$ rpki-client -vvf rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft File: GagF0CaVVoPz_uVj-Oagonjwv3E.mft (raw, json) Hash identifier: r6dfGUgOFe+1DtZFJ60KKPFPAjUJ3xL/wupO56BkFus= Subject key identifier: 09:0E:2C:90:E2:97:38:57:7E:84:83:40:8D:F8:11:8B:0A:B7:1D:74 Authority key identifier: 19:A8:05:D0:26:95:56:83:F3:FE:E5:63:F8:E6:A0:A2:78:F0:BF:71 Certificate issuer: /CN=A912111B/serialNumber=19A805D026955683F3FEE563F8E6A0A278F0BF71 Certificate serial: 06A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft Manifest number: 06A2 Signing time: Wed 22 Oct 2025 23:12:46 +0000 Manifest this update: Wed 22 Oct 2025 23:12:46 +0000 Manifest next update: Wed 29 Oct 2025 23:12:46 +0000 Files and hashes: 1: GagF0CaVVoPz_uVj-Oagonjwv3E.crl (hash: Ly5SaHP4f1xVVSAAxvDGrfPQnECzDdl/KX+Zpsc96aw=) 2: 6D3057FC85F511EBB5C36F09C4F9AE02.roa (hash: j+dLoRV+1O81d7fGrVAaKGQRyaLFal/pTYtw+D6AbWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.crl rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 23:12:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1704 (0x6a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912111B, serialNumber=19A805D026955683F3FEE563F8E6A0A278F0BF71 Validity Not Before: Oct 22 23:12:46 2025 GMT Not After : Oct 29 23:12:46 2025 GMT Subject: CN=68f964ee-94c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:51:f8:63:58:45:ce:da:0b:39:92:16:8f:a8: 37:33:fe:1d:8f:5a:25:4b:1f:64:a7:e9:9d:8c:ed: 7a:98:e8:8b:20:0e:50:c1:47:45:9d:4e:87:db:0d: 71:35:45:7f:ad:b0:ab:c0:24:c5:91:fd:bd:fe:a6: 39:11:25:ef:6e:5d:87:9a:94:fc:b2:e4:7e:a5:83: 11:18:17:0f:35:ca:e7:0d:da:fa:0e:e0:5f:1f:6f: 4a:dc:44:c2:bc:87:0c:21:c9:ff:ba:cc:24:5f:98: 7e:9b:32:a7:02:45:1a:a6:a0:8a:f7:34:d3:27:a9: 4f:f3:80:62:29:2a:2c:38:14:a7:79:b0:9d:38:f2: 1a:26:48:0c:98:9c:2f:35:be:e8:8e:e3:87:75:51: 5c:7c:23:cd:f6:81:46:cc:f5:80:96:07:4c:37:85: 9e:12:b5:b0:8c:9a:86:01:4a:5a:4c:ff:25:56:5d: 8b:f0:fe:39:49:40:29:21:2e:c9:2d:5c:5c:f8:ce: f6:3b:ae:dd:6d:87:e0:41:1b:9c:21:02:e7:62:02: 06:99:24:cf:cc:f9:f0:bf:c8:95:d9:82:2a:65:5e: ab:03:26:d0:4a:81:66:a1:ac:19:8e:67:51:13:f5: c1:bb:8d:2e:1f:44:c3:cb:bc:f0:26:81:0e:79:b5: 69:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0E:2C:90:E2:97:38:57:7E:84:83:40:8D:F8:11:8B:0A:B7:1D:74 X509v3 Authority Key Identifier: keyid:19:A8:05:D0:26:95:56:83:F3:FE:E5:63:F8:E6:A0:A2:78:F0:BF:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:6a:01:70:f9:cf:b1:e1:4b:f0:73:48:b8:db:24:eb:b7:6c: