$ rpki-client -vvf rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft File: giq84EQXvhV7KDO6OwIw3iOEwkA.mft (raw, json) Hash identifier: llqXFEDNooSxyDNQKfE6wK8phQEZPolIZzM8OyCfP1w= Subject key identifier: 7B:5A:14:FB:19:C6:0F:B2:3D:6F:CA:FB:E4:CB:1F:DB:88:B4:D2:B3 Authority key identifier: 82:2A:BC:E0:44:17:BE:15:7B:28:33:BA:3B:02:30:DE:23:84:C2:40 Certificate issuer: /CN=A911FCC1/serialNumber=822ABCE04417BE157B2833BA3B0230DE2384C240 Certificate serial: 0BB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft Manifest number: 0BAB Signing time: Tue 04 Nov 2025 19:03:15 +0000 Manifest this update: Tue 04 Nov 2025 19:03:14 +0000 Manifest next update: Tue 11 Nov 2025 19:03:14 +0000 Files and hashes: 1: giq84EQXvhV7KDO6OwIw3iOEwkA.crl (hash: 8NK9Xkx8DNhXd/2y9GOTwTfgyJkymXzwxku0XcH1Ugs=) 2: BFB35A9831E011EA91E99C3CC4F9AE02.roa (hash: 0GHCZ6nEXf3be8gydYVqGJhj2BigeoKuyRGIxasVxbo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.crl rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2993 (0xbb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FCC1, serialNumber=822ABCE04417BE157B2833BA3B0230DE2384C240 Validity Not Before: Nov 4 19:03:14 2025 GMT Not After : Nov 11 19:03:14 2025 GMT Subject: CN=690a4df2-7c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:be:50:13:0d:47:ea:2a:cd:a2:56:30:47:2a: 25:d6:ed:5f:be:75:19:17:de:84:dc:63:78:0a:f8: e6:3e:7e:1d:b5:d6:27:89:41:4c:47:75:18:a2:49: 5d:9e:55:2f:b0:4f:0e:47:d0:87:1b:af:6a:77:76: 74:d0:42:c5:3f:88:3e:72:9a:8f:df:5e:6f:f3:bc: b9:d9:c3:d4:fa:7b:d0:4c:df:4e:de:8d:fe:f4:41: 58:38:92:ae:9b:cd:c5:0f:95:fe:1a:d4:66:d6:cc: 02:d7:a2:8c:3a:4f:dd:2c:11:b3:fd:5a:18:dc:5b: 94:a2:bc:4a:56:00:a7:6d:7f:02:8e:e3:c0:1e:f3: 32:fd:25:44:de:a6:18:c6:a5:38:5e:7f:e3:2a:75: f6:58:17:c9:5a:8e:3c:e2:68:ea:de:78:d2:b0:ad: 8c:d2:fc:3b:ac:46:88:a0:07:4b:6b:d5:c7:1f:10: f5:f5:98:e1:b4:c0:fc:ad:2e:8b:66:04:7a:ce:8e: 8f:72:0b:6c:6b:6d:45:d7:e5:77:f9:9f:42:23:47: c6:14:d1:81:6e:d4:a9:61:be:b1:fc:f9:9f:b5:c9: 49:b8:89:30:29:cb:f3:63:7b:24:a5:01:b6:a3:23: 06:cc:44:5b:50:ce:9f:57:4f:6a:f4:cf:a8:39:4b: cd:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:5A:14:FB:19:C6:0F:B2:3D:6F:CA:FB:E4:CB:1F:DB:88:B4:D2:B3 X509v3 Authority Key Identifier: keyid:82:2A:BC:E0:44:17:BE:15:7B:28:33:BA:3B:02:30:DE:23:84:C2:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:96:96:df:2e:3c:f0:fd:eb:45:f9:90:c6:da:53:a9:6c:9f: