$ rpki-client -vvf rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft File: gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft (raw, json) Hash identifier: oOVCHIK+qX4/UWYaOm/gObQpxX0GACu6/ZA4M3938nE= Subject key identifier: 9E:2F:30:89:B9:BB:72:C7:B1:5D:44:38:25:82:B1:B5:2C:54:13:F1 Authority key identifier: 81:A7:15:1B:17:75:92:F8:68:23:B6:9F:43:76:24:E9:C0:02:DE:41 Certificate issuer: /CN=A9175299/serialNumber=81A7151B177592F86823B69F437624E9C002DE41 Certificate serial: 0B7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft Manifest number: 0B6B Signing time: Tue 04 Nov 2025 19:15:38 +0000 Manifest this update: Tue 04 Nov 2025 19:15:37 +0000 Manifest next update: Tue 11 Nov 2025 19:15:37 +0000 Files and hashes: 1: gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl (hash: +W/k4bTQINJIiuG5uOK1jUUha/q7jErBcf96RnK/pZY=) 2: 89340B10B5E011EE91DD4D53C4F9AE02.roa (hash: Q9mMB9C2C5zqftIwQCLURXaOhu4FrV/pPVzwERgSn2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2941 (0xb7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175299, serialNumber=81A7151B177592F86823B69F437624E9C002DE41 Validity Not Before: Nov 4 19:15:37 2025 GMT Not After : Nov 11 19:15:37 2025 GMT Subject: CN=690a50da-bd97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c4:59:1e:3d:0f:98:b5:b5:be:18:53:02:a1: dc:54:06:b8:b1:28:84:25:66:f2:cd:6b:c3:5d:17: 79:82:76:d0:fb:c4:07:28:cf:43:92:70:20:11:6f: ba:ac:af:32:ce:43:46:81:da:ba:18:29:77:c7:a1: 32:2f:08:6f:e9:a0:ea:99:97:4c:06:f4:43:c4:0c: 3f:4b:52:49:b9:96:24:8c:c3:a3:01:95:cd:e7:ff: 7b:1e:17:ea:e3:70:8d:c5:f7:05:63:7d:ea:68:1d: 0c:81:a7:ed:f7:0d:37:dd:2d:bb:5d:51:14:42:9d: 0b:96:68:56:f6:72:5c:b2:cb:e4:6d:c9:d5:66:c6: 37:28:ce:2d:8a:51:2d:80:29:75:92:62:82:17:1f: b7:f3:58:05:22:b3:c3:d6:bc:ae:59:a6:b6:c0:ce: 56:58:2a:60:e0:54:78:e6:29:a4:78:28:cb:44:79: 73:17:c7:0b:58:7f:65:5c:e3:5e:1c:e9:47:f0:d8: 05:00:9f:f3:c1:63:4d:82:2b:c2:f1:0c:00:e0:31: 25:da:dc:8d:31:7a:86:ca:6c:ec:5f:5d:8c:71:bf: 69:d9:ae:d0:41:26:59:68:97:66:b6:64:74:ab:a1: a1:97:12:17:49:b8:fd:55:bc:f7:50:55:da:53:69: 68:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:2F:30:89:B9:BB:72:C7:B1:5D:44:38:25:82:B1:B5:2C:54:13:F1 X509v3 Authority Key Identifier: keyid:81:A7:15:1B:17:75:92:F8:68:23:B6:9F:43:76:24:E9:C0:02:DE:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:c8:d1:9b:70:a2:cf:fe:8f:bd:1e:f7:2a:8b:29:0a:f8:7f: 