$ rpki-client -vvf rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft File: G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft (raw, json) Hash identifier: KySgKAtGYRW4uOrQbEN0KKQbyp94iw7hWt2JT2Jgsdw= Subject key identifier: 24:84:2D:9B:DC:3A:FE:81:7D:BC:08:98:8B:BB:C8:D1:D9:29:6F:A1 Authority key identifier: 1B:6E:32:92:C8:35:65:4E:49:14:92:E5:58:4C:F9:93:F0:5B:D9:90 Certificate issuer: /CN=A9110A69/serialNumber=1B6E3292C835654E491492E5584CF993F05BD990 Certificate serial: 0C07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft Manifest number: 0C01 Signing time: Tue 04 Nov 2025 18:54:52 +0000 Manifest this update: Tue 04 Nov 2025 18:54:51 +0000 Manifest next update: Tue 11 Nov 2025 18:54:51 +0000 Files and hashes: 1: G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl (hash: aA2khiEQmTFr6tesgs/BJBzLxje5stEQT8aZncvXB8Q=) 2: 1407117C216311EA90D74C52C4F9AE02.roa (hash: 2C78FaeQx3m8f9CmVKBPjRPsChYY+d/Ump5Gj8ph3JM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3079 (0xc07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110A69, serialNumber=1B6E3292C835654E491492E5584CF993F05BD990 Validity Not Before: Nov 4 18:54:51 2025 GMT Not After : Nov 11 18:54:51 2025 GMT Subject: CN=690a4bfb-fa45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:13:47:d8:12:27:07:1b:9a:3c:de:ca:54:e1: e9:a5:e9:57:d5:a0:e4:48:7c:a4:3f:64:98:83:64: ba:34:dd:57:69:b2:cb:33:c5:1f:50:43:92:67:69: 9b:05:17:0a:7a:1b:e6:0f:fb:b2:aa:d7:24:0c:d4: 41:66:4f:b3:ff:b9:6e:d0:2e:c1:98:e9:d1:30:6b: fa:14:15:cf:bc:e2:bb:e2:81:03:24:ae:eb:96:14: 8b:b6:f6:45:b5:b1:c1:5c:29:b3:1a:6f:8e:d0:d2: 32:8a:8e:52:e2:e7:fd:c7:8a:88:b8:ad:a0:de:0a: b3:4d:6d:11:50:07:6b:cc:d1:f7:0e:b0:cf:1b:cd: 53:45:fb:7b:e5:be:6e:ff:d7:5c:c4:b8:22:53:80: 7f:ac:7f:1f:7a:7f:13:73:3b:03:92:37:16:de:06: f7:b8:9f:36:84:16:d3:c4:87:dc:20:a5:84:49:90: 47:70:06:3a:b0:dd:be:17:8d:ef:49:ae:c0:9e:75: ae:d5:1d:ce:fb:a1:41:b6:17:38:7a:29:fd:55:28: a6:1f:ff:b6:91:e2:c8:da:f9:e7:33:7c:43:30:54: e4:b3:12:81:ab:b5:73:ea:51:1c:f1:19:25:69:fa: 46:2f:2b:00:82:65:0b:b6:b1:38:d9:c1:8a:22:c5: 79:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:84:2D:9B:DC:3A:FE:81:7D:BC:08:98:8B:BB:C8:D1:D9:29:6F:A1 X509v3 Authority Key Identifier: keyid:1B:6E:32:92:C8:35:65:4E:49:14:92:E5:58:4C:F9:93:F0:5B:D9:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110A69/E3ABD042214111EABDF67769C4F9AE02/G24yksg1ZU5JFJLlWEz5k_Bb2ZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:05:4c:d3:2e:d3:07:e7:02:f7:13:12:47:27:b1:9c:cb:0f: 