$ rpki-client -vvf rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft File: gaZX6qx1VMq3oaKI9bP-7dilzEs.mft (raw, json) Hash identifier: WxTTRy5VbZDsu1uq6i+FVmo2zofSuqw5dIJFqLZZFdM= Subject key identifier: 58:81:C5:8E:13:E2:C3:0C:E4:F8:D5:8A:8E:9E:55:49:B5:D8:28:9F Authority key identifier: 81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B Certificate issuer: /CN=A917DFDA/serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft Manifest number: 41 Signing time: Wed 29 Oct 2025 04:47:45 +0000 Manifest this update: Wed 29 Oct 2025 04:47:44 +0000 Manifest next update: Wed 05 Nov 2025 04:47:44 +0000 Files and hashes: 1: gaZX6qx1VMq3oaKI9bP-7dilzEs.crl (hash: cQeOh0ZUEVNeNyOma1HO400f8GxQCsIOiKBPlVLx5xM=) 2: A78653B2561F11F09624D128C4F9AE02.roa (hash: v13B1iQ4hhFI0k63jpGnWfr1WzzOqwI0W1kZRI7DnNY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 04:47:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DFDA, serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B Validity Not Before: Oct 29 04:47:44 2025 GMT Not After : Nov 5 04:47:44 2025 GMT Subject: CN=69019c70-d4dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3b:ce:f1:34:01:d8:19:fd:dc:58:5b:2c:3b: 8f:ce:29:2c:64:71:10:95:38:1f:d7:04:1f:78:15: ce:f3:e0:3d:cc:d3:56:00:fb:40:63:b7:8a:bb:e9: 7f:78:ed:84:f7:0b:b3:ed:07:f4:35:d4:7a:bc:5b: 5f:27:4b:15:3d:67:31:62:35:fd:2f:1f:4c:86:ac: f0:3a:4a:fb:20:e1:06:4f:ca:ba:20:d9:19:e7:2f: af:1a:b0:a4:81:73:a6:62:38:2f:45:13:e2:52:f8: 51:7a:bf:c1:ab:84:20:0b:84:ed:9b:8a:4c:fa:ee: d5:c5:e2:0f:0e:7b:28:0c:83:de:7d:24:1f:eb:66: 30:28:1c:9d:e5:bd:65:53:30:00:86:fa:ac:3f:1c: 0a:f6:8a:ae:d1:35:60:22:8d:90:0a:a3:71:6b:f8: 25:28:ea:06:7f:1f:28:20:68:6a:3a:11:f1:64:91: c6:5d:26:ab:ae:a5:d2:f7:56:3d:11:85:d1:ce:ac: 1c:5e:23:40:77:da:f7:aa:74:5e:f1:fa:5f:13:1f: e9:85:59:8e:2d:09:a3:b1:f8:0e:92:9e:5b:01:1a: 14:e8:84:be:03:9e:39:4f:89:c3:c0:13:11:f1:bb: bd:7f:ba:ba:34:1f:92:ab:81:7d:b6:bc:04:cb:5a: ac:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:81:C5:8E:13:E2:C3:0C:E4:F8:D5:8A:8E:9E:55:49:B5:D8:28:9F X509v3 Authority Key Identifier: keyid:81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:c0:33:7c:9c:f8:d9:fe:ea:81:76:eb:76:e7:4a:96:ae:2f: 52:09:f6:e5:9a:5b:22:17:39:7a:00:9d:a7:18:9e:70:9b:9c: 