$ rpki-client -vvf rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft File: ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft (raw, json) Hash identifier: QiqTqNvObYSs8RfquuqlAa1fiJ4IW1xGahNI5dYaUYY= Subject key identifier: 74:DB:5A:20:4F:41:54:A9:3D:24:31:CB:13:A5:8A:65:24:2A:CB:5F Authority key identifier: 82:05:E9:79:6E:C6:9A:0C:73:DC:3B:5B:3C:E1:2C:48:19:2B:45:77 Certificate issuer: /CN=A919D222/serialNumber=8205E9796EC69A0C73DC3B5B3CE12C48192B4577 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft Manifest number: 9A Signing time: Wed 05 Nov 2025 06:33:59 +0000 Manifest this update: Wed 05 Nov 2025 06:33:59 +0000 Manifest next update: Wed 12 Nov 2025 06:33:59 +0000 Files and hashes: 1: ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl (hash: npu9/+e1qShzvesnqECtY8+dwT1qx9USOdB3DhGDjrE=) 2: 1852A5B0CD8011EF8728D139C4F9AE02.roa (hash: /3vnvplidMRV9xBfvWUaE3o6ToOuVyiBtlbFl/8L1Xg=) 3: 18B90242CD8011EF8728D139C4F9AE02.roa (hash: /17gKTBKMMs07+KSKB5vkpnNAFNY/B0f0Up4BfWbLBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:33:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D222, serialNumber=8205E9796EC69A0C73DC3B5B3CE12C48192B4577 Validity Not Before: Nov 5 06:33:59 2025 GMT Not After : Nov 12 06:33:59 2025 GMT Subject: CN=690aefd7-addb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:97:8c:55:8a:c6:ed:19:06:bf:05:88:30:97: e9:df:31:0d:68:16:9c:7e:d7:a3:5e:a6:a4:b5:9d: 01:cb:c6:bf:43:79:2b:fb:de:8e:c2:59:dc:80:b2: 63:46:eb:e8:05:c7:65:f6:72:5f:2d:bc:89:72:e2: ed:7b:22:5b:ad:da:2e:8c:6b:90:3f:f7:4b:8f:16: 70:54:cb:aa:b6:fb:1a:c1:ea:ed:ad:76:bd:de:3e: 86:6c:48:ee:0c:01:4b:35:9c:7e:5d:31:ac:c9:95: de:36:3a:d6:c9:4b:6f:9e:df:09:4c:9a:f2:65:7b: 4f:26:81:ee:63:08:68:5b:9e:a5:2d:3a:0c:a8:66: 95:7b:db:12:00:73:f4:31:b8:c7:3c:ac:2d:05:dd: 4a:18:3e:56:50:d1:3d:36:e5:8c:ce:b6:ef:3f:5f: be:ca:86:0a:dd:11:85:5d:60:6c:19:01:47:24:19: ce:02:0e:be:0d:96:69:bc:75:74:45:cd:03:21:7a: 1e:29:65:4c:14:2a:c6:3f:34:2d:3e:55:84:52:44: 26:0e:93:ff:53:5a:b0:20:f9:7c:45:c8:48:39:72: 3b:a2:7a:76:fc:f1:09:e2:02:86:4b:1b:a0:7e:60: eb:a6:02:a8:19:5b:f8:4e:37:a9:f1:2f:11:6c:38: 5e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:DB:5A:20:4F:41:54:A9:3D:24:31:CB:13:A5:8A:65:24:2A:CB:5F X509v3 Authority Key Identifier: keyid:82:05:E9:79:6E:C6:9A:0C:73:DC:3B:5B:3C:E1:2C:48:19:2B:45:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e6:aa:b7:56:bc:d7:9d:42:06:f8:f3:e4:33:46:9d:9f:b4: 