$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft File: GrHejsiRr6LU4cka9Vg0kL-7wgk.mft (raw, json) Hash identifier: nBmFWaAMZeLOItnSM3M025xIwCEpSd2gVLICVNX4O6M= Subject key identifier: 97:C1:F3:AB:FC:A0:84:FF:AF:7B:F2:48:46:00:1B:FD:A9:53:C9:08 Authority key identifier: 1A:B1:DE:8E:C8:91:AF:A2:D4:E1:C9:1A:F5:58:34:90:BF:BB:C2:09 Certificate issuer: /CN=A916DB3F/serialNumber=1AB1DE8EC891AFA2D4E1C91AF5583490BFBBC209 Certificate serial: 1E65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft Manifest number: 1E58 Signing time: Sun 02 Nov 2025 16:04:45 +0000 Manifest this update: Sun 02 Nov 2025 16:04:44 +0000 Manifest next update: Sun 09 Nov 2025 16:04:44 +0000 Files and hashes: 1: GrHejsiRr6LU4cka9Vg0kL-7wgk.crl (hash: uhjvZwQLNvGtmmLx6SneZcXqBsjFKQkecTd9KjCTAy4=) 2: 7E8D9A52895411E6B3538424C4F9AE02.roa (hash: SuDRS4jGJE9zSZ58w86iX8uePQ9m/GiWmqEd/5+TkEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.crl rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:04:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7781 (0x1e65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DB3F, serialNumber=1AB1DE8EC891AFA2D4E1C91AF5583490BFBBC209 Validity Not Before: Nov 2 16:04:44 2025 GMT Not After : Nov 9 16:04:44 2025 GMT Subject: CN=6907811c-0b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c4:aa:d3:4f:e8:1c:25:50:3b:1d:5e:76:20: 81:f4:35:a5:d3:85:a0:f2:c1:4e:c9:67:b1:e5:24: d4:97:c5:27:90:c1:48:1e:a6:4c:1c:f1:95:16:19: f9:be:8e:7c:b0:16:b6:fc:e6:4e:45:e3:1f:37:1a: ac:00:55:77:06:f8:80:2f:b1:ba:89:19:56:cc:48: 3d:45:c8:c4:b9:b7:0a:49:59:d6:d0:21:da:29:2e: 6d:c5:67:0f:d1:20:a0:74:d2:75:a8:fb:e4:e8:e6: 9f:7c:19:a3:8c:67:8c:b4:4d:43:9d:d4:43:4e:50: 38:f5:ca:51:5f:85:17:8b:9d:9c:b4:2b:72:2c:26: b8:96:7d:68:5b:73:87:2c:9d:2f:c3:a0:fd:43:1d: 37:77:91:3e:84:8e:37:9f:65:21:b3:ed:4f:ad:d1: c6:de:07:f7:90:35:32:fd:15:d0:0e:f5:e8:68:2d: 7b:df:cf:4a:ba:de:c8:e8:ae:1e:0d:45:90:8b:8a: a9:65:e9:9b:23:14:68:54:13:c8:16:2e:ed:73:f7: cc:09:b9:eb:d6:43:e1:4b:e9:06:da:20:fe:a7:ed: 4a:a4:29:91:ae:02:61:43:8f:a7:da:60:62:b0:f5: 99:ca:49:64:28:31:e6:60:3f:e5:af:6d:c3:f9:fc: 59:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C1:F3:AB:FC:A0:84:FF:AF:7B:F2:48:46:00:1B:FD:A9:53:C9:08 X509v3 Authority Key Identifier: keyid:1A:B1:DE:8E:C8:91:AF:A2:D4:E1:C9:1A:F5:58:34:90:BF:BB:C2:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:e3:96:43:17:c8:82:4e:ce:54:54:2e:e9:1e:47:ba:0d:ad: 