bf:d4:0e:5c:57:aa:fb:f7:93:76:ed:88:18:f2:1b:43:10:3a: a4:e8:c7:27:96:2f:ca:08:97:11:61:72:d4:fe:37:50:c7:4e: db:d1:5e:a9:11:63:e2:16:4c:49:07:00:8f:a9:15:1b:92:92: 0e:12:b9:2d:9e:23:e7:86:d7:a6:e8:5d:96:11:3f:91:08:d8: aa:a4:70:e2:15:09:52:98:58:39:b4:d0:91:85:a3:ec:51:90: 51:b3:24:1e:03:74:67:09:74:12:dc:2d:a1:c1:54:56:ee:05: 24:38:cb:52:7a:e6:d8:89:b1:ad:f3:8f:cb:77:a8:24:93:a4: 25:69:14:91:78:72:5e:57:4b:d1:7a:1b:c9:a6:a0:fa:c5:fe: 78:a9:ed:d3:98:a1:a3:d3:a1:ea:26:28:6a:2f:ff:96:1a:f2: f8:73:2d:ff:c3:60:c2:f7:d3:e3:1f:d1:b5:d2:8b:45:e6:c7: 19:fa:f6:14:89:03:1b:65:30:f4:08:b7:77:cd:1a:84:4e:a7: 1e:f6:2d:8f:ee:82:cd:29:b8:a1:43:f1:da:8d:e7:b8:5b:93: 75:dd:e4:89:d2:57:98:f6:94:aa:13:a6:84:ac:87:1a:4d:cf: c0:00:89:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZDQzExMTAvBgNVBAUTKDgyMkFCQ0UwNDQxN0JFMTU3QjI4MzNCQTNCMDIzMERF MjM4NEMyNDAwHhcNMjUxMTA0MTkwMzE0WhcNMjUxMTExMTkwMzE0WjAYMRYwFAYD VQQDEw02OTBhNGRmMi03YzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwr5QEw1H6irNolYwRyol1u1fvnUZF96E3GN4CvjmPn4dtdYniUFMR3UYokld nlUvsE8OR9CHG69qd3Z00ELFP4g+cpqP315v87y52cPU+nvQTN9O3o3+9EFYOJKu m83FD5X+GtRm1swC16KMOk/dLBGz/VoY3FuUorxKVgCnbX8CjuPAHvMy/SVE3qYY xqU4Xn/jKnX2WBfJWo484mjq3njSsK2M0vw7rEaIoAdLa9XHHxD19ZjhtMD8rS6L ZgR6zo6Pcgtsa21F1+V3+Z9CI0fGFNGBbtSpYb6x/PmftclJuIkwKcvzY3skpQG2 oyMGzERbUM6fV09q9M+oOUvNjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtaFPsZ xg+yPW/K++TLH9uItNKzMB8GA1UdIwQYMBaAFIIqvOBEF74VeygzujsCMN4jhMJA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkNDMS8xNDk4RkM5RTMx RTAxMUVBODM3QkRFM0JDNEY5QUUwMi9naXE4NEVRWHZoVjdLRE82T3dJdzNpT0V3 a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dpcTg0RVFYdmhWN0tETzZPd0l3M2lPRXdrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkNDMS8xNDk4RkM5RTMxRTAxMUVBODM3QkRFM0JDNEY5QUUwMi9naXE4NEVRWHZo VjdLRE82T3dJdzNpT0V3a0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvlpbfLjzw/etF+ZDG2lOpbJ+/1A5cV6r795N27YgY8htDEDqk6Mcn li/KCJcRYXLU/jdQx07b0V6pEWPiFkxJBwCPqRUbkpIOErktniPnhtem6F2WET+R CNiqpHDiFQlSmFg5tNCRhaPsUZBRsyQeA3RnCXQS3C2hwVRW7gUkOMtSeubYibGt 84/Ld6gkk6QlaRSReHJeV0vRehvJpqD6xf54qe3TmKGj06HqJihqL/+WGvL4cy3/ w2DC99PjH9G10otF5scZ+vYUiQMbZTD0CLd3zRqETqce9i2P7oLNKbihQ/Hajee4 W5N13eSJ0leY9pSqE6aErIcaTc/AAIl9 -----END CERTIFICATE-----Generated at Wed Nov 5 05:26:57 2025 by rpki-client