$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft File: rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft (raw, json) Hash identifier: M9hbj/6i7Hg4RYMYkbkxOg3hA61nCAZbKQd8sty/CAc= Subject key identifier: D2:C9:87:9E:99:A6:48:7B:2F:7A:A7:CF:BD:59:54:EF:3F:CD:C5:37 Authority key identifier: AC:6A:05:C1:9D:E3:77:FA:FE:AD:A8:87:0C:90:E4:3D:DD:E8:2D:32 Certificate issuer: /CN=A9141BAE/serialNumber=AC6A05C19DE377FAFEADA8870C90E43DDDE82D32 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft Manifest number: 26 Signing time: Mon 03 Nov 2025 07:42:37 +0000 Manifest this update: Mon 03 Nov 2025 07:42:37 +0000 Manifest next update: Mon 10 Nov 2025 07:42:37 +0000 Files and hashes: 1: rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl (hash: ONFutlzOypUwSQKR7ciAZJMhsYyfip+5J5LETAWVrMo=) 2: DE43ED5E814111F09CB97D40C4F9AE02.roa (hash: dTfOPNG1kntTr8AnSgtfUPWTvUN95iBYag0K3k/COcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:42:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141BAE, serialNumber=AC6A05C19DE377FAFEADA8870C90E43DDDE82D32 Validity Not Before: Nov 3 07:42:37 2025 GMT Not After : Nov 10 07:42:37 2025 GMT Subject: CN=69085ced-e764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3c:2e:5d:d7:1f:a2:59:67:bd:79:e9:6c:31: 0f:c0:0a:6a:bf:fc:d6:0c:db:2a:9b:99:ac:37:f4: 45:f9:1d:2b:d3:c4:a1:bd:39:db:44:2a:48:b9:da: 1c:5b:11:e5:32:17:a5:d8:ec:f8:e2:76:f8:81:55: 0f:74:72:2c:5b:ef:86:d2:ad:43:61:2c:c5:3a:13: ea:db:87:ba:de:a5:9f:68:d2:72:ec:c7:39:fa:72: a4:f3:a8:ea:8f:d0:d8:04:f9:9d:9b:6e:af:f6:29: d3:0c:3f:00:91:02:d0:d1:8f:bc:b9:f3:08:5e:38: ce:63:43:d5:13:4b:3f:cc:66:90:03:20:72:07:88: 06:df:ac:bc:4e:cd:b7:6f:8c:ca:66:0e:b4:83:2d: 73:46:68:ff:c6:ab:94:7d:87:d2:a2:fd:64:0e:59: 2a:c8:4b:d8:68:03:e5:20:35:b5:8d:06:a9:97:4e: a5:36:6d:a9:e2:a5:94:95:ce:2f:6d:91:ee:ad:9b: 45:19:90:45:cb:02:a5:5d:2d:60:37:cf:2d:bb:c3: a8:9e:fb:c6:bb:ea:83:1b:51:bf:1f:d4:88:e6:54: 4b:0c:b2:32:42:06:a8:1a:95:b6:6d:ab:90:a5:6e: a8:e6:24:07:02:c4:38:6d:c3:2b:f9:0f:c8:76:29: 84:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C9:87:9E:99:A6:48:7B:2F:7A:A7:CF:BD:59:54:EF:3F:CD:C5:37 X509v3 Authority Key Identifier: keyid:AC:6A:05:C1:9D:E3:77:FA:FE:AD:A8:87:0C:90:E4:3D:DD:E8:2D:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:e6:72:b6:18:43:b6:33:89:a6:01:b0:ab:5b:70:c5:1f:df: 