05:d5:3f:5e:e0:92:e2:66:3d:b4:76:73:ef:a4:2f:ed:e5:ad: 8d:66:39:22:eb:b2:8d:f1:44:4e:71:0f:ec:36:b6:7f:06:33: 07:67:e9:fa:51:d8:89:42:09:d6:5b:01:3d:f8:75:e3:09:ce: 4d:5b:01:ed:cd:99:35:b3:de:a2:00:2b:be:05:e4:8c:a8:06: d4:57:40:83:db:1d:4d:8e:70:25:55:e5:16:c5:39:2d:4e:19: a2:bb:2d:a8:86:0f:f4:ad:2a:33:bf:73:6b:6d:b1:9e:57:36: 21:6c:f5:bd:80:f4:bf:28:ac:0c:d6:a0:5d:06:02:e5:be:ff: 5f:7c:33:e3:9e:1c:fe:8c:59:c7:26:51:28:ce:40:20:5c:55: 86:b4:67:2a:4f:01:d4:07:24:a7:54:66:24:98:8c:ee:a8:52: 69:7e:27:e2:34:bf:06:6b:84:5e:8f:db:ec:11:c1:c5:3f:fe: dc:c1:d0:0f:ff:ac:78:c6:68:b8:4f:69:27:b7:07:d0:4e:6c: 08:58:41:8d:4b:31:b4:3c:78:c0:a5:5e:5d:4c:14:c4:87:72: 65:db:dc:e1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 REZEQTExMC8GA1UEBRMoODFBNjU3RUFBQzc1NTRDQUI3QTFBMjg4RjVCM0ZFRURE OEE1Q0M0QjAeFw0yNTEwMjkwNDQ3NDRaFw0yNTExMDUwNDQ3NDRaMBgxFjAUBgNV BAMTDTY5MDE5YzcwLWQ0ZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7O87xNAHYGf3cWFssO4/OKSxkcRCVOB/XBB94Fc7z4D3M01YA+0Bjt4q76X94 7YT3C7PtB/Q11Hq8W18nSxU9ZzFiNf0vH0yGrPA6Svsg4QZPyrog2RnnL68asKSB c6ZiOC9FE+JS+FF6v8GrhCALhO2bikz67tXF4g8OeygMg959JB/rZjAoHJ3lvWVT MACG+qw/HAr2iq7RNWAijZAKo3Fr+CUo6gZ/HyggaGo6EfFkkcZdJquupdL3Vj0R hdHOrBxeI0B32veqdF7x+l8TH+mFWY4tCaOx+A6SnlsBGhTohL4DnjlPicPAExHx u71/uro0H5KrgX22vATLWqzHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWIHFjhPi wwzk+NWKjp5VSbXYKJ8wHwYDVR0jBBgwFoAUgaZX6qx1VMq3oaKI9bP+7dilzEsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdERkRBLzc2MTNGMzE2NTMx MzExRjA4NURFQ0U3OUM0RjlBRTAyL2dhWlg2cXgxVk1xM29hS0k5YlAtN2RpbHpF cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ2FaWDZxeDFWTXEzb2FLSTliUC03ZGlsekVzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE RkRBLzc2MTNGMzE2NTMxMzExRjA4NURFQ0U3OUM0RjlBRTAyL2dhWlg2cXgxVk1x M29hS0k5YlAtN2RpbHpFcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHjAM3yc+Nn+6oF263bnSpauL1IJ9uWaWyIXOXoAnacYnnCbnAXVP17g kuJmPbR2c++kL+3lrY1mOSLrso3xRE5xD+w2tn8GMwdn6fpR2IlCCdZbAT34deMJ zk1bAe3NmTWz3qIAK74F5IyoBtRXQIPbHU2OcCVV5RbFOS1OGaK7LaiGD/StKjO/ c2ttsZ5XNiFs9b2A9L8orAzWoF0GAuW+/198M+OeHP6MWccmUSjOQCBcVYa0ZypP AdQHJKdUZiSYjO6oUml+J+I0vwZrhF6P2+wRwcU//tzB0A//rHjGaLhPaSe3B9BO bAhYQY1LMbQ8eMClXl1MFMSHcmXb3OE= -----END CERTIFICATE-----Generated at Wed Oct 29 19:42:51 2025 by rpki-client