$ rpki-client -vvf rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft File: gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft (raw, json) Hash identifier: O3NGXUtBYYM/Aa9fCgU6dcmEIyNOIGYAN9vzSp+Mnh8= Subject key identifier: 66:A4:CF:E2:A6:0E:D6:08:06:66:F9:A5:7E:91:66:41:8F:AB:13:5D Authority key identifier: 81:8B:B9:03:32:71:7F:93:57:30:DA:F1:47:08:FF:C2:F6:05:F0:5F Certificate issuer: /CN=A912CD21/serialNumber=818BB90332717F935730DAF14708FFC2F605F05F Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft Manifest number: 6E Signing time: Mon 03 Nov 2025 07:00:47 +0000 Manifest this update: Mon 03 Nov 2025 07:00:47 +0000 Manifest next update: Mon 10 Nov 2025 07:00:47 +0000 Files and hashes: 1: gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl (hash: 8Z8kyYwmvLH7xIS2yEkr0T3IeAunchvS3h0blkXCX/8=) 2: 15039C1E202F11F0AFD72717C4F9AE02.roa (hash: RNEYHFbl/lHVURQeSl/swC0oZ7j6giFqMqHaOjHDKKE=) 3: 2A2F9262201811F09DB3CC16C4F9AE02.roa (hash: /APLoPia3hJaAawAfJ/kXfLzR5xKKXFF9u0rCxKw4H8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CD21, serialNumber=818BB90332717F935730DAF14708FFC2F605F05F Validity Not Before: Nov 3 07:00:47 2025 GMT Not After : Nov 10 07:00:47 2025 GMT Subject: CN=6908531f-63a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bb:14:5a:a5:08:80:d3:27:7a:e9:6a:de:f5: e5:ba:bb:58:00:98:c3:ee:b8:a6:cc:f0:b6:b6:6c: 68:c8:78:a0:e9:8f:c1:4d:7f:9b:b8:b9:98:a5:e2: 70:9c:db:55:d9:bf:38:dd:8c:f0:00:3e:10:b0:c5: 6a:72:6d:d5:85:7d:2b:c3:23:5c:2c:52:7f:e9:39: 5b:0d:35:91:2d:e4:60:09:12:3f:49:17:b4:37:6c: 80:64:11:2c:17:05:0d:3b:b3:56:5c:90:e6:3d:20: a4:81:d6:7a:57:50:7b:67:fe:52:d5:04:c7:b2:fe: 19:68:98:bf:f9:46:11:bf:e1:30:4a:da:7c:ec:09: b3:3e:7e:59:93:55:6c:ee:bf:e8:54:c2:bd:14:77: a3:a2:2d:fd:77:3b:86:92:2a:4d:fc:99:cc:d5:df: 14:19:5e:8c:e5:0f:c4:9d:d4:aa:93:dd:d3:66:be: a2:86:1b:f7:12:02:07:5c:d9:d1:eb:b8:c6:18:39: 43:b5:a7:8d:55:2a:88:99:46:54:d7:b8:dd:14:a3: 65:92:2c:50:7b:12:90:d6:a1:c3:c5:3f:96:f8:86: 39:2b:22:73:50:bc:0e:ed:f4:e2:e9:71:e5:d0:df: eb:61:f7:c9:1a:41:44:98:68:34:2b:96:da:bb:58: f0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A4:CF:E2:A6:0E:D6:08:06:66:F9:A5:7E:91:66:41:8F:AB:13:5D X509v3 Authority Key Identifier: keyid:81:8B:B9:03:32:71:7F:93:57:30:DA:F1:47:08:FF:C2:F6:05:F0:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:5c:a5:0f:9d:21:c6:a2:ed:02:49:4c:17:12:9c:53:0d:5c: 