$ rpki-client -vvf rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft File: goqGO92fRnXqGDzaoQT1SyN3Lkk.mft (raw, json) Hash identifier: hoqrRte0jjg9uOaSr4qIgYL4neC+o8H6cOmW/fO5aoI= Subject key identifier: D7:4F:88:45:50:06:D1:83:B3:44:9A:ED:08:43:DF:97:AE:64:0C:66 Authority key identifier: 82:8A:86:3B:DD:9F:46:75:EA:18:3C:DA:A1:04:F5:4B:23:77:2E:49 Certificate issuer: /CN=A913D4B2/serialNumber=828A863BDD9F4675EA183CDAA104F54B23772E49 Certificate serial: 06CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft Manifest number: 06CA Signing time: Sun 02 Nov 2025 22:02:05 +0000 Manifest this update: Sun 02 Nov 2025 22:02:04 +0000 Manifest next update: Sun 09 Nov 2025 22:02:04 +0000 Files and hashes: 1: goqGO92fRnXqGDzaoQT1SyN3Lkk.crl (hash: tN5tVMt9GmQFOJcFzP2xr1YUcvdY8MPab3NLs+Ebjr8=) 2: C148AF5C9B4811EBB3FAE847C4F9AE02.roa (hash: ElM40kRXls4915TJFeuEiV6vcriAHquSzfVrwEFHIlI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.crl rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1743 (0x6cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D4B2, serialNumber=828A863BDD9F4675EA183CDAA104F54B23772E49 Validity Not Before: Nov 2 22:02:04 2025 GMT Not After : Nov 9 22:02:04 2025 GMT Subject: CN=6907d4dd-52f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:79:74:a1:51:a6:c9:14:77:5e:bc:56:a0:92: 80:06:85:e2:d6:26:fc:19:6c:c8:c7:9e:1c:5a:dd: b6:39:da:27:e0:c8:2d:26:b4:c6:40:91:0d:d8:f5: d1:98:45:c3:44:bb:d1:4f:ba:94:d7:59:c7:68:f7: 9e:2c:44:73:82:70:8e:1d:bd:d7:fb:25:43:53:d4: 84:97:b6:3e:4f:2e:bb:c4:1a:87:d0:f2:42:41:01: 24:71:dd:b6:5d:59:ec:f7:64:be:d4:b5:ce:ab:36: c4:d1:06:e5:ea:b5:66:7a:8f:c6:a6:c5:5d:8f:6a: ca:8e:37:f3:87:08:f6:05:1e:c7:76:32:6e:27:4f: 3d:c0:b8:fd:bb:17:bc:96:73:96:e3:fa:4e:21:8f: e0:c7:df:3e:c3:04:ee:75:b0:a7:0c:82:da:ef:7f: ed:5d:e2:23:20:8a:f7:d0:50:8f:4e:3e:bd:23:85: ef:47:0b:5d:cc:09:86:16:0c:f9:dd:04:be:cb:29: 1d:11:e3:f7:9c:1d:93:5e:06:35:89:87:29:bb:b6: 04:69:07:00:63:d2:11:fe:92:f8:4d:39:09:70:0f: e8:45:1e:0c:19:62:ed:05:38:25:ee:c2:17:5e:d1: c4:1c:df:25:7c:d0:fb:91:10:97:20:a9:9f:b3:3f: 26:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:4F:88:45:50:06:D1:83:B3:44:9A:ED:08:43:DF:97:AE:64:0C:66 X509v3 Authority Key Identifier: keyid:82:8A:86:3B:DD:9F:46:75:EA:18:3C:DA:A1:04:F5:4B:23:77:2E:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:c8:35:a0:ad:ce:3f:f0:a7:5b:41:52:f6:e3:68:bd:ac:41: af:4b:40:9d:2c:be:63:7f:65:17:22:1e:b4:d8:6d:bb:a8:37: 96:25:c7:71:f7:9b:2a:7d:ff:0c:b7:b4:5f:8c:38:18:0e:99: be:15:73:b4:07:c7:0d:1c:d4:2e:e2:03:0c:4e:07:d4:c7:7b: ca:a9:7c:86:11:77:8f:bf:ef:72:86:0f:f0:a1:3f:fa:df:58: 00:46:a9:2a:34:03:98:48:0a:29:87:1c:8d:9a:ff:82:df:e9: 6a:d0:28:54:98:ac:71:97:b8:b9:08:fa:2b:9f:55:13:04:72: a0:48:3f:f6:92:8b:c5:a4:23:28:4f:32:54:2e:9a:1f:b6:b8: 93:21:14:92:b3:c2:a5:0f:c6:6d:f4:20:ed:db:f1:12:3f:47: 87:ce:0e:bf:76:98:79:59:b6:49:be:d8:b5:4b:0c:e3:16:42: a8:03:1c:01:f1:e2:35:b0:51:45:da:2f:13:24:fc:a0:4b:ab: b8:55:4b:ac:8f:e8:ee:df:c8:e2:fa:46:19:2f:e6:80:20:5e: 00:8e:ef:c6:98:99:b2:82:51:b8:2a:26:61:3f:65:97:3e:fb: 50:5c:74:78:70:93:7b:bb:18:2c:44:e0:9a:aa:41:bf:52:17: ef:aa:09:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q0QjIxMTAvBgNVBAUTKDgyOEE4NjNCREQ5RjQ2NzVFQTE4M0NEQUExMDRGNTRC MjM3NzJFNDkwHhcNMjUxMTAyMjIwMjA0WhcNMjUxMTA5MjIwMjA0WjAYMRYwFAYD VQQDEw02OTA3ZDRkZC01MmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXl0oVGmyRR3XrxWoJKABoXi1ib8GWzIx54cWt22Odon4MgtJrTGQJEN2PXR mEXDRLvRT7qU11nHaPeeLERzgnCOHb3X+yVDU9SEl7Y+Ty67xBqH0PJCQQEkcd22 XVns92S+1LXOqzbE0Qbl6rVmeo/GpsVdj2rKjjfzhwj2BR7HdjJuJ089wLj9uxe8 lnOW4/pOIY/gx98+wwTudbCnDILa73/tXeIjIIr30FCPTj69I4XvRwtdzAmGFgz5 3QS+yykdEeP3nB2TXgY1iYcpu7YEaQcAY9IR/pL4TTkJcA/oRR4MGWLtBTgl7sIX XtHEHN8lfND7kRCXIKmfsz8mLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNdPiEVQ BtGDs0Sa7QhD35euZAxmMB8GA1UdIwQYMBaAFIKKhjvdn0Z16hg82qEE9Usjdy5J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDRCMi9CNEIyMENBRTc4 NDExMUVCQjM0ODA5NjFDNEY5QUUwMi9nb3FHTzkyZlJuWHFHRHphb1FUMVN5TjNM a2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dvcUdPOTJmUm5YcUdEemFvUVQxU3lOM0xray5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDRCMi9CNEIyMENBRTc4NDExMUVCQjM0ODA5NjFDNEY5QUUwMi9nb3FHTzkyZlJu WHFHRHphb1FUMVN5TjNMa2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2yDWgrc4/8KdbQVL242i9rEGvS0CdLL5jf2UXIh602G27qDeWJcdx 95sqff8Mt7RfjDgYDpm+FXO0B8cNHNQu4gMMTgfUx3vKqXyGEXePv+9yhg/woT/6 31gARqkqNAOYSAophxyNmv+C3+lq0ChUmKxxl7i5CPorn1UTBHKgSD/2kovFpCMo TzJULpoftriTIRSSs8KlD8Zt9CDt2/ESP0eHzg6/dph5WbZJvti1SwzjFkKoAxwB 8eI1sFFF2i8TJPygS6u4VUusj+ju38ji+kYZL+aAIF4Aju/GmJmyglG4KiZhP2WX PvtQXHR4cJN7uxgsROCaqkG/UhfvqgkT -----END CERTIFICATE-----Generated at Tue Nov 4 19:10:53 2025 by rpki-client