$ rpki-client -vvf rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft File: gAcXZemLOWEliNN4VyFDLDJgf-4.mft (raw, json) Hash identifier: WzMiV+z0URyYNxlY9qHGssiwjRdjK3ba7ZvzzXDWZn0= Subject key identifier: F7:EF:5B:6B:0B:47:20:CF:FB:BE:31:D7:CC:F6:8B:DE:B7:96:02:72 Authority key identifier: 80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE Certificate issuer: /CN=A911F584/serialNumber=80071765E98B39612588D3785721432C32607FEE Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft Manifest number: 14 Signing time: Mon 03 Nov 2025 07:54:43 +0000 Manifest this update: Mon 03 Nov 2025 07:54:42 +0000 Manifest next update: Mon 10 Nov 2025 07:54:42 +0000 Files and hashes: 1: gAcXZemLOWEliNN4VyFDLDJgf-4.crl (hash: gOzsg5uXZCkOik6bYs8K75Rr+f7QPSstrwWU6iekt4o=) 2: D7E9A8C49DAA11F0A24E4963C4F9AE02.roa (hash: Ty3keWksVpROp5e1j4cINLe1/6qFn8g6RY9zGQ2Ec2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:54:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F584, serialNumber=80071765E98B39612588D3785721432C32607FEE Validity Not Before: Nov 3 07:54:42 2025 GMT Not After : Nov 10 07:54:42 2025 GMT Subject: CN=69085fc2-7638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1e:91:5e:a1:31:8a:76:ea:da:b4:b9:d4:06: a9:18:38:49:4c:5a:39:ef:87:1c:75:c5:c8:4f:c0: 56:75:c7:1f:5f:ea:28:f7:60:c4:68:19:4b:bb:3d: 99:0e:c4:d7:74:15:4d:81:c2:96:cc:56:15:36:17: 4e:36:ab:3a:ea:3c:69:2b:c9:70:53:62:c9:a5:25: 99:c9:13:ef:c4:75:63:15:f0:ca:04:59:75:7e:18: ec:0f:ff:b2:32:43:1f:ab:2d:f1:5f:96:55:2a:bb: fb:e7:94:92:bc:ce:6b:0c:d9:e2:50:de:45:48:2a: da:d6:22:1b:30:73:06:bf:9f:e0:e0:61:97:21:5a: bc:6e:8d:6b:de:61:6c:ce:13:b9:de:0a:27:87:f5: 91:e1:7a:e3:61:21:22:6c:f8:13:d1:e6:ea:93:7b: b4:ff:dc:d2:ba:08:d5:e6:c5:cf:01:f7:b8:91:02: 06:8c:7c:78:c1:ce:71:71:e7:d1:df:f1:88:e3:39: 34:e0:b9:67:72:28:cb:a2:39:f4:41:88:74:35:c9: 4b:49:c4:67:53:b5:17:03:4e:2f:cc:98:3c:ab:eb: 7a:a8:48:6a:02:f6:52:5e:ed:48:eb:e0:e3:18:2c: d2:a6:82:11:04:65:30:8f:35:03:e0:32:56:c6:99: 4a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:EF:5B:6B:0B:47:20:CF:FB:BE:31:D7:CC:F6:8B:DE:B7:96:02:72 X509v3 Authority Key Identifier: keyid:80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:e2:a3:39:6d:58:bd:26:5c:6c:2c:24:10:aa:8c:e9:dc:7c: 57:fa:2d:2b:cc:c6:58:6e:9d:af:c4:90:12:29:9c:2c:c5:e7: 