10:99:33:85:73:dd:d5:dd:b3:21:99:c1:9d:b9:e5:04:e4:71: 78:79:61:57:a1:c1:9b:cc:01:2d:65:93:4a:6f:56:4c:46:10: 2d:c2:22:cb:7b:41:69:5f:6d:4f:cf:d4:91:5a:69:f1:a5:96: 52:2f:c8:b0:49:29:2f:45:6e:39:48:c6:06:83:9a:17:eb:30: b8:c7:b8:a7:21:c4:bd:47:0d:08:9c:75:db:a9:28:0c:7a:5c: 19:5e:96:e2:b4:8a:e2:6b:e3:61:81:c7:81:d6:c8:fc:38:c9: b2:1b:f8:c2:a2:96:20:80:dd:35:8e:2c:a6:9d:b6:39:ef:0f: b4:80:07:d9:95:cf:2a:a9:2c:41:ed:3d:2b:75:56:40:cb:31: db:19:36:9f:12:e4:89:9c:0c:5a:d0:0b:57:81:16:1d:a1:84: 5c:e4:d2:98:e9:e8:c6:d5:06:88:f4:ac:d3:f8:a8:e8:55:94: 01:c1:d2:07:df:3c:8e:44:ab:a5:ae:a3:5d:71:9d:5e:e5:7d: 84:2f:2f:cb:86:bf:06:3d:f2:d7:8f:8c:2e:a7:14:6d:c0:98: df:df:b8:56:54:e6:a5:8a:df:a0:05:66:73:40:b7:29:0f:c6: c7:96:e3:4f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Q0QyMTExMC8GA1UEBRMoODE4QkI5MDMzMjcxN0Y5MzU3MzBEQUYxNDcwOEZGQzJG NjA1RjA1RjAeFw0yNTExMDMwNzAwNDdaFw0yNTExMTAwNzAwNDdaMBgxFjAUBgNV BAMTDTY5MDg1MzFmLTYzYTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0uxRapQiA0yd66Wre9eW6u1gAmMPuuKbM8La2bGjIeKDpj8FNf5u4uZil4nCc 21XZvzjdjPAAPhCwxWpybdWFfSvDI1wsUn/pOVsNNZEt5GAJEj9JF7Q3bIBkESwX BQ07s1ZckOY9IKSB1npXUHtn/lLVBMey/hlomL/5RhG/4TBK2nzsCbM+flmTVWzu v+hUwr0Ud6OiLf13O4aSKk38mczV3xQZXozlD8Sd1KqT3dNmvqKGG/cSAgdc2dHr uMYYOUO1p41VKoiZRlTXuN0Uo2WSLFB7EpDWocPFP5b4hjkrInNQvA7t9OLpceXQ 3+th98kaQUSYaDQrltq7WPBpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZqTP4qYO 1ggGZvmlfpFmQY+rE10wHwYDVR0jBBgwFoAUgYu5AzJxf5NXMNrxRwj/wvYF8F8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDRDIxLzM4QzI2MUU0MUMz ODExRjBBQTg1N0QyN0M0RjlBRTAyL2dZdTVBekp4ZjVOWE1OcnhSd2pfd3ZZRjhG OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ1l1NUF6SnhmNU5YTU5yeFJ3al93dllGOEY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJD RDIxLzM4QzI2MUU0MUMzODExRjBBQTg1N0QyN0M0RjlBRTAyL2dZdTVBekp4ZjVO WE1OcnhSd2pfd3ZZRjhGOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACNcpQ+dIcai7QJJTBcSnFMNXBCZM4Vz3dXdsyGZwZ255QTkcXh5YVeh wZvMAS1lk0pvVkxGEC3CIst7QWlfbU/P1JFaafGlllIvyLBJKS9FbjlIxgaDmhfr MLjHuKchxL1HDQicddupKAx6XBleluK0iuJr42GBx4HWyPw4ybIb+MKiliCA3TWO LKadtjnvD7SAB9mVzyqpLEHtPSt1VkDLMdsZNp8S5ImcDFrQC1eBFh2hhFzk0pjp 6MbVBoj0rNP4qOhVlAHB0gffPI5Eq6Wuo11xnV7lfYQvL8uGvwY98tePjC6nFG3A mN/fuFZU5qWK36AFZnNAtykPxseW408= -----END CERTIFICATE-----Generated at Mon Nov 3 18:20:14 2025 by rpki-client