$ rpki-client -vvf rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft File: GWhCPtbSSViApWptsCvGcpjF5oY.mft (raw, json) Hash identifier: jrOVv9eB/TqRYaTZKi5PT4YvHrsbOazGcPsygP+vOPU= Subject key identifier: 19:48:E1:B8:A5:77:9B:E4:E9:8B:A2:0C:8D:47:FA:78:49:C6:D7:93 Authority key identifier: 19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86 Certificate issuer: /CN=A918D3A9/serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686 Certificate serial: 10C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft Manifest number: 10AB Signing time: Tue 04 Nov 2025 17:26:36 +0000 Manifest this update: Tue 04 Nov 2025 17:26:36 +0000 Manifest next update: Tue 11 Nov 2025 17:26:36 +0000 Files and hashes: 1: GWhCPtbSSViApWptsCvGcpjF5oY.crl (hash: qqBrhzjIjcYwNP7RHnu7xfvvjlKGvCC0vyKJabzTGI4=) 2: D4F3A2B4DBCD11EE9B6F4669C4F9AE02.roa (hash: EHJm/HiHyHS2wDLaVYk3k6uReoau+etZZWwlwm0AUaM=) 3: 2884888A717011E99BA2FB3DC4F9AE02.roa (hash: vyuDgVud8VeU+L1s3GBCpzmY/+n8YurORFgDE2x/P9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4293 (0x10c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D3A9, serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686 Validity Not Before: Nov 4 17:26:36 2025 GMT Not After : Nov 11 17:26:36 2025 GMT Subject: CN=690a374c-5476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e4:ba:9f:86:53:a1:94:42:a0:e4:76:4d:ed: 5f:1d:6f:e3:51:03:ad:d8:34:d0:f3:7b:cf:d6:c5: c6:de:b3:2f:94:0c:f8:61:b0:2e:58:7f:d8:03:5a: ea:2a:27:cd:fa:6f:70:d3:38:92:0e:af:43:7e:0e: 29:b7:84:e4:55:2a:72:24:ce:6f:c0:df:e6:ba:1b: 7e:ae:55:21:45:44:21:44:5d:ec:db:a8:31:f0:c9: dd:5d:bc:05:99:53:05:c7:5e:de:07:7a:c3:35:cd: f8:f0:4f:48:2f:c0:81:90:4f:e3:88:e3:87:57:eb: 5b:4f:9b:9f:07:5c:56:da:61:1c:93:c6:1e:ee:eb: 7f:a8:6b:2e:99:90:8d:47:77:f3:7e:06:95:0f:38: 0f:09:8b:38:1e:3f:af:2c:a5:96:85:00:1d:15:e3: bc:dd:c4:d1:40:0b:a9:b1:b7:88:5a:4a:51:8d:01: 77:03:cf:33:41:3a:66:b0:37:1d:95:1e:5e:c2:51: 2a:7b:d3:a1:fb:4a:0e:37:79:69:52:57:48:26:90: f2:a8:62:e5:77:a8:b1:11:cd:ef:65:57:31:b4:65: 47:1b:a8:06:4f:52:6a:e9:47:0b:6a:2a:0d:ad:6e: cb:9a:29:ea:b8:65:8b:2c:93:d5:78:36:28:6a:d7: 22:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:48:E1:B8:A5:77:9B:E4:E9:8B:A2:0C:8D:47:FA:78:49:C6:D7:93 X509v3 Authority Key Identifier: keyid:19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:1b:f5:7c:7e:59:a0:02:73:6a:b1:8a:8e:a1:4c:05:df:d5: 