$ rpki-client -vvf rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft File: GzpBGgdaXbGixkL41KG8PLW8uxw.mft (raw, json) Hash identifier: wa/w72MCpfP2Mj75X1Ps9l9tomVAV2mwf6OMGXYHNpY= Subject key identifier: A3:85:34:A3:A6:23:B2:A1:E1:07:9D:5F:A2:7C:7C:F3:AE:88:0B:24 Authority key identifier: 1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C Certificate issuer: /CN=A916C3CC/serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C Certificate serial: 0248 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft Manifest number: 0243 Signing time: Mon 03 Nov 2025 01:42:53 +0000 Manifest this update: Mon 03 Nov 2025 01:42:53 +0000 Manifest next update: Mon 10 Nov 2025 01:42:53 +0000 Files and hashes: 1: GzpBGgdaXbGixkL41KG8PLW8uxw.crl (hash: frGADWkaKP4hbS0PFvEMf7V9qmCPAo7DJPWFDueM/oc=) 2: F1F8A98442D811ED854B9670C4F9AE02.roa (hash: 77+2jyZbjFuOwQaQ18eSMUiIbLupIdmVr2AiPrnK1EI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:42:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 584 (0x248) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C3CC, serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C Validity Not Before: Nov 3 01:42:53 2025 GMT Not After : Nov 10 01:42:53 2025 GMT Subject: CN=6908089d-52cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4f:cd:6b:ad:3c:cd:be:c8:4a:42:68:ee:23: 9c:b6:13:b2:1e:1e:bd:e3:90:9e:4d:f1:52:00:0b: 86:a5:f2:59:d8:ba:2b:db:71:a4:4b:4f:7b:a8:4b: a6:0c:25:30:bc:17:17:20:df:f7:95:f9:7c:c0:e9: ec:d3:d2:70:40:79:85:cd:8d:f7:b8:fb:87:7e:c6: 8e:57:1f:03:6e:22:45:ca:bd:44:60:11:e8:fe:96: 7b:3b:4b:20:3e:e1:61:54:30:3f:e2:ac:76:05:67: ca:86:6b:1f:ba:cb:e3:bb:ed:71:ab:fe:70:15:05: 31:72:34:32:0b:e4:2d:4c:b7:22:3c:82:5f:b7:cd: 50:f5:51:25:a3:0e:dd:2a:9e:ba:6c:9d:55:e1:8c: ce:9c:5e:34:d1:87:14:a8:97:b7:50:67:d2:81:ab: 65:17:24:ee:dd:8d:6f:b3:28:a7:09:f6:5d:63:f6: d9:15:12:79:5f:c1:6b:32:a8:f3:7f:11:ba:01:46: 33:8f:91:45:20:bb:3a:99:e0:67:e3:39:8d:5e:e3: 23:75:73:a9:4c:1f:99:b3:21:39:9d:0c:90:9c:af: 8e:da:3e:28:32:b3:ca:71:a4:ae:d8:3c:3b:a4:49: bd:68:12:66:87:f1:b3:4b:b3:6d:12:74:ea:b2:e6: b0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:85:34:A3:A6:23:B2:A1:E1:07:9D:5F:A2:7C:7C:F3:AE:88:0B:24 X509v3 Authority Key Identifier: keyid:1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:16:b8:c9:f4:dd:5b:fa:90:36:63:4b:6b:5a:99:63:0d:db: 