71:7e:05:74:c4:ea:d2:23:d8:58:d6:53:75:de:c9:5d:48:b7: c0:e8:b0:af:c0:b7:c5:a2:5c:96:9a:71:72:17:fe:dc:95:64: 30:0c:dc:60:46:ec:68:7d:2f:ef:56:03:ef:2f:1a:dc:96:e0: 04:91:72:84:f4:ad:a8:9e:57:0d:5e:d3:cb:9e:bb:c3:a3:f3: 4f:9a:52:4b:25:e4:a4:49:78:b0:aa:27:f1:9e:1f:e3:e1:5e: 1d:80:2e:18:99:15:04:c0:69:d9:66:16:88:39:1f:3a:19:c9: c3:9d:78:85:63:26:2d:cc:51:63:ca:0d:a8:0b:3a:96:29:d0: 08:c4:4c:e0:db:b0:51:4d:72:94:72:52:d4:0d:c4:31:79:84: ff:4b:5c:16:06:29:24:2f:2a:b7:73:cb:c7:80:a0:c7:c1:63: 6c:aa:96:a7:af:5c:cf:d6:8f:da:35:6f:ae:a0:81:9a:51:b6: 13:2a:8d:4a:ae:c9:1c:fe:0f:31:a0:ac:13:da:c0:56:96:43: 83:e7:d3:85:59:34:44:48:78:c6:c4:cc:25:1b:29:9e:07:bc: 3b:e2:8c:4c:b5:6b:d3:19:d5:a1:b8:aa:16:a0:71:1c:97:85: df:b1:aa:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUyOTkxMTAvBgNVBAUTKDgxQTcxNTFCMTc3NTkyRjg2ODIzQjY5RjQzNzYyNEU5 QzAwMkRFNDEwHhcNMjUxMTA0MTkxNTM3WhcNMjUxMTExMTkxNTM3WjAYMRYwFAYD VQQDEw02OTBhNTBkYS1iZDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApMRZHj0PmLW1vhhTAqHcVAa4sSiEJWbyzWvDXRd5gnbQ+8QHKM9DknAgEW+6 rK8yzkNGgdq6GCl3x6EyLwhv6aDqmZdMBvRDxAw/S1JJuZYkjMOjAZXN5/97Hhfq 43CNxfcFY33qaB0Mgaft9w033S27XVEUQp0LlmhW9nJcssvkbcnVZsY3KM4tilEt gCl1kmKCFx+381gFIrPD1ryuWaa2wM5WWCpg4FR45imkeCjLRHlzF8cLWH9lXONe HOlH8NgFAJ/zwWNNgivC8QwA4DEl2tyNMXqGymzsX12Mcb9p2a7QQSZZaJdmtmR0 q6GhlxIXSbj9Vbz3UFXaU2loJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4vMIm5 u3LHsV1EOCWCsbUsVBPxMB8GA1UdIwQYMBaAFIGnFRsXdZL4aCO2n0N2JOnAAt5B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTI5OS8yNjg5MEVEQTQy QzUxMUVBQjI2Q0ZEMUJDNEY5QUUwMi9nYWNWR3hkMWt2aG9JN2FmUTNZazZjQUMz a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dhY1ZHeGQxa3Zob0k3YWZRM1lrNmNBQzNrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTI5OS8yNjg5MEVEQTQyQzUxMUVBQjI2Q0ZEMUJDNEY5QUUwMi9nYWNWR3hkMWt2 aG9JN2FmUTNZazZjQUMza0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkyNGbcKLP/o+9HvcqiykK+H9xfgV0xOrSI9hY1lN13sldSLfA6LCv wLfFolyWmnFyF/7clWQwDNxgRuxofS/vVgPvLxrcluAEkXKE9K2onlcNXtPLnrvD o/NPmlJLJeSkSXiwqifxnh/j4V4dgC4YmRUEwGnZZhaIOR86GcnDnXiFYyYtzFFj yg2oCzqWKdAIxEzg27BRTXKUclLUDcQxeYT/S1wWBikkLyq3c8vHgKDHwWNsqpan r1zP1o/aNW+uoIGaUbYTKo1Krskc/g8xoKwT2sBWlkOD59OFWTRESHjGxMwlGyme B7w74oxMtWvTGdWhuKoWoHEcl4XfsarR -----END CERTIFICATE-----Generated at Wed Nov 5 08:02:39 2025 by rpki-client