$ rpki-client -vvf rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft File: goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft (raw, json) Hash identifier: 7AG7cr3FSc4i738Nz0JnqLTaM01QbYNZkarozhfpKxk= Subject key identifier: 15:31:F5:98:86:7F:BC:8C:D5:FB:BC:FE:F2:D7:23:EA:CF:20:4A:F2 Authority key identifier: 82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24 Certificate issuer: /CN=A914C99C/serialNumber=82818DD2239DE8335D22ADCE3DF190A310B70024 Certificate serial: 05E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft Manifest number: 05E2 Signing time: Tue 04 Nov 2025 23:03:50 +0000 Manifest this update: Tue 04 Nov 2025 23:03:50 +0000 Manifest next update: Tue 11 Nov 2025 23:03:50 +0000 Files and hashes: 1: goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl (hash: ei25m7i2PchAfkmU1L5nO9jeQkA/7vOLFD+A69doe2s=) 2: 95B0A0606C5811ED882F827DC4F9AE02.roa (hash: bTxB6rDqe5W838nV/qkoLeLUMklQqO8XCDilOupFQgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:03:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1511 (0x5e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C99C, serialNumber=82818DD2239DE8335D22ADCE3DF190A310B70024 Validity Not Before: Nov 4 23:03:50 2025 GMT Not After : Nov 11 23:03:50 2025 GMT Subject: CN=690a8656-43bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e1:90:69:e8:dd:80:4e:5f:e0:87:05:18:e0: a4:ba:22:af:71:e1:70:f1:13:28:af:2e:61:dc:e3: b7:53:a8:6d:8d:fa:b5:53:19:06:37:dd:e0:08:16: bb:b8:56:4c:0e:8f:e9:b4:0e:49:31:a4:0e:f6:9f: 1e:09:f3:7b:c0:86:94:e5:9e:30:1c:c4:ba:ae:0b: 56:9d:0e:f2:7c:82:ec:76:65:33:cb:be:1f:72:6d: 5d:43:b1:38:06:b8:1a:a1:7f:7d:6d:6a:a6:3d:77: 03:0d:9d:8f:b8:6f:90:52:90:c5:94:28:ad:35:84: 73:e4:99:f4:e2:33:10:d1:86:32:31:f7:49:8d:d8: 79:70:d0:98:9b:c1:aa:e8:c6:8f:bc:75:72:e8:92: 35:5b:ae:b8:1a:c0:cc:22:f8:cd:aa:9b:73:de:e3: 62:be:f4:d3:44:49:8d:8e:c6:77:1c:d7:be:5d:38: ed:4b:31:50:b2:f9:06:37:22:93:56:5c:72:c4:a9: e8:7c:26:52:fc:5a:a1:39:6b:1d:be:e8:e7:9d:3e: 7e:ed:10:6d:01:d5:36:9b:11:be:49:6f:53:60:27: 12:2e:d4:8e:19:2e:3c:6f:f6:56:ca:44:c0:de:fe: b8:72:45:95:b8:d9:e4:d1:f2:91:bb:cb:dd:6a:21: 21:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:31:F5:98:86:7F:BC:8C:D5:FB:BC:FE:F2:D7:23:EA:CF:20:4A:F2 X509v3 Authority Key Identifier: keyid:82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:05:eb:7c:e5:34:01:4c:3c:43:37:62:11:17:17:10:eb:f0: 