$ rpki-client -vvf rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft File: ghDUN1ZlSxBwXVqz83vwGni3jEc.mft (raw, json) Hash identifier: E0WCN6qQEB8fKr4N87jJPCP391NQ875FCqNrDTjifpI= Subject key identifier: FA:54:0A:92:9E:34:41:C5:A3:80:91:BD:67:3C:DD:F5:E2:AD:B6:ED Authority key identifier: 82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 Certificate issuer: /CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Certificate serial: 0882 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft Manifest number: 0841 Signing time: Sun 26 Oct 2025 21:27:38 +0000 Manifest this update: Sun 26 Oct 2025 21:27:37 +0000 Manifest next update: Sun 02 Nov 2025 21:27:37 +0000 Files and hashes: 1: ghDUN1ZlSxBwXVqz83vwGni3jEc.crl (hash: wT4BhFMI34jkprOSV0FXLGQyPLKLbH7tAw9ZgHaZg7E=) 2: 1361FD26EC2011EA8DFD251FC4F9AE02.roa (hash: AKMar7M+pQ4y6XoQFhZVW0JujFvWAFeIi5OqHavhpXY=) 3: FF0025F80B7811EEB2EFC643C4F9AE02.roa (hash: q8NO+KLP5CuELgICWVCpo8gcxUyHjK7jNGZWSmFkgjE=) 4: D8B25C54EC2211EA84C17E26C4F9AE02.roa (hash: blrAgl3fjG1pjrvf4Xs1bBFsczydDh5kF9/bkGOAsSQ=) 5: 36CDE30CEC2411EA8B0DDA2CC4F9AE02.roa (hash: kCdoRWjX7vh3I5Nidiix3CmYE03MKnq+oXPvSl8Xnds=) 6: F652771EEB7611EA8235FB4AC4F9AE02.roa (hash: e0wK1EfjjzOwAebCT+bRt55wU2Y1pEBpk2uJbmvJGI8=) 7: 5056827E1D1711EB9918046AC4F9AE02.roa (hash: QIJzT5GapeGSiWUEH6w75YrO1W7X/FkG1tF+eQj92Fk=) 8: 35A8CF1EEC2411EA8B0DDA2CC4F9AE02.roa (hash: Y77Vm4FDvzInxKFqdlF/vRWJ/K3yltYPE+Pe0UH2y2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 21:27:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2178 (0x882) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B536, serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Validity Not Before: Oct 26 21:27:37 2025 GMT Not After : Nov 2 21:27:37 2025 GMT Subject: CN=68fe9249-a57b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e2:ca:82:6b:b1:00:07:03:9b:61:ad:f1:8a: 88:29:81:57:f3:bd:cc:13:a8:7d:da:11:f4:50:28: e1:4c:0f:e3:a8:90:32:49:a5:37:d4:eb:d6:d4:25: ee:64:4b:eb:61:f9:0b:4a:0a:ea:59:a1:ff:20:57: 05:5a:77:e1:8d:0a:ec:7a:a2:df:3c:9b:6a:a0:bc: 15:d5:97:1e:8d:2d:9e:7f:64:04:ec:d2:5c:66:a2: 83:9e:b3:52:d7:5f:39:fb:7a:94:cb:d4:ae:2d:de: d9:c1:2f:c1:4f:fe:5b:37:18:36:39:f9:7b:c3:89: 84:f4:07:7d:52:90:fd:54:16:3a:a0:57:83:33:47: f2:e8:14:55:0e:62:90:bb:4c:53:f9:44:f1:83:75: 85:56:99:c1:5a:d2:38:32:f0:5a:db:ab:1d:59:6e: 40:c8:93:f2:bd:cf:e9:1a:9a:15:e4:a7:0f:3e:48: c0:63:e3:f4:63:fc:58:ab:64:80:8f:31:82:c0:8e: 2f:ba:5d:bc:7a:c2:06:ce:a6:95:ac:51:c4:ff:29: 1d:c7:00:69:b5:15:0f:30:1a:49:c2:0a:56:37:ff: e4:06:8f:ac:cb:28:d0:d2:db:d6:a7:99:6d:e3:7d: 56:be:66:d4:3f:d0:a8:bf:73:de:c2:2f:c8:00:a1: 44:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:54:0A:92:9E:34:41:C5:A3:80:91:BD:67:3C:DD:F5:E2:AD:B6:ED X509v3 Authority Key Identifier: keyid:82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:3f:20:02:c3:71:3d:f4:5e:ed:d7:ae:c1:98:f9:1a:a2:f6: e1:5c:16:28:43:28:53:f1:af:e5:e3:98:9e:63:a8:51:8c:cd: 8c:e2:9c:72:e4:54:aa:ff:e1:7d:68:75:15:b9:30:d4:91:76: 74:96:fa:1e:4e:83:bd:86:17:d3:db:43:21:44:4d:d2:d5:6e: f7:6b:bc:ce:13:ce:6b:8d:7d:d3:80:74:94:7f:15:12:9d:3b: b3:7d:ea:2d:f4:31:07:64:45:ce:b8:8d:db:e9:9f:7c:77:ae: 57:7e:05:ec:d2:be:4c:88:0b:27:64:9d:fd:c4:c5:2c:65:e5: 43:31:68:b1:72:bb:79:35:80:45:5a:8e:23:1c:a6:00:90:59: 36:93:d6:9d:28:8e:b2:5b:32:b6:a7:0f:e4:c8:53:27:ab:34: f3:6d:d8:03:59:64:75:ca:35:aa:15:19:4e:e5:e3:f0:03:d5: d7:1f:24:9d:55:91:10:81:71:87:d1:ca:9a:fc:73:92:a2:2c: a2:ee:9c:9d:48:3c:a6:6e:98:40:27:d1:4e:e6:e2:63:7e:bc: b6:0a:3d:b0:d1:06:0a:78:58:7b:d3:16:c6:0d:c4:2d:4f:01: ca:2c:dc:cf:ae:e3:47:db:bd:0c:88:8c:4b:80:26:1b:9e:4f: 04:ee:1b:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1MzYxMTAvBgNVBAUTKDgyMTBENDM3NTY2NTRCMTA3MDVENUFCM0YzN0JGMDFB NzhCNzhDNDcwHhcNMjUxMDI2MjEyNzM3WhcNMjUxMTAyMjEyNzM3WjAYMRYwFAYD VQQDEw02OGZlOTI0OS1hNTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+LKgmuxAAcDm2Gt8YqIKYFX873ME6h92hH0UCjhTA/jqJAySaU31OvW1CXu ZEvrYfkLSgrqWaH/IFcFWnfhjQrseqLfPJtqoLwV1ZcejS2ef2QE7NJcZqKDnrNS 1185+3qUy9SuLd7ZwS/BT/5bNxg2Ofl7w4mE9Ad9UpD9VBY6oFeDM0fy6BRVDmKQ u0xT+UTxg3WFVpnBWtI4MvBa26sdWW5AyJPyvc/pGpoV5KcPPkjAY+P0Y/xYq2SA jzGCwI4vul28esIGzqaVrFHE/ykdxwBptRUPMBpJwgpWN//kBo+syyjQ0tvWp5lt 431WvmbUP9Cov3Pewi/IAKFEjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPpUCpKe NEHFo4CRvWc83fXirbbtMB8GA1UdIwQYMBaAFIIQ1DdWZUsQcF1as/N78Bp4t4xH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzNi9FNEM4ODk3MkVC NzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4QndYVnF6ODN2d0duaTNq RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2doRFVOMVpsU3hCd1hWcXo4M3Z3R25pM2pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzNi9FNEM4ODk3MkVCNzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4 QndYVnF6ODN2d0duaTNqRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXPyACw3E99F7t167BmPkaovbhXBYoQyhT8a/l45ieY6hRjM2M4pxy 5FSq/+F9aHUVuTDUkXZ0lvoeToO9hhfT20MhRE3S1W73a7zOE85rjX3TgHSUfxUS nTuzfeot9DEHZEXOuI3b6Z98d65XfgXs0r5MiAsnZJ39xMUsZeVDMWixcrt5NYBF Wo4jHKYAkFk2k9adKI6yWzK2pw/kyFMnqzTzbdgDWWR1yjWqFRlO5ePwA9XXHySd VZEQgXGH0cqa/HOSoiyi7pydSDymbphAJ9FO5uJjfry2Cj2w0QYKeFh70xbGDcQt TwHKLNzPruNH270MiIxLgCYbnk8E7hvl -----END CERTIFICATE-----Generated at Tue Oct 28 04:47:42 2025 by rpki-client