$ rpki-client -vvf rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft File: rGoi8eThZQrPtSifXctdU5IPzzQ.mft (raw, json) Hash identifier: HzvYsoHyT9G3ScOXB25BB5DQ/xJVa0VXdbc+PmZGQi0= Subject key identifier: 0D:87:84:FE:56:1A:38:3B:C6:13:2F:F9:8D:BE:82:22:49:9C:A8:B5 Authority key identifier: AC:6A:22:F1:E4:E1:65:0A:CF:B5:28:9F:5D:CB:5D:53:92:0F:CF:34 Certificate issuer: /CN=A91422D7/serialNumber=AC6A22F1E4E1650ACFB5289F5DCB5D53920FCF34 Certificate serial: 014F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft Manifest number: 0469 Signing time: Mon 03 Nov 2025 01:04:12 +0000 Manifest this update: Mon 03 Nov 2025 01:04:12 +0000 Manifest next update: Mon 10 Nov 2025 01:04:12 +0000 Files and hashes: 1: rGoi8eThZQrPtSifXctdU5IPzzQ.crl (hash: KLRoHp3TxvaWLR+BrRxa4E63U86CXURQfu/MPj6pWzg=) 2: CE5F74E2BE5811EEA8C02E2AC4F9AE02.roa (hash: 7mnEbW853H0TtxSAAqitSldZ+gKZe1bS6fxCspOc670=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.crl rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91422D7, serialNumber=AC6A22F1E4E1650ACFB5289F5DCB5D53920FCF34 Validity Not Before: Nov 3 01:04:12 2025 GMT Not After : Nov 10 01:04:12 2025 GMT Subject: CN=6907ff8c-c983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:da:0a:a4:c0:ad:37:d0:a5:ac:97:97:dd:59: 0d:e1:05:02:6a:1b:80:38:b1:bd:d7:16:e4:bf:a2: 63:ba:75:42:60:a3:46:82:e6:46:16:4c:93:38:29: 61:1a:cd:02:e4:0e:6f:8c:0d:d6:68:b4:b7:80:4a: 85:0a:eb:13:80:d5:81:dc:ba:72:22:08:22:29:3e: f1:19:c0:a7:ac:f5:03:21:1b:43:53:11:95:50:59: f5:5e:a9:87:bd:55:22:e2:ec:42:9a:cd:5b:ca:bb: ad:fd:21:e5:22:ff:53:7b:69:4c:df:9b:82:40:7b: bb:19:96:74:f1:ba:18:61:91:d9:78:63:b1:bd:f0: 59:4b:1e:70:d7:87:f7:f0:82:e5:ae:a2:eb:99:99: 6f:b8:d8:95:b1:28:85:9f:c1:94:64:9d:91:b7:ce: 40:82:41:64:21:8c:1c:91:43:69:4d:c2:65:d1:f3: 66:67:95:a2:7c:ea:cd:a2:a6:f6:73:43:6c:56:fc: 62:a2:ce:fb:bf:6d:d5:c6:32:c7:0a:0d:d5:f9:21: a5:29:f8:b7:8c:6f:74:bb:86:0b:75:25:ff:d4:43: 8c:ae:35:25:da:bc:d6:bc:f5:02:b5:65:0b:14:9c: 2d:bf:dd:7a:18:4a:1b:23:41:5a:b2:8c:c5:03:3c: 34:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:87:84:FE:56:1A:38:3B:C6:13:2F:F9:8D:BE:82:22:49:9C:A8:B5 X509v3 Authority Key Identifier: keyid:AC:6A:22:F1:E4:E1:65:0A:CF:B5:28:9F:5D:CB:5D:53:92:0F:CF:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:65:a1:dc:af:de:2d:a2:ed:26:2a:ff:f5:e3:4b:43:46:24: db:97:d6:f5:b0:b3:8e:b0:f3:63:c2:61:80:5b:6b:ec:b3:f1: c6:74:6f:d4:35:b4:c0:a2:74:30:21:3a:67:c0:9b:9a:02:da: c4:6e:be:54:bb:3c:a2:c8:87:aa:35:93:43:e3:37:4b:8a:12: 49:7e:66:2d:e1:c2:db:75:c0:5b:84:71:d8:57:cf:69:a6:a9: 11:4f:05:6c:dc:ed:2a:87:fa:84:c9:90:e6:34:2b:77:25:23: ef:cd:51:d3:3a:19:5d:f3:c8:40:ad:26:8d:e4:8b:28:b8:74: 73:50:41:6e:5a:a2:8a:86:e8:54:d7:f2:e5:a3:58:f0:59:4f: eb:01:da:04:b6:14:ae:24:4d:c6:71:56:60:47:83:43:a2:b4: 28:9c:31:1a:21:41:b7:e8:5b:bd:26:d4:bb:03:87:71:db:e3: 8b:30:0b:a9:26:69:dc:f4:85:6a:f2:46:74:80:4d:70:7a:e2: a8:2f:6b:3d:f4:47:66:c4:cb:d6:5f:c4:a1:8d:a3:fb:0a:b8: 9c:c0:51:fe:61:5f:da:7d:6b:62:b8:65:1b:8f:28:77:78:6e: 9b:da:02:30:69:a3:66:49:bb:96:fd:42:37:8e:90:f4:5b:ff: 08:9a:64:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyRDcxMTAvBgNVBAUTKEFDNkEyMkYxRTRFMTY1MEFDRkI1Mjg5RjVEQ0I1RDUz OTIwRkNGMzQwHhcNMjUxMTAzMDEwNDEyWhcNMjUxMTEwMDEwNDEyWjAYMRYwFAYD VQQDEw02OTA3ZmY4Yy1jOTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqNoKpMCtN9ClrJeX3VkN4QUCahuAOLG91xbkv6JjunVCYKNGguZGFkyTOClh Gs0C5A5vjA3WaLS3gEqFCusTgNWB3LpyIggiKT7xGcCnrPUDIRtDUxGVUFn1XqmH vVUi4uxCms1byrut/SHlIv9Te2lM35uCQHu7GZZ08boYYZHZeGOxvfBZSx5w14f3 8ILlrqLrmZlvuNiVsSiFn8GUZJ2Rt85AgkFkIYwckUNpTcJl0fNmZ5WifOrNoqb2 c0NsVvxios77v23VxjLHCg3V+SGlKfi3jG90u4YLdSX/1EOMrjUl2rzWvPUCtWUL FJwtv916GEobI0FasozFAzw08wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA2HhP5W Gjg7xhMv+Y2+giJJnKi1MB8GA1UdIwQYMBaAFKxqIvHk4WUKz7Uon13LXVOSD880 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjJENy81QjlGNzFEMkVE MzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9yR29pOGVUaFpRclB0U2lmWGN0ZFU1SVB6 elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JHb2k4ZVRoWlFyUHRTaWZYY3RkVTVJUHp6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjJENy81QjlGNzFEMkVEMzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9yR29pOGVUaFpR clB0U2lmWGN0ZFU1SVB6elEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWZaHcr94tou0mKv/140tDRiTbl9b1sLOOsPNjwmGAW2vss/HGdG/U NbTAonQwITpnwJuaAtrEbr5UuzyiyIeqNZND4zdLihJJfmYt4cLbdcBbhHHYV89p pqkRTwVs3O0qh/qEyZDmNCt3JSPvzVHTOhld88hArSaN5IsouHRzUEFuWqKKhuhU 1/Llo1jwWU/rAdoEthSuJE3GcVZgR4NDorQonDEaIUG36Fu9JtS7A4dx2+OLMAup Jmnc9IVq8kZ0gE1weuKoL2s99EdmxMvWX8ShjaP7CricwFH+YV/afWtiuGUbjyh3 eG6b2gIwaaNmSbuW/UI3jpD0W/8ImmS1 -----END CERTIFICATE-----Generated at Tue Nov 4 12:19:47 2025 by rpki-client