1a:f6:2b:e9:e6:54:06:bc:33:8c:0e:18:1e:c6:e8:37:f6:1b: d2:e3:13:41:b6:25:16:c3:91:a1:76:8c:4d:21:df:ed:38:0f: 63:52:e7:d1:0e:8d:54:70:85:70:51:03:76:11:22:23:38:18: c7:e2:8c:35:09:57:de:72:ad:03:08:bf:fd:df:2e:7a:a9:3d: 4f:ab:92:72:98:cf:7f:72:69:23:c2:22:9c:cc:19:2b:0e:37: f1:cc:aa:46:66:2a:4d:6b:bc:93:0f:42:31:ee:3f:d2:93:51: 8b:32:da:ed:e1:0f:a6:5f:85:17:6d:f3:41:a2:9a:9d:53:f4: 9e:20:39:8c:81:d5:41:33:9c:1a:42:e1:34:02:2f:96:5c:6f: b7:07:06:ba:24:5b:20:dd:4d:90:b7:7e:f1:11:93:33:dc:ab: 95:a1:92:f8:ca:fe:4c:ac:b0:33:fa:a0:a3:aa:95:ea:65:05: ff:d5:2d:f6:1f:ff:f9:a3:0d:a3:89:c8:a2:49:6a:eb:65:ce: 69:76:52:8b:67:d9:a5:3c:7b:02:63:e1:ab:7b:5d:42:c1:ac: 31:a3:1a:c4:1d:c8:a3:ea:bd:0e:96:e0:a6:1e:64:55:ec:11: fc:81:d3:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMzQ0MxMTAvBgNVBAUTKDFCM0E0MTFBMDc1QTVEQjFBMkM2NDJGOEQ0QTFCQzND QjVCQ0JCMUMwHhcNMjUxMTAzMDE0MjUzWhcNMjUxMTEwMDE0MjUzWjAYMRYwFAYD VQQDEw02OTA4MDg5ZC01MmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5U/Na608zb7ISkJo7iOcthOyHh6945CeTfFSAAuGpfJZ2Lor23GkS097qEum DCUwvBcXIN/3lfl8wOns09JwQHmFzY33uPuHfsaOVx8DbiJFyr1EYBHo/pZ7O0sg PuFhVDA/4qx2BWfKhmsfusvju+1xq/5wFQUxcjQyC+QtTLciPIJft81Q9VElow7d Kp66bJ1V4YzOnF400YcUqJe3UGfSgatlFyTu3Y1vsyinCfZdY/bZFRJ5X8FrMqjz fxG6AUYzj5FFILs6meBn4zmNXuMjdXOpTB+ZsyE5nQyQnK+O2j4oMrPKcaSu2Dw7 pEm9aBJmh/GzS7NtEnTqsuawGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOFNKOm I7Kh4QedX6J8fPOuiAskMB8GA1UdIwQYMBaAFBs6QRoHWl2xosZC+NShvDy1vLsc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzNDQy80QTE0NzQwNDQy RDQxMUVEQTEyNjBFNkFDNEY5QUUwMi9HenBCR2dkYVhiR2l4a0w0MUtHOFBMVzh1 eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d6cEJHZ2RhWGJHaXhrTDQxS0c4UExXOHV4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzNDQy80QTE0NzQwNDQyRDQxMUVEQTEyNjBFNkFDNEY5QUUwMi9HenBCR2dkYVhi R2l4a0w0MUtHOFBMVzh1eHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpFrjJ9N1b+pA2Y0trWpljDdsa9ivp5lQGvDOMDhgexug39hvS4xNB tiUWw5GhdoxNId/tOA9jUufRDo1UcIVwUQN2ESIjOBjH4ow1CVfecq0DCL/93y56 qT1Pq5JymM9/cmkjwiKczBkrDjfxzKpGZipNa7yTD0Ix7j/Sk1GLMtrt4Q+mX4UX bfNBopqdU/SeIDmMgdVBM5waQuE0Ai+WXG+3Bwa6JFsg3U2Qt37xEZMz3KuVoZL4 yv5MrLAz+qCjqpXqZQX/1S32H//5ow2jiciiSWrrZc5pdlKLZ9mlPHsCY+Gre11C wawxoxrEHcij6r0OluCmHmRV7BH8gdNy -----END CERTIFICATE-----Generated at Tue Nov 4 01:10:17 2025 by rpki-client