$ rpki-client -vvf rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft File: G2L9XgPTM3qi3E4VB5QUQEextjo.mft (raw, json) Hash identifier: UKR4Ig4YNPpCHtorw3Kzfx8nwDWEHjViqwyYH8YtlQw= Subject key identifier: 0D:C5:E7:02:C2:D5:E5:10:97:51:38:5C:2C:C9:24:41:DC:B9:74:0A Authority key identifier: 1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A Certificate issuer: /CN=A916C643/serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Certificate serial: 0550 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft Manifest number: 0543 Signing time: Sun 02 Nov 2025 23:27:20 +0000 Manifest this update: Sun 02 Nov 2025 23:27:20 +0000 Manifest next update: Sun 09 Nov 2025 23:27:20 +0000 Files and hashes: 1: G2L9XgPTM3qi3E4VB5QUQEextjo.crl (hash: eCUkbsIWHWZX1CJTfiggTKShG9Q89OUJctfAHqDwsag=) 2: 594A0BF2152E11EC94BCB264C4F9AE02.roa (hash: De+KbU1rQ+e7QR643NvX9xdd94W0D5EZXh2X3vA8FwY=) 3: 5A0804A4152E11EC94BCB264C4F9AE02.roa (hash: Xz85fL4HDodJp9813Pf30AvPpXYXiy5+u/nD3T6D6uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1360 (0x550) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C643, serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Validity Not Before: Nov 2 23:27:20 2025 GMT Not After : Nov 9 23:27:20 2025 GMT Subject: CN=6907e8d8-b2b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e2:60:90:1f:67:5d:ff:08:f7:f3:09:0f:b4: 5d:62:48:0d:12:ca:eb:63:f5:a2:00:00:bd:67:6a: a3:2f:96:77:ef:33:78:de:13:7c:49:aa:f3:fc:ba: 47:5b:a4:27:5f:ec:4f:a6:20:8a:86:8b:66:e4:43: eb:68:ac:20:d8:f4:b2:89:8b:ed:db:89:fa:3c:32: b9:58:3b:26:ef:4a:c4:71:5d:0b:12:8b:41:1f:c0: 2c:c1:96:76:50:ae:80:fd:c0:a9:a0:63:c9:16:cd: 22:4a:44:c5:1c:69:74:e1:1f:43:21:68:1f:e4:5b: 0a:c7:f9:50:c3:d2:fa:42:8a:7a:32:32:56:82:5c: d4:3c:d1:30:86:92:4d:87:40:f7:25:4e:95:6d:00: 19:3e:22:05:ec:b8:22:03:29:83:28:25:db:ab:c8: 34:8d:b2:53:f1:e2:bb:de:38:f2:d8:01:b4:5c:ed: f3:89:de:19:08:91:c5:0e:ce:1a:6a:4e:16:52:51: 0b:c2:c8:e9:8d:69:e6:5b:27:44:c1:e6:d2:2e:cb: 80:c4:3a:6f:ad:59:54:d9:dd:f9:43:cb:78:93:8e: f2:27:ac:16:b5:24:c7:16:89:82:fb:53:d5:57:33: 5e:dc:77:d0:43:db:24:fd:da:b1:93:f0:3c:c7:3a: 5c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C5:E7:02:C2:D5:E5:10:97:51:38:5C:2C:C9:24:41:DC:B9:74:0A X509v3 Authority Key Identifier: keyid:1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:77:2f:b6:da:12:f9:5e:66:94:c3:9a:d1:cc:e2:d9:82:dd: 04:0e:1e:41:e7:cd:4c:7f:ee:64:85:21:85:cb:b2:db:aa:21: 66:50:24:c7:53:9c:2b:3e:57:15:a1:11:ba:be:6c:18:9b:ef: fe:0b:1a:84:55:51:6c:9e:75:3b:44:ce:71:69:47:9f:75:8c: fa:f7:87:94:cb:92:84:0c:bb:89:21:4a:ba:0b:64:0f:10:bf: 26:4b:be:ed:77:76:b8:35:4a:ea:45:a5:da:6d:65:fe:0c:26: 01:84:71:40:32:1f:90:df:eb:70:56:7d:82:b6:4f:20:4f:91: 48:dd:fc:41:f0:0d:66:e9:d1:a5:93:f5:2e:07:bd:04:f1:b9: ba:36:c4:18:e8:54:54:87:b3:84:ca:68:76:1b:9a:b5:d4:54: 98:80:0f:2f:78:18:6f:06:99:97:e8:47:e9:9a:fc:92:de:52: 64:c3:85:9e:8e:65:6f:d7:72:7d:12:3d:71:de:3a:67:a0:dc: de:f7:2b:a4:43:de:21:56:2c:a5:3f:17:73:b3:2d:28:4c:a1: 90:58:71:20:e5:d2:53:15:95:5b:44:86:d1:81:03:d5:99:11: 0f:54:7e:cb:be:b0:7d:6f:14:e1:20:ec:29:c4:19:8d:10:b2: f5:2a:c0:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM2NDMxMTAvBgNVBAUTKDFCNjJGRDVFMDNEMzMzN0FBMkRDNEUxNTA3OTQxNDQw NDdCMUI2M0EwHhcNMjUxMTAyMjMyNzIwWhcNMjUxMTA5MjMyNzIwWjAYMRYwFAYD VQQDEw02OTA3ZThkOC1iMmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+JgkB9nXf8I9/MJD7RdYkgNEsrrY/WiAAC9Z2qjL5Z37zN43hN8Sarz/LpH W6QnX+xPpiCKhotm5EPraKwg2PSyiYvt24n6PDK5WDsm70rEcV0LEotBH8AswZZ2 UK6A/cCpoGPJFs0iSkTFHGl04R9DIWgf5FsKx/lQw9L6Qop6MjJWglzUPNEwhpJN h0D3JU6VbQAZPiIF7LgiAymDKCXbq8g0jbJT8eK73jjy2AG0XO3zid4ZCJHFDs4a ak4WUlELwsjpjWnmWydEwebSLsuAxDpvrVlU2d35Q8t4k47yJ6wWtSTHFomC+1PV VzNe3HfQQ9sk/dqxk/A8xzpc7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3F5wLC 1eUQl1E4XCzJJEHcuXQKMB8GA1UdIwQYMBaAFBti/V4D0zN6otxOFQeUFEBHsbY6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzY0My9BNUQ4ODRDNDE1 MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0zcWkzRTRWQjVRVVFFZXh0 am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cyTDlYZ1BUTTNxaTNFNFZCNVFVUUVleHRqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzY0My9BNUQ4ODRDNDE1MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0z cWkzRTRWQjVRVVFFZXh0am8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCdy+22hL5XmaUw5rRzOLZgt0EDh5B581Mf+5khSGFy7LbqiFmUCTH U5wrPlcVoRG6vmwYm+/+CxqEVVFsnnU7RM5xaUefdYz694eUy5KEDLuJIUq6C2QP EL8mS77td3a4NUrqRaXabWX+DCYBhHFAMh+Q3+twVn2Ctk8gT5FI3fxB8A1m6dGl k/UuB70E8bm6NsQY6FRUh7OEymh2G5q11FSYgA8veBhvBpmX6EfpmvyS3lJkw4We jmVv13J9Ej1x3jpnoNze9yukQ94hViylPxdzsy0oTKGQWHEg5dJTFZVbRIbRgQPV mREPVH7LvrB9bxThIOwpxBmNELL1KsB9 -----END CERTIFICATE-----Generated at Tue Nov 4 08:30:11 2025 by rpki-client