$ rpki-client -vvf rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft File: GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft (raw, json) Hash identifier: n2D+UaUnG3O3JKJEiwUVLm5xOB1QgKw5yolFxabwjgY= Subject key identifier: 5A:8B:B0:F8:70:E5:48:F1:A4:45:2B:64:71:10:A6:18:4B:F4:D8:4E Authority key identifier: 19:4C:FA:EC:07:56:11:FF:83:C4:21:CD:A8:79:7E:D3:0E:A2:D0:39 Certificate issuer: /CN=A913F4B0/serialNumber=194CFAEC075611FF83C421CDA8797ED30EA2D039 Certificate serial: 0E9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft Manifest number: 0E87 Signing time: Sun 02 Nov 2025 17:44:09 +0000 Manifest this update: Sun 02 Nov 2025 17:44:09 +0000 Manifest next update: Sun 09 Nov 2025 17:44:09 +0000 Files and hashes: 1: GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl (hash: uvntA3Ny2c7WH8QI0DGwWYJBWIvfllMiVFJ7aadviKo=) 2: 192968FAA43411E9BF46490BC4F9AE02.roa (hash: m1DwXGY9qRUMrm5nwSa7A62fQnkXzMeC3XhEB70M3Ec=) 3: 7FC2BA3ACEE211EDAF41BC25C4F9AE02.roa (hash: 8+IpnBwQHZFdU/qAAvoleEEL7Zd7U6oO3b3IOyhASzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:44:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3742 (0xe9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F4B0, serialNumber=194CFAEC075611FF83C421CDA8797ED30EA2D039 Validity Not Before: Nov 2 17:44:09 2025 GMT Not After : Nov 9 17:44:09 2025 GMT Subject: CN=69079869-2136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b1:3e:20:ba:ff:d4:97:9d:12:5d:0e:71:46: 01:12:47:e1:b4:0f:9e:ae:ed:ee:35:4d:92:67:1b: 1e:ad:0a:2b:5b:d9:3a:59:a9:c8:42:ae:92:6f:f2: 41:b4:6a:87:9b:d8:ce:ac:96:5e:16:a0:be:46:8d: 68:da:1d:56:6f:78:68:4a:3d:93:78:23:15:7b:bb: 66:c0:21:4b:ab:56:e9:ea:fc:32:a9:74:60:db:40: 5b:79:07:f4:d6:26:3b:5a:eb:47:7b:5d:56:d3:a3: ae:a7:81:7f:39:cb:3e:2e:48:7c:cb:13:53:a9:bf: 6d:38:83:97:f0:f9:00:10:51:c1:cc:16:68:ef:e0: 13:50:a7:01:2d:3e:45:cc:40:69:67:6b:be:37:1c: e3:2c:3d:8d:e3:57:4a:60:3a:d3:48:5a:6a:59:34: 00:2e:cd:bf:0f:c2:b2:0b:52:7e:da:87:e6:d1:53: d1:e8:64:a7:d0:1c:c4:13:db:61:4f:c5:ae:c3:b2: bd:7c:89:52:6b:70:29:51:72:b7:41:db:cd:84:0f: f6:8a:51:0f:b6:09:e8:81:fa:0e:95:51:5b:16:be: 0c:b0:8e:a7:ab:cf:40:f4:0f:6c:f1:58:71:95:55: 98:ac:00:c9:e8:8a:0f:a5:02:7f:bc:37:31:f4:f1: d2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:8B:B0:F8:70:E5:48:F1:A4:45:2B:64:71:10:A6:18:4B:F4:D8:4E X509v3 Authority Key Identifier: keyid:19:4C:FA:EC:07:56:11:FF:83:C4:21:CD:A8:79:7E:D3:0E:A2:D0:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:8e:70:8c:58:bd:8a:cc:09:6d:c0:73:b3:31:f5:a7:ad:30: 39:68:a7:0e:cd:04:13:a8:49:75:11:a9:77:37:df:bd:73:72: 2f:4b:45:7a:b2:66:cf:1e:8f:1d:42:ae:b4:db:a9:79:c6:b5: f0:f3:46:1e:fd:29:be:45:8f:cf:22:b5:a9:b0:d5:55:89:12: 69:5b:6d:f6:eb:2a:f4:ae:d2:d6:25:49:dd:0b:94:ff:c1:0c: e6:11:16:bf:fc:30:f3:ea:b0:7a:69:05:30:6a:5d:5c:32:e3: bf:f3:c1:3f:d2:5c:56:2b:e0:4c:69:24:5a:3b:e6:a6:95:d2: 03:24:83:1c:ac:3a:be:60:19:f2:06:cb:26:2d:80:f4:4a:1a: 34:52:99:6f:24:1d:d0:df:20:1d:98:82:b9:a0:aa:e2:f3:f2: 95:48:2b:10:5f:44:91:e4:d7:83:52:09:44:21:65:ad:8d:81: dc:d9:ab:c5:ec:6c:3d:fc:07:bd:d0:f5:dc:d2:5a:86:77:86: 6d:95:68:4a:80:d0:42:0f:43:6f:ea:85:98:4f:77:0d:0e:3f: ee:55:32:16:96:55:5a:b2:43:89:f1:4a:cf:81:8d:03:a6:16: 06:61:e0:7e:f4:3a:3c:08:8f:e3:f0:09:01:51:d6:84:d8:12: 6c:33:2c:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y0QjAxMTAvBgNVBAUTKDE5NENGQUVDMDc1NjExRkY4M0M0MjFDREE4Nzk3RUQz MEVBMkQwMzkwHhcNMjUxMTAyMTc0NDA5WhcNMjUxMTA5MTc0NDA5WjAYMRYwFAYD VQQDEw02OTA3OTg2OS0yMTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAurE+ILr/1JedEl0OcUYBEkfhtA+eru3uNU2SZxserQorW9k6WanIQq6Sb/JB tGqHm9jOrJZeFqC+Ro1o2h1Wb3hoSj2TeCMVe7tmwCFLq1bp6vwyqXRg20BbeQf0 1iY7WutHe11W06Oup4F/Ocs+Lkh8yxNTqb9tOIOX8PkAEFHBzBZo7+ATUKcBLT5F zEBpZ2u+NxzjLD2N41dKYDrTSFpqWTQALs2/D8KyC1J+2ofm0VPR6GSn0BzEE9th T8Wuw7K9fIlSa3ApUXK3QdvNhA/2ilEPtgnogfoOlVFbFr4MsI6nq89A9A9s8Vhx lVWYrADJ6IoPpQJ/vDcx9PHSIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqLsPhw 5UjxpEUrZHEQphhL9NhOMB8GA1UdIwQYMBaAFBlM+uwHVhH/g8Qhzah5ftMOotA5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjRCMC8yRDI3MDY5MkE0 MzMxMUU5ODgxNThGMDlDNEY5QUUwMi9HVXo2N0FkV0VmLUR4Q0hOcUhsLTB3Nmkw RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dVejY3QWRXRWYtRHhDSE5xSGwtMHc2aTBEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjRCMC8yRDI3MDY5MkE0MzMxMUU5ODgxNThGMDlDNEY5QUUwMi9HVXo2N0FkV0Vm LUR4Q0hOcUhsLTB3NmkwRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBljnCMWL2KzAltwHOzMfWnrTA5aKcOzQQTqEl1Eal3N9+9c3IvS0V6 smbPHo8dQq6026l5xrXw80Ye/Sm+RY/PIrWpsNVViRJpW2326yr0rtLWJUndC5T/ wQzmERa//DDz6rB6aQUwal1cMuO/88E/0lxWK+BMaSRaO+amldIDJIMcrDq+YBny BssmLYD0Sho0UplvJB3Q3yAdmIK5oKri8/KVSCsQX0SR5NeDUglEIWWtjYHc2avF 7Gw9/Ae90PXc0lqGd4ZtlWhKgNBCD0Nv6oWYT3cNDj/uVTIWllVaskOJ8UrPgY0D phYGYeB+9Do8CI/j8AkBUdaE2BJsMyyL -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:37 2025 by rpki-client