14:30:dc:31:44:8b:0e:2b:61:58:5b:2e:17:0d:6f:7d:d1:d7: 11:5a:f1:1c:97:61:00:2c:99:79:9f:95:48:dc:96:d5:82:ed: e3:90:da:4c:e1:a8:ce:15:10:f7:0f:44:7e:15:f7:21:b9:ea: ac:1f:42:61:e0:45:3b:ba:01:a5:d0:b1:91:01:76:9d:de:3f: 2c:99:c6:ed:8b:6a:b1:81:17:25:a2:83:19:c2:7d:b5:f8:8c: 5a:e6:69:74:6e:43:f4:5d:4f:c0:97:bb:9a:25:42:1e:cc:60: 1b:fc:3a:93:4a:26:a1:d1:2e:72:30:a8:3c:64:e5:31:07:2b: 7d:b1:5f:25:3e:68:46:e0:ca:a6:d5:a6:3c:19:d3:df:9d:21: dc:b0:2f:52:fa:8d:32:06:36:bb:00:d1:0e:9d:6c:0b:87:67: fa:03:f4:4e:ae:62:4a:8c:84:c6:8e:66:a6:50:b8:7a:9d:27: a2:25:2f:9d:2b:cc:be:55:8b:4b:80:b0:10:9f:b5:f1:1e:49: a9:60:98:fb:a0:0e:6a:e1:40:bd:97:d2:28:b6:d5:b1:fe:8d: 09:9d:1c:0c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RjU4NDExMC8GA1UEBRMoODAwNzE3NjVFOThCMzk2MTI1ODhEMzc4NTcyMTQzMkMz MjYwN0ZFRTAeFw0yNTExMDMwNzU0NDJaFw0yNTExMTAwNzU0NDJaMBgxFjAUBgNV BAMTDTY5MDg1ZmMyLTc2MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoHpFeoTGKduratLnUBqkYOElMWjnvhxx1xchPwFZ1xx9f6ij3YMRoGUu7PZkO xNd0FU2BwpbMVhU2F042qzrqPGkryXBTYsmlJZnJE+/EdWMV8MoEWXV+GOwP/7Iy Qx+rLfFfllUqu/vnlJK8zmsM2eJQ3kVIKtrWIhswcwa/n+DgYZchWrxujWveYWzO E7neCieH9ZHheuNhISJs+BPR5uqTe7T/3NK6CNXmxc8B97iRAgaMfHjBznFx59Hf 8YjjOTTguWdyKMuiOfRBiHQ1yUtJxGdTtRcDTi/MmDyr63qoSGoC9lJe7Ujr4OMY LNKmghEEZTCPNQPgMlbGmUr1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9+9bawtH IM/7vjHXzPaL3reWAnIwHwYDVR0jBBgwFoAUgAcXZemLOWEliNN4VyFDLDJgf+4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNTg0L0ZGRjgwMjE4OURB ODExRjBBRURBM0YzQUM0RjlBRTAyL2dBY1haZW1MT1dFbGlOTjRWeUZETERKZ2Yt NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ0FjWFplbUxPV0VsaU5ONFZ5RkRMREpnZi00LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG NTg0L0ZGRjgwMjE4OURBODExRjBBRURBM0YzQUM0RjlBRTAyL2dBY1haZW1MT1dF bGlOTjRWeUZETERKZ2YtNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMziozltWL0mXGwsJBCqjOncfFf6LSvMxlhuna/EkBIpnCzF5xQw3DFE iw4rYVhbLhcNb33R1xFa8RyXYQAsmXmflUjcltWC7eOQ2kzhqM4VEPcPRH4V9yG5 6qwfQmHgRTu6AaXQsZEBdp3ePyyZxu2LarGBFyWigxnCfbX4jFrmaXRuQ/RdT8CX u5olQh7MYBv8OpNKJqHRLnIwqDxk5TEHK32xXyU+aEbgyqbVpjwZ09+dIdywL1L6 jTIGNrsA0Q6dbAuHZ/oD9E6uYkqMhMaOZqZQuHqdJ6IlL50rzL5Vi0uAsBCftfEe SalgmPugDmrhQL2X0ii21bH+jQmdHAw= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:57 2025 by rpki-client