$ rpki-client -vvf rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft File: Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft (raw, json) Hash identifier: /5jOcSCm+gPGkdhjhHWBThqjgHb2XPZuKo8DdJMc4as= Subject key identifier: AC:29:67:C2:93:8A:93:23:72:2C:75:9E:37:80:22:17:9E:3B:86:40 Authority key identifier: 19:BA:BB:CF:4C:99:99:30:0A:C0:59:C6:53:C2:90:84:2F:6A:66:0D Certificate issuer: /CN=A913E0D7/serialNumber=19BABBCF4C9999300AC059C653C290842F6A660D Certificate serial: 024C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft Manifest number: 0249 Signing time: Wed 05 Nov 2025 01:51:17 +0000 Manifest this update: Wed 05 Nov 2025 01:51:16 +0000 Manifest next update: Wed 12 Nov 2025 01:51:16 +0000 Files and hashes: 1: Gbq7z0yZmTAKwFnGU8KQhC9qZg0.crl (hash: 4zDHTcHAnNrLs71pMlH5isWZzQrDLdLGiLU/4Kv7qFc=) 2: 12326B1E3ED211EDAE00DB18C4F9AE02.roa (hash: zW5H6X8uqPfx0Xsy4TR9o3a+IpV9YO9mu4z+ktesoLk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.crl rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:51:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 588 (0x24c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E0D7, serialNumber=19BABBCF4C9999300AC059C653C290842F6A660D Validity Not Before: Nov 5 01:51:16 2025 GMT Not After : Nov 12 01:51:16 2025 GMT Subject: CN=690aad95-a499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:25:dd:56:b8:b5:b5:47:62:a3:d6:5f:27:fd: 57:f1:c9:1e:1d:a9:1d:e1:de:53:c7:0d:43:e2:ea: a3:08:75:62:9a:54:13:fe:68:0c:25:c6:19:67:32: 87:26:7b:a0:98:9d:16:0b:91:0a:b1:c8:1e:c7:58: 4b:03:92:0c:fc:00:ef:35:f7:9b:90:2d:69:a5:cc: 82:b8:2b:33:f6:b2:8e:1c:9b:87:18:22:74:d0:95: 68:61:99:74:d7:72:c8:a7:3e:f7:33:4a:4b:7d:7e: 7e:1f:01:12:06:e5:fa:c1:21:20:fb:28:54:bd:0a: 59:3d:de:c9:b3:a9:1d:96:de:8e:d8:59:e1:4a:58: f2:aa:21:e4:d0:fd:89:da:7d:4b:a8:5c:a9:3f:5b: 03:c4:fa:86:67:d8:40:f1:df:e9:0a:56:4d:6e:99: 58:5e:99:7b:87:4e:7e:64:fd:96:94:fb:56:56:4e: 3e:9e:c9:e3:6c:6c:96:bd:07:f0:cc:d0:d0:78:0b: ca:51:96:2e:bd:bc:82:b2:26:9e:e3:53:65:59:02: 14:b7:c0:c8:93:33:e4:40:a9:95:b9:a5:e8:08:a4: ba:ae:7c:aa:17:5c:38:7a:1c:07:df:38:cd:d1:7f: 3d:33:cd:15:1c:cc:d2:78:3e:13:bc:f9:af:0a:b5: c0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:29:67:C2:93:8A:93:23:72:2C:75:9E:37:80:22:17:9E:3B:86:40 X509v3 Authority Key Identifier: keyid:19:BA:BB:CF:4C:99:99:30:0A:C0:59:C6:53:C2:90:84:2F:6A:66:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:69:43:cb:38:58:71:d9:61:6b:ed:35:bb:66:11:19:39:cc: b7:49:5b:69:30:b5:82:77:57:ab:4e:1b:9b:3c:81:eb:31:4a: 04:03:30:a5:60:f9:c5:9d:f5:ae:47:8c:3e:aa:50:41:65:63: 1f:46:fe:c1:86:bb:3d:33:ce:d8:72:c5:27:4c:7f:d9:6c:81: 65:bb:c9:81:28:11:2c:38:0a:b1:90:92:63:8c:4d:f4:19:bb: e5:30:a0:0a:75:c9:df:46:12:bb:58:4c:ec:d2:f4:88:61:33: ef:2f:cb:69:83:77:cb:f3:c7:2c:df:2b:e9:24:6f:1b:57:0c: 2e:34:b2:ff:fa:3e:ff:d7:88:23:97:df:3f:53:f6:c3:e2:6f: 32:b5:69:73:ff:43:05:74:6c:bb:e5:b1:6c:65:c6:d6:f1:2c: 0b:8a:4d:9e:40:a2:3f:3e:88:3d:0b:4c:14:fb:34:8e:87:46: 4a:1c:63:fd:09:dc:b3:49:24:0a:6f:fe:d1:dd:ad:b7:c0:0f: 67:ce:9c:10:97:5b:0d:dc:00:2b:b9:b6:69:f5:6d:dc:bf:6f: 92:6a:55:ca:5b:51:a3:57:25:e6:2f:02:76:e3:a8:ce:94:6e: 56:74:8f:a7:a1:a9:4e:e2:71:f9:86:0c:ac:f4:a6:09:cd:0e: a7:51:82:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UwRDcxMTAvBgNVBAUTKDE5QkFCQkNGNEM5OTk5MzAwQUMwNTlDNjUzQzI5MDg0 MkY2QTY2MEQwHhcNMjUxMTA1MDE1MTE2WhcNMjUxMTEyMDE1MTE2WjAYMRYwFAYD VQQDEw02OTBhYWQ5NS1hNDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnSXdVri1tUdio9ZfJ/1X8ckeHakd4d5Txw1D4uqjCHVimlQT/mgMJcYZZzKH JnugmJ0WC5EKscgex1hLA5IM/ADvNfebkC1ppcyCuCsz9rKOHJuHGCJ00JVoYZl0 13LIpz73M0pLfX5+HwESBuX6wSEg+yhUvQpZPd7Js6kdlt6O2FnhSljyqiHk0P2J 2n1LqFypP1sDxPqGZ9hA8d/pClZNbplYXpl7h05+ZP2WlPtWVk4+nsnjbGyWvQfw zNDQeAvKUZYuvbyCsiae41NlWQIUt8DIkzPkQKmVuaXoCKS6rnyqF1w4ehwH3zjN 0X89M80VHMzSeD4TvPmvCrXAywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKwpZ8KT ipMjcix1njeAIheeO4ZAMB8GA1UdIwQYMBaAFBm6u89MmZkwCsBZxlPCkIQvamYN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTBENy84RkVGODQwNDNF Q0YxMUVEQTVGMUZBMTdDNEY5QUUwMi9HYnE3ejB5Wm1UQUt3Rm5HVThLUWhDOXFa ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dicTd6MHlabVRBS3dGbkdVOEtRaEM5cVpnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTBENy84RkVGODQwNDNFQ0YxMUVEQTVGMUZBMTdDNEY5QUUwMi9HYnE3ejB5Wm1U QUt3Rm5HVThLUWhDOXFaZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUaUPLOFhx2WFr7TW7ZhEZOcy3SVtpMLWCd1erThubPIHrMUoEAzCl YPnFnfWuR4w+qlBBZWMfRv7Bhrs9M87YcsUnTH/ZbIFlu8mBKBEsOAqxkJJjjE30 GbvlMKAKdcnfRhK7WEzs0vSIYTPvL8tpg3fL88cs3yvpJG8bVwwuNLL/+j7/14gj l98/U/bD4m8ytWlz/0MFdGy75bFsZcbW8SwLik2eQKI/Pog9C0wU+zSOh0ZKHGP9 CdyzSSQKb/7R3a23wA9nzpwQl1sN3AArubZp9W3cv2+SalXKW1GjVyXmLwJ246jO lG5WdI+noalO4nH5hgys9KYJzQ6nUYJG -----END CERTIFICATE-----Generated at Wed Nov 5 20:04:42 2025 by rpki-client