$ rpki-client -vvf rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft File: Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft (raw, json) Hash identifier: c9DldHACYrhfQsnfl91tT3QTXlJC4kazmmB1SIgWYC0= Subject key identifier: AE:C7:62:CB:46:8F:04:67:C3:52:36:62:1C:C0:6C:6F:9B:92:08:4F Authority key identifier: 1B:1A:F1:83:51:06:C9:33:9A:DD:31:45:E9:00:B0:6F:DA:9E:56:E7 Certificate issuer: /CN=A915CE6F/serialNumber=1B1AF1835106C9339ADD3145E900B06FDA9E56E7 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft Manifest number: 5E Signing time: Mon 03 Nov 2025 07:05:00 +0000 Manifest this update: Mon 03 Nov 2025 07:04:59 +0000 Manifest next update: Mon 10 Nov 2025 07:04:59 +0000 Files and hashes: 1: Gxrxg1EGyTOa3TFF6QCwb9qeVuc.crl (hash: s7tCojkOMuq4v1LgbDj2vHiTlSfFUYCnHHDMraewdz8=) 2: D7605790272B11F08FF39632C4F9AE02.roa (hash: Fi0yCP05HdRSZdYqPkFnS/jg/xhA2BNVnmSoNmrn8ME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.crl rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:04:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CE6F, serialNumber=1B1AF1835106C9339ADD3145E900B06FDA9E56E7 Validity Not Before: Nov 3 07:04:59 2025 GMT Not After : Nov 10 07:04:59 2025 GMT Subject: CN=6908541c-1b97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f2:64:8f:ab:58:29:87:d7:d5:64:72:12:71: 33:5f:1f:f7:7f:51:a1:00:18:bf:42:61:da:2f:d0: 5f:a0:4c:a3:e2:a1:49:06:bb:68:48:27:5a:99:9e: b2:de:14:ec:c2:f1:37:b6:e6:de:30:e2:b8:6d:07: 37:d3:52:12:ee:62:1c:61:30:53:24:dd:00:a3:ac: cc:b9:8a:f8:bd:af:48:64:d4:8c:4f:2c:ea:c1:65: ff:56:1e:42:b1:e6:de:44:32:ac:d1:53:3c:32:17: 27:08:e3:eb:6c:ca:85:6a:19:aa:72:ff:4f:99:70: fc:60:49:7c:f9:cb:61:2f:05:5e:11:7f:d5:14:2c: e0:e3:2b:95:89:b4:35:24:10:c5:07:ea:6b:0a:c2: 96:8d:0c:c1:13:a0:e6:99:79:db:96:ac:e0:3e:63: 1e:db:b1:e1:f1:24:b4:9a:05:e7:09:d7:da:78:ad: 16:7e:0b:f8:0c:03:fd:64:90:3f:b2:36:3d:c8:89: ab:af:0f:05:bb:7b:3a:80:8a:df:cf:b1:fa:b0:ee: a7:c0:c3:92:7a:b4:fc:31:de:01:b2:5d:b1:32:24: 66:ff:04:f8:52:ea:19:29:b5:78:ff:57:51:e3:27: b4:16:0b:25:8b:68:8c:74:07:9f:47:f5:d6:3c:a5: de:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C7:62:CB:46:8F:04:67:C3:52:36:62:1C:C0:6C:6F:9B:92:08:4F X509v3 Authority Key Identifier: keyid:1B:1A:F1:83:51:06:C9:33:9A:DD:31:45:E9:00:B0:6F:DA:9E:56:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:26:cc:f3:86:4a:e0:da:1b:0e:f7:4b:20:b6:e5:c8:59:f1: 