$ rpki-client -vvf rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft File: gH5oiqUL0-OL4xtdTE4GCATrFdw.mft (raw, json) Hash identifier: HPQFqfn6jg3wrN2q90SzYaUmgNBMrB+VTzN/JM9ys1g= Subject key identifier: 61:94:18:48:5E:FA:2A:50:FD:B1:BD:99:47:77:11:3B:4D:DE:48:CD Authority key identifier: 80:7E:68:8A:A5:0B:D3:E3:8B:E3:1B:5D:4C:4E:06:08:04:EB:15:DC Certificate issuer: /CN=A918F0E2/serialNumber=807E688AA50BD3E38BE31B5D4C4E060804EB15DC Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft Manifest number: B9 Signing time: Mon 03 Nov 2025 06:02:01 +0000 Manifest this update: Mon 03 Nov 2025 06:02:00 +0000 Manifest next update: Mon 10 Nov 2025 06:02:00 +0000 Files and hashes: 1: gH5oiqUL0-OL4xtdTE4GCATrFdw.crl (hash: xxQEvomCA2lyBDKJThgGN/Z2v0hOOIk0dzCSsBa8IWA=) 2: EF63DB0EA26B11EF8F077C3FC4F9AE02.roa (hash: iLpw/uJbge7uZ/WmLMuhiuh6b3ClTayyECZNu36JGVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.crl rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F0E2, serialNumber=807E688AA50BD3E38BE31B5D4C4E060804EB15DC Validity Not Before: Nov 3 06:02:00 2025 GMT Not After : Nov 10 06:02:00 2025 GMT Subject: CN=69084559-a521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fd:49:40:b3:90:ec:36:af:26:ef:47:0f:37: 38:a7:fe:14:cb:9f:e6:35:3d:72:f2:7b:96:9c:be: 23:5f:f8:09:00:ee:5c:5d:dd:39:0c:7e:bb:01:35: 10:87:d7:6c:23:02:2c:3b:64:f2:8e:7c:23:87:19: 5c:c9:cd:35:dd:d8:4a:0f:10:68:e9:9d:29:f2:2a: 7a:4f:a5:86:92:9b:cf:69:71:dd:58:2f:08:4a:72: 6d:bb:a4:f6:00:b4:0b:b9:7f:4c:a3:c4:b4:76:a1: f7:f6:0c:14:7b:c5:6f:66:f2:6d:f6:45:b7:ff:f2: b0:fd:97:49:5f:ae:07:91:76:8d:5e:b4:b7:05:36: a9:e8:f9:63:6d:d7:36:9f:96:d3:71:98:b4:93:9c: b8:64:82:2f:8b:a7:dc:f8:0a:b0:86:85:19:31:df: db:4e:b4:84:a7:13:9d:a2:cc:ee:92:f8:92:90:3e: 52:ef:12:a3:a0:bd:4c:08:0a:ba:5f:74:05:48:a3: 52:d2:13:10:a7:77:b3:be:ff:70:6f:fd:e3:77:7a: e7:48:90:20:c3:3d:6a:f3:74:03:94:46:a3:b4:39: d7:fa:d5:80:eb:85:03:38:12:9e:82:9c:74:12:0d: a3:31:02:f5:0a:07:78:93:36:eb:67:22:14:d0:d5: ac:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:94:18:48:5E:FA:2A:50:FD:B1:BD:99:47:77:11:3B:4D:DE:48:CD X509v3 Authority Key Identifier: keyid:80:7E:68:8A:A5:0B:D3:E3:8B:E3:1B:5D:4C:4E:06:08:04:EB:15:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:52:d0:e0:0f:da:09:9c:3e:1b:99:a8:25:14:c6:91:f1:b9: 