$ rpki-client -vvf rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft File: gaDPnOmqqZDtGv6KgwpweHT5qr4.mft (raw, json) Hash identifier: PtUJR0AYIg4VV77ntjK6lxEZdSJ052dBcibfKeG5CJU= Subject key identifier: 2E:8D:E5:AC:A9:1B:E9:23:0C:AE:94:41:D3:F1:A7:87:03:A5:25:86 Authority key identifier: 81:A0:CF:9C:E9:AA:A9:90:ED:1A:FE:8A:83:0A:70:78:74:F9:AA:BE Certificate issuer: /CN=A9157450/serialNumber=81A0CF9CE9AAA990ED1AFE8A830A707874F9AABE Certificate serial: 010A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft Manifest number: 0108 Signing time: Wed 05 Nov 2025 05:08:44 +0000 Manifest this update: Wed 05 Nov 2025 05:08:44 +0000 Manifest next update: Wed 12 Nov 2025 05:08:44 +0000 Files and hashes: 1: gaDPnOmqqZDtGv6KgwpweHT5qr4.crl (hash: cWdJZofZpBaZtXMSY14KA809s2l5N5ykM/Oa2YUyFKw=) 2: B71C4F80253711EFA1D2A943C4F9AE02.roa (hash: H+qQQZmD1p/qPnv6XT6KRZsCtfSFefjGnHy0mI1YrpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.crl rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 266 (0x10a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157450, serialNumber=81A0CF9CE9AAA990ED1AFE8A830A707874F9AABE Validity Not Before: Nov 5 05:08:44 2025 GMT Not After : Nov 12 05:08:44 2025 GMT Subject: CN=690adbdc-4101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3e:d4:40:47:e5:0c:51:fc:4c:d1:5c:74:47: 83:63:c7:1a:cc:1b:8c:0a:0d:cf:87:7f:f9:c5:13: 93:8d:b1:0a:59:5d:ab:c9:66:d9:f6:f3:cb:79:5f: 67:2d:bb:a3:f0:e3:3a:39:4c:a8:ce:65:95:79:4e: 91:e1:f1:8c:57:ea:80:f9:cf:4e:8b:0f:0f:f1:86: 58:e8:41:40:c3:4e:58:b0:ad:54:d8:a5:6e:9d:15: c3:8b:7d:67:ff:d3:34:7b:5a:c2:10:7f:c4:45:92: 4d:30:b6:d9:3d:07:f4:51:08:f2:a3:50:a7:ba:93: 57:a2:5f:b2:f9:43:b5:54:71:20:07:b9:de:1e:69: 28:d7:ec:5f:a2:9a:85:27:b9:20:ee:89:17:a9:50: 64:c3:3d:32:f2:da:79:8c:71:27:15:73:cc:5e:3a: 51:92:25:2d:7b:89:c9:0a:60:8f:d2:4a:b6:62:b8: 39:5c:53:33:7e:86:13:ae:a3:96:98:83:63:78:4b: f2:0b:19:62:55:60:af:e2:d9:11:98:25:5a:c4:2c: 64:e3:0c:44:0d:24:b3:fd:64:ec:49:d5:47:7b:d7: 0b:c4:6d:20:53:77:81:3b:23:8d:9e:35:75:5a:3d: ab:72:4a:be:4c:8c:f3:03:01:0a:9f:8c:95:85:21: 64:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8D:E5:AC:A9:1B:E9:23:0C:AE:94:41:D3:F1:A7:87:03:A5:25:86 X509v3 Authority Key Identifier: keyid:81:A0:CF:9C:E9:AA:A9:90:ED:1A:FE:8A:83:0A:70:78:74:F9:AA:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:b1:7a:34:56:f8:62:8b:e3:42:f9:47:b1:8b:b9:c8:10:04: 