$ rpki-client -vvf rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft File: Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft (raw, json) Hash identifier: U+GNtNzVpRu2/zyh4TZ+ElcdUblaUuQWNH9Odv7QVHM= Subject key identifier: 9F:B0:1C:E7:C6:00:75:B4:86:BF:23:CE:C1:9E:32:36:03:D0:D5:6D Authority key identifier: 1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4 Certificate issuer: /CN=A917E951/serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4 Certificate serial: 01E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft Manifest number: 01DF Signing time: Wed 05 Nov 2025 02:49:42 +0000 Manifest this update: Wed 05 Nov 2025 02:49:41 +0000 Manifest next update: Wed 12 Nov 2025 02:49:41 +0000 Files and hashes: 1: Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl (hash: 30BbpNb/AZDeTi+xzVu2G+LGgykeSFHcUh7LmkxtIWA=) 2: 4D6D5554DB8011ED91D54A2BC4F9AE02.roa (hash: txIJm5SN5mj5ufLae9sOD2bwnfe8kYJIqTNAvBL7Uwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:49:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 483 (0x1e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E951, serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4 Validity Not Before: Nov 5 02:49:41 2025 GMT Not After : Nov 12 02:49:41 2025 GMT Subject: CN=690abb46-3210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:05:97:69:be:f2:c9:b4:55:79:5c:f1:ce:6f: db:3f:be:99:76:0f:ec:bc:42:ed:51:61:fc:d6:40: 65:e8:ab:6a:41:1e:6f:bd:44:99:c7:e6:7b:32:09: 11:85:5a:50:d2:58:50:bf:cf:d8:ca:4a:ca:c0:a3: e6:2a:cf:cc:aa:5e:d5:de:b6:e7:7f:5a:64:fb:3d: db:01:3f:cc:ba:d9:2b:d5:0e:d5:2e:1f:d0:4f:09: ca:ce:43:65:f3:e1:7a:bf:55:7e:6a:67:00:26:91: ff:7e:6e:be:69:a9:03:d9:58:2c:ef:0d:3b:1d:15: d5:76:f0:fe:39:85:ef:33:4d:93:52:63:93:ec:86: 71:ca:45:c3:ca:07:4e:0d:50:75:eb:84:3b:02:f8: 3d:c5:52:7f:01:2b:4b:48:d6:8c:80:37:60:51:4e: 51:a0:b0:0a:7b:64:13:a5:86:b1:35:ed:f5:f4:74: 6b:a4:94:bf:6e:f7:82:06:6c:95:9c:1d:64:61:e1: c0:06:8a:ba:fd:9c:7e:0f:69:a9:1b:40:3f:1f:13: c7:e9:42:8c:eb:29:cb:52:c8:71:df:d9:4c:91:5e: 85:a6:a7:02:d8:2f:60:ef:3c:12:42:da:5b:ee:47: d1:93:9d:47:ba:b5:84:df:3c:45:17:a2:9e:c4:c3: 63:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B0:1C:E7:C6:00:75:B4:86:BF:23:CE:C1:9E:32:36:03:D0:D5:6D X509v3 Authority Key Identifier: keyid:1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:fd:44:a8:d1:73:ef:2f:36:23:3d:2b:97:e8:9d:79:e8:17: cd:6b:95:82:c8:79:38:75:a9:d6:49:23:3d:3f:08:6d:68:fc: d9:1c:48:87:91:8b:75:49:1c:27:b1:ab:17:f6:3e:e2:5c:f6: 65:ef:cb:db:b9:f3:e8:33:f9:8f:c2:05:09:aa:41:86:86:b1: 41:ec:e3:2b:39:10:d6:75:94:db:94:9d:bb:c1:d7:15:dc:a7: 56:9b:15:21:61:f2:51:cc:01:e3:c7:1b:af:98:47:23:57:fa: 6f:87:80:f0:84:39:99:49:79:8c:3a:13:e1:46:36:d2:b9:f8: d7:f8:0f:3a:47:bf:8c:94:de:15:9f:a3:ee:5f:f7:76:c6:ee: 16:c1:bb:9d:e7:b3:84:24:ae:cf:5b:be:b0:49:71:74:f4:74: 07:54:6f:96:22:c9:e2:1c:ae:85:02:dd:be:ec:97:14:e7:6f: 48:79:e6:c8:6e:88:2b:15:05:0c:6b:80:38:c7:98:a7:cc:5f: 34:df:28:00:61:67:81:03:d4:d9:a4:87:32:f4:bc:1a:1c:89: 86:a3:78:24:e7:68:38:08:e5:81:cd:c5:93:4e:e9:3f:db:af: 6d:1a:5a:f5:7d:e4:42:7e:5c:f7:cd:fd:98:26:cd:f7:63:48: f0:18:f4:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U5NTExMTAvBgNVBAUTKDFBMEY3ODZGMTFCOEUxN0Q0NURFMUVEQ0U2MUUxNjAw REQ0OTMwQTQwHhcNMjUxMTA1MDI0OTQxWhcNMjUxMTEyMDI0OTQxWjAYMRYwFAYD VQQDEw02OTBhYmI0Ni0zMjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywWXab7yybRVeVzxzm/bP76Zdg/svELtUWH81kBl6KtqQR5vvUSZx+Z7MgkR hVpQ0lhQv8/YykrKwKPmKs/Mql7V3rbnf1pk+z3bAT/Mutkr1Q7VLh/QTwnKzkNl 8+F6v1V+amcAJpH/fm6+aakD2Vgs7w07HRXVdvD+OYXvM02TUmOT7IZxykXDygdO DVB164Q7Avg9xVJ/AStLSNaMgDdgUU5RoLAKe2QTpYaxNe319HRrpJS/bveCBmyV nB1kYeHABoq6/Zx+D2mpG0A/HxPH6UKM6ynLUshx39lMkV6FpqcC2C9g7zwSQtpb 7kfRk51HurWE3zxFF6KexMNjKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+wHOfG AHW0hr8jzsGeMjYD0NVtMB8GA1UdIwQYMBaAFBoPeG8RuOF9Rd4e3OYeFgDdSTCk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTk1MS82RjQ5Qjk5MkRC NzExMUVEOTUwM0Q4NURDNEY5QUUwMi9HZzk0YnhHNDRYMUYzaDdjNWg0V0FOMUpN S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dnOTRieEc0NFgxRjNoN2M1aDRXQU4xSk1LUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTk1MS82RjQ5Qjk5MkRCNzExMUVEOTUwM0Q4NURDNEY5QUUwMi9HZzk0YnhHNDRY MUYzaDdjNWg0V0FOMUpNS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCm/USo0XPvLzYjPSuX6J156BfNa5WCyHk4danWSSM9PwhtaPzZHEiH kYt1SRwnsasX9j7iXPZl78vbufPoM/mPwgUJqkGGhrFB7OMrORDWdZTblJ27wdcV 3KdWmxUhYfJRzAHjxxuvmEcjV/pvh4DwhDmZSXmMOhPhRjbSufjX+A86R7+MlN4V n6PuX/d2xu4Wwbud57OEJK7PW76wSXF09HQHVG+WIsniHK6FAt2+7JcU529IeebI bogrFQUMa4A4x5inzF803ygAYWeBA9TZpIcy9LwaHImGo3gk52g4COWBzcWTTuk/ 269tGlr1feRCflz3zf2YJs33Y0jwGPSE -----END CERTIFICATE-----Generated at Wed Nov 5 05:26:06 2025 by rpki-client