$ rpki-client -vvf rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft File: GaNgWeMX739niFziUq7bkZWPXmg.mft (raw, json) Hash identifier: a/UQytzLh0CqQofPD/edLak3uJCCwE14IJaeyHF3Lys= Subject key identifier: 98:36:B8:38:56:45:D4:1B:7C:FA:FE:3A:69:5C:61:EF:EF:AA:00:8F Authority key identifier: 19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68 Certificate issuer: /CN=A917D857/serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68 Certificate serial: 0194 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft Manifest number: 0191 Signing time: Fri 31 Oct 2025 03:26:19 +0000 Manifest this update: Fri 31 Oct 2025 03:26:19 +0000 Manifest next update: Fri 07 Nov 2025 03:26:19 +0000 Files and hashes: 1: GaNgWeMX739niFziUq7bkZWPXmg.crl (hash: bye2g9vN8DcNvzQhsTJOfraspCwaUYqLWUc6ur3uFGs=) 2: BD9131004E2811EEBC65304DC4F9AE02.roa (hash: mDyA8en4O2HoFPMoiw1GIv6+nKDmPcew5/y5uXwGm88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 03:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 404 (0x194) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D857, serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68 Validity Not Before: Oct 31 03:26:19 2025 GMT Not After : Nov 7 03:26:19 2025 GMT Subject: CN=69042c5b-0a46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:32:6e:37:95:3a:91:32:97:ce:b8:61:71:c8: 22:84:29:2e:76:2e:3c:16:4c:8e:a7:d0:5b:8d:49: d3:58:90:57:17:a7:ce:18:53:68:52:1d:e6:20:8e: ab:11:7c:6f:5e:e1:fd:44:43:77:fe:9b:0e:06:bd: f0:47:aa:16:93:df:8c:de:a2:08:3d:54:fa:c3:94: 3f:a0:23:52:51:92:bd:4c:ff:6d:8e:01:14:ad:67: 44:3f:99:76:56:8f:88:9c:f4:a7:cd:85:57:a8:4b: 0d:32:5b:c3:1e:d9:d7:c9:47:c7:b4:83:24:f2:d0: 18:a2:b6:ad:26:2a:24:e2:30:05:dd:d5:21:bf:48: 1f:ac:b5:cc:0c:8e:52:f3:a6:28:10:4f:36:ee:a7: 90:73:e5:de:cb:4a:0b:b4:3f:0c:1f:ff:55:64:ec: 47:08:74:5f:31:61:6d:15:54:a0:c5:43:56:e2:16: 22:d6:ea:1b:c6:75:ba:65:68:3d:8d:43:17:7f:87: c8:c4:29:24:ef:7a:f4:7d:d1:63:3e:47:e7:03:58: 40:a8:e6:d5:54:f2:bc:c0:81:15:ea:45:f7:f3:e7: f0:36:db:11:93:fb:34:b8:fc:a8:40:94:f9:64:90: 20:cd:6a:53:6c:a8:55:db:32:ee:4b:0b:8c:0b:00: 53:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:36:B8:38:56:45:D4:1B:7C:FA:FE:3A:69:5C:61:EF:EF:AA:00:8F X509v3 Authority Key Identifier: keyid:19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:c6:08:df:62:ba:f7:07:4a:6b:27:80:b8:6b:15:b6:77:2f: bd:ab:fd:c7:dc:5f:1d:ab:20:67:20:a5:e2:71:7d:ca:cc:98: 19:2c:6c:bd:ba:a5:a9:b5:ca:d3:0e:46:b5:07:f2:9d:57:be: cb:8c:fa:b0:95:93:58:df:9c:d1:12:6b:44:0c:d6:46:42:1c: b1:8e:4f:8c:ab:7d:2e:9e:60:30:dd:49:df:19:02:ec:ef:4d: be:00:e8:cf:3b:cb:3c:5e:d9:12:fb:5d:6b:b0:e9:4f:4a:2b: 65:3b:75:c4:27:c6:96:5f:89:db:5c:b5:91:cf:e3:b2:9c:77: e8:12:88:71:47:25:a1:65:a0:c5:c7:b3:51:c3:aa:b4:d6:98: 13:40:0f:ff:44:c3:3a:ac:cc:7b:50:81:8c:37:52:04:54:ed: 56:08:86:a4:a9:5e:9f:65:63:eb:81:b8:4b:2d:d9:51:e1:c1: 56:55:78:d5:75:80:d3:eb:ab:a1:f5:2f:9c:a6:63:f6:f7:3d: c0:13:f6:45:c6:95:55:0f:9e:03:ab:b9:44:da:6c:e3:97:24: e8:5e:d5:4a:20:64:0f:8a:be:65:92:2b:09:ee:29:71:04:d5: cb:09:2c:10:59:73:5d:ad:a2:6c:7a:e1:c6:2c:6d:84:b9:17: 69:cc:ce:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q4NTcxMTAvBgNVBAUTKDE5QTM2MDU5RTMxN0VGN0Y2Nzg4NUNFMjUyQUVEQjkx OTU4RjVFNjgwHhcNMjUxMDMxMDMyNjE5WhcNMjUxMTA3MDMyNjE5WjAYMRYwFAYD VQQDEw02OTA0MmM1Yi0wYTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjJuN5U6kTKXzrhhccgihCkudi48FkyOp9BbjUnTWJBXF6fOGFNoUh3mII6r EXxvXuH9REN3/psOBr3wR6oWk9+M3qIIPVT6w5Q/oCNSUZK9TP9tjgEUrWdEP5l2 Vo+InPSnzYVXqEsNMlvDHtnXyUfHtIMk8tAYoratJiok4jAF3dUhv0gfrLXMDI5S 86YoEE827qeQc+Xey0oLtD8MH/9VZOxHCHRfMWFtFVSgxUNW4hYi1uobxnW6ZWg9 jUMXf4fIxCkk73r0fdFjPkfnA1hAqObVVPK8wIEV6kX38+fwNtsRk/s0uPyoQJT5 ZJAgzWpTbKhV2zLuSwuMCwBT5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJg2uDhW RdQbfPr+OmlcYe/vqgCPMB8GA1UdIwQYMBaAFBmjYFnjF+9/Z4hc4lKu25GVj15o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDg1Ny82MUM1Q0RCODRF MjgxMUVFOTRGREIzNENDNEY5QUUwMi9HYU5nV2VNWDczOW5pRnppVXE3YmtaV1BY bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dhTmdXZU1YNzM5bmlGemlVcTdia1pXUFhtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDg1Ny82MUM1Q0RCODRFMjgxMUVFOTRGREIzNENDNEY5QUUwMi9HYU5nV2VNWDcz OW5pRnppVXE3YmtaV1BYbWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaxgjfYrr3B0prJ4C4axW2dy+9q/3H3F8dqyBnIKXicX3KzJgZLGy9 uqWptcrTDka1B/KdV77LjPqwlZNY35zREmtEDNZGQhyxjk+Mq30unmAw3UnfGQLs 702+AOjPO8s8XtkS+11rsOlPSitlO3XEJ8aWX4nbXLWRz+OynHfoEohxRyWhZaDF x7NRw6q01pgTQA//RMM6rMx7UIGMN1IEVO1WCIakqV6fZWPrgbhLLdlR4cFWVXjV dYDT66uh9S+cpmP29z3AE/ZFxpVVD54Dq7lE2mzjlyToXtVKIGQPir5lkisJ7ilx BNXLCSwQWXNdraJseuHGLG2EuRdpzM6F -----END CERTIFICATE-----Generated at Fri Oct 31 05:49:02 2025 by rpki-client