$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft File: gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft (raw, json) Hash identifier: gbnlVpEFB8xU8cxtIZbH9Iyqxj9V6coTtyouoR97mmA= Subject key identifier: D5:F2:FC:6A:36:1F:44:7E:07:ED:3C:5E:CB:87:7F:3F:A7:AF:7D:F2 Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB Certificate issuer: /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB Certificate serial: 0460 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft Manifest number: 0437 Signing time: Thu 23 Oct 2025 01:37:11 +0000 Manifest this update: Thu 23 Oct 2025 01:37:10 +0000 Manifest next update: Thu 30 Oct 2025 01:37:10 +0000 Files and hashes: 1: gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl (hash: k44Tcr7wutQRMpByDd+IFHuswhpeAyp4gpNTAI0qmS0=) 2: 44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa (hash: nTBaw0rGVih7H0eMNeUxYSZWJEjBLwFwXSTskNS1M34=) 3: 8F9CB4448F3511ECB2182782C4F9AE02.roa (hash: dOvAjf7RAVetavYFS5Luk51Mj5sbART3WqfDlwnlFcs=) 4: 609BCC763D9311EE9B7BB945C4F9AE02.roa (hash: 4nZdHogouXv845c2l3vfkGTuWxNMa8pAfMwGWm9kiHw=) 5: F255CD0A5EC411ED810B8584C4F9AE02.roa (hash: auW4UnHxJ31+muxSOzUSAXH6xyqbP7eemMf3Mu9GQdY=) 6: 6873616CCAE811ECBB89015FC4F9AE02.roa (hash: lojbrXlAbJoktTwfX33XLdufJ12kkKQ5GKXYlfuRCPs=) 7: A5D75708E07111ED9601E941C4F9AE02.roa (hash: T8SCzZDhPByBJIpznoraQVY/oHtUVPl/FFL0kEBzTiU=) 8: 21ECD84A856011EC924B3E58C4F9AE02.roa (hash: vx+toULPOCZ0nASP5Ye7Mi6PO9RJnf/5+aW7CpW+qSo=) 9: 64782D1E607E11ED9CD7EF0FC4F9AE02.roa (hash: OgDcSpfZCaRldmBrtsqxGYkV57RYdOEs5Zd3oOYd/XU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 01:37:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1120 (0x460) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B4BF, serialNumber=8035090A057327E1200593C20C88C519A45C9ECB Validity Not Before: Oct 23 01:37:10 2025 GMT Not After : Oct 30 01:37:10 2025 GMT Subject: CN=68f986c7-26c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cf:57:61:6d:cb:52:15:bd:c5:58:e3:40:5f: 9a:01:8a:83:40:81:a8:c6:5a:e6:97:5a:79:a3:a8: b0:5c:41:21:38:3e:ed:a6:f0:0a:1e:a2:55:ee:a0: af:92:3d:bb:47:46:a2:fb:8f:0e:7d:4c:d4:c7:66: e7:46:22:22:a0:bb:73:d9:46:66:ad:ad:1a:05:26: 63:01:7c:9a:29:91:d5:fd:7b:ef:bb:d1:cc:ad:62: 8d:44:9c:6d:15:ff:84:4c:17:50:fd:fa:95:ad:88: 69:5c:24:4c:63:eb:73:8c:27:cb:fd:7b:78:a4:79: 2d:24:19:09:4f:6c:35:18:81:d6:35:2b:ac:39:dc: 3a:b6:59:04:d3:e2:c0:46:92:99:1a:cc:6b:23:cd: 43:56:5c:4b:d9:2d:21:69:de:b8:f1:2b:f7:e5:12: e8:b6:ec:f8:70:a7:70:ec:64:76:44:a6:77:54:78: 8b:08:f8:6f:e3:6b:f8:be:ac:5b:c4:ec:67:f0:5a: 9a:a1:6d:2c:97:06:d1:aa:5b:76:11:9e:32:84:f0: 41:94:f9:8b:4f:f3:57:71:0f:b9:83:09:00:37:4c: 