$ rpki-client -vvf rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft File: gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft (raw, json) Hash identifier: iG8ZLr3sZTJ4ZdMwcaJ4tsKOVCidsjS5jOWwlu88klI= Subject key identifier: FC:D6:AE:FF:36:2A:3E:37:15:98:1A:7E:CB:B2:CC:C0:03:9B:F1:EE Authority key identifier: 80:B1:8B:81:D4:7B:61:77:13:04:E0:F7:61:0D:11:A7:C3:40:61:23 Certificate issuer: /CN=A9134A42/serialNumber=80B18B81D47B61771304E0F7610D11A7C3406123 Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft Manifest number: 8B Signing time: Mon 03 Nov 2025 06:37:42 +0000 Manifest this update: Mon 03 Nov 2025 06:37:41 +0000 Manifest next update: Mon 10 Nov 2025 06:37:41 +0000 Files and hashes: 1: gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.crl (hash: rXJiASo4cNZ4zJXkxzzuRetsKe7GejO+pPVt9hvpmC4=) 2: 89040F5A341011F0808A991DC4F9AE02.roa (hash: aQCWDBoOh5osM5C7MBD0kh6o6WsN7hx2kjcWDkx53es=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.crl rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:37:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134A42, serialNumber=80B18B81D47B61771304E0F7610D11A7C3406123 Validity Not Before: Nov 3 06:37:41 2025 GMT Not After : Nov 10 06:37:41 2025 GMT Subject: CN=69084db6-6de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:16:c8:7e:9a:d7:bd:89:1c:12:e7:9a:14:2c: c4:5c:34:27:30:8c:8f:c3:63:f9:37:e6:43:a8:da: 59:30:04:32:8d:79:49:e0:89:bf:79:d7:f3:1c:74: 6f:37:b7:5a:98:21:5b:b9:1e:33:0d:39:6d:92:09: 5c:e3:c4:23:c1:39:1d:b9:e5:91:86:b9:2e:8a:5f: e5:bd:b7:94:e1:91:dd:7f:bc:be:8a:66:24:ea:6c: 9c:2f:49:91:e7:e2:91:4e:40:27:bb:98:5d:d4:bd: 6c:2d:9a:ba:bb:40:bd:7c:42:e9:e0:82:8e:4f:3a: 37:ab:44:79:92:6e:f0:b6:4c:69:51:b8:75:1c:52: 8d:54:0f:d3:e8:7a:02:34:a7:93:02:4c:0a:78:50: 36:35:59:c9:72:04:9a:51:ce:f9:b7:b2:bf:55:8a: b1:e6:bc:12:95:94:34:d3:0b:4f:63:c7:bf:60:47: 1f:d3:ce:82:26:64:f9:87:c3:07:e2:82:58:15:13: d4:92:5d:e6:52:c7:dd:d3:cb:95:08:d3:ab:65:8e: 12:6a:b8:3d:77:b1:e2:2a:54:4e:46:2d:43:0c:d8: 1a:df:74:42:5f:ff:17:49:83:f1:e7:bb:c4:96:e0: d1:6e:1b:39:b4:8d:36:35:76:49:17:e1:93:1b:99: 77:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D6:AE:FF:36:2A:3E:37:15:98:1A:7E:CB:B2:CC:C0:03:9B:F1:EE X509v3 Authority Key Identifier: keyid:80:B1:8B:81:D4:7B:61:77:13:04:E0:F7:61:0D:11:A7:C3:40:61:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:5f:f3:ed:fe:e2:87:46:47:a7:5c:a2:20:47:82:50:33:bd: 