$ rpki-client -vvf rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft File: gSxjWrgxJmFeyTROfsbpAu2safU.mft (raw, json) Hash identifier: daF3JcaI8tMVCmqaT5uEflR0vWntAcGO+8l1wP14h3I= Subject key identifier: 4E:C4:D9:8A:7B:EF:A4:73:81:CC:2C:3B:DD:E1:12:F2:42:D0:02:B1 Authority key identifier: 81:2C:63:5A:B8:31:26:61:5E:C9:34:4E:7E:C6:E9:02:ED:AC:69:F5 Certificate issuer: /CN=A9185F82/serialNumber=812C635AB83126615EC9344E7EC6E902EDAC69F5 Certificate serial: 06E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft Manifest number: 06D9 Signing time: Sun 02 Nov 2025 21:59:44 +0000 Manifest this update: Sun 02 Nov 2025 21:59:44 +0000 Manifest next update: Sun 09 Nov 2025 21:59:44 +0000 Files and hashes: 1: gSxjWrgxJmFeyTROfsbpAu2safU.crl (hash: r1OIvWNT1VZJ3YV8We3nGDgoHCOF4PS6Ry5knCE17pk=) 2: 52EF768073C511EB98AF9867C4F9AE02.roa (hash: 4w/uXYfZSRmzJc52RjrImrLh+EqtuXeWbymI1Ev9aJY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.crl rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1761 (0x6e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185F82, serialNumber=812C635AB83126615EC9344E7EC6E902EDAC69F5 Validity Not Before: Nov 2 21:59:44 2025 GMT Not After : Nov 9 21:59:44 2025 GMT Subject: CN=6907d450-1832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b9:0f:15:da:49:cd:03:ba:e8:54:4e:7a:ea: 9a:fd:8b:fd:f3:e9:4d:91:85:59:8d:d4:75:6c:6f: 17:3c:f4:cc:60:a5:5c:b8:52:d9:8b:7f:4b:25:15: 97:dd:b5:b3:5d:96:b2:11:dd:13:e0:c6:41:7f:33: 48:61:6a:f3:2e:c8:0c:26:00:eb:b1:18:44:91:86: 8c:09:61:d4:41:4f:88:a4:ce:10:d9:b5:be:57:8c: cc:8a:2f:4f:74:75:e3:37:21:36:6f:c2:6a:48:72: b6:e3:84:8d:01:07:a3:d3:69:8a:9f:db:4d:6c:af: ec:3a:08:65:1a:ec:f4:c5:22:f1:62:a9:16:a7:26: 80:19:79:1d:e5:d1:4a:71:5f:a6:e0:78:38:a8:0c: 4e:bf:6f:6c:03:6c:8f:b6:fc:3e:7f:8d:89:55:c1: 96:38:45:38:79:ac:64:b3:74:c4:14:c5:b0:63:72: 5b:6c:1a:9a:51:ac:53:12:f8:6c:77:77:5d:5d:1c: ad:92:c8:ea:61:25:cc:44:1f:da:69:46:72:6a:bb: 46:e1:d5:b7:6a:dc:b7:16:12:0c:78:90:de:e8:b5: 73:13:54:75:c0:13:25:f6:3c:89:38:67:d1:e7:64: b2:62:0e:f5:0c:19:61:19:20:c7:37:45:b8:83:68: b3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C4:D9:8A:7B:EF:A4:73:81:CC:2C:3B:DD:E1:12:F2:42:D0:02:B1 X509v3 Authority Key Identifier: keyid:81:2C:63:5A:B8:31:26:61:5E:C9:34:4E:7E:C6:E9:02:ED:AC:69:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:9b:36:91:46:8e:f1:c6:07:24:b3:78:bc:0c:a4:d4:a2:b7: 