$ rpki-client -vvf rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft File: ggCxpefBdgW1czx0_sHvEnOz6iU.mft (raw, json) Hash identifier: PhR2KLc1CTFu7N1ZB1IjR5oRcet8TIB3pgf9shaO4Ok= Subject key identifier: 9B:86:26:FD:FA:55:64:90:F8:D2:5D:F2:02:E3:36:B0:71:97:15:D7 Authority key identifier: 82:00:B1:A5:E7:C1:76:05:B5:73:3C:74:FE:C1:EF:12:73:B3:EA:25 Certificate issuer: /CN=A911AD0C/serialNumber=8200B1A5E7C17605B5733C74FEC1EF1273B3EA25 Certificate serial: 34CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggCxpefBdgW1czx0_sHvEnOz6iU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft Manifest number: 34CF Signing time: Sun 02 Nov 2025 15:19:25 +0000 Manifest this update: Sun 02 Nov 2025 15:19:25 +0000 Manifest next update: Sun 09 Nov 2025 15:19:25 +0000 Files and hashes: 1: ggCxpefBdgW1czx0_sHvEnOz6iU.crl (hash: B9XCnuXAyIJ7TSCRsk4s+Jk4Zu2PVL1K3foV0oX1k0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.crl rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggCxpefBdgW1czx0_sHvEnOz6iU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:19:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13519 (0x34cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AD0C, serialNumber=8200B1A5E7C17605B5733C74FEC1EF1273B3EA25 Validity Not Before: Nov 2 15:19:25 2025 GMT Not After : Nov 9 15:19:25 2025 GMT Subject: CN=6907767d-22d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:5f:e0:6b:e7:5f:4b:61:df:dd:dd:20:25:32: 4d:03:5a:8a:f7:01:28:2d:d8:6b:84:ac:29:e1:b4: c2:e5:3c:15:55:38:ba:e0:dc:e4:83:59:a4:a3:2e: 9d:a7:7b:11:3d:9d:32:3d:aa:d4:1c:35:46:3a:74: 52:49:a3:18:8d:90:d9:e6:e5:be:53:3f:ba:76:c3: 9e:74:e7:3f:a4:41:15:00:8e:3f:c4:22:81:1a:17: e5:e0:58:34:2d:84:9a:f8:2a:dd:b4:49:72:65:6d: fb:56:46:74:3c:de:91:0e:5f:74:03:a2:87:3f:63: ea:c0:61:9d:b3:0d:8e:98:09:9d:94:2e:1a:03:5b: 72:be:d4:2b:f6:af:8b:bb:59:37:62:24:c3:35:59: d5:5d:8f:77:45:c3:ad:7f:6f:26:8d:10:9a:5d:f4: 79:bf:ff:46:92:95:2c:7f:3e:67:fb:99:d1:95:58: e9:bb:57:a9:b5:14:76:9b:a2:d3:5a:0e:11:8a:f7: 27:b5:04:9f:9a:57:78:e2:03:fe:40:5d:79:ec:18: 24:ec:de:e8:eb:44:c1:b3:57:78:cc:69:22:3f:ef: 11:9b:1e:e7:f2:57:6c:c4:dd:57:e1:d4:75:8e:2c: bb:fa:1e:2e:56:88:49:c2:d5:ca:cf:aa:c3:2e:11: f9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:86:26:FD:FA:55:64:90:F8:D2:5D:F2:02:E3:36:B0:71:97:15:D7 X509v3 Authority Key Identifier: keyid:82:00:B1:A5:E7:C1:76:05:B5:73:3C:74:FE:C1:EF:12:73:B3:EA:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggCxpefBdgW1czx0_sHvEnOz6iU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:f3:46:01:f2:50:5b:d6:ba:3b:71:ef:4e:a8:fb:94:7c:fe: 3e:db:23:c8:fa:d3:24:3c:b6:8f:18:0b:9b:05:bb:9d:a5:36: e4:4a:24:8b:c8:70:59:08:f6:2b:89:b4:72:85:6b:6e:8b:0e: 4e:b3:a9:c4:1c:9a:c2:51:bf:8b:cd:34:2e:f7:f5:85:6b:b6: 0e:c6:b0:db:5b:98:e2:17:df:84:32:e4:d6:8a:12:75:8e:c6: 4c:35:56:e9:c7:05:2c:b1:f5:a8:0e:4b:83:df:a9:75:52:1d: 7d:16:fd:79:78:73:30:00:2c:84:eb:6e:54:85:e7:6e:e4:40: 73:52:c5:20:14:13:6f:be:15:b9:ae:a4:0d:31:8b:d3:0c:91: 8d:6d:3b:2d:8e:62:76:7c:8e:b0:85:63:d9:d7:d6:4d:90:c8: aa:f4:79:9e:94:7c:0d:85:31:7b:15:bf:a1:24:1a:db:dc:a4: 3b:d7:2a:9d:e1:b4:7a:cb:5e:0c:bb:e7:30:39:b5:bc:e6:88: d5:56:29:e6:44:a6:39:c2:bc:c5:f5:8e:6e:ce:4a:43:56:02: db:b2:6f:18:8a:07:92:3c:b8:50:75:23:2b:35:c3:d9:d2:d9: c2:b1:48:9c:df:d3:bc:14:cd:d3:b1:2d:92:70:bf:f4:4e:81: 41:8c:bd:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFEMEMxMTAvBgNVBAUTKDgyMDBCMUE1RTdDMTc2MDVCNTczM0M3NEZFQzFFRjEy NzNCM0VBMjUwHhcNMjUxMTAyMTUxOTI1WhcNMjUxMTA5MTUxOTI1WjAYMRYwFAYD VQQDEw02OTA3NzY3ZC0yMmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5V/ga+dfS2Hf3d0gJTJNA1qK9wEoLdhrhKwp4bTC5TwVVTi64Nzkg1mkoy6d p3sRPZ0yParUHDVGOnRSSaMYjZDZ5uW+Uz+6dsOedOc/pEEVAI4/xCKBGhfl4Fg0 LYSa+CrdtElyZW37VkZ0PN6RDl90A6KHP2PqwGGdsw2OmAmdlC4aA1tyvtQr9q+L u1k3YiTDNVnVXY93RcOtf28mjRCaXfR5v/9GkpUsfz5n+5nRlVjpu1eptRR2m6LT Wg4RivcntQSfmld44gP+QF157Bgk7N7o60TBs1d4zGkiP+8Rmx7n8ldsxN1X4dR1 jiy7+h4uVohJwtXKz6rDLhH5NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJuGJv36 VWSQ+NJd8gLjNrBxlxXXMB8GA1UdIwQYMBaAFIIAsaXnwXYFtXM8dP7B7xJzs+ol MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUQwQy8xQjBCMzU4RTFE QUIxMUUyOEE3RjAwQTgwOEIwMkNEMi9nZ0N4cGVmQmRnVzFjengwX3NIdkVuT3o2 aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnQ3hwZWZCZGdXMWN6eDBfc0h2RW5PejZpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUQwQy8xQjBCMzU4RTFEQUIxMUUyOEE3RjAwQTgwOEIwMkNEMi9nZ0N4cGVmQmRn VzFjengwX3NIdkVuT3o2aVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA280YB8lBb1ro7ce9OqPuUfP4+2yPI+tMkPLaPGAubBbudpTbkSiSL yHBZCPYribRyhWtuiw5Os6nEHJrCUb+LzTQu9/WFa7YOxrDbW5jiF9+EMuTWihJ1 jsZMNVbpxwUssfWoDkuD36l1Uh19Fv15eHMwACyE625Uhedu5EBzUsUgFBNvvhW5 rqQNMYvTDJGNbTstjmJ2fI6whWPZ19ZNkMiq9HmelHwNhTF7Fb+hJBrb3KQ71yqd 4bR6y14Mu+cwObW85ojVVinmRKY5wrzF9Y5uzkpDVgLbsm8YigeSPLhQdSMrNcPZ 0tnCsUic39O8FM3TsS2ScL/0ToFBjL3g -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:05 2025 by rpki-client