$ rpki-client -vvf rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft File: Gm63WytHE2DtWpJcNRzEDBlBaCc.mft (raw, json) Hash identifier: bqqxV5owep6tqZU2XbgVr+APrTQj1KAdKowar7acgkU= Subject key identifier: FF:CF:67:7C:83:03:31:8B:71:0B:40:00:7E:E0:4F:EF:EF:14:A6:25 Authority key identifier: 1A:6E:B7:5B:2B:47:13:60:ED:5A:92:5C:35:1C:C4:0C:19:41:68:27 Certificate issuer: /CN=A9184AB8/serialNumber=1A6EB75B2B471360ED5A925C351CC40C19416827 Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft Manifest number: 99 Signing time: Mon 03 Nov 2025 06:25:52 +0000 Manifest this update: Mon 03 Nov 2025 06:25:51 +0000 Manifest next update: Mon 10 Nov 2025 06:25:51 +0000 Files and hashes: 1: Gm63WytHE2DtWpJcNRzEDBlBaCc.crl (hash: De80cQXF5vplkdrfCzWBNQwS6DXyua7e+wxNUToHtCA=) 2: 6156245AD26F11EFB6D7116EC4F9AE02.roa (hash: aUMucmUGoi4rDvfu82ISxnk7LeDLExV3rZzyOROfBZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.crl rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:25:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184AB8, serialNumber=1A6EB75B2B471360ED5A925C351CC40C19416827 Validity Not Before: Nov 3 06:25:51 2025 GMT Not After : Nov 10 06:25:51 2025 GMT Subject: CN=69084aef-2341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ba:db:9b:57:34:e4:66:81:36:28:5a:c9:2f: d8:f3:18:df:74:6f:ca:4b:1e:04:09:24:0d:86:44: cf:9b:8d:1a:ce:82:32:89:0b:d9:d1:9b:dd:9c:38: 8e:6b:97:89:d6:a1:1a:4a:63:45:58:04:a6:7a:4b: ea:6b:b3:af:16:65:45:f1:c4:a9:93:05:5e:ea:48: 5d:88:4c:05:64:79:6a:81:1d:2e:41:b6:0d:8a:91: b5:20:85:0e:d5:5e:f3:d6:83:af:42:83:59:12:1c: 34:93:ca:12:9f:aa:50:af:98:f8:69:fb:ce:5f:d6: d9:75:0e:e0:67:74:fa:45:32:89:02:fb:2a:d7:00: 76:a3:22:d4:15:4c:db:e3:6c:44:e1:b0:41:e2:5d: e9:34:38:55:f7:2c:e0:f3:10:be:1e:c2:37:38:f2: ed:b9:12:fc:0a:be:e0:c8:bb:61:4b:b3:f0:ff:88: 48:83:a3:9a:c4:fc:92:20:45:51:a6:89:bb:d4:49: 7b:80:46:6a:2f:c9:13:fd:ef:9a:86:a7:c3:25:a3: 38:15:c9:77:e4:c8:b6:50:03:46:c2:fe:52:af:96: b2:63:4b:5e:7d:10:2e:44:cc:04:ae:25:a9:c2:2b: 18:eb:b6:f0:0f:f2:6a:41:16:bf:f9:8e:3c:e2:8c: 54:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:CF:67:7C:83:03:31:8B:71:0B:40:00:7E:E0:4F:EF:EF:14:A6:25 X509v3 Authority Key Identifier: keyid:1A:6E:B7:5B:2B:47:13:60:ED:5A:92:5C:35:1C:C4:0C:19:41:68:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:43:47:72:31:ec:58:48:f4:72:ef:46:e1:e2:eb:a6:d2:21: c4:01:4d:99:ab:a2:b8:14:81:d8:7c:99:60:02:88:da:61:dd: f1:ea:44:30:62:ee:e4:89:78:90:d7:c2:04:c4:c0:80:b4:f7: a2:c8:72:d0:49:7e:af:a9:ad:f8:d0:5c:13:f1:ec:25:ec:9b: 86:2f:fe:1b:aa:1a:85:e0:2a:f9:d3:0d:c4:13:33:e9:72:c6: 79:e1:19:4a:7e:8d:f8:9a:61:8b:ef:94:6f:c3:55:7e:cf:f7: d7:99:1f:b3:ed:c2:3b:10:9f:ca:0f:67:7d:44:8c:00:57:a7: ba:4b:c2:8c:e0:a3:ca:24:97:73:c3:ff:30:02:b8:eb:e8:4c: a4:b1:c4:18:ec:14:f8:13:58:15:2b:e0:40:fd:9f:5a:83:ea: 68:67:51:5a:f0:71:ca:9f:71:bf:77:68:b4:38:89:c5:96:5a: 43:00:e2:db:c1:b6:92:05:1c:35:62:a9:55:66:af:1f:78:db: 43:00:b2:f3:8e:3b:d0:bf:9a:e7:de:92:6e:e7:93:14:dd:5e: 88:a7:4a:c0:f8:94:87:28:3a:f8:5f:cc:53:51:f1:d9:15:df: f6:01:af:ea:35:8c:0f:75:d6:ac:44:23:4e:cd:15:4c:8c:e5: 59:4b:0f:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRBQjgxMTAvBgNVBAUTKDFBNkVCNzVCMkI0NzEzNjBFRDVBOTI1QzM1MUNDNDBD MTk0MTY4MjcwHhcNMjUxMTAzMDYyNTUxWhcNMjUxMTEwMDYyNTUxWjAYMRYwFAYD VQQDEw02OTA4NGFlZi0yMzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Lrbm1c05GaBNihayS/Y8xjfdG/KSx4ECSQNhkTPm40azoIyiQvZ0ZvdnDiO a5eJ1qEaSmNFWASmekvqa7OvFmVF8cSpkwVe6khdiEwFZHlqgR0uQbYNipG1IIUO 1V7z1oOvQoNZEhw0k8oSn6pQr5j4afvOX9bZdQ7gZ3T6RTKJAvsq1wB2oyLUFUzb 42xE4bBB4l3pNDhV9yzg8xC+HsI3OPLtuRL8Cr7gyLthS7Pw/4hIg6OaxPySIEVR pom71El7gEZqL8kT/e+ahqfDJaM4Fcl35Mi2UANGwv5Sr5ayY0tefRAuRMwEriWp wisY67bwD/JqQRa/+Y484oxUeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP/PZ3yD AzGLcQtAAH7gT+/vFKYlMB8GA1UdIwQYMBaAFBput1srRxNg7VqSXDUcxAwZQWgn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEFCOC8zMzA5NkVDOEQx QjAxMUVGOEMyMEREMzJDNEY5QUUwMi9HbTYzV3l0SEUyRHRXcEpjTlJ6RURCbEJh Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0dtNjNXeXRIRTJEdFdwSmNOUnpFREJsQmFDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NEFCOC8zMzA5NkVDOEQxQjAxMUVGOEMyMEREMzJDNEY5QUUwMi9HbTYzV3l0SEUy RHRXcEpjTlJ6RURCbEJhQ2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnQ0dyMexYSPRy70bh4uum0iHEAU2Zq6K4FIHYfJlgAojaYd3x6kQw Yu7kiXiQ18IExMCAtPeiyHLQSX6vqa340FwT8ewl7JuGL/4bqhqF4Cr50w3EEzPp csZ54RlKfo34mmGL75Rvw1V+z/fXmR+z7cI7EJ/KD2d9RIwAV6e6S8KM4KPKJJdz w/8wArjr6EykscQY7BT4E1gVK+BA/Z9ag+poZ1Fa8HHKn3G/d2i0OInFllpDAOLb wbaSBRw1YqlVZq8feNtDALLzjjvQv5rn3pJu55MU3V6Ip0rA+JSHKDr4X8xTUfHZ Fd/2Aa/qNYwPddasRCNOzRVMjOVZSw/J -----END CERTIFICATE-----Generated at Tue Nov 4 19:13:19 2025 by rpki-client