86:98:c5:d9:97:63:7f:55:7d:ec:2a:63:b0:cd:6c:4b:7d:b7: c8:71:fa:65:ca:60:02:58:95:39:37:43:ce:59:36:16:bd:18: be:55:6f:33:14:03:bc:bb:b8:26:b7:94:f3:74:b5:fb:73:c8: 0c:1a:af:6d:44:fc:82:bf:be:ab:2d:f0:1c:92:b4:89:fd:84: 02:a9:6d:69:c7:85:ad:f0:6f:42:2a:2f:8c:49:4d:9e:5f:0d: cf:a5:c5:bb:de:0a:8f:e1:78:07:db:d7:e4:3b:c6:0a:cc:0a: f3:9e:db:57:be:2e:52:11:83:2d:bd:1a:09:64:d9:0f:6b:b9: 8b:a3:a8:b7:4d:a6:ec:24:b8:04:fb:cf:21:f8:93:7f:1b:71: 21:ae:ea:aa:84:b9:13:81:83:9f:a1:7b:8c:07:48:3c:24:70: 0c:02:cc:39:13:52:e1:41:1e:dd:13:82:8f:1f:25:f8:61:b0: 12:5b:59:7f:a6:af:db:b9:60:22:3f:97:86:28:1e:d0:94:92: 51:3b:a4:8c:b3:a7:09:2f:00:a5:b1:9f:8d:d1:2a:fd:86:8a: 85:d5:93:4a:bb:3a:f0:af:3c:a1:49:43:71:fc:a8:77:7b:7b: 54:6e:02:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEYwRTIxMTAvBgNVBAUTKDgwN0U2ODhBQTUwQkQzRTM4QkUzMUI1RDRDNEUwNjA4 MDRFQjE1REMwHhcNMjUxMTAzMDYwMjAwWhcNMjUxMTEwMDYwMjAwWjAYMRYwFAYD VQQDEw02OTA4NDU1OS1hNTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxv1JQLOQ7DavJu9HDzc4p/4Uy5/mNT1y8nuWnL4jX/gJAO5cXd05DH67ATUQ h9dsIwIsO2Tyjnwjhxlcyc013dhKDxBo6Z0p8ip6T6WGkpvPaXHdWC8ISnJtu6T2 ALQLuX9Mo8S0dqH39gwUe8VvZvJt9kW3//Kw/ZdJX64HkXaNXrS3BTap6Pljbdc2 n5bTcZi0k5y4ZIIvi6fc+AqwhoUZMd/bTrSEpxOdoszukviSkD5S7xKjoL1MCAq6 X3QFSKNS0hMQp3ezvv9wb/3jd3rnSJAgwz1q83QDlEajtDnX+tWA64UDOBKegpx0 Eg2jMQL1Cgd4kzbrZyIU0NWsKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGUGEhe +ipQ/bG9mUd3ETtN3kjNMB8GA1UdIwQYMBaAFIB+aIqlC9Pji+MbXUxOBggE6xXc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjBFMi8yQjRCQjQyRUEy NUUxMUVGQTM4RDkzNzVDNEY5QUUwMi9nSDVvaXFVTDAtT0w0eHRkVEU0R0NBVHJG ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2dINW9pcVVMMC1PTDR4dGRURTRHQ0FUckZkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjBFMi8yQjRCQjQyRUEyNUUxMUVGQTM4RDkzNzVDNEY5QUUwMi9nSDVvaXFVTDAt T0w0eHRkVEU0R0NBVHJGZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAUtDgD9oJnD4bmaglFMaR8bmGmMXZl2N/VX3sKmOwzWxLfbfIcfpl ymACWJU5N0POWTYWvRi+VW8zFAO8u7gmt5TzdLX7c8gMGq9tRPyCv76rLfAckrSJ /YQCqW1px4Wt8G9CKi+MSU2eXw3PpcW73gqP4XgH29fkO8YKzArznttXvi5SEYMt vRoJZNkPa7mLo6i3TabsJLgE+88h+JN/G3EhruqqhLkTgYOfoXuMB0g8JHAMAsw5 E1LhQR7dE4KPHyX4YbASW1l/pq/buWAiP5eGKB7QlJJRO6SMs6cJLwClsZ+N0Sr9 hoqF1ZNKuzrwrzyhSUNx/Kh3e3tUbgKq -----END CERTIFICATE-----Generated at Tue Nov 4 21:32:48 2025 by rpki-client