$ rpki-client -vvf rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft File: Gn5MpKocInIldylqsFeD11WxFr0.mft (raw, json) Hash identifier: KaZVDAxGgO1UN9/ZSQtkfgu+JJGRCI6yfultZ5V682s= Subject key identifier: BD:35:05:5C:DC:28:F8:44:20:7A:8A:C0:58:CC:78:99:36:7B:03:13 Authority key identifier: 1A:7E:4C:A4:AA:1C:22:72:25:77:29:6A:B0:57:83:D7:55:B1:16:BD Certificate issuer: /CN=A915803A/serialNumber=1A7E4CA4AA1C22722577296AB05783D755B116BD Certificate serial: 0C21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gn5MpKocInIldylqsFeD11WxFr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft Manifest number: 0C17 Signing time: Sun 02 Nov 2025 18:45:39 +0000 Manifest this update: Sun 02 Nov 2025 18:45:39 +0000 Manifest next update: Sun 09 Nov 2025 18:45:39 +0000 Files and hashes: 1: Gn5MpKocInIldylqsFeD11WxFr0.crl (hash: n5pl6zSrr5XeDGLcaaMSsA9jL3680oH4p2G2OSpW51o=) 2: 5B9628CE1E5311EA9A133560C4F9AE02.roa (hash: 4J/p4/at9N0h24OffWZyBK2PKe4zkvNfclH1N1tyx/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.crl rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gn5MpKocInIldylqsFeD11WxFr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3105 (0xc21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915803A, serialNumber=1A7E4CA4AA1C22722577296AB05783D755B116BD Validity Not Before: Nov 2 18:45:39 2025 GMT Not After : Nov 9 18:45:39 2025 GMT Subject: CN=6907a6d3-54dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:46:05:98:eb:b2:7d:13:bb:40:e2:3e:71:00: d2:ed:41:91:48:90:0d:c9:f7:ad:32:3d:9c:41:1b: f0:1e:c7:3f:f9:cf:3a:2b:00:23:fa:83:59:96:22: 5c:46:23:63:7e:fe:e0:63:c3:f8:2f:89:eb:b2:18: 5b:c4:53:9a:df:8f:c8:4f:8c:6b:86:d1:82:4a:e9: 42:de:d5:5d:c0:f3:07:cc:de:ba:c0:ce:0f:e1:0e: a1:1d:16:d6:e4:01:e0:7b:f7:50:f2:6a:a7:2d:f4: 58:d3:05:2a:c3:7d:f7:4d:d7:4b:d1:a6:0f:2d:83: 14:1b:95:5f:52:74:49:72:6b:20:d4:b7:59:7e:e2: 0c:82:e0:d0:d6:32:9b:7f:23:30:8f:67:d6:e1:48: ec:c2:11:80:21:38:b5:f3:09:3c:80:c5:3e:db:db: 28:57:5b:78:d3:cd:77:cd:7b:1c:9b:8b:d8:0b:5e: 8a:04:7a:4d:54:4d:fb:eb:b0:f7:72:d0:bc:88:5c: 72:9f:2e:ca:d4:fc:5a:fc:c9:d1:fc:16:b4:fc:0b: 2b:0e:e4:da:16:ee:3f:96:90:21:c3:bf:98:60:07: e4:99:34:2e:a8:7d:fc:19:26:ae:60:2b:f3:80:87: 9c:cb:a4:d8:db:01:47:e2:7b:e5:a5:de:47:07:06: f9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:35:05:5C:DC:28:F8:44:20:7A:8A:C0:58:CC:78:99:36:7B:03:13 X509v3 Authority Key Identifier: keyid:1A:7E:4C:A4:AA:1C:22:72:25:77:29:6A:B0:57:83:D7:55:B1:16:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gn5MpKocInIldylqsFeD11WxFr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:51:b9:6e:7b:9e:24:9d:87:1f:e2:41:8d:fb:56:ca:6a:ee: 7f:be:15:a4:7d:28:e4:6b:7c:6a:f6:de:3b:3d:e4:d0:4f:87: 95:13:23:b9:f0:9e:28:de:9a:a0:0e:f6:14:ba:c4:36:46:7b: ca:88:fc:af:f6:f6:40:41:40:87:f5:6d:03:c4:a7:39:32:6e: fc:7e:b3:18:0b:0b:60:bd:a6:55:1c:10:f9:01:7d:98:e5:7a: 2c:41:34:f4:14:b9:00:50:04:3d:7c:1a:d5:5a:7e:76:cd:8b: e1:2c:a3:8d:2b:65:c8:ef:70:28:eb:35:62:01:f1:13:93:5a: bb:de:99:8b:1e:39:38:0e:87:ae:b1:e4:63:65:50:43:72:d2: 1b:d0:24:2b:39:6a:dd:62:2c:bf:dd:76:3d:65:d1:ab:23:bf: d4:31:03:63:98:49:c7:e7:9f:d6:3f:1d:78:cc:36:47:5d:3e: 96:48:b9:de:8e:48:73:e6:24:ea:f2:88:4b:61:ca:42:3f:77: 31:76:ab:e0:dd:26:8a:b9:fc:70:08:af:00:39:0e:64:b4:79: 69:67:a5:0a:4b:5a:cf:bc:5a:d4:cf:69:67:26:e8:06:e1:49: 28:58:ab:ac:d7:58:04:95:b5:10:ad:07:4c:ce:73:14:53:09: 2b:1a:ac:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwM0ExMTAvBgNVBAUTKDFBN0U0Q0E0QUExQzIyNzIyNTc3Mjk2QUIwNTc4M0Q3 NTVCMTE2QkQwHhcNMjUxMTAyMTg0NTM5WhcNMjUxMTA5MTg0NTM5WjAYMRYwFAYD VQQDEw02OTA3YTZkMy01NGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqkYFmOuyfRO7QOI+cQDS7UGRSJANyfetMj2cQRvwHsc/+c86KwAj+oNZliJc RiNjfv7gY8P4L4nrshhbxFOa34/IT4xrhtGCSulC3tVdwPMHzN66wM4P4Q6hHRbW 5AHge/dQ8mqnLfRY0wUqw333TddL0aYPLYMUG5VfUnRJcmsg1LdZfuIMguDQ1jKb fyMwj2fW4UjswhGAITi18wk8gMU+29soV1t40813zXscm4vYC16KBHpNVE3767D3 ctC8iFxyny7K1Pxa/MnR/Ba0/AsrDuTaFu4/lpAhw7+YYAfkmTQuqH38GSauYCvz gIecy6TY2wFH4nvlpd5HBwb5sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL01BVzc KPhEIHqKwFjMeJk2ewMTMB8GA1UdIwQYMBaAFBp+TKSqHCJyJXcparBXg9dVsRa9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODAzQS84Q0JEOTc4NjFF NTExMUVBQUYwQkVCNUNDNEY5QUUwMi9HbjVNcEtvY0luSWxkeWxxc0ZlRDExV3hG cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0duNU1wS29jSW5JbGR5bHFzRmVEMTFXeEZyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODAzQS84Q0JEOTc4NjFFNTExMUVBQUYwQkVCNUNDNEY5QUUwMi9HbjVNcEtvY0lu SWxkeWxxc0ZlRDExV3hGcjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxUblue54knYcf4kGN+1bKau5/vhWkfSjka3xq9t47PeTQT4eVEyO5 8J4o3pqgDvYUusQ2RnvKiPyv9vZAQUCH9W0DxKc5Mm78frMYCwtgvaZVHBD5AX2Y 5XosQTT0FLkAUAQ9fBrVWn52zYvhLKONK2XI73Ao6zViAfETk1q73pmLHjk4Doeu seRjZVBDctIb0CQrOWrdYiy/3XY9ZdGrI7/UMQNjmEnH55/WPx14zDZHXT6WSLne jkhz5iTq8ohLYcpCP3cxdqvg3SaKufxwCK8AOQ5ktHlpZ6UKS1rPvFrUz2lnJugG 4UkoWKus11gElbUQrQdMznMUUwkrGqyF -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:23 2025 by rpki-client