34:78:c4:33:f7:7b:2d:f4:03:4f:21:4d:61:d3:a0:82:ec:77: 8b:f2:86:07:87:6e:c4:fd:c9:9f:7b:bc:dd:d0:f2:94:71:34: 7a:0a:d3:a1:b2:61:ae:b0:f3:b8:15:d1:8f:ce:8e:35:74:1f: 46:35:37:fe:7f:cf:5a:a2:0a:09:c2:a4:09:79:84:f5:71:d9: 11:d9:89:ca:ea:90:1c:37:40:df:0c:48:cd:5c:6a:70:8d:86: fd:d6:55:ed:00:1b:9b:c7:9d:fe:16:c8:b3:5f:71:ac:de:55: 47:6c:0c:45:48:6b:f8:55:7a:6a:dd:4c:42:73:b6:4e:65:09: 3d:41:af:46:e6:f3:06:93:e3:35:01:3e:8d:81:7a:54:0b:bd: 5b:6b:42:7c:4b:72:c8:c6:09:3a:31:59:fb:b0:44:03:f0:d8: 8b:61:da:ec:35:db:a2:78:2b:6b:81:a9:83:20:10:f3:41:3c: b1:11:61:11:43:d7:0f:d0:5d:be:c5:96:22:69:6c:1b:9e:2e: cc:f5:6b:99:5b:e9:6c:c9:87:2d:ac:66:cf:5d:10:3d:bc:45: 8f:0c:22:8a:22:38:2a:7f:0f:35:30:03:2e:00:ff:aa:e2:50: 25:b0:1f:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQyMjIxMTAvBgNVBAUTKDgyMDVFOTc5NkVDNjlBMEM3M0RDM0I1QjNDRTEyQzQ4 MTkyQjQ1NzcwHhcNMjUxMTA1MDYzMzU5WhcNMjUxMTEyMDYzMzU5WjAYMRYwFAYD VQQDEw02OTBhZWZkNy1hZGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJeMVYrG7RkGvwWIMJfp3zENaBacftejXqaktZ0By8a/Q3kr+96OwlncgLJj RuvoBcdl9nJfLbyJcuLteyJbrdoujGuQP/dLjxZwVMuqtvsawertrXa93j6GbEju DAFLNZx+XTGsyZXeNjrWyUtvnt8JTJryZXtPJoHuYwhoW56lLToMqGaVe9sSAHP0 MbjHPKwtBd1KGD5WUNE9NuWMzrbvP1++yoYK3RGFXWBsGQFHJBnOAg6+DZZpvHV0 Rc0DIXoeKWVMFCrGPzQtPlWEUkQmDpP/U1qwIPl8RchIOXI7onp2/PEJ4gKGSxug fmDrpgKoGVv4Tjep8S8RbDhe5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHTbWiBP QVSpPSQxyxOlimUkKstfMB8GA1UdIwQYMBaAFIIF6XluxpoMc9w7WzzhLEgZK0V3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDIyMi84NzY0NDg5Q0NE N0YxMUVGQTU4NDg4MzhDNEY5QUUwMi9nZ1hwZVc3R21neHozRHRiUE9Fc1NCa3JS WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnWHBlVzdHbWd4ejNEdGJQT0VzU0JrclJYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDIyMi84NzY0NDg5Q0NEN0YxMUVGQTU4NDg4MzhDNEY5QUUwMi9nZ1hwZVc3R21n eHozRHRiUE9Fc1NCa3JSWGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa5qq3VrzXnUIG+PPkM0adn7Q0eMQz93st9ANPIU1h06CC7HeL8oYH h27E/cmfe7zd0PKUcTR6CtOhsmGusPO4FdGPzo41dB9GNTf+f89aogoJwqQJeYT1 cdkR2YnK6pAcN0DfDEjNXGpwjYb91lXtABubx53+FsizX3Gs3lVHbAxFSGv4VXpq 3UxCc7ZOZQk9Qa9G5vMGk+M1AT6NgXpUC71ba0J8S3LIxgk6MVn7sEQD8NiLYdrs NduieCtrgamDIBDzQTyxEWERQ9cP0F2+xZYiaWwbni7M9WuZW+lsyYctrGbPXRA9 vEWPDCKKIjgqfw81MAMuAP+q4lAlsB9G -----END CERTIFICATE-----Generated at Wed Nov 5 12:27:33 2025 by rpki-client