$ rpki-client -vvf rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft File: GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft (raw, json) Hash identifier: 125OH6fSKPBzoENYAqgS+xn5E3qP4ScjUMBMcvYNbS4= Subject key identifier: 79:42:AF:6B:94:99:9C:21:9E:D8:4B:7E:78:93:54:39:76:29:7F:69 Authority key identifier: 1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84 Certificate issuer: /CN=A9187F7E/serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84 Certificate serial: 02E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft Manifest number: 02D1 Signing time: Mon 03 Nov 2025 01:23:54 +0000 Manifest this update: Mon 03 Nov 2025 01:23:53 +0000 Manifest next update: Mon 10 Nov 2025 01:23:53 +0000 Files and hashes: 1: GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl (hash: 16y5qlKfVF47v6yPbdSjE/mkXLQr3r4HPT7qVPnQJcI=) 2: CF0D85CEFE5211EFA5AB8F82C4F9AE02.roa (hash: gpdjBjddXDySP7XwpO7PUD9YoIqfcH1r8H5PmyuUxoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:23:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 739 (0x2e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187F7E, serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84 Validity Not Before: Nov 3 01:23:53 2025 GMT Not After : Nov 10 01:23:53 2025 GMT Subject: CN=69080429-6061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4d:ba:58:a4:e6:1a:f1:87:29:9a:44:93:81: 9a:77:e7:0b:a9:3d:3c:1b:4b:8e:f8:da:2d:41:4f: cf:01:59:e1:90:6b:bc:30:b3:1c:e9:6f:f1:d7:a2: e7:45:c3:b0:db:b1:63:9b:79:8c:7c:33:76:e3:f4: fe:c6:aa:59:d8:a5:8d:58:18:b0:fe:a8:ad:ec:e6: 9f:b0:f2:42:a8:42:80:3f:1e:37:10:cc:1b:1f:72: ca:ee:7f:1b:23:70:0c:31:53:d5:c0:ef:04:c8:dd: 58:1c:64:57:6d:b6:29:73:01:6a:af:1f:dc:39:42: 54:ce:a6:47:f4:94:70:ca:da:d1:58:2e:c4:74:7a: 80:56:5a:ab:ee:c5:7c:fa:cf:e0:bb:db:a4:4d:e6: 6d:40:83:67:6c:a9:b6:c2:0e:26:9e:90:9d:a2:e7: a5:95:38:92:85:a7:6f:cb:da:32:4e:51:3e:14:32: 4f:47:0e:2d:8a:ef:54:8a:89:89:21:84:7c:a8:e1: 1d:d2:cf:b6:d2:14:71:0d:8a:76:bc:73:a3:7f:76: d5:7f:d4:65:e2:e9:b3:de:3b:3a:23:c3:f3:cd:f2: 96:77:01:f0:2e:69:59:57:fa:69:2e:e6:0c:f1:7d: e2:b3:20:c7:38:5d:1f:b9:53:d9:e9:eb:a7:0f:f2: b6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:42:AF:6B:94:99:9C:21:9E:D8:4B:7E:78:93:54:39:76:29:7F:69 X509v3 Authority Key Identifier: keyid:1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:80:31:38:a7:fe:0f:ca:71:70:cf:a8:41:e8:6e:5f:4f:3c: 2b:69:06:1e:e8:2b:d2:1a:15:1d:f4:2b:93:93:60:37:83:34: b4:32:ae:e5:7c:19:a4:68:75:4d:7b:fa:7a:1a:e4:24:63:be: e8:38:5f:c8:82:e6:bd:bc:b2:e0:00:40:40:d9:ef:83:b4:5a: c2:1b:d6:8b:d5:70:7a:a2:22:05:0a:3c:06:8e:dc:6a:8f:ab: 65:d1:73:64:dd:35:0f:2f:95:dc:1d:53:f6:79:c6:3c:1e:ff: 75:5c:22:c5:59:e6:20:92:62:32:cc:2c:ef:c2:de:89:90:01: 1c:5f:8f:6a:3b:64:cf:ea:96:9c:9a:18:35:49:0c:3f:a8:5d: b9:69:dc:c8:3b:7e:05:f6:7b:45:38:66:64:a1:42:18:8d:a0: 4a:bd:81:b9:4c:18:90:35:1f:a6:9b:8a:7d:3e:54:26:8a:47: 65:0b:22:43:f2:5d:c0:aa:c9:2b:76:eb:09:e0:3c:fd:9b:45: e9:20:d1:f6:68:d2:f6:c1:b8:91:89:91:fb:19:fa:81:4e:b2: 76:eb:39:db:c7:91:bf:c7:62:4f:ba:ef:25:e9:6d:0c:2c:6d: 4a:cb:2f:76:fc:a0:a6:8e:00:34:1b:0f:fc:ff:79:c0:9b:08: 04:f0:1a:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdGN0UxMTAvBgNVBAUTKDFBNjgyOTQxRjg3ODlDNENFQTNDQzMzQjYzNzNFNDk0 NzYzMEJDODQwHhcNMjUxMTAzMDEyMzUzWhcNMjUxMTEwMDEyMzUzWjAYMRYwFAYD VQQDEw02OTA4MDQyOS02MDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx026WKTmGvGHKZpEk4Gad+cLqT08G0uO+NotQU/PAVnhkGu8MLMc6W/x16Ln RcOw27Fjm3mMfDN24/T+xqpZ2KWNWBiw/qit7OafsPJCqEKAPx43EMwbH3LK7n8b I3AMMVPVwO8EyN1YHGRXbbYpcwFqrx/cOUJUzqZH9JRwytrRWC7EdHqAVlqr7sV8 +s/gu9ukTeZtQINnbKm2wg4mnpCdouellTiShadvy9oyTlE+FDJPRw4tiu9UiomJ IYR8qOEd0s+20hRxDYp2vHOjf3bVf9Rl4umz3js6I8PzzfKWdwHwLmlZV/ppLuYM 8X3isyDHOF0fuVPZ6eunD/K2rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlCr2uU mZwhnthLfniTVDl2KX9pMB8GA1UdIwQYMBaAFBpoKUH4eJxM6jzDO2Nz5JR2MLyE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0Y3RS9DNzYzQjVFMDEw RTkxMUVEODVDQ0VBMzdDNEY5QUUwMi9HbWdwUWZoNG5FenFQTU03WTNQa2xIWXd2 SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dtZ3BRZmg0bkV6cVBNTTdZM1BrbEhZd3ZJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0Y3RS9DNzYzQjVFMDEwRTkxMUVEODVDQ0VBMzdDNEY5QUUwMi9HbWdwUWZoNG5F enFQTU03WTNQa2xIWXd2SVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2gDE4p/4PynFwz6hB6G5fTzwraQYe6CvSGhUd9CuTk2A3gzS0Mq7l fBmkaHVNe/p6GuQkY77oOF/Igua9vLLgAEBA2e+DtFrCG9aL1XB6oiIFCjwGjtxq j6tl0XNk3TUPL5XcHVP2ecY8Hv91XCLFWeYgkmIyzCzvwt6JkAEcX49qO2TP6pac mhg1SQw/qF25adzIO34F9ntFOGZkoUIYjaBKvYG5TBiQNR+mm4p9PlQmikdlCyJD 8l3AqskrdusJ4Dz9m0XpINH2aNL2wbiRiZH7GfqBTrJ26znbx5G/x2JPuu8l6W0M LG1Kyy92/KCmjgA0Gw/8/3nAmwgE8BoY -----END CERTIFICATE-----Generated at Tue Nov 4 07:18:47 2025 by rpki-client