$ rpki-client -vvf rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft File: GaNgWeMX739niFziUq7bkZWPXmg.mft (raw, json) Hash identifier: U04n4WkIhwTfbhkj/b2dFB7aCTrVVoHAausijBAECjc= Subject key identifier: 11:F6:61:09:FD:5E:4D:4F:01:BE:35:33:A0:A4:D1:4C:72:DB:7C:F1 Authority key identifier: 19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68 Certificate issuer: /CN=A917D857/serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68 Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft Manifest number: 0193 Signing time: Mon 03 Nov 2025 03:25:35 +0000 Manifest this update: Mon 03 Nov 2025 03:25:35 +0000 Manifest next update: Mon 10 Nov 2025 03:25:35 +0000 Files and hashes: 1: GaNgWeMX739niFziUq7bkZWPXmg.crl (hash: jU2hwqUp5QnNLDEJSHeGBlvx3QqKT7LF6DTRd0huKb0=) 2: BD9131004E2811EEBC65304DC4F9AE02.roa (hash: mDyA8en4O2HoFPMoiw1GIv6+nKDmPcew5/y5uXwGm88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:25:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D857, serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68 Validity Not Before: Nov 3 03:25:35 2025 GMT Not After : Nov 10 03:25:35 2025 GMT Subject: CN=690820af-3909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:67:97:c5:8c:76:f0:ae:23:6c:5c:08:d7:2f: 48:b6:fd:4b:fd:95:44:2b:81:4b:09:13:a0:b1:d1: b1:78:7f:66:a8:77:64:a6:e2:6c:20:b8:70:22:4d: 4a:bd:69:b9:97:aa:84:be:0d:5d:21:b0:e6:f3:9f: d9:51:70:aa:25:15:ef:48:a7:ca:2e:80:c3:b1:5f: fa:1b:a8:6e:1a:c7:41:e5:32:1f:67:91:dc:c3:08: f8:c6:59:25:14:4f:b7:c8:96:88:e5:f8:f4:cc:5a: e1:fc:a7:4a:b5:a7:e8:96:01:ef:44:ca:d6:d4:d7: 09:f5:07:21:f9:42:0e:a1:cb:5c:d3:6b:d7:83:1a: b0:d4:4e:47:47:14:4a:9d:27:6d:3f:f9:a8:7c:71: 92:b0:5e:59:c6:88:9f:da:76:7e:aa:ae:09:74:87: 09:f1:76:3f:9b:dd:37:39:53:58:12:bb:b0:5d:f7: 3d:97:c5:47:b2:66:ab:1f:f5:13:de:ef:59:db:a1: 84:85:8c:26:a4:ca:97:5c:54:d3:a9:aa:0c:35:fd: 05:ed:90:d1:e6:53:c5:ec:ea:cd:62:b9:ed:66:fe: ac:f8:58:21:0f:11:7d:97:2b:b6:60:70:e3:76:9c: 63:aa:bf:60:83:75:62:d9:08:03:87:2b:41:c4:35: fd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F6:61:09:FD:5E:4D:4F:01:BE:35:33:A0:A4:D1:4C:72:DB:7C:F1 X509v3 Authority Key Identifier: keyid:19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:a2:97:f6:30:73:92:71:d0:80:62:7d:a8:83:80:20:04:5a: 19:02:66:d2:98:5d:39:9b:e8:ef:b3:11:f7:fc:e4:0d:c9:fb: 4c:77:a6:38:32:0d:b4:4e:5c:c9:0d:b7:66:2e:3a:df:fd:cb: ce:a3:30:24:6b:b5:8b:f9:27:83:ee:58:ff:24:a6:20:c4:18: 05:ad:7a:11:8d:a8:2a:14:0e:0b:79:16:23:ca:bc:0e:b7:17: 1b:7a:73:9b:f0:ea:40:b5:82:e7:d3:07:b6:2f:0f:83:e9:34: ec:91:71:51:76:3b:f8:ba:5c:a6:11:d5:39:92:e9:18:4b:8e: ac:77:2c:02:af:79:16:fb:b4:e1:d2:43:54:82:2f:f8:06:84: 2a:2e:5a:69:c6:65:10:72:0d:14:37:d6:7c:1e:7a:63:05:83: 36:1a:00:26:88:d6:08:a7:e1:7b:57:a5:04:58:5c:da:9e:cd: cf:f0:d6:d2:b8:84:83:61:14:a7:53:a4:bd:8c:8f:af:52:c7: 58:56:ca:dd:14:1a:8a:e4:9b:cd:cb:f0:be:41:55:18:06:c8: 28:de:95:2a:76:b0:70:aa:da:35:e9:c8:55:c4:c6:82:03:29: 83:d2:9d:af:44:10:0b:13:28:32:0e:30:a7:1a:f0:38:cc:74: 93:2f:d0:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q4NTcxMTAvBgNVBAUTKDE5QTM2MDU5RTMxN0VGN0Y2Nzg4NUNFMjUyQUVEQjkx OTU4RjVFNjgwHhcNMjUxMTAzMDMyNTM1WhcNMjUxMTEwMDMyNTM1WjAYMRYwFAYD VQQDEw02OTA4MjBhZi0zOTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoGeXxYx28K4jbFwI1y9Itv1L/ZVEK4FLCROgsdGxeH9mqHdkpuJsILhwIk1K vWm5l6qEvg1dIbDm85/ZUXCqJRXvSKfKLoDDsV/6G6huGsdB5TIfZ5Hcwwj4xlkl FE+3yJaI5fj0zFrh/KdKtafolgHvRMrW1NcJ9Qch+UIOoctc02vXgxqw1E5HRxRK nSdtP/mofHGSsF5Zxoif2nZ+qq4JdIcJ8XY/m903OVNYEruwXfc9l8VHsmarH/UT 3u9Z26GEhYwmpMqXXFTTqaoMNf0F7ZDR5lPF7OrNYrntZv6s+FghDxF9lyu2YHDj dpxjqr9gg3Vi2QgDhytBxDX9aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBH2YQn9 Xk1PAb41M6Ck0Uxy23zxMB8GA1UdIwQYMBaAFBmjYFnjF+9/Z4hc4lKu25GVj15o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDg1Ny82MUM1Q0RCODRF MjgxMUVFOTRGREIzNENDNEY5QUUwMi9HYU5nV2VNWDczOW5pRnppVXE3YmtaV1BY bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dhTmdXZU1YNzM5bmlGemlVcTdia1pXUFhtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDg1Ny82MUM1Q0RCODRFMjgxMUVFOTRGREIzNENDNEY5QUUwMi9HYU5nV2VNWDcz OW5pRnppVXE3YmtaV1BYbWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPopf2MHOScdCAYn2og4AgBFoZAmbSmF05m+jvsxH3/OQNyftMd6Y4 Mg20TlzJDbdmLjrf/cvOozAka7WL+SeD7lj/JKYgxBgFrXoRjagqFA4LeRYjyrwO txcbenOb8OpAtYLn0we2Lw+D6TTskXFRdjv4ulymEdU5kukYS46sdywCr3kW+7Th 0kNUgi/4BoQqLlppxmUQcg0UN9Z8HnpjBYM2GgAmiNYIp+F7V6UEWFzans3P8NbS uISDYRSnU6S9jI+vUsdYVsrdFBqK5JvNy/C+QVUYBsgo3pUqdrBwqto16chVxMaC AymD0p2vRBALEygyDjCnGvA4zHSTL9BH -----END CERTIFICATE-----Generated at Wed Nov 5 02:18:36 2025 by rpki-client