2b:bd:ac:e4:7c:8d:f6:69:51:e3:ac:7f:a7:63:82:9f:79:3f: d1:fb:f6:9d:d0:f9:ef:97:aa:56:d6:ab:28:b3:7d:12:08:90: 00:e6:3e:e7:fc:64:cd:01:b6:f2:2f:30:db:cf:a6:f4:83:05: 7e:c0:2a:ef:9c:6c:4d:57:37:07:39:33:f2:86:d3:92:9a:a8: f0:ff:a3:5e:5f:84:3e:45:39:bd:45:26:2e:c7:67:73:ca:33: 6d:37:69:83:9d:1f:bd:85:ac:87:c8:f3:96:5a:2e:b2:9f:90: 11:ab:f8:04:bd:b2:54:fc:19:c4:de:1e:f7:18:5a:a2:c8:12: 44:86:7a:a7:68:0c:72:52:cf:88:e5:b3:93:dc:45:f4:fc:7b: c6:84:6b:52:80:f3:b6:c6:14:73:ef:e6:b1:54:d0:bd:4c:b6: b1:2d:f1:90:a6:b9:06:33:2d:36:b0:48:83:6f:7c:5f:f2:8b: 30:e2:07:f3:d7:21:b5:9d:1d:cf:3f:d0:3d:02:c9:6f:4e:eb: cb:0a:ad:0d:9f:5c:1f:4e:c3:cc:42:c1:d1:ff:20:37:73:7a: 82:79:90:75:e7:a6:26:74:c7:7a:03:27:86:ad:76:51:36:c2: e5:fa:08:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBBNjkxMTAvBgNVBAUTKDFCNkUzMjkyQzgzNTY1NEU0OTE0OTJFNTU4NENGOTkz RjA1QkQ5OTAwHhcNMjUxMTA0MTg1NDUxWhcNMjUxMTExMTg1NDUxWjAYMRYwFAYD VQQDEw02OTBhNGJmYi1mYTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7BNH2BInBxuaPN7KVOHppelX1aDkSHykP2SYg2S6NN1XabLLM8UfUEOSZ2mb BRcKehvmD/uyqtckDNRBZk+z/7lu0C7BmOnRMGv6FBXPvOK74oEDJK7rlhSLtvZF tbHBXCmzGm+O0NIyio5S4uf9x4qIuK2g3gqzTW0RUAdrzNH3DrDPG81TRft75b5u /9dcxLgiU4B/rH8fen8TczsDkjcW3gb3uJ82hBbTxIfcIKWESZBHcAY6sN2+F43v Sa7AnnWu1R3O+6FBthc4ein9VSimH/+2keLI2vnnM3xDMFTksxKBq7Vz6lEc8Rkl afpGLysAgmULtrE42cGKIsV53wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCSELZvc Ov6BfbwImIu7yNHZKW+hMB8GA1UdIwQYMBaAFBtuMpLINWVOSRSS5VhM+ZPwW9mQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEE2OS9FM0FCRDA0MjIx NDExMUVBQkRGNjc3NjlDNEY5QUUwMi9HMjR5a3NnMVpVNUpGSkxsV0V6NWtfQmIy WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cyNHlrc2cxWlU1SkZKTGxXRXo1a19CYjJaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEE2OS9FM0FCRDA0MjIxNDExMUVBQkRGNjc3NjlDNEY5QUUwMi9HMjR5a3NnMVpV NUpGSkxsV0V6NWtfQmIyWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCBUzTLtMH5wL3ExJHJ7Gcyw8rvazkfI32aVHjrH+nY4KfeT/R+/ad 0Pnvl6pW1qsos30SCJAA5j7n/GTNAbbyLzDbz6b0gwV+wCrvnGxNVzcHOTPyhtOS mqjw/6NeX4Q+RTm9RSYux2dzyjNtN2mDnR+9hayHyPOWWi6yn5ARq/gEvbJU/BnE 3h73GFqiyBJEhnqnaAxyUs+I5bOT3EX0/HvGhGtSgPO2xhRz7+axVNC9TLaxLfGQ prkGMy02sEiDb3xf8osw4gfz1yG1nR3PP9A9AslvTuvLCq0Nn1wfTsPMQsHR/yA3 c3qCeZB156YmdMd6AyeGrXZRNsLl+ghI -----END CERTIFICATE-----Generated at Wed Nov 5 18:09:36 2025 by rpki-client