$ rpki-client -vvf rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft File: Gra655Oriqyjv9ZsbCmwrVED8JA.mft (raw, json) Hash identifier: 2WiWzzeVEH+HF5J3MceHtBWp1H7w8Q+6Dhz3eRCTCrk= Subject key identifier: EF:44:C2:C6:15:B9:34:B6:46:54:2A:E6:EB:92:27:D4:D7:82:A3:09 Authority key identifier: 1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90 Certificate issuer: /CN=A9185896/serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090 Certificate serial: 01DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft Manifest number: 01D4 Signing time: Wed 05 Nov 2025 02:58:30 +0000 Manifest this update: Wed 05 Nov 2025 02:58:29 +0000 Manifest next update: Wed 12 Nov 2025 02:58:29 +0000 Files and hashes: 1: Gra655Oriqyjv9ZsbCmwrVED8JA.crl (hash: e7cS2070OEr84fmSp7GSP/9CP2y1G/ju5l0rAs12HCk=) 2: 1C46B158029711EEB8410455C4F9AE02.roa (hash: 9PDqSioWn5hBKEyF3Xh2bcZ5nBkq113KFDA0GhUPDK8=) 3: 760E95F6C6AA11EFAAE05A0EC4F9AE02.roa (hash: TYXUwM1es+viCTvOIJkrXn99Lf7hGCjK/asxpXmwfB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:58:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 477 (0x1dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185896, serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090 Validity Not Before: Nov 5 02:58:29 2025 GMT Not After : Nov 12 02:58:29 2025 GMT Subject: CN=690abd56-ac52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:51:0f:11:6f:b7:ae:3e:35:8f:99:44:2a:e3: 2b:30:cc:4c:9a:6e:10:5f:25:93:85:1a:7e:f2:5e: fe:97:5a:9a:c3:88:3b:be:ae:94:86:6f:b7:6c:6f: 0c:29:47:71:9b:43:5d:8c:f5:e3:43:6b:38:06:63: 22:4a:6a:29:8b:80:d9:6b:f3:7e:d2:a9:87:0a:d8: 5f:48:7a:a6:8f:d7:3f:9e:b8:fc:8f:24:30:1f:08: 25:81:ca:a4:bf:f1:23:c8:d0:d2:0f:16:97:bb:ae: f7:33:23:00:cb:5a:36:3d:ee:a5:04:f2:79:01:bf: 95:dd:cb:c8:86:bb:bd:c2:a8:e3:d2:8e:9f:f9:4d: aa:47:c9:9a:a8:64:7d:af:b1:b9:1a:45:e0:b4:16: 7c:a5:3c:9b:b1:88:d9:22:ef:28:99:a8:b8:ef:cb: 56:38:1c:15:c5:cf:e7:c0:6f:fc:ac:4c:dd:e7:05: aa:36:6f:12:7b:9b:f3:0a:c6:07:9a:90:93:b4:54: cc:ad:4f:d2:1b:ed:f5:d0:d8:27:89:9a:94:e1:dc: c8:4f:af:28:3f:ec:eb:2f:4d:78:db:a6:33:f5:5b: ee:5d:bb:82:c0:00:29:39:a3:0d:87:ba:2e:2f:36: 45:1f:06:55:3a:3c:fb:43:de:59:21:8e:64:59:97: ef:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:44:C2:C6:15:B9:34:B6:46:54:2A:E6:EB:92:27:D4:D7:82:A3:09 X509v3 Authority Key Identifier: keyid:1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:61:95:22:d6:90:eb:6a:dd:84:b0:18:11:ea:20:7a:40:6b: e9:ce:cc:9d:ea:9c:d6:c5:2f:df:79:b4:7b:01:19:2d:b6:b6: 67:1f:2b:fd:44:bc:db:a5:24:bb:bf:64:89:76:4d:55:38:65: 3a:1d:b4:e3:c4:65:24:d5:ec:bf:80:92:73:a1:fe:a1:ad:96: ad:4c:08:29:84:93:1a:29:b0:66:35:85:64:07:0d:33:7a:d6: be:76:f7:8a:b1:46:85:fa:26:27:68:15:15:4f:92:c9:68:8f: 8d:54:1f:32:07:b3:7b:d4:6f:78:fc:76:a7:39:fb:26:aa:d7: ad:e5:18:c2:64:f2:8f:dd:2c:b3:0a:f2:07:7d:7c:ec:e2:c5: 2a:d4:93:97:06:ae:e1:63:8e:8c:4d:4f:b6:dd:06:02:09:f2: 3e:71:3a:71:45:5a:5c:c5:37:ad:ab:04:1a:12:90:c2:d6:4c: fe:bb:5c:b9:70:d4:88:cc:35:7b:12:b8:1f:01:16:e1:a7:e2: 55:6d:9c:c3:97:6e:61:95:29:dd:74:3a:7e:b8:06:0e:2d:eb: 9a:5b:cc:aa:9a:9a:fa:1b:d4:2f:c8:ae:a7:34:a0:ef:6e:0a: ce:e1:43:b1:b6:d3:b9:83:e8:53:c6:cb:ed:73:8d:43:fc:7c: 90:bb:d1:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU4OTYxMTAvBgNVBAUTKDFBQjZCQUU3OTNBQjhBQUNBM0JGRDY2QzZDMjlCMEFE NTEwM0YwOTAwHhcNMjUxMTA1MDI1ODI5WhcNMjUxMTEyMDI1ODI5WjAYMRYwFAYD VQQDEw02OTBhYmQ1Ni1hYzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1lEPEW+3rj41j5lEKuMrMMxMmm4QXyWThRp+8l7+l1qaw4g7vq6Uhm+3bG8M KUdxm0NdjPXjQ2s4BmMiSmopi4DZa/N+0qmHCthfSHqmj9c/nrj8jyQwHwglgcqk v/EjyNDSDxaXu673MyMAy1o2Pe6lBPJ5Ab+V3cvIhru9wqjj0o6f+U2qR8maqGR9 r7G5GkXgtBZ8pTybsYjZIu8omai478tWOBwVxc/nwG/8rEzd5wWqNm8Se5vzCsYH mpCTtFTMrU/SG+310NgniZqU4dzIT68oP+zrL01426Yz9VvuXbuCwAApOaMNh7ou LzZFHwZVOjz7Q95ZIY5kWZfvZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO9EwsYV uTS2RlQq5uuSJ9TXgqMJMB8GA1UdIwQYMBaAFBq2uueTq4qso7/WbGwpsK1RA/CQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTg5Ni9FMTIyNzI3Q0Y2 N0MxMUVEQTFDNTM5ODZDNEY5QUUwMi9HcmE2NTVPcmlxeWp2OVpzYkNtd3JWRUQ4 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dyYTY1NU9yaXF5anY5WnNiQ213clZFRDhKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTg5Ni9FMTIyNzI3Q0Y2N0MxMUVEQTFDNTM5ODZDNEY5QUUwMi9HcmE2NTVPcmlx eWp2OVpzYkNtd3JWRUQ4SkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRYZUi1pDrat2EsBgR6iB6QGvpzsyd6pzWxS/febR7ARkttrZnHyv9 RLzbpSS7v2SJdk1VOGU6HbTjxGUk1ey/gJJzof6hrZatTAgphJMaKbBmNYVkBw0z eta+dveKsUaF+iYnaBUVT5LJaI+NVB8yB7N71G94/HanOfsmqtet5RjCZPKP3Syz CvIHfXzs4sUq1JOXBq7hY46MTU+23QYCCfI+cTpxRVpcxTetqwQaEpDC1kz+u1y5 cNSIzDV7ErgfARbhp+JVbZzDl25hlSnddDp+uAYOLeuaW8yqmpr6G9QvyK6nNKDv bgrO4UOxttO5g+hTxsvtc41D/HyQu9Hq -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:25 2025 by rpki-client