$ rpki-client -vvf rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft File: sGbiQQUMOMNJyyXUQBRFD09QGK4.mft (raw, json) Hash identifier: zF+vFyiLFww4QSt7nBclCM0F5qhDRMvgTZPz0T9KoVk= Subject key identifier: 69:C6:63:B1:77:ED:98:DF:73:2B:DE:69:55:12:33:57:25:EE:11:A8 Authority key identifier: B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE Certificate issuer: /CN=A916CE83/serialNumber=B066E241050C38C349CB25D44014450F4F5018AE Certificate serial: 1096 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft Manifest number: 1080 Signing time: Wed 05 Nov 2025 11:35:38 +0000 Manifest this update: Wed 05 Nov 2025 11:35:38 +0000 Manifest next update: Wed 12 Nov 2025 11:35:38 +0000 Files and hashes: 1: sGbiQQUMOMNJyyXUQBRFD09QGK4.crl (hash: zZG5PgUgCc1gKtqvaPrefGKxO11P0Aq8142QyhSwnGo=) 2: 6657C8D243B911E9AE253437C4F9AE02.roa (hash: f+ssEZLOjLj3KCxNpmhhNkb36lPb0XOjNkCdaat32A0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 11:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4246 (0x1096) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CE83, serialNumber=B066E241050C38C349CB25D44014450F4F5018AE Validity Not Before: Nov 5 11:35:38 2025 GMT Not After : Nov 12 11:35:38 2025 GMT Subject: CN=690b368a-0b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e6:97:da:45:89:31:db:2b:de:9b:44:a9:74: f1:0b:37:6e:74:c4:1f:4d:d8:8d:60:2f:21:69:1f: 85:7d:6f:b5:7d:2a:d3:f5:73:5d:4b:78:82:24:9a: 37:8e:f9:de:8b:90:a9:42:31:af:53:4e:f2:33:90: f2:8a:9a:b0:ef:ef:da:5d:84:67:00:2c:2d:d3:a7: 7d:65:aa:d6:de:be:f8:36:a1:4b:2f:72:8d:b8:92: a9:71:7e:e3:08:f7:05:80:9f:9d:35:44:c9:e3:2f: 4b:17:12:2c:d1:bf:d5:d8:f7:ed:18:b9:6e:94:7d: 7f:47:15:7e:52:99:24:19:8d:55:2b:a8:13:ba:79: 75:95:74:49:33:9a:52:9e:75:d8:80:f1:7b:a2:41: cf:11:ec:18:9e:e9:8c:0b:d8:dc:cb:2d:a1:d0:bb: 0b:a8:ba:02:c8:e9:c1:08:5b:95:e0:d4:29:58:fb: f0:b4:97:b8:82:08:20:31:40:f0:3e:25:ed:ff:15: 10:8f:04:52:58:29:1b:15:f0:37:ed:42:69:b9:41: 59:a2:4c:f9:51:a0:cd:8f:69:fa:b0:82:6c:6e:20: 5b:b0:7b:e6:21:8c:9b:c0:6a:53:f4:64:7a:c0:2d: 95:19:21:33:e7:c7:4d:7e:ad:c2:80:a7:d7:20:73: 4b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C6:63:B1:77:ED:98:DF:73:2B:DE:69:55:12:33:57:25:EE:11:A8 X509v3 Authority Key Identifier: keyid:B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:dd:ad:0f:3f:50:fb:42:42:8c:63:10:67:fb:54:46:47:cb: ed:64:b1:bf:eb:04:1d:01:de:22:79:d6:4b:a8:09:45:b2:90: 8c:1c:c3:e9:88:24:e1:3f:e3:55:55:a4:e2:67:de:ee:27:a5: 11:3d:28:e1:49:d0:b2:65:32:34:9e:3f:14:e5:f9:ff:10:c6: 26:c5:a8:c9:a2:54:78:2a:25:c1:0f:90:aa:a0:95:80:b7:a6: 10:45:f6:62:60:55:22:d0:96:12:fe:ad:70:85:14:8c:1c:62: f4:bd:c5:73:73:eb:48:cb:14:ab:23:a6:b2:4a:8a:0d:f2:c2: b5:51:9b:49:46:8e:04:31:72:9a:84:38:92:dc:9a:ad:9c:2c: f9:e7:eb:96:6b:05:ca:12:6a:95:47:a2:7d:a6:aa:aa:14:32: e3:f4:ef:4f:89:f2:ee:83:ca:58:f9:e7:05:15:35:15:71:30: 55:95:44:b1:d9:41:64:d4:b6:d0:98:37:13:a2:7e:26:9b:68: 9b:fa:53:fc:f0:ea:ba:76:52:92:48:7e:2e:75:85:ab:73:f4: d1:57:6b:1e:ab:eb:e9:97:8f:b5:9b:e2:31:14:83:67:34:18: 4b:60:2e:0f:d0:81:81:98:a0:a9:dc:38:1e:22:b1:10:08:e8: f9:eb:0f:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNFODMxMTAvBgNVBAUTKEIwNjZFMjQxMDUwQzM4QzM0OUNCMjVENDQwMTQ0NTBG NEY1MDE4QUUwHhcNMjUxMTA1MTEzNTM4WhcNMjUxMTEyMTEzNTM4WjAYMRYwFAYD VQQDEw02OTBiMzY4YS0wYjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAreaX2kWJMdsr3ptEqXTxCzdudMQfTdiNYC8haR+FfW+1fSrT9XNdS3iCJJo3 jvnei5CpQjGvU07yM5Dyipqw7+/aXYRnACwt06d9ZarW3r74NqFLL3KNuJKpcX7j CPcFgJ+dNUTJ4y9LFxIs0b/V2PftGLlulH1/RxV+UpkkGY1VK6gTunl1lXRJM5pS nnXYgPF7okHPEewYnumMC9jcyy2h0LsLqLoCyOnBCFuV4NQpWPvwtJe4ggggMUDw PiXt/xUQjwRSWCkbFfA37UJpuUFZokz5UaDNj2n6sIJsbiBbsHvmIYybwGpT9GR6 wC2VGSEz58dNfq3CgKfXIHNLLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGnGY7F3 7ZjfcyveaVUSM1cl7hGoMB8GA1UdIwQYMBaAFLBm4kEFDDjDScsl1EAURQ9PUBiu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0U4My85NTY0MTkxQTQz QjgxMUU5QUJBMjJBMzRDNEY5QUUwMi9zR2JpUVFVTU9NTkp5eVhVUUJSRkQwOVFH SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NHYmlRUVVNT01OSnl5WFVRQlJGRDA5UUdLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0U4My85NTY0MTkxQTQzQjgxMUU5QUJBMjJBMzRDNEY5QUUwMi9zR2JpUVFVTU9N Tkp5eVhVUUJSRkQwOVFHSzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA83a0PP1D7QkKMYxBn+1RGR8vtZLG/6wQdAd4iedZLqAlFspCMHMPp iCThP+NVVaTiZ97uJ6URPSjhSdCyZTI0nj8U5fn/EMYmxajJolR4KiXBD5CqoJWA t6YQRfZiYFUi0JYS/q1whRSMHGL0vcVzc+tIyxSrI6aySooN8sK1UZtJRo4EMXKa hDiS3JqtnCz55+uWawXKEmqVR6J9pqqqFDLj9O9PifLug8pY+ecFFTUVcTBVlUSx 2UFk1LbQmDcTon4mm2ib+lP88Oq6dlKSSH4udYWrc/TRV2seq+vpl4+1m+IxFINn NBhLYC4P0IGBmKCp3DgeIrEQCOj56w+u -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:24 2025 by rpki-client