0f:09:cb:67:01:21:ce:44:fd:b6:b0:37:a8:48:70:81:fe:13: 21:74:93:17:34:b6:5e:7a:74:f2:5d:17:db:3e:7b:64:79:63: 5e:e7:a3:dd:d4:76:2e:d2:c3:84:fe:99:ed:11:a9:52:2a:fc: b4:87:58:e5:85:87:1a:9c:3e:39:ac:23:89:e4:3d:13:b5:f6: 95:81:b1:32:59:14:4a:44:75:5e:8d:e5:d7:22:18:1a:9b:7c: 68:47:ce:98:1e:78:33:91:d3:0d:03:f3:18:b2:39:3a:b1:9d: 12:bd:d0:43:20:4b:cd:e4:d6:d3:e0:1e:0b:12:2f:99:1e:55: dd:5b:a7:d4:e5:bb:68:0b:c7:5e:21:45:df:08:97:d3:d4:7b: 8a:b1:dc:74:a1:d4:ab:c8:de:72:b0:6b:1f:4d:dd:11:24:f8: d8:d9:1d:4d:71:f7:91:e7:df:74:d2:08:7a:5d:ff:7a:be:86: a4:32:ee:cb:b4:28:98:63:8d:4b:7a:de:14:93:ab:f0:f1:b3: 02:c5:eb:96:9b:ed:40:c8:60:07:0f:88:42:0c:4c:4b:3d:7d: 37:7f:69:5f:21:59:e5:43:41:d6:a2:c1:6b:62:15:21:b7:72: f5:63:13:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRCM0YxMTAvBgNVBAUTKDFBQjFERThFQzg5MUFGQTJENEUxQzkxQUY1NTgzNDkw QkZCQkMyMDkwHhcNMjUxMTAyMTYwNDQ0WhcNMjUxMTA5MTYwNDQ0WjAYMRYwFAYD VQQDEw02OTA3ODExYy0wYjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqcSq00/oHCVQOx1ediCB9DWl04Wg8sFOyWex5STUl8UnkMFIHqZMHPGVFhn5 vo58sBa2/OZOReMfNxqsAFV3BviAL7G6iRlWzEg9RcjEubcKSVnW0CHaKS5txWcP 0SCgdNJ1qPvk6OaffBmjjGeMtE1DndRDTlA49cpRX4UXi52ctCtyLCa4ln1oW3OH LJ0vw6D9Qx03d5E+hI43n2Uhs+1PrdHG3gf3kDUy/RXQDvXoaC17389Kut7I6K4e DUWQi4qpZembIxRoVBPIFi7tc/fMCbnr1kPhS+kG2iD+p+1KpCmRrgJhQ4+n2mBi sPWZyklkKDHmYD/lr23D+fxZIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfB86v8 oIT/r3vySEYAG/2pU8kIMB8GA1UdIwQYMBaAFBqx3o7Ika+i1OHJGvVYNJC/u8IJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REIzRi9EMzkxMDEzNDg5 NTMxMUU2OEE4NTQ5MjNDNEY5QUUwMi9HckhlanNpUnI2TFU0Y2thOVZnMGtMLTd3 Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dySGVqc2lScjZMVTRja2E5Vmcwa0wtN3dnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REIzRi9EMzkxMDEzNDg5NTMxMUU2OEE4NTQ5MjNDNEY5QUUwMi9HckhlanNpUnI2 TFU0Y2thOVZnMGtMLTd3Z2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBC45ZDF8iCTs5UVC7pHke6Da0PCctnASHORP22sDeoSHCB/hMhdJMX NLZeenTyXRfbPntkeWNe56Pd1HYu0sOE/pntEalSKvy0h1jlhYcanD45rCOJ5D0T tfaVgbEyWRRKRHVejeXXIhgam3xoR86YHngzkdMNA/MYsjk6sZ0SvdBDIEvN5NbT 4B4LEi+ZHlXdW6fU5btoC8deIUXfCJfT1HuKsdx0odSryN5ysGsfTd0RJPjY2R1N cfeR59900gh6Xf96voakMu7LtCiYY41Let4Uk6vw8bMCxeuWm+1AyGAHD4hCDExL PX03f2lfIVnlQ0HWosFrYhUht3L1YxPz -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:02 2025 by rpki-client