cf:88:07:16:67:d1:02:86:3c:57:78:34:3c:4e:b0:23:19:37: 8e:54:d6:73:4e:3e:a9:35:ad:1e:0e:72:b3:8e:a7:f9:ec:53: 40:fe:64:94:a5:9f:e0:e6:25:c9:c6:61:68:81:d3:15:35:3a: e3:60:6d:d2:a7:01:c7:3e:2d:33:81:63:08:33:65:bd:3b:44: 0f:70:7a:1c:75:3b:5c:40:ed:19:aa:d0:93:71:ef:93:44:e8: 7e:ac:d1:73:c4:e5:02:57:e7:84:f3:bd:fd:89:55:29:bf:2b: 34:8b:28:99:c2:0e:44:2f:dc:c7:bf:6d:e6:d2:da:ae:69:a4: 96:f9:3f:fd:9b:f2:17:3d:6b:9f:85:c6:41:78:07:5a:a5:a4: c7:54:ec:34:15:b8:c5:db:67:ee:77:f7:0d:57:32:33:9e:0d: 1d:dc:86:a3:75:85:1e:61:83:bf:93:2f:67:4b:6b:97:b3:c0: bf:8a:4c:8a:ea:ea:79:b9:b0:5b:6b:2b:26:5c:ca:f0:ec:d1: 13:df:b0:ef:5d:4f:05:27:c8:4d:3e:67:58:d3:83:57:58:06: 35:a5:11:37:8d:c8:40:97:e9:bc:a6:06:4c:ee:53:b5:e0:ba: 66:56:97:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjExMUIxMTAvBgNVBAUTKDE5QTgwNUQwMjY5NTU2ODNGM0ZFRTU2M0Y4RTZBMEEy NzhGMEJGNzEwHhcNMjUxMDIyMjMxMjQ2WhcNMjUxMDI5MjMxMjQ2WjAYMRYwFAYD VQQDEw02OGY5NjRlZS05NGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1H4Y1hFztoLOZIWj6g3M/4dj1olSx9kp+mdjO16mOiLIA5QwUdFnU6H2w1x NUV/rbCrwCTFkf29/qY5ESXvbl2HmpT8suR+pYMRGBcPNcrnDdr6DuBfH29K3ETC vIcMIcn/uswkX5h+mzKnAkUapqCK9zTTJ6lP84BiKSosOBSnebCdOPIaJkgMmJwv Nb7ojuOHdVFcfCPN9oFGzPWAlgdMN4WeErWwjJqGAUpaTP8lVl2L8P45SUApIS7J LVxc+M72O67dbYfgQRucIQLnYgIGmSTPzPnwv8iV2YIqZV6rAybQSoFmoawZjmdR E/XBu40uH0TDy7zwJoEOebVp5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAkOLJDi lzhXfoSDQI34EYsKtx10MB8GA1UdIwQYMBaAFBmoBdAmlVaD8/7lY/jmoKJ48L9x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTExQi8zQkQyOEYxQTg1 RjMxMUVCQTEwNDJEODBDNEY5QUUwMi9HYWdGMENhVlZvUHpfdVZqLU9hZ29uand2 M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dhZ0YwQ2FWVm9Qel91VmotT2Fnb25qd3YzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTExQi8zQkQyOEYxQTg1RjMxMUVCQTEwNDJEODBDNEY5QUUwMi9HYWdGMENhVlZv UHpfdVZqLU9hZ29uand2M0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpagFw+c+x4Uvwc0i42yTrt2zPiAcWZ9EChjxXeDQ8TrAjGTeOVNZz Tj6pNa0eDnKzjqf57FNA/mSUpZ/g5iXJxmFogdMVNTrjYG3SpwHHPi0zgWMIM2W9 O0QPcHocdTtcQO0ZqtCTce+TROh+rNFzxOUCV+eE8739iVUpvys0iyiZwg5EL9zH v23m0tquaaSW+T/9m/IXPWufhcZBeAdapaTHVOw0FbjF22fud/cNVzIzng0d3Iaj dYUeYYO/ky9nS2uXs8C/ikyK6up5ubBbaysmXMrw7NET37DvXU8FJ8hNPmdY04NX WAY1pRE3jchAl+m8pgZM7lO14LpmVpeF -----END CERTIFICATE-----Generated at Sat Oct 25 00:04:46 2025 by rpki-client