$ rpki-client -vvf rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft File: gaZX6qx1VMq3oaKI9bP-7dilzEs.mft (raw, json) Hash identifier: q5mLxWriI/7SR8VZSzcI3WrFLbZx9yPfZx93/WS3pOQ= Subject key identifier: BB:F8:35:C9:17:69:61:B0:63:44:74:1B:1D:20:75:4B:25:47:84:7A Authority key identifier: 81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B Certificate issuer: /CN=A917DFDA/serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft Manifest number: 45 Signing time: Wed 05 Nov 2025 05:07:32 +0000 Manifest this update: Wed 05 Nov 2025 05:07:31 +0000 Manifest next update: Wed 12 Nov 2025 05:07:31 +0000 Files and hashes: 1: gaZX6qx1VMq3oaKI9bP-7dilzEs.crl (hash: LefUAbYQTzKamIm7AOSIlSNrPhzCzTvZNU1kKDdxCwA=) 2: A78653B2561F11F09624D128C4F9AE02.roa (hash: v13B1iQ4hhFI0k63jpGnWfr1WzzOqwI0W1kZRI7DnNY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:07:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DFDA, serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B Validity Not Before: Nov 5 05:07:31 2025 GMT Not After : Nov 12 05:07:31 2025 GMT Subject: CN=690adb94-970c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:2d:c0:13:7c:71:01:6f:86:b1:7a:6d:99:60: f2:20:cd:32:2c:4a:1c:a2:5f:08:f8:8f:6f:0a:95: 75:14:00:37:32:8f:dd:b4:2b:f4:4a:e8:ac:9d:53: 35:8b:d6:77:95:a7:68:ec:fb:de:20:71:d1:19:a0: 6d:b4:c5:a8:68:aa:a1:5b:4a:ed:a1:9a:61:33:95: e3:9a:fc:7e:b0:4e:e6:7f:de:24:3b:b3:1b:57:7e: 06:12:fd:88:55:7a:2c:f4:bf:cb:15:bf:7d:a8:03: 52:b7:10:56:ff:d1:56:63:e1:8d:27:f3:25:b1:0f: 7a:28:3e:6c:f1:b7:aa:da:c9:ac:fd:1a:a4:eb:fc: 5a:a1:2f:34:94:5b:8c:51:8d:1c:59:bc:ae:2f:bd: e4:71:55:c0:76:32:8d:6c:96:f2:c0:1f:78:25:ad: 96:36:b8:08:62:e4:ce:c2:4e:ff:d7:1f:b8:6b:57: cc:3a:55:37:0c:74:e6:5d:47:26:71:49:91:cb:bf: 56:e9:9f:c4:df:4c:fe:15:36:9c:d1:8b:a8:d8:4d: e2:0c:b8:7a:44:81:bd:85:e1:9a:a8:2f:01:4d:0c: d5:42:7a:27:77:ec:b9:4f:33:08:94:bb:f2:65:cc: 91:4c:70:e6:66:f1:5c:32:5b:bc:bd:11:ee:e6:c4: ac:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F8:35:C9:17:69:61:B0:63:44:74:1B:1D:20:75:4B:25:47:84:7A X509v3 Authority Key Identifier: keyid:81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:98:d6:4c:51:fd:11:f7:95:e8:ad:e8:2e:17:e4:b0:15:27: 57:30:92:82:f5:fb:c0:78:38:77:87:ea:8c:be:ef:cc:ae:97: db:58:95:dc:f5:96:f4:a2:cd:23:a4:8a:6a:cc:60:f0:be:ba: e4:01:bf:0b:80:37:d4:72:0d:ba:c1:be:ab:2c:f7:19:bd:40: e2:76:1f:0f:0d:98:55:81:a7:74:a5:f9:52:42:ed:63:34:d8: 4d:0d:d8:ea:85:2a:c0:bc:cd:dd:2a:bf:55:7d:c9:30:f9:ea: 67:8d:d1:0a:21:21:ed:5d:42:7c:05:9c:a9:3f:bf:16:c1:ed: 7a:9a:f5:14:19:e5:d3:4e:fb:4b:12:bb:d6:4f:ce:f0:c3:0f: fe:c6:cd:b5:f1:0f:fb:af:06:11:bf:ab:d9:4b:d7:13:f9:ef: 9d:8a:5c:31:e7:e2:a3:71:3f:29:ac:16:1f:cb:15:68:c4:89: 1d:a4:43:76:a4:d3:dc:8b:de:bb:21:ec:03:d4:cc:1d:c9:6e: c3:3a:38:0f:7a:7a:5e:53:72:17:c3:e3:21:e2:8f:27:f7:f0: 33:63:ad:f1:6a:61:d5:7c:0b:e8:46:58:83:54:fe:fa:ce:6b: 04:f7:cf:7d:49:57:74:d3:d7:b1:e7:3d:0c:f9:1b:4e:d6:92: 8b:07:38:c2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 REZEQTExMC8GA1UEBRMoODFBNjU3RUFBQzc1NTRDQUI3QTFBMjg4RjVCM0ZFRURE OEE1Q0M0QjAeFw0yNTExMDUwNTA3MzFaFw0yNTExMTIwNTA3MzFaMBgxFjAUBgNV BAMTDTY5MGFkYjk0LTk3MGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmLcATfHEBb4axem2ZYPIgzTIsShyiXwj4j28KlXUUADcyj920K/RK6KydUzWL 1neVp2js+94gcdEZoG20xahoqqFbSu2hmmEzleOa/H6wTuZ/3iQ7sxtXfgYS/YhV eiz0v8sVv32oA1K3EFb/0VZj4Y0n8yWxD3ooPmzxt6rayaz9GqTr/FqhLzSUW4xR jRxZvK4vveRxVcB2Mo1slvLAH3glrZY2uAhi5M7CTv/XH7hrV8w6VTcMdOZdRyZx SZHLv1bpn8TfTP4VNpzRi6jYTeIMuHpEgb2F4ZqoLwFNDNVCeid37LlPMwiUu/Jl zJFMcOZm8VwyW7y9Ee7mxKyhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUu/g1yRdp YbBjRHQbHSB1SyVHhHowHwYDVR0jBBgwFoAUgaZX6qx1VMq3oaKI9bP+7dilzEsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdERkRBLzc2MTNGMzE2NTMx MzExRjA4NURFQ0U3OUM0RjlBRTAyL2dhWlg2cXgxVk1xM29hS0k5YlAtN2RpbHpF cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ2FaWDZxeDFWTXEzb2FLSTliUC03ZGlsekVzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE RkRBLzc2MTNGMzE2NTMxMzExRjA4NURFQ0U3OUM0RjlBRTAyL2dhWlg2cXgxVk1x M29hS0k5YlAtN2RpbHpFcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFKY1kxR/RH3leit6C4X5LAVJ1cwkoL1+8B4OHeH6oy+78yul9tYldz1 lvSizSOkimrMYPC+uuQBvwuAN9RyDbrBvqss9xm9QOJ2Hw8NmFWBp3Sl+VJC7WM0 2E0N2OqFKsC8zd0qv1V9yTD56meN0QohIe1dQnwFnKk/vxbB7Xqa9RQZ5dNO+0sS u9ZPzvDDD/7GzbXxD/uvBhG/q9lL1xP5752KXDHn4qNxPymsFh/LFWjEiR2kQ3ak 09yL3rsh7APUzB3JbsM6OA96el5TchfD4yHijyf38DNjrfFqYdV8C+hGWINU/vrO awT3z31JV3TT17HnPQz5G07WkosHOMI= -----END CERTIFICATE-----Generated at Wed Nov 5 22:20:39 2025 by rpki-client