3a:e9:20:5d:6f:28:36:7a:ae:b8:fb:1e:49:75:43:9c:0f:dc: 21:11:d5:0c:90:6f:09:c4:0b:8a:2b:42:bd:a1:6e:03:ab:3d: e7:98:f9:ff:d8:49:4f:ae:30:11:b7:c8:58:24:11:e5:f7:49: 11:30:5f:f2:ab:7f:1a:84:e3:e6:d1:b2:6f:03:cc:49:4e:10: 0b:57:82:e8:fe:54:5b:2b:17:c1:e3:8e:29:08:45:2c:77:b2: a9:d6:68:60:85:34:0b:35:d3:6a:2d:26:e8:22:47:e9:98:7a: ef:ce:08:0c:7c:5b:f4:7d:fc:e1:1e:c3:b0:4d:6e:46:e4:74: 89:13:61:16:a4:95:da:c2:53:a3:8b:a7:48:76:2a:4b:23:12: 34:12:1f:4b:af:bb:ed:8d:bf:bf:70:f7:08:f6:d1:36:c1:05: 10:f8:29:6b:02:e1:8d:e4:a5:91:f3:00:1c:ee:82:ed:67:84: bb:8d:a6:65:ce:27:09:c1:fb:42:8b:ab:19:63:08:fa:6a:f7: 04:b7:c4:95:88:c0:eb:94:1d:9e:6d:55:a1:a5:7a:a1:e3:29: f0:0d:3f:a5:b4:f6:a5:e4:4f:34:27:87:16:35:5f:cc:0a:44: b2:b4:26:32 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 Q0U2RjExMC8GA1UEBRMoMUIxQUYxODM1MTA2QzkzMzlBREQzMTQ1RTkwMEIwNkZE QTlFNTZFNzAeFw0yNTExMDMwNzA0NTlaFw0yNTExMTAwNzA0NTlaMBgxFjAUBgNV BAMTDTY5MDg1NDFjLTFiOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDe8mSPq1gph9fVZHIScTNfH/d/UaEAGL9CYdov0F+gTKPioUkGu2hIJ1qZnrLe FOzC8Te25t4w4rhtBzfTUhLuYhxhMFMk3QCjrMy5ivi9r0hk1IxPLOrBZf9WHkKx 5t5EMqzRUzwyFycI4+tsyoVqGapy/0+ZcPxgSXz5y2EvBV4Rf9UULODjK5WJtDUk EMUH6msKwpaNDMEToOaZeduWrOA+Yx7bseHxJLSaBecJ19p4rRZ+C/gMA/1kkD+y Nj3IiauvDwW7ezqAit/Psfqw7qfAw5J6tPwx3gGyXbEyJGb/BPhS6hkptXj/V1Hj J7QWCyWLaIx0B59H9dY8pd6XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrsdiy0aP BGfDUjZiHMBsb5uSCE8wHwYDVR0jBBgwFoAUGxrxg1EGyTOa3TFF6QCwb9qeVucw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVDRTZGLzJEMTgxN0I0Mjcy QjExRjBBMEM2NzQ0REM0RjlBRTAyL0d4cnhnMUVHeVRPYTNURkY2UUN3YjlxZVZ1 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR3hyeGcxRUd5VE9hM1RGRjZRQ3diOXFlVnVjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVD RTZGLzJEMTgxN0I0MjcyQjExRjBBMEM2NzQ0REM0RjlBRTAyL0d4cnhnMUVHeVRP YTNURkY2UUN3YjlxZVZ1Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKImzPOGSuDaGw73SyC25chZ8TrpIF1vKDZ6rrj7Hkl1Q5wP3CER1QyQ bwnEC4orQr2hbgOrPeeY+f/YSU+uMBG3yFgkEeX3SREwX/KrfxqE4+bRsm8DzElO EAtXguj+VFsrF8HjjikIRSx3sqnWaGCFNAs102otJugiR+mYeu/OCAx8W/R9/OEe w7BNbkbkdIkTYRakldrCU6OLp0h2KksjEjQSH0uvu+2Nv79w9wj20TbBBRD4KWsC 4Y3kpZHzABzugu1nhLuNpmXOJwnB+0KLqxljCPpq9wS3xJWIwOuUHZ5tVaGleqHj KfANP6W09qXkTzQnhxY1X8wKRLK0JjI= -----END CERTIFICATE-----Generated at Wed Nov 5 07:55:16 2025 by rpki-client