10:3c:cc:d4:bb:0d:24:ba:a6:f0:ae:fb:c8:6b:f4:9f:fe:16: 12:83:d0:9e:d0:c3:fd:9a:cb:52:c6:60:65:18:e0:77:f1:6a: 70:dc:ba:23:72:de:62:f7:37:7c:8c:85:d0:12:16:a7:6f:40: b0:d1:ba:0e:0a:6f:3e:d8:15:2f:5b:48:34:f7:ae:10:ab:c3: 11:a2:d1:ea:ab:83:c8:73:54:b0:c2:83:e1:b5:55:9f:c3:35: 4e:67:31:73:dd:49:d9:fb:cf:0e:62:be:42:2f:22:4a:ac:eb: e3:67:9c:78:e2:e2:82:76:6c:64:05:12:38:26:61:91:67:4b: ff:4c:24:fc:f8:31:6c:2f:96:2b:de:bc:af:29:a8:2f:a1:0a: 61:e8:28:7f:80:6a:fa:2f:32:6b:e8:ff:4a:f3:90:74:2c:f2: 73:c7:e2:3e:97:ad:c0:21:c7:b7:a2:8e:bf:67:2d:de:41:c8: 48:1f:26:c0:54:e1:92:83:f6:c4:f0:f1:8b:dc:0a:eb:85:0b: c0:0b:e1:b7:8a:b0:2b:f4:94:73:e2:8f:aa:d3:af:52:b1:d5: aa:bd:78:19:9d:74:cd:e5:d8:4f:ea:3f:22:01:cd:12:87:77: 7e:87:b5:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM5OUMxMTAvBgNVBAUTKDgyODE4REQyMjM5REU4MzM1RDIyQURDRTNERjE5MEEz MTBCNzAwMjQwHhcNMjUxMTA0MjMwMzUwWhcNMjUxMTExMjMwMzUwWjAYMRYwFAYD VQQDEw02OTBhODY1Ni00M2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAweGQaejdgE5f4IcFGOCkuiKvceFw8RMory5h3OO3U6htjfq1UxkGN93gCBa7 uFZMDo/ptA5JMaQO9p8eCfN7wIaU5Z4wHMS6rgtWnQ7yfILsdmUzy74fcm1dQ7E4 BrgaoX99bWqmPXcDDZ2PuG+QUpDFlCitNYRz5Jn04jMQ0YYyMfdJjdh5cNCYm8Gq 6MaPvHVy6JI1W664GsDMIvjNqptz3uNivvTTREmNjsZ3HNe+XTjtSzFQsvkGNyKT VlxyxKnofCZS/FqhOWsdvujnnT5+7RBtAdU2mxG+SW9TYCcSLtSOGS48b/ZWykTA 3v64ckWVuNnk0fKRu8vdaiEhiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBUx9ZiG f7yM1fu8/vLXI+rPIEryMB8GA1UdIwQYMBaAFIKBjdIjnegzXSKtzj3xkKMQtwAk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Qzk5Qy8yQTFBRTlFQ0Q1 NzIxMUVCQTYwRUQwNTdDNEY5QUUwMi9nb0dOMGlPZDZETmRJcTNPUGZHUW94QzNB Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dvR04waU9kNkROZElxM09QZkdRb3hDM0FDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Qzk5Qy8yQTFBRTlFQ0Q1NzIxMUVCQTYwRUQwNTdDNEY5QUUwMi9nb0dOMGlPZDZE TmRJcTNPUGZHUW94QzNBQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtBet85TQBTDxDN2IRFxcQ6/AQPMzUuw0kuqbwrvvIa/Sf/hYSg9Ce 0MP9mstSxmBlGOB38Wpw3Lojct5i9zd8jIXQEhanb0Cw0boOCm8+2BUvW0g0964Q q8MRotHqq4PIc1SwwoPhtVWfwzVOZzFz3UnZ+88OYr5CLyJKrOvjZ5x44uKCdmxk BRI4JmGRZ0v/TCT8+DFsL5Yr3ryvKagvoQph6Ch/gGr6LzJr6P9K85B0LPJzx+I+ l63AIce3oo6/Zy3eQchIHybAVOGSg/bE8PGL3ArrhQvAC+G3irAr9JRz4o+q069S sdWqvXgZnXTN5dhP6j8iAc0Sh3d+h7V/ -----END CERTIFICATE-----Generated at Wed Nov 5 10:07:17 2025 by rpki-client