20:a4:44:ef:62:f5:bb:18:6b:1d:07:3e:d9:d8:55:9b:f4:ff: 01:9b:13:68:0d:12:15:e4:11:d7:c8:d5:71:67:cf:34:95:f7: 43:ec:c1:da:31:47:c6:2f:bc:4c:64:78:ba:62:ba:44:66:40: 24:90:b2:f9:4d:b4:54:6a:b0:4e:52:8a:80:3d:27:d2:48:7d: b3:d2:9d:78:24:88:d2:ef:33:b5:2a:5f:97:90:66:bd:2f:96: d2:4d:97:be:f7:21:a4:78:2c:17:03:c1:96:4e:70:1a:9d:78: 6c:c8:8b:56:4e:5e:d8:5b:f9:92:00:6b:32:ab:e9:63:7a:6b: 4a:46:be:8e:42:61:a3:d5:76:e6:b5:cd:07:d0:c5:73:74:c2: 4f:ff:e2:e0:2c:d1:1a:35:34:5e:28:bb:1e:db:f8:3e:ca:8b: 15:b5:33:6b:c7:ac:a6:e6:b9:0f:ca:e0:14:38:b7:07:a2:17: 70:68:ea:87:56:6f:80:38:1d:88:61:55:37:17:a5:b5:f9:b2: 5e:5f:21:47:95:f0:64:1e:24:ce:38:69:6d:bc:8b:e3:4a:61: 95:8d:52:d7:a4:b5:f8:53:80:c6:b1:58:ac:bc:5d:19:70:b1: 93:ee:16:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQzQTkxMTAvBgNVBAUTKDE5Njg0MjNFRDZEMjQ5NTg4MEE1NkE2REIwMkJDNjcy OThDNUU2ODYwHhcNMjUxMTA0MTcyNjM2WhcNMjUxMTExMTcyNjM2WjAYMRYwFAYD VQQDEw02OTBhMzc0Yy01NDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0OS6n4ZToZRCoOR2Te1fHW/jUQOt2DTQ83vP1sXG3rMvlAz4YbAuWH/YA1rq KifN+m9w0ziSDq9Dfg4pt4TkVSpyJM5vwN/muht+rlUhRUQhRF3s26gx8MndXbwF mVMFx17eB3rDNc348E9IL8CBkE/jiOOHV+tbT5ufB1xW2mEck8Ye7ut/qGsumZCN R3fzfgaVDzgPCYs4Hj+vLKWWhQAdFeO83cTRQAupsbeIWkpRjQF3A88zQTpmsDcd lR5ewlEqe9Oh+0oON3lpUldIJpDyqGLld6ixEc3vZVcxtGVHG6gGT1Jq6UcLaioN rW7LminquGWLLJPVeDYoatciXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBlI4bil d5vk6YuiDI1H+nhJxteTMB8GA1UdIwQYMBaAFBloQj7W0klYgKVqbbArxnKYxeaG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDNBOS9CQjdGRkI4RTNB OTIxMUU5QjUyRENGNTNDNEY5QUUwMi9HV2hDUHRiU1NWaUFwV3B0c0N2R2NwakY1 b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dXaENQdGJTU1ZpQXBXcHRzQ3ZHY3BqRjVvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDNBOS9CQjdGRkI4RTNBOTIxMUU5QjUyRENGNTNDNEY5QUUwMi9HV2hDUHRiU1NW aUFwV3B0c0N2R2NwakY1b1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNG/V8flmgAnNqsYqOoUwF39UgpETvYvW7GGsdBz7Z2FWb9P8BmxNo DRIV5BHXyNVxZ880lfdD7MHaMUfGL7xMZHi6YrpEZkAkkLL5TbRUarBOUoqAPSfS SH2z0p14JIjS7zO1Kl+XkGa9L5bSTZe+9yGkeCwXA8GWTnAanXhsyItWTl7YW/mS AGsyq+ljemtKRr6OQmGj1Xbmtc0H0MVzdMJP/+LgLNEaNTReKLse2/g+yosVtTNr x6ym5rkPyuAUOLcHohdwaOqHVm+AOB2IYVU3F6W1+bJeXyFHlfBkHiTOOGltvIvj SmGVjVLXpLX4U4DGsVisvF0ZcLGT7haT -----END CERTIFICATE-----Generated at Wed Nov 5 07:55:10 2025 by rpki-client