$ rpki-client -vvf rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft File: GO9DJ41GMx6arw_XcqcygNE6qlI.mft (raw, json) Hash identifier: gs22MUNrwYW16YiFGq0sDCcoV8kL3nyaj09zaxNqPEc= Subject key identifier: 07:ED:26:99:D8:BE:35:86:11:FF:88:68:50:77:FD:61:1D:2A:34:0E Authority key identifier: 18:EF:43:27:8D:46:33:1E:9A:AF:0F:D7:72:A7:32:80:D1:3A:AA:52 Certificate issuer: /CN=A91104D1/serialNumber=18EF43278D46331E9AAF0FD772A73280D13AAA52 Certificate serial: 110B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft Manifest number: 10B8 Signing time: Mon 20 Oct 2025 17:51:39 +0000 Manifest this update: Mon 20 Oct 2025 17:51:38 +0000 Manifest next update: Mon 27 Oct 2025 17:51:38 +0000 Files and hashes: 1: GO9DJ41GMx6arw_XcqcygNE6qlI.crl (hash: LvT5krM1RXhegcEJo5SnTfhaO6sIi2fx65ku9HkIMI0=) 2: 87C9E3FE3F6D11F0951BB23CC4F9AE02.roa (hash: cZ6PZrYDDvwfg8CUMPN9ghZZSt3c2YnNiECXmtMGmPE=) 3: 446826648F3511EE8864C25EC4F9AE02.roa (hash: isUw4olTYLhmDXX2L/NMbXVs40srSiQ7QfOKuuisKvs=) 4: 381223E2E00711EE8E019E29C4F9AE02.roa (hash: T690o+zlmCjPk931+I/aCbChbJkL8SqS+o/0AQYcZ0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.crl rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4363 (0x110b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91104D1, serialNumber=18EF43278D46331E9AAF0FD772A73280D13AAA52 Validity Not Before: Oct 20 17:51:38 2025 GMT Not After : Oct 27 17:51:38 2025 GMT Subject: CN=68f676ab-82c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f3:8c:be:a8:1a:d9:6d:0e:71:2b:95:44:70: 16:57:f5:51:48:6a:3d:71:30:03:d6:84:f4:a6:02: 3d:cb:4b:56:07:92:c4:7c:e7:12:6c:5c:50:b7:47: f8:9b:89:67:4f:d1:0c:3e:35:c1:1e:b2:23:c1:68: 86:22:55:09:42:7c:63:1e:ec:25:61:7b:69:c9:1a: fd:e3:52:21:2f:f6:7a:c6:d1:18:9e:1b:60:53:16: 0b:17:ee:7f:19:d3:6a:00:84:7d:53:03:a8:a6:58: 84:0d:e4:50:ba:e9:4b:1f:bd:6c:d0:a5:0a:92:ba: 58:f3:57:38:64:ad:01:62:00:93:65:5b:68:85:d7: e2:36:2c:e3:3f:a0:2d:b7:33:40:b7:68:6b:99:62: c3:0c:39:d8:8f:f0:4a:86:d8:8f:5f:2e:b3:a2:12: 8f:75:65:40:ae:9a:ab:68:82:98:6f:03:16:d1:95: be:72:6a:9b:73:0d:0d:f9:13:f3:8d:cb:f0:e0:8c: ee:32:44:af:b5:23:24:9f:10:26:34:be:c4:c3:0c: ce:4c:0a:28:a7:03:c3:81:ac:65:ae:18:b5:29:a4: 41:f8:ec:8e:e5:5f:34:e7:9a:c2:65:e1:2d:00:5f: e9:39:a4:21:9f:ba:04:dc:b4:dc:9d:31:bf:ff:25: 6a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:ED:26:99:D8:BE:35:86:11:FF:88:68:50:77:FD:61:1D:2A:34:0E X509v3 Authority Key Identifier: keyid:18:EF:43:27:8D:46:33:1E:9A:AF:0F:D7:72:A7:32:80:D1:3A:AA:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:9d:33:d9:9f:8f:db:0c:99:81:84:e9:35:d3:bf:a8:8f:c6: 54:f5:d1:1e:3f:c9:ac:85:eb:21:95:81:3a:70:4e:e2:f2:73: b9:38:06:f2:95:d4:cb:ef:fd:f1:21:63:45:d0:47:56:c2:45: 4c:b6:32:f6:1d:30:0e:cf:d3:49:10:ac:9f:1c:ef:bf:9f:b8: 37:3d:02:85:23:4b:ca:66:ee:cb:35:b5:6b:2d:f8:4b:87:70: 82:e0:9d:3a:bd:27:bd:76:55:d0:34:55:87:fa:c0:12:b0:d0: d1:13:52:0b:ef:cc:c3:16:3d:d9:11:8d:19:ce:9a:57:e0:74: 31:6c:72:58:60:55:fa:e9:7e:b4:8a:ef:d7:7a:81:4a:a1:60: 1a:5f:cf:c8:ff:e0:9d:f4:ef:9a:92:a2:23:79:00:83:c8:1c: 62:d1:2c:02:1a:f8:aa:8e:2e:48:da:2c:55:95:f3:8e:30:ea: 3b:da:27:3e:72:08:a0:3c:92:5b:ba:0b:97:fc:fb:5e:09:e1: c5:59:e7:03:50:6e:b8:d3:3a:2b:97:ea:31:60:ed:31:4b:63: e7:06:04:5d:1f:59:0b:6e:be:a5:27:90:14:07:ab:47:3e:d7: 0b:63:0f:f8:3f:55:a3:21:ff:60:0d:dc:77:dd:ca:d8:81:96: 24:ad:d5:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA0RDExMTAvBgNVBAUTKDE4RUY0MzI3OEQ0NjMzMUU5QUFGMEZENzcyQTczMjgw RDEzQUFBNTIwHhcNMjUxMDIwMTc1MTM4WhcNMjUxMDI3MTc1MTM4WjAYMRYwFAYD VQQDEw02OGY2NzZhYi04MmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvOMvqga2W0OcSuVRHAWV/VRSGo9cTAD1oT0pgI9y0tWB5LEfOcSbFxQt0f4 m4lnT9EMPjXBHrIjwWiGIlUJQnxjHuwlYXtpyRr941IhL/Z6xtEYnhtgUxYLF+5/ GdNqAIR9UwOopliEDeRQuulLH71s0KUKkrpY81c4ZK0BYgCTZVtohdfiNizjP6At tzNAt2hrmWLDDDnYj/BKhtiPXy6zohKPdWVArpqraIKYbwMW0ZW+cmqbcw0N+RPz jcvw4IzuMkSvtSMknxAmNL7EwwzOTAoopwPDgaxlrhi1KaRB+OyO5V8055rCZeEt AF/pOaQhn7oE3LTcnTG//yVqYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAftJpnY vjWGEf+IaFB3/WEdKjQOMB8GA1UdIwQYMBaAFBjvQyeNRjMemq8P13KnMoDROqpS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDREMS9FRjA5NThFRTQ0 NUUxMUU5OTI5MjREODdDNEY5QUUwMi9HTzlESjQxR014NmFyd19YY3FjeWdORTZx bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dPOURKNDFHTXg2YXJ3X1hjcWN5Z05FNnFsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDREMS9FRjA5NThFRTQ0NUUxMUU5OTI5MjREODdDNEY5QUUwMi9HTzlESjQxR014 NmFyd19YY3FjeWdORTZxbEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrnTPZn4/bDJmBhOk107+oj8ZU9dEeP8msheshlYE6cE7i8nO5OAby ldTL7/3xIWNF0EdWwkVMtjL2HTAOz9NJEKyfHO+/n7g3PQKFI0vKZu7LNbVrLfhL h3CC4J06vSe9dlXQNFWH+sASsNDRE1IL78zDFj3ZEY0ZzppX4HQxbHJYYFX66X60 iu/XeoFKoWAaX8/I/+Cd9O+akqIjeQCDyBxi0SwCGviqji5I2ixVlfOOMOo72ic+ cgigPJJbuguX/PteCeHFWecDUG640zorl+oxYO0xS2PnBgRdH1kLbr6lJ5AUB6tH PtcLYw/4P1WjIf9gDdx33crYgZYkrdXx -----END CERTIFICATE-----Generated at Wed Oct 22 18:40:04 2025 by rpki-client