$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft File: gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft (raw, json) Hash identifier: ShS/qt5xlu8iduOo5PqD5qm/6Ek6mDjNmRyLUt1uUr0= Subject key identifier: 9A:9C:76:3D:31:35:5F:56:E1:52:C6:0B:2E:5F:6F:E6:AD:77:E0:EB Authority key identifier: 80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 Certificate issuer: /CN=A911DA8C/serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Certificate serial: 0368 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft Manifest number: 0363 Signing time: Mon 03 Nov 2025 00:54:03 +0000 Manifest this update: Mon 03 Nov 2025 00:54:03 +0000 Manifest next update: Mon 10 Nov 2025 00:54:03 +0000 Files and hashes: 1: gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl (hash: ssKp0QMjT5BjcUtBt2Gk2LKiCXEm+HIg+7UjcmEAK0o=) 2: D0279B7AD10A11ECA78C081CC4F9AE02.roa (hash: rpEeJfHec6qq3m3hz9oQ0Fj5z6c+WSBf/B8pGM1lwQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:54:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 872 (0x368) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DA8C, serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Validity Not Before: Nov 3 00:54:03 2025 GMT Not After : Nov 10 00:54:03 2025 GMT Subject: CN=6907fd2b-5143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2b:81:59:b4:5a:10:a6:9c:08:3a:98:2e:93: 4a:5e:79:64:8b:8a:11:1b:d8:81:64:3e:ea:1a:02: 48:49:a9:3c:37:72:e8:79:55:f6:2e:36:89:94:a9: 89:44:dd:8b:44:23:e8:99:86:eb:29:dc:b4:72:c7: 58:c6:bc:23:37:94:b0:0e:5d:c1:e1:c9:b5:b6:78: 2d:b8:9d:fc:bd:4f:b9:f5:d0:af:00:4e:43:42:07: 31:85:31:f1:ad:38:26:90:91:10:7a:bc:2d:9b:af: 0f:c1:3e:b9:87:7c:ad:b6:c8:0b:0d:22:4c:5d:5b: 78:66:d0:ef:43:f0:12:4e:a7:19:f2:d7:71:f4:2b: 98:42:87:6b:3a:cf:a7:4c:91:5b:05:aa:33:22:c4: 99:11:dc:3c:cc:80:ff:eb:2e:ac:40:bf:5a:89:5e: 20:fd:7e:66:f0:95:89:d6:a3:2e:66:26:83:bb:98: d9:4c:2f:ca:80:01:45:3b:6e:bd:fd:fa:b8:e5:e3: d1:79:3c:a5:c5:df:77:d9:0a:2f:8c:de:2e:92:47: 5b:58:98:2e:1a:41:b8:2a:15:f9:e2:00:1a:da:5b: e4:9b:66:68:bf:55:7d:bb:58:09:d1:81:f6:18:da: ce:b9:cc:30:8f:5b:ec:d6:9d:2a:20:44:cd:ae:5a: 31:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:9C:76:3D:31:35:5F:56:E1:52:C6:0B:2E:5F:6F:E6:AD:77:E0:EB X509v3 Authority Key Identifier: keyid:80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:69:34:97:d9:57:e7:f8:bd:3e:c9:ef:45:cf:25:ca:36:9f: 82:67:6f:11:a3:87:93:20:16:49:e7:0d:12:8f:ab:8c:c0:b6: 97:01:42:c0:45:82:ea:0e:62:4d:6b:24:d6:90:32:32:e8:a9: b5:69:9e:75:3e:9b:25:88:56:ef:3c:93:63:2e:79:50:30:a3: 63:bd:81:0f:55:0f:5c:6c:a9:13:0e:1e:bb:99:0f:0b:09:2f: 0b:f5:a8:bd:ef:f9:ca:3f:21:b5:70:37:5a:12:fa:f1:a3:4a: f0:87:6f:31:2d:75:c9:59:31:f3:ed:6f:3d:6f:5f:78:1e:dc: 4b:7f:c6:07:e3:63:2d:09:6e:58:d7:32:8b:a4:0a:43:24:b2: e2:1f:4b:d4:af:f8:36:9b:fc:73:e5:30:bf:dc:ab:5b:9d:26: 74:c8:43:17:d3:06:49:7a:ea:48:14:23:15:89:3a:e5:46:67: 86:a2:dd:98:d1:e1:52:a2:6d:54:6c:2d:61:66:69:06:a9:a0: 0f:68:aa:2e:c4:df:ce:f4:27:7e:05:4c:b9:23:a6:a4:2a:cb: 16:42:e8:b5:b7:7f:cb:ba:ff:00:e8:cf:bd:52:45:6a:39:85: 07:a1:f9:0e:72:f5:4f:7f:41:79:06:5e:a8:61:36:fd:2f:53: 65:53:45:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURBOEMxMTAvBgNVBAUTKDgwMzE4ODZFN0U2MDlFNEY0QTM0NkE0NTEwODExMDQw Njg3NUZFQzgwHhcNMjUxMTAzMDA1NDAzWhcNMjUxMTEwMDA1NDAzWjAYMRYwFAYD VQQDEw02OTA3ZmQyYi01MTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlSuBWbRaEKacCDqYLpNKXnlki4oRG9iBZD7qGgJISak8N3LoeVX2LjaJlKmJ RN2LRCPomYbrKdy0csdYxrwjN5SwDl3B4cm1tngtuJ38vU+59dCvAE5DQgcxhTHx rTgmkJEQerwtm68PwT65h3yttsgLDSJMXVt4ZtDvQ/ASTqcZ8tdx9CuYQodrOs+n TJFbBaozIsSZEdw8zID/6y6sQL9aiV4g/X5m8JWJ1qMuZiaDu5jZTC/KgAFFO269 /fq45ePReTylxd932QovjN4ukkdbWJguGkG4KhX54gAa2lvkm2Zov1V9u1gJ0YH2 GNrOucwwj1vs1p0qIETNrloxCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqcdj0x NV9W4VLGCy5fb+atd+DrMB8GA1UdIwQYMBaAFIAxiG5+YJ5PSjRqRRCBEEBodf7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE4Qy9GMzE2NEMyMEQx MDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25rOUtOR3BGRUlFUVFHaDFf c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dER0libjVnbms5S05HcEZFSUVRUUdoMV9zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REE4Qy9GMzE2NEMyMEQxMDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25r OUtOR3BGRUlFUVFHaDFfc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkaTSX2Vfn+L0+ye9FzyXKNp+CZ28Ro4eTIBZJ5w0Sj6uMwLaXAULA RYLqDmJNayTWkDIy6Km1aZ51PpsliFbvPJNjLnlQMKNjvYEPVQ9cbKkTDh67mQ8L CS8L9ai97/nKPyG1cDdaEvrxo0rwh28xLXXJWTHz7W89b194HtxLf8YH42MtCW5Y 1zKLpApDJLLiH0vUr/g2m/xz5TC/3KtbnSZ0yEMX0wZJeupIFCMViTrlRmeGot2Y 0eFSom1UbC1hZmkGqaAPaKouxN/O9Cd+BUy5I6akKssWQui1t3/Luv8A6M+9UkVq OYUHofkOcvVPf0F5Bl6oYTb9L1NlU0Vk -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:21 2025 by rpki-client