$ rpki-client -vvf rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft File: gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft (raw, json) Hash identifier: VwGI9mLEaIRM4n4/w85eX3QsSxQAq76gos0wpese/yY= Subject key identifier: 5D:2F:74:5E:6C:77:63:F7:E0:EB:D5:57:99:3E:F1:1E:B2:9E:01:1C Authority key identifier: 81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24 Certificate issuer: /CN=A912096C/serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124 Certificate serial: 07A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft Manifest number: 079D Signing time: Tue 28 Oct 2025 21:18:30 +0000 Manifest this update: Tue 28 Oct 2025 21:18:30 +0000 Manifest next update: Tue 04 Nov 2025 21:18:30 +0000 Files and hashes: 1: gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl (hash: KNwqqtlG7J5fJJ8FpYoT/ud13kfDudngFdIQ1KLLJcw=) 2: 7D7B467CE06011EDBB10FD53C4F9AE02.roa (hash: S7PCclJgGscLtYe2Pj+Y6a3iFp4ZeeTuzvJeZrm+yCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 21:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1958 (0x7a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912096C, serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124 Validity Not Before: Oct 28 21:18:30 2025 GMT Not After : Nov 4 21:18:30 2025 GMT Subject: CN=69013326-cd82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a0:4d:72:af:3f:3a:c0:5e:5f:8a:6b:82:67: 60:9f:c5:24:7a:2a:d7:b3:b4:a6:aa:ce:85:42:2a: fd:91:fe:b3:b8:16:db:c2:88:0e:ed:23:92:b6:b3: d1:5d:d8:20:cc:9a:e9:2b:92:02:2e:d4:54:c1:f5: 75:41:ff:ff:5e:77:44:71:f2:c1:ea:d6:2e:1f:7d: a6:da:a9:20:58:25:75:2f:2c:b3:c1:4f:f5:14:a9: 8e:c9:02:26:e7:53:05:6d:87:a8:97:21:9f:43:62: 39:a5:5f:b3:e6:78:52:60:96:74:3f:5b:e9:eb:e0: 9b:fc:76:dd:0c:5f:96:ff:56:cf:4f:46:75:b5:3c: 59:71:ca:9c:ed:72:dc:3f:a5:58:f2:c4:c5:28:f9: dc:79:e4:5b:d0:a3:59:e3:07:5e:46:37:68:8d:b3: 8c:9d:f5:b0:2e:74:a7:da:23:a3:2a:2a:58:fa:1a: 0b:5a:3c:6e:b7:92:bb:d4:2f:02:c6:05:b7:cf:17: 29:77:83:ef:c3:ff:a7:9d:96:cd:78:be:15:db:62: 9b:23:b8:34:86:77:7c:73:52:20:1a:52:3c:7f:b9: ed:83:b6:e8:df:3b:0a:f9:7e:60:97:c6:72:e2:3e: b4:09:1c:61:80:43:6c:28:f7:67:43:69:3f:b5:09: b9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:2F:74:5E:6C:77:63:F7:E0:EB:D5:57:99:3E:F1:1E:B2:9E:01:1C X509v3 Authority Key Identifier: keyid:81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:7f:36:f6:27:92:53:dc:a5:94:46:bd:77:49:bf:e9:a5:93: 35:b6:1e:53:7c:eb:d6:5a:85:4a:c3:97:8f:6c:49:5e:64:db: 71:45:6d:d5:8c:d8:31:fa:2b:0a:b9:79:27:e6:45:13:c0:33: dd:38:65:81:12:04:bd:e9:5e:6b:75:9b:6b:6e:6d:5e:a7:40: c3:6f:58:81:60:19:c6:9d:03:3f:15:5b:5e:41:4e:42:81:b1: a8:e5:77:41:68:07:77:eb:ec:25:9c:c0:dc:46:a0:22:47:2a: 1d:b9:6d:5e:fa:17:4a:69:f9:0b:cc:e0:6f:02:27:38:45:15: 31:0a:22:35:fc:7f:2d:3a:1d:e4:9b:ad:7b:05:48:8b:22:66: 08:ba:de:ef:6b:a9:57:72:52:ef:6f:72:aa:d0:fb:6c:23:55: 4e:16:3e:2a:51:b8:95:f3:ba:3b:83:9d:f3:2e:cc:04:33:c6: 99:f0:b0:9a:00:04:c1:b3:fe:ae:d0:20:0f:bb:0b:da:ec:b7: 0a:df:23:be:68:77:e3:54:0e:2f:2a:2d:62:b6:7a:46:ef:e2: f5:32:8d:78:8d:5b:90:36:f4:8c:32:26:ea:5d:39:73:e6:98: e7:32:ed:d3:4d:1a:fc:e8:3f:68:93:f3:9a:d2:b5:01:19:cf: f0:fc:47:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NkMxMTAvBgNVBAUTKDgxOTc2NjNBN0Y2MzQ3RDU5MUI2QjJCOUFERDVBMkQ1 NzRFOTExMjQwHhcNMjUxMDI4MjExODMwWhcNMjUxMTA0MjExODMwWjAYMRYwFAYD VQQDEw02OTAxMzMyNi1jZDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6BNcq8/OsBeX4prgmdgn8UkeirXs7Smqs6FQir9kf6zuBbbwogO7SOStrPR XdggzJrpK5ICLtRUwfV1Qf//XndEcfLB6tYuH32m2qkgWCV1LyyzwU/1FKmOyQIm 51MFbYeolyGfQ2I5pV+z5nhSYJZ0P1vp6+Cb/HbdDF+W/1bPT0Z1tTxZccqc7XLc P6VY8sTFKPnceeRb0KNZ4wdeRjdojbOMnfWwLnSn2iOjKipY+hoLWjxut5K71C8C xgW3zxcpd4Pvw/+nnZbNeL4V22KbI7g0hnd8c1IgGlI8f7ntg7bo3zsK+X5gl8Zy 4j60CRxhgENsKPdnQ2k/tQm5XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF0vdF5s d2P34OvVV5k+8R6yngEcMB8GA1UdIwQYMBaAFIGXZjp/Y0fVkbayua3VotV06REk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk2Qy8xRDMxQzE4NDI4 OTIxMUVCQUM4Q0NFMTNDNEY5QUUwMi9nWmRtT245alI5V1J0cks1cmRXaTFYVHBF U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2daZG1PbjlqUjlXUnRySzVyZFdpMVhUcEVTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk2Qy8xRDMxQzE4NDI4OTIxMUVCQUM4Q0NFMTNDNEY5QUUwMi9nWmRtT245alI5 V1J0cks1cmRXaTFYVHBFU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALfzb2J5JT3KWURr13Sb/ppZM1th5TfOvWWoVKw5ePbEleZNtxRW3V jNgx+isKuXkn5kUTwDPdOGWBEgS96V5rdZtrbm1ep0DDb1iBYBnGnQM/FVteQU5C gbGo5XdBaAd36+wlnMDcRqAiRyoduW1e+hdKafkLzOBvAic4RRUxCiI1/H8tOh3k m617BUiLImYIut7va6lXclLvb3Kq0PtsI1VOFj4qUbiV87o7g53zLswEM8aZ8LCa AATBs/6u0CAPuwva7LcK3yO+aHfjVA4vKi1itnpG7+L1Mo14jVuQNvSMMibqXTlz 5pjnMu3TTRr86D9ok/Oa0rUBGc/w/Edj -----END CERTIFICATE-----Generated at Wed Oct 29 15:50:08 2025 by rpki-client