36:e2:cd:a5:98:76:4b:9e:41:2d:4c:5c:69:47:fe:b5:04:17: 8e:7b:ee:8d:94:5e:d6:b6:99:88:26:b9:78:ff:87:73:8b:39: ed:2d:8f:c6:f1:66:df:20:87:ca:b4:34:a8:8c:7d:98:ca:7b: a7:b0:43:4c:1e:3c:73:8c:5f:67:34:fb:56:a6:29:4f:2e:f0: 9a:fb:05:db:2c:ff:70:66:2a:08:d0:75:2e:6c:aa:b3:48:85: c0:38:74:3f:db:3c:f4:ee:f9:c6:62:75:0f:c5:1d:21:e2:f8: 04:15:89:09:7d:11:71:45:40:f4:53:af:9a:a4:39:95:62:a2: 75:b5:5d:44:74:78:18:95:f4:72:23:25:c6:8f:a9:76:fd:92: ad:4a:d3:78:0b:10:fc:4b:65:88:65:7d:49:5b:09:e2:94:e4: 06:ce:dd:b6:96:e0:9d:63:ba:dd:b8:7c:88:52:62:e0:c9:61: 6d:ec:83:43:b0:6a:f1:95:c5:8a:5e:cf:50:48:32:a3:1a:80: 35:4d:92:02:ca:af:bb:46:dc:be:7e:1a:19:3e:8b:96:09:54: a5:19:25:ba:f7:7c:d9:2c:31:08:33:1e:76:47:b5:e8:e1:a9: f7:58:92:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc0NTAxMTAvBgNVBAUTKDgxQTBDRjlDRTlBQUE5OTBFRDFBRkU4QTgzMEE3MDc4 NzRGOUFBQkUwHhcNMjUxMTA1MDUwODQ0WhcNMjUxMTEyMDUwODQ0WjAYMRYwFAYD VQQDEw02OTBhZGJkYy00MTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2T7UQEflDFH8TNFcdEeDY8cazBuMCg3Ph3/5xROTjbEKWV2ryWbZ9vPLeV9n Lbuj8OM6OUyozmWVeU6R4fGMV+qA+c9Oiw8P8YZY6EFAw05YsK1U2KVunRXDi31n /9M0e1rCEH/ERZJNMLbZPQf0UQjyo1CnupNXol+y+UO1VHEgB7neHmko1+xfopqF J7kg7okXqVBkwz0y8tp5jHEnFXPMXjpRkiUte4nJCmCP0kq2Yrg5XFMzfoYTrqOW mINjeEvyCxliVWCv4tkRmCVaxCxk4wxEDSSz/WTsSdVHe9cLxG0gU3eBOyONnjV1 Wj2rckq+TIzzAwEKn4yVhSFkcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6N5ayp G+kjDK6UQdPxp4cDpSWGMB8GA1UdIwQYMBaAFIGgz5zpqqmQ7Rr+ioMKcHh0+aq+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzQ1MC84MkQ5QkEwNjI1 MzYxMUVGOUExQ0VGMjNDNEY5QUUwMi9nYURQbk9tcXFaRHRHdjZLZ3dwd2VIVDVx cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dhRFBuT21xcVpEdEd2Nktnd3B3ZUhUNXFyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzQ1MC84MkQ5QkEwNjI1MzYxMUVGOUExQ0VGMjNDNEY5QUUwMi9nYURQbk9tcXFa RHRHdjZLZ3dwd2VIVDVxcjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgsXo0Vvhii+NC+Uexi7nIEAQ24s2lmHZLnkEtTFxpR/61BBeOe+6N lF7WtpmIJrl4/4dzizntLY/G8WbfIIfKtDSojH2YynunsENMHjxzjF9nNPtWpilP LvCa+wXbLP9wZioI0HUubKqzSIXAOHQ/2zz07vnGYnUPxR0h4vgEFYkJfRFxRUD0 U6+apDmVYqJ1tV1EdHgYlfRyIyXGj6l2/ZKtStN4CxD8S2WIZX1JWwnilOQGzt22 luCdY7rduHyIUmLgyWFt7INDsGrxlcWKXs9QSDKjGoA1TZICyq+7Rty+fhoZPouW CVSlGSW693zZLDEIMx52R7Xo4an3WJJi -----END CERTIFICATE-----Generated at Wed Nov 5 10:07:30 2025 by rpki-client