$ rpki-client -vvf rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft File: ggZKEDz1DwHRlFMAajhs04c5G-Y.mft (raw, json) Hash identifier: VWMlTSix6IjCmcM7xlxzAWo2X2FeGaldtyINKv3CQEg= Subject key identifier: ED:04:AF:7C:B0:4E:1A:93:99:10:36:01:6A:83:92:9D:33:82:B4:5A Authority key identifier: 82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6 Certificate issuer: /CN=A919CA1B/serialNumber=82064A103CF50F01D19453006A386CD387391BE6 Certificate serial: 0225 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft Manifest number: 021F Signing time: Wed 05 Nov 2025 02:12:54 +0000 Manifest this update: Wed 05 Nov 2025 02:12:53 +0000 Manifest next update: Wed 12 Nov 2025 02:12:53 +0000 Files and hashes: 1: ggZKEDz1DwHRlFMAajhs04c5G-Y.crl (hash: bRi3MOcgwt8Yl3kGCx2t8ycDVjl9OCn85qUtc3I68sM=) 2: D3B49A1676CA11EDAA4FE042C4F9AE02.roa (hash: MMkdhzYrtB2EaUzaUeaUoWgtYA29GMYgRCaFiVCPSo0=) 3: D318E67076CA11EDAA4FE042C4F9AE02.roa (hash: dCssZ98YqQlWBb/mCVwsQnrI9ONxqFmsNypt7KWWLSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:12:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 549 (0x225) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CA1B, serialNumber=82064A103CF50F01D19453006A386CD387391BE6 Validity Not Before: Nov 5 02:12:53 2025 GMT Not After : Nov 12 02:12:53 2025 GMT Subject: CN=690ab2a5-ec46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d7:25:57:10:c7:35:1f:f2:4e:81:2b:87:13: c9:b3:1d:4e:1b:43:0c:4e:c2:0a:02:82:8f:9e:f5: a2:32:33:b5:76:2c:00:35:1a:fb:63:d8:1a:03:76: ea:cb:48:5d:31:9a:cb:28:ee:92:03:2a:e9:80:02: ad:0d:c5:db:54:60:4f:ec:7f:16:ff:59:69:57:a7: 48:06:42:09:03:4c:35:40:75:89:56:39:2e:f9:c5: 14:3f:3a:62:85:db:90:cb:ce:d1:1b:f1:31:9a:d4: 6c:6f:3b:84:f4:34:c9:9a:e1:fe:a0:ff:02:27:b6: 53:9d:4c:ff:e6:72:92:29:5b:25:b7:c8:14:ca:4b: fb:36:d4:40:96:11:4e:59:67:e3:93:ba:fb:c7:a5: 15:2d:0c:7e:a5:b8:97:cd:51:ba:ca:b2:3d:ec:c4: 38:67:86:d8:5b:cf:f2:08:ff:96:e0:08:9f:50:3a: d8:4d:0b:e4:25:eb:81:da:e5:96:6d:55:8c:58:10: aa:7a:ab:99:0a:15:fa:06:16:8b:6c:51:2d:41:94: 98:b0:ba:1b:7f:06:55:f8:c1:14:9a:c2:76:10:00: 3c:44:35:63:5d:cb:93:0b:05:61:9f:0e:ac:d4:29: 63:2e:16:70:1f:c6:b9:37:07:7f:e5:04:86:8c:9c: 40:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:04:AF:7C:B0:4E:1A:93:99:10:36:01:6A:83:92:9D:33:82:B4:5A X509v3 Authority Key Identifier: keyid:82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:b4:85:89:ea:07:75:18:c7:50:a6:29:f1:85:50:9c:73:25: 9e:0f:9b:a2:90:3a:cd:2c:e8:be:0a:5f:0b:4a:33:fd:46:10: 0c:ab:02:43:86:13:0e:36:df:91:b8:fa:9f:f6:63:86:d9:0f: 85:84:6e:a5:5d:ff:85:b1:d8:4d:0f:21:6d:68:54:d8:3f:24: e8:c1:9e:1f:84:e6:f2:48:86:4f:1e:6a:8b:63:f1:ce:9e:a0: 23:ea:91:af:8f:ad:12:e8:f3:e5:e4:e3:47:0d:fc:8b:2c:c2: db:17:11:7c:3f:35:32:55:97:18:3e:d5:52:30:41:61:5a:56: c7:12:5d:d7:7f:d1:33:29:0c:bf:5f:23:61:f1:88:cc:22:30: 98:a9:7c:7e:c0:b8:bd:56:0f:87:4b:29:c7:52:3f:17:12:5a: 7f:4f:15:d7:2d:5e:8f:ef:ab:8d:89:0c:47:c9:c8:38:65:c3: 5f:de:b7:52:8e:e4:8a:05:42:15:a4:84:36:fc:eb:c9:04:95: 12:a4:97:03:11:f5:d7:75:e2:4f:26:17:92:53:7c:04:c7:55: 06:33:d8:1f:fa:50:10:73:49:1a:62:11:dd:d1:e4:69:f0:e5: ec:40:1a:99:c3:3d:d0:9e:43:86:b7:af:06:93:49:dd:81:45: 10:b0:5b:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBMUIxMTAvBgNVBAUTKDgyMDY0QTEwM0NGNTBGMDFEMTk0NTMwMDZBMzg2Q0Qz ODczOTFCRTYwHhcNMjUxMTA1MDIxMjUzWhcNMjUxMTEyMDIxMjUzWjAYMRYwFAYD VQQDEw02OTBhYjJhNS1lYzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydclVxDHNR/yToErhxPJsx1OG0MMTsIKAoKPnvWiMjO1diwANRr7Y9gaA3bq y0hdMZrLKO6SAyrpgAKtDcXbVGBP7H8W/1lpV6dIBkIJA0w1QHWJVjku+cUUPzpi hduQy87RG/ExmtRsbzuE9DTJmuH+oP8CJ7ZTnUz/5nKSKVslt8gUykv7NtRAlhFO WWfjk7r7x6UVLQx+pbiXzVG6yrI97MQ4Z4bYW8/yCP+W4AifUDrYTQvkJeuB2uWW bVWMWBCqequZChX6BhaLbFEtQZSYsLobfwZV+MEUmsJ2EAA8RDVjXcuTCwVhnw6s 1CljLhZwH8a5Nwd/5QSGjJxAWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0Er3yw ThqTmRA2AWqDkp0zgrRaMB8GA1UdIwQYMBaAFIIGShA89Q8B0ZRTAGo4bNOHORvm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0ExQi8xNDQ3ODI5QTc2 QkQxMUVEQkI0ODk0N0RDNEY5QUUwMi9nZ1pLRUR6MUR3SFJsRk1BYWpoczA0YzVH LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnWktFRHoxRHdIUmxGTUFhamhzMDRjNUctWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0ExQi8xNDQ3ODI5QTc2QkQxMUVEQkI0ODk0N0RDNEY5QUUwMi9nZ1pLRUR6MUR3 SFJsRk1BYWpoczA0YzVHLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAtIWJ6gd1GMdQpinxhVCccyWeD5uikDrNLOi+Cl8LSjP9RhAMqwJD hhMONt+RuPqf9mOG2Q+FhG6lXf+FsdhNDyFtaFTYPyTowZ4fhObySIZPHmqLY/HO nqAj6pGvj60S6PPl5ONHDfyLLMLbFxF8PzUyVZcYPtVSMEFhWlbHEl3Xf9EzKQy/ XyNh8YjMIjCYqXx+wLi9Vg+HSynHUj8XElp/TxXXLV6P76uNiQxHycg4ZcNf3rdS juSKBUIVpIQ2/OvJBJUSpJcDEfXXdeJPJheSU3wEx1UGM9gf+lAQc0kaYhHd0eRp 8OXsQBqZwz3QnkOGt68Gk0ndgUUQsFt7 -----END CERTIFICATE-----Generated at Wed Nov 5 15:39:45 2025 by rpki-client