7c:4c:66:ed:ff:0c:86:e4:61:fa:3e:02:c6:20:e6: e7:d4:6e:dc:29:6e:ec:e8:d8:f6:7e:97:af:c4:43: 8f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F2:FC:6A:36:1F:44:7E:07:ED:3C:5E:CB:87:7F:3F:A7:AF:7D:F2 X509v3 Authority Key Identifier: keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:37:9b:6f:3d:72:67:7b:60:36:6c:89:54:53:45:86:a4:5d: 4f:aa:cd:06:6c:19:1a:6a:26:6e:2b:c4:54:2f:21:4e:52:da: bc:c4:37:e0:64:4d:c0:2b:73:4c:d8:c3:e3:a2:4b:35:9e:46: 54:30:eb:5f:76:9f:63:a5:d4:42:4a:16:b0:07:3e:6b:26:dc: b3:c2:27:9f:a5:52:67:82:cf:44:1b:ab:72:4f:3d:7e:b6:91: cc:08:19:70:e0:1b:32:fd:18:4f:a9:44:06:ed:b0:38:2e:1d: 0d:92:d4:be:35:04:75:23:ba:aa:0c:75:cc:dc:0e:9a:ab:bd: 05:fd:20:aa:50:84:eb:b9:b7:7f:7a:5d:e7:03:7f:25:39:61: 5d:6f:1d:f2:e1:1c:36:b6:e0:07:5f:fe:8a:97:b1:54:84:58: f4:61:8e:82:00:00:e5:d2:7e:39:70:5c:1f:b7:e9:28:8f:ed: e0:49:8c:7b:67:3a:3a:f0:bf:e0:35:ec:2d:5f:e7:fb:43:76: 5f:4f:ed:0c:1a:a5:d5:22:9c:bc:6f:19:68:b7:a5:1c:18:9a: 48:5c:d2:1e:5d:d0:a7:2a:d8:1b:6a:fe:61:1a:a0:ab:54:32: 51:9e:af:6d:5e:f9:ec:6c:e9:e8:e1:88:48:80:6b:6e:68:cf: b1:78:6b:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0QkYxMTAvBgNVBAUTKDgwMzUwOTBBMDU3MzI3RTEyMDA1OTNDMjBDODhDNTE5 QTQ1QzlFQ0IwHhcNMjUxMDIzMDEzNzEwWhcNMjUxMDMwMDEzNzEwWjAYMRYwFAYD VQQDEw02OGY5ODZjNy0yNmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyM9XYW3LUhW9xVjjQF+aAYqDQIGoxlrml1p5o6iwXEEhOD7tpvAKHqJV7qCv kj27R0ai+48OfUzUx2bnRiIioLtz2UZmra0aBSZjAXyaKZHV/Xvvu9HMrWKNRJxt Ff+ETBdQ/fqVrYhpXCRMY+tzjCfL/Xt4pHktJBkJT2w1GIHWNSusOdw6tlkE0+LA RpKZGsxrI81DVlxL2S0had648Sv35RLotuz4cKdw7GR2RKZ3VHiLCPhv42v4vqxb xOxn8FqaoW0slwbRqlt2EZ4yhPBBlPmLT/NXcQ+5gwkAN0x8TGbt/wyG5GH6PgLG IObn1G7cKW7s6Nj2fpevxEOPfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNXy/Go2 H0R+B+08XsuHfz+nr33yMB8GA1UdIwQYMBaAFIA1CQoFcyfhIAWTwgyIxRmkXJ7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjRCRi9COENDNjkzQzg1 NUMxMUVDOEUzQ0JCNTFDNEY5QUUwMi9nRFVKQ2dWekotRWdCWlBDRElqRkdhUmNu c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dEVUpDZ1Z6Si1FZ0JaUENESWpGR2FSY25zcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjRCRi9COENDNjkzQzg1NUMxMUVDOEUzQ0JCNTFDNEY5QUUwMi9nRFVKQ2dWekot RWdCWlBDRElqRkdhUmNuc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCN5tvPXJne2A2bIlUU0WGpF1Pqs0GbBkaaiZuK8RULyFOUtq8xDfg ZE3AK3NM2MPjoks1nkZUMOtfdp9jpdRCShawBz5rJtyzwiefpVJngs9EG6tyTz1+ tpHMCBlw4Bsy/RhPqUQG7bA4Lh0NktS+NQR1I7qqDHXM3A6aq70F/SCqUITrubd/ el3nA38lOWFdbx3y4Rw2tuAHX/6Kl7FUhFj0YY6CAADl0n45cFwft+koj+3gSYx7 Zzo68L/gNewtX+f7Q3ZfT+0MGqXVIpy8bxlot6UcGJpIXNIeXdCnKtgbav5hGqCr VDJRnq9tXvnsbOno4YhIgGtuaM+xeGvz -----END CERTIFICATE-----Generated at Fri Oct 24 11:59:22 2025 by rpki-client