63:cd:b6:22:b3:09:ea:66:f0:37:6b:eb:13:87:6c:e6:6c:03: 7a:15:4f:af:8e:03:70:26:5f:e2:a5:ad:fd:01:c1:8b:09:41: 54:ef:e6:cb:a0:71:a9:b3:51:27:4a:fd:29:33:ce:16:6e:84: 31:7a:c0:b3:d1:28:30:2b:47:76:19:6a:04:30:9c:7b:49:23: c7:1b:bc:b3:a9:c6:40:05:61:51:78:cd:56:11:88:5b:ae:0a: 49:e4:30:ce:8c:9f:20:ea:e5:0e:66:b8:78:3a:64:38:c2:df: f6:8c:a4:42:a0:77:4a:0f:a0:51:84:c2:99:f9:dc:31:24:20: 03:58:f9:97:a2:1e:36:d1:c5:1f:a6:6b:17:f6:39:28:89:42: 79:96:24:cb:1a:83:14:3b:4d:15:4c:1c:04:46:2b:b0:1c:3d: 24:5d:f8:dd:a5:f2:f9:c6:b7:2a:d9:b7:08:e1:42:6e:dd:80: 7b:03:48:a4:04:f1:11:62:0b:70:9e:03:cf:fd:e5:7f:a6:34: 89:60:ec:d0:48:03:0d:25:10:f7:87:4d:04:a7:0f:96:71:5f: a0:c9:3b:85:38:88:2f:15:71:b9:31:39:39:2b:e9:9d:34:83: 29:20:47:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRBNDIxMTAvBgNVBAUTKDgwQjE4QjgxRDQ3QjYxNzcxMzA0RTBGNzYxMEQxMUE3 QzM0MDYxMjMwHhcNMjUxMTAzMDYzNzQxWhcNMjUxMTEwMDYzNzQxWjAYMRYwFAYD VQQDEw02OTA4NGRiNi02ZGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnRbIfprXvYkcEueaFCzEXDQnMIyPw2P5N+ZDqNpZMAQyjXlJ4Im/edfzHHRv N7damCFbuR4zDTltkglc48QjwTkdueWRhrkuil/lvbeU4ZHdf7y+imYk6mycL0mR 5+KRTkAnu5hd1L1sLZq6u0C9fELp4IKOTzo3q0R5km7wtkxpUbh1HFKNVA/T6HoC NKeTAkwKeFA2NVnJcgSaUc75t7K/VYqx5rwSlZQ00wtPY8e/YEcf086CJmT5h8MH 4oJYFRPUkl3mUsfd08uVCNOrZY4Sarg9d7HiKlRORi1DDNga33RCX/8XSYPx57vE luDRbhs5tI02NXZJF+GTG5l3mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPzWrv82 Kj43FZgafsuyzMADm/HuMB8GA1UdIwQYMBaAFICxi4HUe2F3EwTg92ENEafDQGEj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEE0Mi8xRkIwRjY3NkVB OEMxMUVGODhDOTA4NUFDNEY5QUUwMi9nTEdMZ2RSN1lYY1RCT0QzWVEwUnA4TkFZ U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dMR0xnZFI3WVhjVEJPRDNZUTBScDhOQVlTTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEE0Mi8xRkIwRjY3NkVBOEMxMUVGODhDOTA4NUFDNEY5QUUwMi9nTEdMZ2RSN1lY Y1RCT0QzWVEwUnA4TkFZU00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMX/Pt/uKHRkenXKIgR4JQM71jzbYiswnqZvA3a+sTh2zmbAN6FU+v jgNwJl/ipa39AcGLCUFU7+bLoHGps1EnSv0pM84WboQxesCz0SgwK0d2GWoEMJx7 SSPHG7yzqcZABWFReM1WEYhbrgpJ5DDOjJ8g6uUOZrh4OmQ4wt/2jKRCoHdKD6BR hMKZ+dwxJCADWPmXoh420cUfpmsX9jkoiUJ5liTLGoMUO00VTBwERiuwHD0kXfjd pfL5xrcq2bcI4UJu3YB7A0ikBPERYgtwngPP/eV/pjSJYOzQSAMNJRD3h00Epw+W cV+gyTuFOIgvFXG5MTk5K+mdNIMpIEe8 -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:31 2025 by rpki-client