$ rpki-client -vvf rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft File: gO0g9_wH3gyfPBuOKunNP85u2yE.mft (raw, json) Hash identifier: 5vaZiNjXC5lYdlaNcAwOqPpmC3z+tFUwtQnqo7j9hls= Subject key identifier: 50:A5:E5:08:8E:47:71:7A:48:78:4D:5D:9E:86:A7:78:1E:27:6E:67 Authority key identifier: 80:ED:20:F7:FC:07:DE:0C:9F:3C:1B:8E:2A:E9:CD:3F:CE:6E:DB:21 Certificate issuer: /CN=A915BE00/serialNumber=80ED20F7FC07DE0C9F3C1B8E2AE9CD3FCE6EDB21 Certificate serial: 0593 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft Manifest number: 058B Signing time: Thu 23 Oct 2025 00:19:06 +0000 Manifest this update: Thu 23 Oct 2025 00:19:05 +0000 Manifest next update: Thu 30 Oct 2025 00:19:05 +0000 Files and hashes: 1: gO0g9_wH3gyfPBuOKunNP85u2yE.crl (hash: Ahnq0Cd0RucNAqrN6zvxwuaaqSWQ0QWyqM0/zZlBHwU=) 2: 972D6576112511F08AC1A549C4F9AE02.roa (hash: QOFOeJ0/TitkOVKuCtknVXKhDl8rDuqKOlqBjNU794M=) 3: 513D702E112511F081CC4E49C4F9AE02.roa (hash: Kg31LYu7Durk6j8slLyu/vJtO9Dfls9nej9ZAhspvEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.crl rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 00:19:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1427 (0x593) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BE00, serialNumber=80ED20F7FC07DE0C9F3C1B8E2AE9CD3FCE6EDB21 Validity Not Before: Oct 23 00:19:05 2025 GMT Not After : Oct 30 00:19:05 2025 GMT Subject: CN=68f97479-9a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:62:12:49:1a:cd:a5:92:4b:c3:f6:54:41:ed: da:a0:93:d4:6c:19:99:c3:0a:e1:5f:16:6e:9f:be: 93:5a:f3:33:f7:1a:03:c7:f6:53:c4:69:f0:eb:2a: 4d:41:a2:82:eb:36:a6:3b:6a:4f:33:14:fc:0f:d1: 2e:8a:7e:bf:72:03:43:43:52:7d:5e:35:45:f5:7c: f7:ee:9f:95:f0:fb:e6:01:81:e3:ff:2a:35:0a:fb: f0:28:c8:7d:6f:33:ba:75:c2:82:38:e9:05:55:7f: 4c:5b:d0:b7:63:e2:e6:8a:cb:90:be:8e:cf:1c:dd: 57:1a:73:64:2c:c0:65:29:c3:64:d8:91:b1:07:17: 26:0b:02:ac:49:20:14:71:36:2a:06:3f:4f:4a:70: 9a:69:48:13:71:f6:7c:1b:fa:b3:38:d8:bc:32:7b: 7c:e0:d7:6c:85:52:20:be:03:d7:97:7b:4c:08:a7: 52:ee:83:c6:b8:c9:1a:a1:08:91:bd:09:0f:db:8a: b1:99:2f:29:3b:1e:5f:be:2c:df:8f:a8:f8:df:5a: 29:a6:4d:28:47:5c:43:b4:5e:fd:4d:97:41:cb:42: 79:1c:4c:b0:9f:1c:aa:b5:f9:c9:69:18:79:a9:76: 0f:eb:6d:86:b8:2f:37:b0:3d:44:95:e6:2d:83:63: 29:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A5:E5:08:8E:47:71:7A:48:78:4D:5D:9E:86:A7:78:1E:27:6E:67 X509v3 Authority Key Identifier: keyid:80:ED:20:F7:FC:07:DE:0C:9F:3C:1B:8E:2A:E9:CD:3F:CE:6E:DB:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:e6:2e:63:bb:4c:2d:d6:9f:11:46:64:a8:48:7b:ca:3e:e5: 8e:b3:5f:0c:34:dc:56:f7:7f:9f:64:41:0a:28:7e:8f:c0:34: 22:5b:a5:31:10:80:49:7a:5e:06:38:5a:a3:97:f6:26:08:36: db:24:d0:0f:87:2c:f8:65:de:f1:ff:02:f8:55:c1:b2:3b:64: 6e:e4:87:b9:f3:8c:a1:7b:e8:12:a2:c5:ed:89:be:e1:5e:32: 9d:cf:aa:c2:6d:36:0f:37:27:70:1e:58:86:eb:b2:9c:52:64: da:6c:03:f3:8c:ba:fc:1c:28:49:38:12:d7:3d:13:51:39:d5: 12:99:8d:de:64:6c:3a:b6:e1:08:4b:ea:1a:ae:60:d7:16:71: 6b:87:69:ed:38:b9:4f:6a:ff:51:4e:9d:7a:0d:f6:72:eb:4f: cb:d0:5b:9a:33:b2:6d:24:1e:78:52:7b:39:51:1f:72:71:c8: 78:7d:72:f6:21:ce:b9:d9:06:c1:47:38:47:ad:a9:bd:47:d9: e8:75:b0:37:9a:ec:17:fe:55:0b:92:68:66:0d:58:2e:32:c8: 6d:f5:ae:99:b1:28:b5:90:82:69:85:95:37:60:09:ed:a3:89: 5c:aa:7a:3b:b6:4a:4a:63:79:d2:3e:b9:70:22:39:91:fb:af: cb:04:2b:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJFMDAxMTAvBgNVBAUTKDgwRUQyMEY3RkMwN0RFMEM5RjNDMUI4RTJBRTlDRDNG Q0U2RURCMjEwHhcNMjUxMDIzMDAxOTA1WhcNMjUxMDMwMDAxOTA1WjAYMRYwFAYD VQQDEw02OGY5NzQ3OS05YTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWISSRrNpZJLw/ZUQe3aoJPUbBmZwwrhXxZun76TWvMz9xoDx/ZTxGnw6ypN QaKC6zamO2pPMxT8D9Euin6/cgNDQ1J9XjVF9Xz37p+V8PvmAYHj/yo1CvvwKMh9 bzO6dcKCOOkFVX9MW9C3Y+LmisuQvo7PHN1XGnNkLMBlKcNk2JGxBxcmCwKsSSAU cTYqBj9PSnCaaUgTcfZ8G/qzONi8Mnt84NdshVIgvgPXl3tMCKdS7oPGuMkaoQiR vQkP24qxmS8pOx5fvizfj6j431oppk0oR1xDtF79TZdBy0J5HEywnxyqtfnJaRh5 qXYP622GuC83sD1EleYtg2MpTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCl5QiO R3F6SHhNXZ6Gp3geJ25nMB8GA1UdIwQYMBaAFIDtIPf8B94MnzwbjirpzT/Obtsh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkUwMC8zRDBCMjEyQUY0 RkQxMUVCQTUyQ0UyMTFDNEY5QUUwMi9nTzBnOV93SDNneWZQQnVPS3VuTlA4NXUy eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dPMGc5X3dIM2d5ZlBCdU9LdW5OUDg1dTJ5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkUwMC8zRDBCMjEyQUY0RkQxMUVCQTUyQ0UyMTFDNEY5QUUwMi9nTzBnOV93SDNn eWZQQnVPS3VuTlA4NXUyeUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAX5i5ju0wt1p8RRmSoSHvKPuWOs18MNNxW93+fZEEKKH6PwDQiW6Ux EIBJel4GOFqjl/YmCDbbJNAPhyz4Zd7x/wL4VcGyO2Ru5Ie584yhe+gSosXtib7h XjKdz6rCbTYPNydwHliG67KcUmTabAPzjLr8HChJOBLXPRNROdUSmY3eZGw6tuEI S+oarmDXFnFrh2ntOLlPav9RTp16DfZy60/L0FuaM7JtJB54Uns5UR9ycch4fXL2 Ic652QbBRzhHram9R9nodbA3muwX/lULkmhmDVguMsht9a6ZsSi1kIJphZU3YAnt o4lcqno7tkpKY3nSPrlwIjmR+6/LBCuZ -----END CERTIFICATE-----Generated at Thu Oct 23 11:24:09 2025 by rpki-client