$ rpki-client -vvf rpki.apnic.net/member_repository/A917960F/BA35E0A8976B11F0AEE7A584C4F9AE02/gSWwbgdMKML4IQXEMQAEnt9uAPg.mft File: gSWwbgdMKML4IQXEMQAEnt9uAPg.mft (raw, json) Hash identifier: uXX+Jyq50uiJ1wKpmcqp7fHSm8c/5YKcEx+r9jeSVnk= Subject key identifier: 36:DA:69:96:BA:AA:75:31:31:EE:CB:53:37:0D:ED:2F:F4:85:87:C2 Authority key identifier: 81:25:B0:6E:07:4C:28:C2:F8:21:05:C4:31:00:04:9E:DF:6E:00:F8 Certificate issuer: /CN=A917960F/serialNumber=8125B06E074C28C2F82105C43100049EDF6E00F8 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSWwbgdMKML4IQXEMQAEnt9uAPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917960F/BA35E0A8976B11F0AEE7A584C4F9AE02/gSWwbgdMKML4IQXEMQAEnt9uAPg.mft Manifest number: 18 Signing time: Mon 03 Nov 2025 07:51:53 +0000 Manifest this update: Mon 03 Nov 2025 07:51:52 +0000 Manifest next update: Mon 10 Nov 2025 07:51:52 +0000 Files and hashes: 1: gSWwbgdMKML4IQXEMQAEnt9uAPg.crl (hash: hzuW/sBYEXfUul2eMaTtR30p229fTgk02lEhIbG7y1k=) 2: 84BE275E976C11F0867B3309C4F9AE02.roa (hash: oi8XzJpwIHjUbhgHF5idfGzl4HHACOp+2V7vOP1CBSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917960F/BA35E0A8976B11F0AEE7A584C4F9AE02/gSWwbgdMKML4IQXEMQAEnt9uAPg.crl rsync://rpki.apnic.net/member_repository/A917960F/BA35E0A8976B11F0AEE7A584C4F9AE02/gSWwbgdMKML4IQXEMQAEnt9uAPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSWwbgdMKML4IQXEMQAEnt9uAPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917960F, serialNumber=8125B06E074C28C2F82105C43100049EDF6E00F8 Validity Not Before: Nov 3 07:51:52 2025 GMT Not After : Nov 10 07:51:52 2025 GMT Subject: CN=69085f18-972a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:de:e5:b4:73:b7:fe:11:eb:3c:7a:df:5e:30: da:15:ac:73:c2:ab:c4:c3:e9:3a:52:31:fa:b3:24: 3c:49:83:40:6a:d9:5e:55:9a:34:b6:16:6b:19:b1: f6:ce:77:46:80:cc:a4:2b:98:55:33:8f:74:2f:8f: 30:f1:a6:c2:2c:32:00:27:b0:f5:f9:dc:b7:cf:16: f8:f5:78:49:82:9b:01:1f:ba:08:8d:fa:9c:07:66: 9f:e6:62:c3:05:3b:3a:b2:10:d1:a2:1d:45:9d:cf: 05:16:b1:12:55:2e:53:99:aa:ff:3a:ec:f0:dc:63: fc:52:65:c7:dc:fc:a4:90:4d:a0:73:88:be:25:49: 75:c9:d3:a0:3b:7f:85:e0:bb:a9:20:92:48:39:c1: 85:5f:3a:16:ff:a8:66:6e:d4:a9:3d:b4:2a:86:1a: b3:e2:f3:84:c2:7d:fa:a9:ec:b4:da:f7:a1:b1:3e: 41:c6:2a:76:7a:f2:4a:58:0d:36:cd:fb:d3:3b:13: 4d:db:70:0a:3c:c3:cc:9c:d0:16:dd:ce:0a:33:a3: 97:f1:f0:3b:90:92:f6:23:0b:50:53:e4:b4:54:ff: c3:54:7a:a7:16:f9:3f:f0:d3:a9:16:5c:80:c0:66: dc:e6:a8:83:78:42:12:a5:1d:2e:f8:88:17:bf:36: c6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:DA:69:96:BA:AA:75:31:31:EE:CB:53:37:0D:ED:2F:F4:85:87:C2 X509v3 Authority Key Identifier: keyid:81:25:B0:6E:07:4C:28:C2:F8:21:05:C4:31:00:04:9E:DF:6E:00:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917960F/BA35E0A8976B11F0AEE7A584C4F9AE02/gSWwbgdMKML4IQXEMQAEnt9uAPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSWwbgdMKML4IQXEMQAEnt9uAPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917960F/BA35E0A8976B11F0AEE7A584C4F9AE02/gSWwbgdMKML4IQXEMQAEnt9uAPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:8a:4d:dc:cc:6b:67:f7:6c:83:2a:c7:fc:69:fc:63:f7:f8: bf:ec:dc:d9:b2:92:40:c4:e9:a8:ba:22:df:b9:35:78:ef:a0: 53:97:61:64:44:64:6e:aa:c6:9b:df:f5:b6:01:44:e2:4e:21: ac:a0:0a:3a:cc:3a:2e:54:4c:d4:e4:9c:ea:aa:2d:f0:d8:27: 89:d8:d5:5e:96:11:7f:2e:7c:df:b5:30:00:03:e4:b8:f5:3d: d7:d2:73:d5:9e:3a:58:bb:24:69:77:ca:13:de:13:0c:8c:34: eb:83:86:7b:c9:67:98:26:58:97:ac:e2:fe:25:1e:21:36:78: 16:8c:ca:77:78:88:c4:31:86:18:77:9b:9f:08:ca:32:7b:6a: a7:e0:39:fe:e8:3c:04:5f:be:67:b1:0d:19:f0:0d:07:34:de: 15:f3:16:f0:51:81:ad:a5:b9:35:01:7f:17:6f:6c:58:db:83: 1b:21:b5:cf:07:d7:59:04:12:97:02:df:0b:61:c5:96:d2:f4: 5d:6b:ed:57:5a:3e:71:4b:d8:e5:1f:29:81:d8:03:19:c8:12: 7c:f7:7f:a8:da:31:7b:2a:32:fd:cb:14:b0:65:5d:15:a4:78: f5:03:24:69:25:98:0e:8d:6e:84:d1:8f:a5:11:dd:1d:a7:03: f5:ab:af:82 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OTYwRjExMC8GA1UEBRMoODEyNUIwNkUwNzRDMjhDMkY4MjEwNUM0MzEwMDA0OUVE RjZFMDBGODAeFw0yNTExMDMwNzUxNTJaFw0yNTExMTAwNzUxNTJaMBgxFjAUBgNV BAMTDTY5MDg1ZjE4LTk3MmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD53uW0c7f+Ees8et9eMNoVrHPCq8TD6TpSMfqzJDxJg0Bq2V5VmjS2FmsZsfbO d0aAzKQrmFUzj3QvjzDxpsIsMgAnsPX53LfPFvj1eEmCmwEfugiN+pwHZp/mYsMF OzqyENGiHUWdzwUWsRJVLlOZqv867PDcY/xSZcfc/KSQTaBziL4lSXXJ06A7f4Xg u6kgkkg5wYVfOhb/qGZu1Kk9tCqGGrPi84TCffqp7LTa96GxPkHGKnZ68kpYDTbN +9M7E03bcAo8w8yc0Bbdzgozo5fx8DuQkvYjC1BT5LRU/8NUeqcW+T/w06kWXIDA ZtzmqIN4QhKlHS74iBe/NsYFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNtpplrqq dTEx7stTNw3tL/SFh8IwHwYDVR0jBBgwFoAUgSWwbgdMKML4IQXEMQAEnt9uAPgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5NjBGL0JBMzVFMEE4OTc2 QjExRjBBRUU3QTU4NEM0RjlBRTAyL2dTV3diZ2RNS01MNElRWEVNUUFFbnQ5dUFQ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ1NXd2JnZE1LTUw0SVFYRU1RQUVudDl1QVBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5 NjBGL0JBMzVFMEE4OTc2QjExRjBBRUU3QTU4NEM0RjlBRTAyL2dTV3diZ2RNS01M NElRWEVNUUFFbnQ5dUFQZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADCKTdzMa2f3bIMqx/xp/GP3+L/s3NmykkDE6ai6It+5NXjvoFOXYWRE ZG6qxpvf9bYBROJOIaygCjrMOi5UTNTknOqqLfDYJ4nY1V6WEX8ufN+1MAAD5Lj1 PdfSc9WeOli7JGl3yhPeEwyMNOuDhnvJZ5gmWJes4v4lHiE2eBaMynd4iMQxhhh3 m58IyjJ7aqfgOf7oPARfvmexDRnwDQc03hXzFvBRga2luTUBfxdvbFjbgxshtc8H 11kEEpcC3wthxZbS9F1r7VdaPnFL2OUfKYHYAxnIEnz3f6jaMXsqMv3LFLBlXRWk ePUDJGklmA6NboTRj6UR3R2nA/Wrr4I= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:47 2025 by rpki-client