$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft File: GHAMs9ZQejMEuusnDe7RMBzj2QI.mft (raw, json) Hash identifier: IYp+9D6pvPrx4V0HGZBiPquBSF8YVBqC8Wzr86FHq6k= Subject key identifier: 77:5E:C9:AE:DA:C0:8B:77:B4:3E:1C:DA:DE:5B:06:8F:8E:1C:85:9A Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 Certificate issuer: /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Certificate serial: 18A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft Manifest number: 188F Signing time: Sun 02 Nov 2025 16:29:06 +0000 Manifest this update: Sun 02 Nov 2025 16:29:06 +0000 Manifest next update: Sun 09 Nov 2025 16:29:06 +0000 Files and hashes: 1: GHAMs9ZQejMEuusnDe7RMBzj2QI.crl (hash: jeLNS/0lX/TYaSJ74qo+T4h6MCFXIgQIaO+gYP0BQEY=) 2: C2BE71E8AA9A11E7B4776E52C4F9AE02.roa (hash: oKQhI+83g6vqFAl7basVs7Sw18T4MEh7Nu9fLLathWs=) 3: E8780C5EAC8011E79D9EAC60C4F9AE02.roa (hash: M0giNeJUYFHHWIGJ3hp4IIxg76YLnoDKySser5XKcL4=) 4: BB9C86EA0B0F11E89DF24170C4F9AE02.roa (hash: tLIsLDvbVjMe1ALZXZoP7laPhfEa7wWbXxVFhcp282s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6313 (0x18a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBCF, serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Validity Not Before: Nov 2 16:29:06 2025 GMT Not After : Nov 9 16:29:06 2025 GMT Subject: CN=690786d2-2457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:7e:3a:12:64:1e:75:dd:bb:36:8d:f6:39:30: 01:fa:b9:7b:c9:eb:91:82:4c:88:43:a6:f2:3e:fd: 9a:38:86:73:5c:c7:54:4e:d4:0b:65:af:e8:3a:ed: 0b:cc:2a:d0:3d:40:27:a0:1c:66:81:00:14:f3:c9: f7:a7:49:1d:4f:fe:51:e2:b0:ae:a8:64:62:20:7f: ff:fe:6a:5a:1f:b4:f4:11:bb:8c:61:29:4d:b8:d1: 73:90:4f:7e:9b:cb:a5:a6:d0:67:5d:3f:f2:5f:a0: e2:43:49:09:25:a2:e1:20:ac:b4:5f:ca:f7:09:78: 20:6a:1b:14:fc:aa:59:11:12:00:7b:95:2f:fd:fa: 9e:4c:82:46:6b:95:24:d4:98:49:04:57:54:6b:78: 4d:ee:c4:91:96:6b:f5:25:2e:2f:52:8d:d4:d2:2f: 9e:91:b4:f0:27:09:18:fb:41:71:b4:aa:e7:bd:87: da:ea:8f:8c:71:e0:56:5a:19:18:90:2f:a3:31:fa: af:81:c1:99:9b:00:1d:88:fc:02:9a:6d:96:0f:38: 4e:8f:21:df:69:f5:f8:6f:89:26:c1:58:77:79:21: 19:21:3d:70:4c:96:bd:69:09:2a:6d:8b:33:90:26: 96:eb:b0:28:44:87:bb:4f:b1:66:f5:c5:b6:fa:56: c6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:5E:C9:AE:DA:C0:8B:77:B4:3E:1C:DA:DE:5B:06:8F:8E:1C:85:9A X509v3 Authority Key Identifier: keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:fb:68:a8:7a:44:d8:23:19:d3:62:bb:80:34:16:7a:48:c4: c8:d2:e7:a6:d6:5a:33:75:2a:c9:c7:41:e9:17:d8:41:25:b2: a1:7d:16:50:03:e1:6e:a5:e5:5e:26:ce:e5:5e:c5:b5:0f:67: e5:4b:e4:89:ba:d2:87:3f:64:84:2b:d7:fd:56:3d:78:7a:3f: b9:da:a5:e5:cd:59:61:dc:bc:43:8e:98:d7:0f:9f:b4:4a:5f: 48:92:73:8a:50:a0:f3:c5:cd:2f:3f:47:8c:3b:15:25:0a:68: 04:15:b8:b6:0c:9a:ac:e3:18:71:e0:9f:dc:05:78:fe:b4:ed: 6f:95:9a:ac:d8:42:da:42:4d:ed:7f:da:78:7f:f6:a6:0d:21: f1:48:bc:55:f6:d7:56:e6:d1:bd:b6:a9:93:70:2e:1a:d4:df: b2:7a:8a:ae:6e:9d:cf:e4:82:b4:ec:80:d8:92:78:72:a4:52: 8a:f9:7e:bb:e3:2a:d2:9c:a3:80:b5:85:c7:b9:36:5a:20:cd: c2:86:e1:6e:fa:27:c7:23:80:84:66:ba:fd:c1:71:8f:d6:13: a6:d9:1c:ab:61:9a:7f:04:9d:54:d6:dc:41:12:da:7f:a2:f3: b7:84:96:8e:be:10:26:fb:32:44:25:3c:c9:15:46:dc:4b:78: 5c:a3:8b:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCQ0YxMTAvBgNVBAUTKDE4NzAwQ0IzRDY1MDdBMzMwNEJBRUIyNzBERUVEMTMw MUNFM0Q5MDIwHhcNMjUxMTAyMTYyOTA2WhcNMjUxMTA5MTYyOTA2WjAYMRYwFAYD VQQDEw02OTA3ODZkMi0yNDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9H46EmQedd27No32OTAB+rl7yeuRgkyIQ6byPv2aOIZzXMdUTtQLZa/oOu0L zCrQPUAnoBxmgQAU88n3p0kdT/5R4rCuqGRiIH///mpaH7T0EbuMYSlNuNFzkE9+ m8ulptBnXT/yX6DiQ0kJJaLhIKy0X8r3CXggahsU/KpZERIAe5Uv/fqeTIJGa5Uk 1JhJBFdUa3hN7sSRlmv1JS4vUo3U0i+ekbTwJwkY+0FxtKrnvYfa6o+MceBWWhkY kC+jMfqvgcGZmwAdiPwCmm2WDzhOjyHfafX4b4kmwVh3eSEZIT1wTJa9aQkqbYsz kCaW67AoRIe7T7Fm9cW2+lbGlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHdeya7a wIt3tD4c2t5bBo+OHIWaMB8GA1UdIwQYMBaAFBhwDLPWUHozBLrrJw3u0TAc49kC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJDRi80QUI1NzZCRUFB NUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVqTUV1dXNuRGU3Uk1Cemoy UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIQU1zOVpRZWpNRXV1c25EZTdSTUJ6ajJRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkJDRi80QUI1NzZCRUFBNUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVq TUV1dXNuRGU3Uk1CemoyUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBf+2ioekTYIxnTYruANBZ6SMTI0uem1lozdSrJx0HpF9hBJbKhfRZQ A+FupeVeJs7lXsW1D2flS+SJutKHP2SEK9f9Vj14ej+52qXlzVlh3LxDjpjXD5+0 Sl9IknOKUKDzxc0vP0eMOxUlCmgEFbi2DJqs4xhx4J/cBXj+tO1vlZqs2ELaQk3t f9p4f/amDSHxSLxV9tdW5tG9tqmTcC4a1N+yeoqubp3P5IK07IDYknhypFKK+X67 4yrSnKOAtYXHuTZaIM3ChuFu+ifHI4CEZrr9wXGP1hOm2RyrYZp/BJ1U1txBEtp/ ovO3hJaOvhAm+zJEJTzJFUbcS3hco4sY -----END CERTIFICATE-----Generated at Mon Nov 3 10:21:07 2025 by rpki-client