65:c7:ef:a2:66:f6:90:25:6e:bd:07:58:0c:6c:ec:82:85:a7: 0f:34:ac:cc:1c:66:b6:dd:a6:43:44:8d:23:80:80:66:eb:36: 9f:97:2e:0b:b0:5b:89:44:02:f1:c4:df:41:2d:30:5c:56:f8: fa:36:a2:bc:21:b2:e5:12:0f:bb:47:dc:c5:a9:de:19:23:35: df:f7:3b:9c:15:76:c0:f9:2b:7b:cd:3b:fd:3a:a9:2c:98:dc: f5:f0:ec:c3:95:92:d6:68:cc:9a:09:7c:bd:80:41:e5:9b:8c: 11:c3:65:b9:c9:6f:cc:5c:07:56:f4:00:eb:14:1b:2a:46:6e: f0:dc:75:74:cf:90:ef:63:93:54:eb:9b:62:57:02:12:4f:b5: 0f:13:1a:9d:b0:21:64:75:78:75:17:60:dc:35:62:12:2d:be: 80:94:d7:1c:d4:2c:17:07:df:35:ec:b0:af:07:5c:29:5e:7f: 9e:a1:18:b2:bc:f4:e3:ec:60:74:74:a9:ae:03:17:73:a5:23: 15:66:f7:e4:50:4d:1d:7c:f3:f3:a9:3c:60:19:4c:90:50:f6: c0:8c:24:1d:d6:7b:32:50:2b:82:a9:5c:e2:d1:00:7d:3b:99: 90:38:cb:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVGODIxMTAvBgNVBAUTKDgxMkM2MzVBQjgzMTI2NjE1RUM5MzQ0RTdFQzZFOTAy RURBQzY5RjUwHhcNMjUxMTAyMjE1OTQ0WhcNMjUxMTA5MjE1OTQ0WjAYMRYwFAYD VQQDEw02OTA3ZDQ1MC0xODMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtrkPFdpJzQO66FROeuqa/Yv98+lNkYVZjdR1bG8XPPTMYKVcuFLZi39LJRWX 3bWzXZayEd0T4MZBfzNIYWrzLsgMJgDrsRhEkYaMCWHUQU+IpM4Q2bW+V4zMii9P dHXjNyE2b8JqSHK244SNAQej02mKn9tNbK/sOghlGuz0xSLxYqkWpyaAGXkd5dFK cV+m4Hg4qAxOv29sA2yPtvw+f42JVcGWOEU4eaxks3TEFMWwY3JbbBqaUaxTEvhs d3ddXRytksjqYSXMRB/aaUZyartG4dW3aty3FhIMeJDe6LVzE1R1wBMl9jyJOGfR 52SyYg71DBlhGSDHN0W4g2izWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7E2Yp7 76RzgcwsO93hEvJC0AKxMB8GA1UdIwQYMBaAFIEsY1q4MSZhXsk0Tn7G6QLtrGn1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUY4Mi80MDkxQkM3MDcz QzMxMUVCQjgzOUU2NjRDNEY5QUUwMi9nU3hqV3JneEptRmV5VFJPZnNicEF1MnNh ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dTeGpXcmd4Sm1GZXlUUk9mc2JwQXUyc2FmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUY4Mi80MDkxQkM3MDczQzMxMUVCQjgzOUU2NjRDNEY5QUUwMi9nU3hqV3JneEpt RmV5VFJPZnNicEF1MnNhZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACmzaRRo7xxgcks3i8DKTUordlx++iZvaQJW69B1gMbOyChacPNKzM HGa23aZDRI0jgIBm6zafly4LsFuJRALxxN9BLTBcVvj6NqK8IbLlEg+7R9zFqd4Z IzXf9zucFXbA+St7zTv9OqksmNz18OzDlZLWaMyaCXy9gEHlm4wRw2W5yW/MXAdW 9ADrFBsqRm7w3HV0z5DvY5NU65tiVwIST7UPExqdsCFkdXh1F2DcNWISLb6AlNcc 1CwXB9817LCvB1wpXn+eoRiyvPTj7GB0dKmuAxdzpSMVZvfkUE0dfPPzqTxgGUyQ UPbAjCQd1nsyUCuCqVzi0QB9O5mQOMsY -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:01 2025 by rpki-client