$ rpki-client -vvf rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.mft File: Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.mft (raw, json) Hash identifier: h8JQ3LlnZdOAiPtqxjBTSviorV6xgZX9F97H3h8ZuKo= Subject key identifier: 5A:82:D5:11:A6:00:EE:13:8E:42:AE:15:34:4D:0E:25:27:00:AC:62 Authority key identifier: 19:C6:F6:C3:E6:63:D8:3D:44:11:92:18:C4:A2:9C:48:F8:BC:95:0B Certificate issuer: /CN=A915233F/serialNumber=19C6F6C3E663D83D44119218C4A29C48F8BC950B Certificate serial: 020D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.mft Manifest number: 0209 Signing time: Wed 05 Nov 2025 02:26:21 +0000 Manifest this update: Wed 05 Nov 2025 02:26:21 +0000 Manifest next update: Wed 12 Nov 2025 02:26:21 +0000 Files and hashes: 1: Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.crl (hash: A7lE1cnMUIC+zluWyBnH0inBSb3QM5zFGIPxom0jQnA=) 2: 272313529ADA11EDAA08043BC4F9AE02.roa (hash: Tkj82GzJ16obkJIFo6Exr0H47jGo2TnUKRA7738GYK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.crl rsync://rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:26:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915233F, serialNumber=19C6F6C3E663D83D44119218C4A29C48F8BC950B Validity Not Before: Nov 5 02:26:21 2025 GMT Not After : Nov 12 02:26:21 2025 GMT Subject: CN=690ab5cd-52df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:31:4b:00:2e:9c:b0:49:25:45:17:26:c5:e1: 06:d1:c8:fa:3e:96:5a:3f:4f:0b:d9:d2:04:0a:c5: 27:e6:16:2d:58:be:d2:bc:ca:71:12:3a:cc:47:63: 0b:d0:6b:12:ca:46:81:7f:07:19:74:71:43:6b:a3: 1d:a4:a6:a4:ad:26:97:d7:e7:5a:4b:7c:3b:b9:34: 0a:33:4f:42:0d:d6:99:13:1a:41:62:9d:5b:81:4a: c0:e0:38:69:d1:a9:9e:29:88:77:86:4a:fd:f2:0b: 03:1a:bf:48:a1:9d:7c:e3:1e:1e:75:b7:a6:45:70: 3c:df:5d:7c:3d:db:41:59:41:b9:e9:0f:44:42:08: 10:d6:4e:72:f1:da:a6:97:bd:37:1e:5d:68:c1:94: 0a:d7:bb:7d:4c:bf:94:b4:8e:04:01:08:82:9f:0f: fb:4f:a5:fa:1d:6d:17:c1:49:00:3c:77:98:0f:b7: 20:41:0a:b3:1b:36:6e:3c:c2:b1:32:55:a7:7f:f4: e0:bf:71:f3:dc:96:34:6e:61:f8:fd:38:a6:59:76: ba:b9:01:00:6b:2c:29:1c:07:ac:d0:70:f1:df:d1: 33:97:7d:80:6b:b4:1f:5a:35:06:ae:7c:95:b6:4a: 80:4c:a5:89:81:39:60:e6:6f:43:dc:64:be:1e:a3: d7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:82:D5:11:A6:00:EE:13:8E:42:AE:15:34:4D:0E:25:27:00:AC:62 X509v3 Authority Key Identifier: keyid:19:C6:F6:C3:E6:63:D8:3D:44:11:92:18:C4:A2:9C:48:F8:BC:95:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:84:e5:64:1a:1c:17:ae:54:73:91:a4:29:c2:ff:b1:4c:5f: 