$ rpki-client -vvf rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft File: G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft (raw, json) Hash identifier: du0KX6XEQzYLzGNgVSLUZzkdTYRQl5Qid4bLYP2CUjs= Subject key identifier: BA:13:0E:E0:D7:61:2A:EC:E8:10:59:96:08:18:4F:FE:01:F7:90:89 Authority key identifier: 1B:E8:D0:7A:AD:0E:B8:09:64:3D:0E:8D:D8:A4:23:57:03:D4:F7:45 Certificate issuer: /CN=A912611F/serialNumber=1BE8D07AAD0EB809643D0E8DD8A4235703D4F745 Certificate serial: 0981 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft Manifest number: 19A0 Signing time: Sun 02 Nov 2025 17:26:05 +0000 Manifest this update: Sun 02 Nov 2025 17:26:05 +0000 Manifest next update: Sun 09 Nov 2025 17:26:05 +0000 Files and hashes: 1: G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl (hash: Q1YnO4jG7hkRt/uDqBQ2pqi9ECHadwDpAdvC4Eona0Q=) 2: F70F5E7A505E11ED9947920DC4F9AE02.roa (hash: i9BL1rlX0oUvps1Va07G59cz+t1l/lyXzZ/KRVLbWW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:26:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2433 (0x981) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912611F, serialNumber=1BE8D07AAD0EB809643D0E8DD8A4235703D4F745 Validity Not Before: Nov 2 17:26:05 2025 GMT Not After : Nov 9 17:26:05 2025 GMT Subject: CN=6907942d-bf1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:24:0d:0d:6f:df:2f:37:80:04:11:ec:9e:cb: 14:ea:09:d9:aa:94:84:d6:c3:25:79:4a:fe:33:79: 18:b8:38:cf:68:f1:39:ca:90:91:dd:4f:c2:82:ae: f2:bd:bb:09:31:35:05:c6:ae:41:0e:37:c0:40:8e: ea:25:50:f6:a7:9a:ef:75:38:74:e0:3a:a4:28:5d: a0:7e:bb:1e:77:82:ae:66:c5:1d:89:46:4c:37:71: bb:fa:26:f2:95:22:0d:48:b9:07:eb:4a:bc:0e:bf: 25:25:ed:08:e4:6a:de:ea:ed:1f:be:5f:a1:2c:b2: f2:0d:6f:63:8c:5c:df:47:7a:d8:51:fe:45:d4:65: e2:c3:3e:a7:47:38:33:ba:94:e4:27:c5:b9:5c:b7: 41:d2:15:93:a4:d9:02:f4:b1:a5:21:27:7e:94:64: 79:24:c2:06:87:cb:b1:53:46:df:78:36:65:ae:41: 17:19:9b:2b:4c:ff:2d:bb:d9:46:2d:6c:f2:53:a5: 3b:bc:53:5b:97:f2:12:18:7a:21:7f:9b:51:d8:13: b9:10:86:28:a9:61:6c:d9:84:fd:b6:89:e8:c9:b7: 86:ef:a5:c7:21:22:45:90:b7:b4:29:4f:6b:65:97: 46:cb:02:ae:df:a6:ee:eb:65:fe:dc:66:ac:c1:67: 6e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:13:0E:E0:D7:61:2A:EC:E8:10:59:96:08:18:4F:FE:01:F7:90:89 X509v3 Authority Key Identifier: keyid:1B:E8:D0:7A:AD:0E:B8:09:64:3D:0E:8D:D8:A4:23:57:03:D4:F7:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:20:06:6f:39:ad:ce:60:1f:ca:c3:32:a1:4b:60:48:eb:5a: eb:39:3d:89:aa:a8:a9:81:33:f5:a5:b2:b1:20:43:fb:b0:a4: 5f:71:27:83:08:89:04:b8:47:0e:9d:7b:93:b1:3a:76:5c:13: 7c:47:f4:52:a4:58:82:d7:d1:60:f7:79:af:ea:e1:53:d5:e6: 90:e6:af:41:8f:3d:67:87:7a:9d:56:26:e0:4f:ba:d9:e4:01: e5:fb:1f:59:09:1a:a2:cc:56:1b:70:dc:44:5a:1e:2a:a5:8a: 05:96:fe:8c:ee:b3:0b:23:77:0d:9a:10:8e:2b:4a:34:67:37: 40:dd:18:7f:c6:0d:62:79:16:9c:7a:9c:03:7e:86:ba:66:c6: fe:47:63:8f:88:43:00:29:8b:1d:eb:6c:c8:bd:7e:f0:ae:e3: a7:e0:33:1f:a6:f4:5d:6e:e6:cb:a0:b9:4c:a1:d0:80:f8:66: f2:92:69:6f:8b:d7:32:39:71:39:4e:d3:3d:29:49:ec:57:d2: 3c:dc:89:f5:95:cc:f5:1e:b5:89:89:2d:5d:aa:ab:32:f6:ed: f6:0a:9b:fc:c5:54:9c:78:cf:8d:31:fd:25:c3:96:20:6f:33: 16:a1:d2:ad:16:d6:7c:55:3d:65:5b:4b:64:ce:ba:66:59:ba: 6a:b4:b5:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYxMUYxMTAvBgNVBAUTKDFCRThEMDdBQUQwRUI4MDk2NDNEMEU4REQ4QTQyMzU3 MDNENEY3NDUwHhcNMjUxMTAyMTcyNjA1WhcNMjUxMTA5MTcyNjA1WjAYMRYwFAYD VQQDEw02OTA3OTQyZC1iZjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyQNDW/fLzeABBHsnssU6gnZqpSE1sMleUr+M3kYuDjPaPE5ypCR3U/Cgq7y vbsJMTUFxq5BDjfAQI7qJVD2p5rvdTh04DqkKF2gfrsed4KuZsUdiUZMN3G7+iby lSINSLkH60q8Dr8lJe0I5Gre6u0fvl+hLLLyDW9jjFzfR3rYUf5F1GXiwz6nRzgz upTkJ8W5XLdB0hWTpNkC9LGlISd+lGR5JMIGh8uxU0bfeDZlrkEXGZsrTP8tu9lG LWzyU6U7vFNbl/ISGHohf5tR2BO5EIYoqWFs2YT9tonoybeG76XHISJFkLe0KU9r ZZdGywKu36bu62X+3GaswWduMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLoTDuDX YSrs6BBZlggYT/4B95CJMB8GA1UdIwQYMBaAFBvo0HqtDrgJZD0OjdikI1cD1PdF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjExRi80QThCMDRFQTRD N0MxMUU5ODFBNDM5NjlDNEY5QUUwMi9HLWpRZXEwT3VBbGtQUTZOMktRalZ3UFU5 MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ctalFlcTBPdUFsa1BRNk4yS1FqVndQVTkwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjExRi80QThCMDRFQTRDN0MxMUU5ODFBNDM5NjlDNEY5QUUwMi9HLWpRZXEwT3VB bGtQUTZOMktRalZ3UFU5MFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKIAZvOa3OYB/KwzKhS2BI61rrOT2JqqipgTP1pbKxIEP7sKRfcSeD CIkEuEcOnXuTsTp2XBN8R/RSpFiC19Fg93mv6uFT1eaQ5q9Bjz1nh3qdVibgT7rZ 5AHl+x9ZCRqizFYbcNxEWh4qpYoFlv6M7rMLI3cNmhCOK0o0ZzdA3Rh/xg1ieRac epwDfoa6Zsb+R2OPiEMAKYsd62zIvX7wruOn4DMfpvRdbubLoLlModCA+Gbykmlv i9cyOXE5TtM9KUnsV9I83In1lcz1HrWJiS1dqqsy9u32Cpv8xVSceM+NMf0lw5Yg bzMWodKtFtZ8VT1lW0tkzrpmWbpqtLUh -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:40 2025 by rpki-client