$ rpki-client -vvf rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft File: gYE9avls8KB0gHHNux4nD2tcYRM.mft (raw, json) Hash identifier: HWld6q+lqN0l79/xetY/7JI4Vj2Q9zqTmq4I11b1kP4= Subject key identifier: 8D:92:4C:D3:29:45:9C:A1:98:ED:C3:D4:AD:AD:0B:A4:96:34:23:ED Authority key identifier: 81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 Certificate issuer: /CN=A9128DE9/serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Certificate serial: 0C37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft Manifest number: 0C24 Signing time: Sun 02 Nov 2025 18:42:35 +0000 Manifest this update: Sun 02 Nov 2025 18:42:34 +0000 Manifest next update: Sun 09 Nov 2025 18:42:34 +0000 Files and hashes: 1: gYE9avls8KB0gHHNux4nD2tcYRM.crl (hash: gx1iVnkPL3DUvPMzPFEqEl0MxE5IVohCrXOqledC+TE=) 2: 1D77B4081BD911EAB49CC840C4F9AE02.roa (hash: vbaep3wET3+ifW71kGbMN+H4/YmdHdtnb1FCSwufM8U=) 3: B3148DDA1BD711EAB801703AC4F9AE02.roa (hash: qXQzrLjHLMEGSmHbPLY3DTrLOE6y6AG6P8s1JsWZiBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:42:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3127 (0xc37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128DE9, serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Validity Not Before: Nov 2 18:42:34 2025 GMT Not After : Nov 9 18:42:34 2025 GMT Subject: CN=6907a61a-259e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:10:8d:51:f6:ea:0b:40:ea:f6:ab:c3:0f:36: 75:fd:8b:aa:7e:79:a9:a5:1f:a6:41:79:17:ae:76: f2:6b:60:e8:1e:a9:8c:96:53:70:93:68:07:40:a5: e6:a8:8c:01:ed:e1:6a:26:21:f9:16:6b:01:85:14: 9d:94:2a:42:73:2b:f3:72:7a:b7:8e:86:8a:b3:de: bf:99:ed:09:d1:2c:3a:50:be:2c:f7:0f:6d:ec:ba: b5:07:de:4b:a6:92:47:b6:91:bd:16:42:98:bb:0d: 28:71:01:34:0e:f5:87:a4:6e:0f:da:ec:1e:6a:0f: e3:e8:84:2a:b5:80:f1:e5:52:0f:bb:f9:9e:ee:25: 9b:70:9e:38:39:1a:9d:f6:55:9c:80:30:64:9b:97: 95:0d:e9:5c:fa:f0:99:be:f4:27:cf:69:8c:a7:a9: c2:07:e2:f5:09:fe:f9:76:1c:43:0d:ee:00:39:3b: 1e:f2:27:7a:5e:92:e0:c5:a5:e2:cc:40:64:2f:5a: b8:43:48:21:4d:ce:91:80:01:2b:2c:63:25:9d:aa: 8d:85:4e:a1:d3:e2:e9:52:88:bd:ed:59:c4:66:55: 66:97:11:e3:6d:6b:3b:17:2f:47:0d:c8:8d:f3:2b: ad:d8:89:62:2e:04:6d:09:73:e9:3f:00:e9:51:28: ad:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:92:4C:D3:29:45:9C:A1:98:ED:C3:D4:AD:AD:0B:A4:96:34:23:ED X509v3 Authority Key Identifier: keyid:81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:48:22:6a:93:b2:a2:d5:10:ff:ca:5a:2f:42:ed:aa:a8:1f: 2a:a4:a4:f1:b7:88:a7:c7:21:ce:1f:57:9e:b7:0c:c4:b7:3a: 6c:b2:b3:b4:6e:73:b1:91:d7:14:de:68:35:c7:0d:0f:16:00: 93:9c:92:13:2a:7a:3f:7d:51:4d:61:e5:3b:15:74:f2:e9:54: fa:f0:6d:31:de:c7:2e:98:43:6e:ba:bd:43:2c:bb:18:cd:02: 1e:bc:49:47:30:d0:f2:be:14:05:59:4d:94:fb:32:71:23:6d: 46:80:a0:b8:e0:a7:30:0f:a7:f2:76:5b:60:2a:7c:ca:50:4f: 82:26:1b:b2:60:57:da:39:96:0e:54:72:40:d1:a7:45:06:c9: d2:df:eb:55:b7:d5:cc:12:b6:99:df:f6:a6:e0:da:1a:bd:a1: a4:79:75:71:77:75:d5:5a:26:92:56:d8:4b:6e:67:74:0c:86: e6:3b:dc:4c:3f:df:7b:fa:06:a6:8d:74:b5:90:6b:d2:07:94: 6f:30:89:d6:d2:f6:43:c9:e1:5a:c7:f4:04:15:55:3c:19:cf: 31:bb:13:f2:23:7a:6f:f4:14:cf:b4:76:b0:22:f4:4a:2c:c5: 58:82:34:47:39:a1:86:7a:07:93:8e:a6:b5:5c:6e:ec:03:18: 60:bc:3f:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhERTkxMTAvBgNVBAUTKDgxODEzRDZBRjk2Q0YwQTA3NDgwNzFDREJCMUUyNzBG NkI1QzYxMTMwHhcNMjUxMTAyMTg0MjM0WhcNMjUxMTA5MTg0MjM0WjAYMRYwFAYD VQQDEw02OTA3YTYxYS0yNTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBCNUfbqC0Dq9qvDDzZ1/YuqfnmppR+mQXkXrnbya2DoHqmMllNwk2gHQKXm qIwB7eFqJiH5FmsBhRSdlCpCcyvzcnq3joaKs96/me0J0Sw6UL4s9w9t7Lq1B95L ppJHtpG9FkKYuw0ocQE0DvWHpG4P2uweag/j6IQqtYDx5VIPu/me7iWbcJ44ORqd 9lWcgDBkm5eVDelc+vCZvvQnz2mMp6nCB+L1Cf75dhxDDe4AOTse8id6XpLgxaXi zEBkL1q4Q0ghTc6RgAErLGMlnaqNhU6h0+LpUoi97VnEZlVmlxHjbWs7Fy9HDciN 8yut2IliLgRtCXPpPwDpUSitXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2STNMp RZyhmO3D1K2tC6SWNCPtMB8GA1UdIwQYMBaAFIGBPWr5bPCgdIBxzbseJw9rXGET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOERFOS9ENjlCNDVFODFC RDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhLQjBnSEhOdXg0bkQydGNZ Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dZRTlhdmxzOEtCMGdISE51eDRuRDJ0Y1lSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OERFOS9ENjlCNDVFODFCRDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhL QjBnSEhOdXg0bkQydGNZUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWSCJqk7Ki1RD/ylovQu2qqB8qpKTxt4inxyHOH1eetwzEtzpssrO0 bnOxkdcU3mg1xw0PFgCTnJITKno/fVFNYeU7FXTy6VT68G0x3scumENuur1DLLsY zQIevElHMNDyvhQFWU2U+zJxI21GgKC44KcwD6fydltgKnzKUE+CJhuyYFfaOZYO VHJA0adFBsnS3+tVt9XMEraZ3/am4NoavaGkeXVxd3XVWiaSVthLbmd0DIbmO9xM P997+gamjXS1kGvSB5RvMInW0vZDyeFax/QEFVU8Gc8xuxPyI3pv9BTPtHawIvRK LMVYgjRHOaGGegeTjqa1XG7sAxhgvD/4 -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:47 2025 by rpki-client