$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft File: gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft (raw, json) Hash identifier: 6ePLHgLDKdA00x0S/8OdT8uS3x6bFzpUT7bP7V7E6ms= Subject key identifier: 05:A7:3C:A9:DA:90:0F:87:E2:A3:28:52:B1:BE:40:D9:AE:CC:BC:26 Authority key identifier: 81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA Certificate issuer: /CN=A9149F3E/serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA Certificate serial: 34E5 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft Manifest number: 34E5 Signing time: Fri 31 Oct 2025 14:21:49 +0000 Manifest this update: Fri 31 Oct 2025 14:21:49 +0000 Manifest next update: Fri 07 Nov 2025 14:21:49 +0000 Files and hashes: 1: gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl (hash: 0uZl6cDvlGmIjSBSqY8peq6cZ9peeZD7ntEqZFYDogU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 14:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13541 (0x34e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA Validity Not Before: Oct 31 14:21:49 2025 GMT Not After : Nov 7 14:21:49 2025 GMT Subject: CN=6904c5fd-d81a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fd:49:c0:96:31:29:46:81:5f:9b:b1:23:fc: e4:da:9c:c9:29:a2:ee:cc:33:ac:58:da:ab:fb:7e: a4:7d:8d:81:da:89:7b:79:a0:2c:0e:62:cc:b1:8a: bd:52:4e:68:e1:33:34:4d:87:cc:04:57:2b:5b:fe: 5f:c2:f2:5e:d6:16:2b:8a:7c:d5:ba:17:84:a0:50: ae:54:10:a3:4c:4e:3a:9d:3b:a0:e2:2c:a9:c7:88: e1:24:1e:e4:a1:69:80:9a:32:38:71:46:19:39:55: 88:cf:67:d7:f7:67:ab:d2:61:d8:8c:a4:4e:01:ae: 63:96:54:df:ae:3f:f5:1d:9f:9e:de:98:aa:ec:66: 48:b3:b7:bd:ea:b3:34:de:6d:53:e0:42:85:96:a1: c3:94:87:c0:94:aa:91:17:88:51:65:df:4d:1f:51: f9:b5:c4:27:d9:97:5c:8c:dc:21:b5:e3:d1:98:70: e8:64:3b:17:c0:ac:49:eb:6c:14:68:ae:af:b7:6b: 10:b4:e4:33:41:22:e9:d1:c8:c4:8f:b6:4e:bd:d5: 1e:60:c5:5b:35:5f:89:58:e2:e9:e1:65:54:f8:a4: 6e:3e:0a:49:b8:12:8f:23:61:74:95:eb:57:e6:6f: 9d:6a:b0:8a:eb:f1:da:03:a9:49:a6:3d:36:e8:84: b3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A7:3C:A9:DA:90:0F:87:E2:A3:28:52:B1:BE:40:D9:AE:CC:BC:26 X509v3 Authority Key Identifier: keyid:81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:c6:c6:06:7a:dc:06:2f:0b:30:db:da:66:23:ca:76:5b:98: 3c:68:81:dd:ba:50:89:a3:4b:f0:79:4f:05:b5:fb:7f:1a:cc: 8b:c2:37:8a:77:01:33:ff:cd:76:b4:d1:5f:ee:8e:d2:80:78: 62:93:fe:41:da:9b:dd:cd:a6:89:77:8a:1c:35:45:0e:86:90: 2c:77:fd:06:57:d5:23:41:55:4f:e6:56:b6:3d:b7:e8:33:45: ce:41:39:9e:e1:bf:cc:6c:e3:eb:01:b7:14:74:5b:82:53:69: f3:b6:9a:12:04:44:1f:ac:e8:9c:0d:8a:48:54:30:ab:a3:90: 25:fc:bb:c5:7d:b6:e6:09:62:4d:ee:b8:a2:ef:ce:d7:23:fe: 16:22:34:42:69:09:fc:36:f7:a9:1e:5f:04:69:17:c7:3f:f7: c6:2a:2e:a0:32:64:b7:70:91:64:d3:88:70:3b:92:0e:72:42: 6a:7e:c0:95:c7:6f:20:58:9b:bc:6e:e1:80:95:81:1d:57:8c: 47:47:19:45:8c:71:12:8e:49:20:75:db:00:eb:19:e7:f7:64: 1f:0a:8e:e2:1f:37:aa:97:36:24:f8:e2:15:33:1b:9c:50:c5: 67:91:5b:2c:94:b4:90:10:46:67:09:58:c7:27:09:a0:d6:1c: c4:01:77:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKDgxRkQ1NjNDQzY4NjVERTAyREE2QTgzRjJBMDFGMTE2 MTExRDBGRkEwHhcNMjUxMDMxMTQyMTQ5WhcNMjUxMTA3MTQyMTQ5WjAYMRYwFAYD VQQDEw02OTA0YzVmZC1kODFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/1JwJYxKUaBX5uxI/zk2pzJKaLuzDOsWNqr+36kfY2B2ol7eaAsDmLMsYq9 Uk5o4TM0TYfMBFcrW/5fwvJe1hYrinzVuheEoFCuVBCjTE46nTug4iypx4jhJB7k oWmAmjI4cUYZOVWIz2fX92er0mHYjKROAa5jllTfrj/1HZ+e3piq7GZIs7e96rM0 3m1T4EKFlqHDlIfAlKqRF4hRZd9NH1H5tcQn2ZdcjNwhtePRmHDoZDsXwKxJ62wU aK6vt2sQtOQzQSLp0cjEj7ZOvdUeYMVbNV+JWOLp4WVU+KRuPgpJuBKPI2F0letX 5m+darCK6/HaA6lJpj026ISzSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAWnPKna kA+H4qMoUrG+QNmuzLwmMB8GA1UdIwQYMBaAFIH9VjzGhl3gLaaoPyoB8RYRHQ/6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS84ODcxRkIyQzFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9nZjFXUE1hR1hlQXRwcWdfS2dIeEZoRWRE X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL2dmMVdQTWFHWGVBdHBxZ19LZ0h4RmhFZERfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS84ODcxRkIyQzFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9nZjFXUE1hR1hl QXRwcWdfS2dIeEZoRWREX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQxsYGetwGLwsw29pmI8p2W5g8aIHdulCJo0vweU8Ftft/GsyLwjeK dwEz/812tNFf7o7SgHhik/5B2pvdzaaJd4ocNUUOhpAsd/0GV9UjQVVP5la2Pbfo M0XOQTme4b/MbOPrAbcUdFuCU2nztpoSBEQfrOicDYpIVDCro5Al/LvFfbbmCWJN 7rii787XI/4WIjRCaQn8NvepHl8EaRfHP/fGKi6gMmS3cJFk04hwO5IOckJqfsCV x28gWJu8buGAlYEdV4xHRxlFjHESjkkgddsA6xnn92QfCo7iHzeqlzYk+OIVMxuc UMVnkVsslLSQEEZnCVjHJwmg1hzEAXd8 -----END CERTIFICATE-----Generated at Sun Nov 2 00:28:16 2025 by rpki-client