78:b9:d2:f1:70:63:50:fa:a0:4f:dc:71:b4:e3:0a:dd:24:3e: 6d:f4:8f:51:b0:1c:6b:8e:bf:fc:b3:35:4f:23:32:57:45:57: ce:b6:e9:10:ca:df:2a:4a:70:d7:cc:99:f5:b6:0c:d4:6b:13: ec:00:2b:9d:36:1a:79:59:e0:6a:9b:1a:90:7e:9d:1b:fa:75: 0e:38:ed:f9:cf:c9:33:61:51:86:34:76:44:00:71:25:f4:66: b0:cc:eb:08:a9:c0:28:77:fd:a0:d4:d1:1f:80:2d:c8:a9:1b: da:78:a9:ab:15:19:16:10:6e:a5:c7:ce:3b:b9:e8:bd:0a:96: ce:71:98:7b:a8:6a:4c:9b:9c:d6:51:24:4b:a8:28:15:21:9e: dd:e5:0a:7c:67:90:97:31:d9:77:c6:c9:a6:94:2f:ab:7f:91: f7:be:74:8d:1f:0b:7f:d7:4a:63:1c:4f:d5:79:98:4e:0f:a3: d2:06:5e:f5:73:13:5f:25:05:6c:7e:8d:bd:90:6c:62:96:79: 20:e6:ab:94:87:8d:0a:1c:3a:86:96:67:a0:4a:37:64:6f:c2: ff:82:27:9f:53:88:83:97:7d:07:1f:0c:1d:47:9c:1b:d7:3b: 73:a1:9e:61 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MUJBRTExMC8GA1UEBRMoQUM2QTA1QzE5REUzNzdGQUZFQURBODg3MEM5MEU0M0RE REU4MkQzMjAeFw0yNTExMDMwNzQyMzdaFw0yNTExMTAwNzQyMzdaMBgxFjAUBgNV BAMTDTY5MDg1Y2VkLWU3NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6PC5d1x+iWWe9eelsMQ/ACmq//NYM2yqbmaw39EX5HSvTxKG9OdtEKki52hxb EeUyF6XY7PjidviBVQ90cixb74bSrUNhLMU6E+rbh7repZ9o0nLsxzn6cqTzqOqP 0NgE+Z2bbq/2KdMMPwCRAtDRj7y58wheOM5jQ9UTSz/MZpADIHIHiAbfrLxOzbdv jMpmDrSDLXNGaP/Gq5R9h9Ki/WQOWSrIS9hoA+UgNbWNBqmXTqU2banipZSVzi9t ke6tm0UZkEXLAqVdLWA3zy27w6ie+8a76oMbUb8f1IjmVEsMsjJCBqgalbZtq5Cl bqjmJAcCxDhtwyv5D8h2KYTzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0smHnpmm SHsveqfPvVlU7z/NxTcwHwYDVR0jBBgwFoAUrGoFwZ3jd/r+raiHDJDkPd3oLTIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxQkFFLzcyMDM3OUEyODE0 MTExRjA4OEQwNTEzRkM0RjlBRTAyL3JHb0Z3WjNqZF9yLXJhaUhESkRrUGQzb0xU SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvckdvRndaM2pkX3ItcmFpSERKRGtQZDNvTFRJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx QkFFLzcyMDM3OUEyODE0MTExRjA4OEQwNTEzRkM0RjlBRTAyL3JHb0Z3WjNqZF9y LXJhaUhESkRrUGQzb0xUSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH3mcrYYQ7YziaYBsKtbcMUf33i50vFwY1D6oE/ccbTjCt0kPm30j1Gw HGuOv/yzNU8jMldFV8626RDK3ypKcNfMmfW2DNRrE+wAK502GnlZ4GqbGpB+nRv6 dQ447fnPyTNhUYY0dkQAcSX0ZrDM6wipwCh3/aDU0R+ALcipG9p4qasVGRYQbqXH zju56L0Kls5xmHuoakybnNZRJEuoKBUhnt3lCnxnkJcx2XfGyaaUL6t/kfe+dI0f C3/XSmMcT9V5mE4Po9IGXvVzE18lBWx+jb2QbGKWeSDmq5SHjQocOoaWZ6BKN2Rv wv+CJ59TiIOXfQcfDB1HnBvXO3OhnmE= -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:23 2025 by rpki-client