46:b3:fd:ec:de:c6:4a:a1:fa:a2:11:0f:8e:9d:72:a4:c1:34: 75:4b:6d:63:2c:41:27:70:3d:db:76:44:1f:7a:ef:f6:be:63: 58:e6:e3:ce:6b:46:3e:3d:d3:a3:af:77:f5:f7:29:fd:42:4a: 28:1d:39:05:42:b0:60:36:8b:20:ff:e5:67:76:2f:e8:75:ee: 6e:2e:dc:f3:7e:d8:1f:93:39:11:52:d3:28:fc:f2:7b:93:a9: ba:5c:3d:1e:0c:73:29:9c:17:1f:7b:f3:61:cb:09:98:6d:fd: 76:5d:55:b2:1d:3d:c1:26:56:3c:e1:7e:24:f4:48:05:0e:34: 4c:1c:96:41:a4:cc:57:42:b8:03:29:db:bb:16:81:a2:b4:7f: fe:99:39:f1:eb:60:20:d4:ed:b8:f1:6e:50:33:b1:bf:d2:51: e6:65:c9:28:9b:82:8d:6f:79:bd:b4:08:0f:7c:f7:47:c9:b7: b5:ce:fe:48:3c:05:91:1c:47:14:ab:88:d8:ce:7c:01:30:cf: 0e:e3:0e:3a:ee:54:17:1a:84:6b:28:84:9a:64:cc:48:a0:77: b4:c1:5e:67:d8:4b:df:ca:dc:cd:a2:27:91:6f:9e:08:a0:22: 72:d1:48:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTIzM0YxMTAvBgNVBAUTKDE5QzZGNkMzRTY2M0Q4M0Q0NDExOTIxOEM0QTI5QzQ4 RjhCQzk1MEIwHhcNMjUxMTA1MDIyNjIxWhcNMjUxMTEyMDIyNjIxWjAYMRYwFAYD VQQDEw02OTBhYjVjZC01MmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApzFLAC6csEklRRcmxeEG0cj6PpZaP08L2dIECsUn5hYtWL7SvMpxEjrMR2ML 0GsSykaBfwcZdHFDa6MdpKakrSaX1+daS3w7uTQKM09CDdaZExpBYp1bgUrA4Dhp 0ameKYh3hkr98gsDGr9IoZ184x4edbemRXA83118PdtBWUG56Q9EQggQ1k5y8dqm l703Hl1owZQK17t9TL+UtI4EAQiCnw/7T6X6HW0XwUkAPHeYD7cgQQqzGzZuPMKx MlWnf/Tgv3Hz3JY0bmH4/TimWXa6uQEAaywpHAes0HDx39Ezl32Aa7QfWjUGrnyV tkqATKWJgTlg5m9D3GS+HqPXPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqC1RGm AO4TjkKuFTRNDiUnAKxiMB8GA1UdIwQYMBaAFBnG9sPmY9g9RBGSGMSinEj4vJUL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjMzRi9FRUQ4RUY0NjlB RDcxMUVEQkU2OUNEM0FDNEY5QUUwMi9HY2Iydy1aajJEMUVFWklZeEtLY1NQaThs UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0djYjJ3LVpqMkQxRUVaSVl4S0tjU1BpOGxRcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjMzRi9FRUQ4RUY0NjlBRDcxMUVEQkU2OUNEM0FDNEY5QUUwMi9HY2Iydy1aajJE MUVFWklZeEtLY1NQaThsUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClhOVkGhwXrlRzkaQpwv+xTF9Gs/3s3sZKofqiEQ+OnXKkwTR1S21j LEEncD3bdkQfeu/2vmNY5uPOa0Y+PdOjr3f19yn9QkooHTkFQrBgNosg/+Vndi/o de5uLtzzftgfkzkRUtMo/PJ7k6m6XD0eDHMpnBcfe/NhywmYbf12XVWyHT3BJlY8 4X4k9EgFDjRMHJZBpMxXQrgDKdu7FoGitH/+mTnx62Ag1O248W5QM7G/0lHmZcko m4KNb3m9tAgPfPdHybe1zv5IPAWRHEcUq4jYznwBMM8O4w467lQXGoRrKISaZMxI oHe0wV5n2EvfytzNoieRb54IoCJy0Ug0 -----END CERTIFICATE-----Generated at Wed Nov 5 05:27:26 2025 by rpki-client