85:b0:22: 64:6e:15:07:30:08:3c:35:c0:5c:fe:cc:0b:55:7d:8d:e7:5d: f8:c9:5c:56:60:78:89:ab:9c:43:75:ae:1b:ca:d9:95:e5:74: 53:3b:92:f4:d0:62:39:5b:57:03:59:18:f2:ab:f8:35:a1:a3: 84:a9:c5:0d:a1:79:a9:ef:36:16:68:7c:b4:2e:85:a6:4e:b7: d1:44:aa:ab:4a:d5:11:ee:95:c6:0d:ff:45:88:8a:62:bf:7c: 0f:a1:3d:5e:6d:68:0a:88:54:40:00:d5:cc:36:6b:68:30:ce: 45:41:a9:9f:40:fb:4b:92:18:36:f3:08:9f:33:59:b5:74:ea: 88:13:fc:90:05:fd:e8:e0:99:9d:77:e6:41:90:e4:2b:c7:da: 36:7b:9b:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUxNTUxMTAvBgNVBAUTKDgwMDg0QTM0RkQ0RjNCOTMyQzA5MjE4MjQwN0I4OTA1 RDk0MDY1MDAwHhcNMjUxMTAyMjI0MTQ2WhcNMjUxMTA5MjI0MTQ2WjAYMRYwFAYD VQQDEw02OTA3ZGUyYS05N2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWvJADaz9d69gAUw80mBBAnilgf0dkz/XJylXONd7Ws4Th9pd9t+vWCdhCjn bdWbZIuvRHY90BFixTp+g03XwoP7l3OJN4jY8VKuDAE4g7SSNa2Jpxc6KUhG2INL E5MsW/gPxmZ0LAx+Qpy1ZgJaR4ap7hm/0xm9UpKHs4NBvwh3FUmJxGVpbZU/Giqu LXjVoKdwLO72kDQVpT/tmiVS2QTca0Aab3FXrjT9hqmgN+07dFBZNjCWqdgJ1f9a E+8cYMiCVjn8eMDsUsynTfVssYjjz+8Jrq+ytpyyUqdpDBEOeBFUVxIt5LqY15Ut 4vp+WMUA3vkiQz0PHvQo4+zrzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEYwDUmm DZk6vDOU7FSWFfbGbhQGMB8GA1UdIwQYMBaAFIAISjT9TzuTLAkhgkB7iQXZQGUA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTE1NS8zNzQ0QjNDNEIw MjgxMUVCOUQyNzg5MUFDNEY5QUUwMi9nQWhLTlAxUE81TXNDU0dDUUh1SkJkbEFa UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dBaEtOUDFQTzVNc0NTR0NRSHVKQmRsQVpRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTE1NS8zNzQ0QjNDNEIwMjgxMUVCOUQyNzg5MUFDNEY5QUUwMi9nQWhLTlAxUE81 TXNDU0dDUUh1SkJkbEFaUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGywYBaSTeKBkNqqaHDUQOFgbhEot/NQJWaWg37BNnn3TwHto/xlGu AcH7Q7Wtae7Il6D+0O2Lfy4UinXL8iUBxYc6Gv79RK8sXqirO/1QULTY2xciRPMK gvZJd2CjczppFNOGQGWRSmCFsCJkbhUHMAg8NcBc/swLVX2N5134yVxWYHiJq5xD da4bytmV5XRTO5L00GI5W1cDWRjyq/g1oaOEqcUNoXmp7zYWaHy0LoWmTrfRRKqr StUR7pXGDf9FiIpiv3wPoT1ebWgKiFRAANXMNmtoMM5FQamfQPtLkhg28wifM1m1 dOqIE/yQBf3o4Jmdd+ZBkOQrx9o2e5tE -----END CERTIFICATE-----Generated at Wed Nov 5 00:23:31 2025 by rpki-client