$ rpki-client -vvf rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft File: ggZKEDz1DwHRlFMAajhs04c5G-Y.mft (raw, json) Hash identifier: iQd4SrONWCDGNIFvVIG23HsCQyq8caBVL+hiBpcDv5g= Subject key identifier: 55:61:A5:B9:C4:25:88:74:60:CC:6E:1D:4C:6F:FD:6E:1E:0D:D4:E1 Authority key identifier: 82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6 Certificate issuer: /CN=A919CA1B/serialNumber=82064A103CF50F01D19453006A386CD387391BE6 Certificate serial: 021F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft Manifest number: 0219 Signing time: Sat 25 Oct 2025 05:24:09 +0000 Manifest this update: Sat 25 Oct 2025 05:24:09 +0000 Manifest next update: Sat 01 Nov 2025 05:24:09 +0000 Files and hashes: 1: ggZKEDz1DwHRlFMAajhs04c5G-Y.crl (hash: enL8PLyF3TBMIP88odDalQAjK02HbYI14CR4LxN515s=) 2: D3B49A1676CA11EDAA4FE042C4F9AE02.roa (hash: MMkdhzYrtB2EaUzaUeaUoWgtYA29GMYgRCaFiVCPSo0=) 3: D318E67076CA11EDAA4FE042C4F9AE02.roa (hash: dCssZ98YqQlWBb/mCVwsQnrI9ONxqFmsNypt7KWWLSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 05:24:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 543 (0x21f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CA1B, serialNumber=82064A103CF50F01D19453006A386CD387391BE6 Validity Not Before: Oct 25 05:24:09 2025 GMT Not After : Nov 1 05:24:09 2025 GMT Subject: CN=68fc5ef9-a882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:83:81:dc:2e:90:7c:5f:60:f2:47:67:f6:38: 1e:1b:45:92:b4:aa:18:ae:14:bd:37:53:6d:a0:dc: 41:bc:39:a2:55:41:29:9a:ff:bf:3d:63:80:22:a2: 7c:c8:ac:91:0d:28:a0:e1:6a:70:d6:a2:22:b4:28: 09:fb:0e:8c:12:a6:71:a0:1a:fa:75:77:07:5b:c7: e5:ae:e3:76:9a:d3:44:b1:ed:3c:ab:a3:e9:1b:41: 01:f6:b0:34:ae:3d:0b:59:7f:e4:52:b8:5c:43:22: 68:31:5e:8e:7c:3c:60:c5:7f:2a:46:87:e8:6e:0d: 2a:7e:7e:b8:e1:60:6a:f5:34:94:5e:09:5e:82:d2: b7:ff:49:f5:25:77:35:30:38:ac:12:32:84:bd:cd: d3:d3:06:56:41:55:89:95:68:63:4d:22:54:11:75: f6:a2:42:63:32:2c:8a:4f:e6:8d:e3:f4:ac:91:7e: 7b:f9:45:67:5c:3b:a3:b2:62:a4:f3:41:a6:c2:d0: f4:c8:ad:3e:f7:14:ad:d9:86:27:02:ea:63:f9:07: 69:c4:dc:ac:6e:cd:cb:17:c8:cd:ce:68:42:17:38: 66:39:95:a7:72:fc:80:63:c9:e3:bc:8b:d3:0f:0a: e3:6c:04:65:dd:7b:b7:77:18:cc:01:d5:c8:72:44: 22:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:61:A5:B9:C4:25:88:74:60:CC:6E:1D:4C:6F:FD:6E:1E:0D:D4:E1 X509v3 Authority Key Identifier: keyid:82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:c7:a6:2a:74:23:f5:95:c0:c8:85:2c:d9:5a:c6:21:4d:ff: 15:ff:8d:3d:ee:4b:7d:68:4a:6e:c1:b8:90:df:be:e2:14:b8: 74:18:40:a2:bb:f8:b4:38:4c:e3:b0:23:24:b2:12:d1:00:dc: 28:1c:5b:9b:28:73:cd:e5:8e:a5:8c:d3:18:83:b6:e0:eb:cb: fd:da:5d:e5:c0:f0:7c:b4:d5:b9:38:c5:fe:62:7c:a0:92:ca: 98:36:38:b0:15:47:48:3a:d1:b5:34:85:89:fb:72:80:2c:d4: cd:09:f3:35:cc:06:0f:b5:21:ad:f6:df:11:61:1f:29:a5:29: ba:22:da:d5:4e:a2:46:bc:52:64:7c:8c:8e:83:1c:0e:3a:82: 86:4f:11:48:92:3d:30:5b:0f:21:0d:9b:9d:e9:97:4e:a9:a8: b7:de:c1:52:de:33:b9:f9:a1:49:2b:75:fa:a5:d3:fc:1d:a7: 0c:03:d8:be:49:ab:ea:2b:8f:50:f2:13:73:63:5f:54:50:e6: 30:47:f3:91:88:b2:0a:1b:a6:ee:32:0c:7d:a7:c1:a7:aa:d2: 75:2d:35:67:e9:db:9d:6c:e4:1c:5c:1b:f5:81:db:f0:2b:e9: 8f:a7:05:a9:42:cf:4c:b6:14:e6:c9:1c:5d:c1:a7:53:e2:c3: bc:02:11:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBMUIxMTAvBgNVBAUTKDgyMDY0QTEwM0NGNTBGMDFEMTk0NTMwMDZBMzg2Q0Qz ODczOTFCRTYwHhcNMjUxMDI1MDUyNDA5WhcNMjUxMTAxMDUyNDA5WjAYMRYwFAYD VQQDEw02OGZjNWVmOS1hODgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqoOB3C6QfF9g8kdn9jgeG0WStKoYrhS9N1NtoNxBvDmiVUEpmv+/PWOAIqJ8 yKyRDSig4Wpw1qIitCgJ+w6MEqZxoBr6dXcHW8flruN2mtNEse08q6PpG0EB9rA0 rj0LWX/kUrhcQyJoMV6OfDxgxX8qRofobg0qfn644WBq9TSUXglegtK3/0n1JXc1 MDisEjKEvc3T0wZWQVWJlWhjTSJUEXX2okJjMiyKT+aN4/SskX57+UVnXDujsmKk 80GmwtD0yK0+9xSt2YYnAupj+QdpxNysbs3LF8jNzmhCFzhmOZWncvyAY8njvIvT DwrjbARl3Xu3dxjMAdXIckQifwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFVhpbnE JYh0YMxuHUxv/W4eDdThMB8GA1UdIwQYMBaAFIIGShA89Q8B0ZRTAGo4bNOHORvm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0ExQi8xNDQ3ODI5QTc2 QkQxMUVEQkI0ODk0N0RDNEY5QUUwMi9nZ1pLRUR6MUR3SFJsRk1BYWpoczA0YzVH LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnWktFRHoxRHdIUmxGTUFhamhzMDRjNUctWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0ExQi8xNDQ3ODI5QTc2QkQxMUVEQkI0ODk0N0RDNEY5QUUwMi9nZ1pLRUR6MUR3 SFJsRk1BYWpoczA0YzVHLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATx6YqdCP1lcDIhSzZWsYhTf8V/4097kt9aEpuwbiQ377iFLh0GECi u/i0OEzjsCMkshLRANwoHFubKHPN5Y6ljNMYg7bg68v92l3lwPB8tNW5OMX+Ynyg ksqYNjiwFUdIOtG1NIWJ+3KALNTNCfM1zAYPtSGt9t8RYR8ppSm6ItrVTqJGvFJk fIyOgxwOOoKGTxFIkj0wWw8hDZud6ZdOqai33sFS3jO5+aFJK3X6pdP8HacMA9i+ SavqK49Q8hNzY19UUOYwR/ORiLIKG6buMgx9p8GnqtJ1LTVn6dudbOQcXBv1gdvw K+mPpwWpQs9MthTmyRxdwadT4sO8AhHS -----END CERTIFICATE-----Generated at Sat Oct 25 17:43:30 2025 by rpki-client