$ rpki-client -vvf rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft File: gqdp3XRsgx9MTbKdamXeCNatle0.mft (raw, json) Hash identifier: vgfrJrMf/X3Qs0SmKOreyWRWjmL7o7v9tJQBbTZTcyc= Subject key identifier: A9:43:41:39:3F:54:FC:18:B2:39:D5:03:0F:AB:26:DA:88:84:38:5E Authority key identifier: 82:A7:69:DD:74:6C:83:1F:4C:4D:B2:9D:6A:65:DE:08:D6:AD:95:ED Certificate issuer: /CN=A91921AE/serialNumber=82A769DD746C831F4C4DB29D6A65DE08D6AD95ED Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft Manifest number: B4 Signing time: Wed 05 Nov 2025 06:19:36 +0000 Manifest this update: Wed 05 Nov 2025 06:19:36 +0000 Manifest next update: Wed 12 Nov 2025 06:19:36 +0000 Files and hashes: 1: gqdp3XRsgx9MTbKdamXeCNatle0.crl (hash: ywt2COmo1Dsn/+RymtBcxoS35ricvlWqo/53nA3k30k=) 2: DC76F25EBCFD11EFAF51D253C4F9AE02.roa (hash: C8NuyzBs3UmSDZIg9iKH9kFYPl+i5KIJP5qS3W6HBKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.crl rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91921AE, serialNumber=82A769DD746C831F4C4DB29D6A65DE08D6AD95ED Validity Not Before: Nov 5 06:19:36 2025 GMT Not After : Nov 12 06:19:36 2025 GMT Subject: CN=690aec78-9a06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ad:f4:c6:ee:b9:ad:97:1f:ec:bb:46:68:18: f4:15:a5:2e:7d:53:5b:19:0f:15:86:de:54:8b:58: 41:bc:77:4b:8d:95:01:34:e7:79:4e:72:99:8a:82: 08:71:fb:d4:4d:62:4e:45:76:21:a3:e5:53:53:b7: a2:a6:24:b3:82:8e:cc:c6:87:d8:1a:d8:41:d1:9b: 75:8a:82:ff:1b:a1:1a:7e:b8:43:0c:a5:7d:12:eb: cf:0e:e4:8a:3d:4b:d3:fd:0f:34:ed:92:3a:c4:2e: 17:38:cd:1b:5d:22:a9:0e:8f:c6:d2:f7:b4:0b:dd: 2b:3e:d0:45:ee:5c:66:e4:e7:c2:77:3f:1c:6a:3c: 00:75:ef:7d:a2:fe:35:2f:e8:0d:45:8d:d2:db:f7: 8e:ca:12:56:04:b3:74:e1:9e:de:d9:51:58:56:22: c2:64:5f:2e:03:9e:a6:ee:3b:62:4e:a8:4d:d4:1d: e8:cd:16:2b:85:af:91:ed:37:e9:e1:a0:5e:18:27: c0:f8:0c:86:05:98:1c:49:49:d5:63:75:7a:9d:76: 3f:34:64:ef:fe:41:d3:54:32:f5:e1:ab:30:f5:b2: 42:26:f5:2d:58:a0:1f:33:33:d3:65:67:c5:b9:54: a6:60:d9:da:7b:ad:15:f6:ad:83:3f:af:25:66:6e: 0d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:43:41:39:3F:54:FC:18:B2:39:D5:03:0F:AB:26:DA:88:84:38:5E X509v3 Authority Key Identifier: keyid:82:A7:69:DD:74:6C:83:1F:4C:4D:B2:9D:6A:65:DE:08:D6:AD:95:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:87:4b:bf:c8:7f:0e:e2:33:6b:2d:26:d1:e2:bd:26:16:1c: 68:57:11:b2:aa:a0:dd:9a:fc:34:97:32:c6:fd:e9:b2:7a:61: 7a:26:0f:d4:00:1b:f9:72:ce:2b:5c:9b:a0:07:dc:66:d4:2f: c0:fd:42:42:09:f8:91:c8:aa:49:bc:05:9b:3d:50:21:7a:ae: 1c:db:a4:2f:3d:11:e8:2c:9a:29:47:a4:66:1c:92:fe:50:83: 00:26:29:61:14:6c:c4:e1:ea:56:9d:eb:d6:44:08:d1:17:17: 65:d3:be:2c:fa:b8:55:74:cd:b5:23:66:1a:76:2b:29:a1:74: 04:64:31:97:ff:38:39:c8:ff:c3:9e:40:a8:b6:4c:8c:01:32: e6:9b:84:d6:d0:bb:b9:c6:49:fb:24:dc:9b:ac:6c:7d:38:ed: 65:8f:db:da:ca:af:3f:ca:2c:f0:76:98:34:ca:ec:94:a4:26: 36:fc:8a:25:d8:cf:8d:41:44:a8:12:67:ec:7d:d6:bc:3b:ae: 9f:06:b5:c7:5c:cf:4f:50:02:17:23:0c:6e:d8:14:ed:af:21: ab:7d:92:89:6f:2a:12:b2:1a:ce:54:92:3b:d4:39:11:3b:1b: ef:5c:09:c9:71:9c:55:4f:58:bf:61:21:3f:69:37:7e:e9:61: 99:b1:66:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTIxQUUxMTAvBgNVBAUTKDgyQTc2OURENzQ2QzgzMUY0QzREQjI5RDZBNjVERTA4 RDZBRDk1RUQwHhcNMjUxMTA1MDYxOTM2WhcNMjUxMTEyMDYxOTM2WjAYMRYwFAYD VQQDEw02OTBhZWM3OC05YTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAua30xu65rZcf7LtGaBj0FaUufVNbGQ8Vht5Ui1hBvHdLjZUBNOd5TnKZioII cfvUTWJORXYho+VTU7eipiSzgo7MxofYGthB0Zt1ioL/G6EafrhDDKV9EuvPDuSK PUvT/Q807ZI6xC4XOM0bXSKpDo/G0ve0C90rPtBF7lxm5OfCdz8cajwAde99ov41 L+gNRY3S2/eOyhJWBLN04Z7e2VFYViLCZF8uA56m7jtiTqhN1B3ozRYrha+R7Tfp 4aBeGCfA+AyGBZgcSUnVY3V6nXY/NGTv/kHTVDL14asw9bJCJvUtWKAfMzPTZWfF uVSmYNnae60V9q2DP68lZm4NPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKlDQTk/ VPwYsjnVAw+rJtqIhDheMB8GA1UdIwQYMBaAFIKnad10bIMfTE2ynWpl3gjWrZXt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjFBRS83NDkxMkIyQ0FD NzMxMUVGQTNDQkQxNEFDNEY5QUUwMi9ncWRwM1hSc2d4OU1UYktkYW1YZUNOYXRs ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dxZHAzWFJzZ3g5TVRiS2RhbVhlQ05hdGxlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjFBRS83NDkxMkIyQ0FDNzMxMUVGQTNDQkQxNEFDNEY5QUUwMi9ncWRwM1hSc2d4 OU1UYktkYW1YZUNOYXRsZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvh0u/yH8O4jNrLSbR4r0mFhxoVxGyqqDdmvw0lzLG/emyemF6Jg/U ABv5cs4rXJugB9xm1C/A/UJCCfiRyKpJvAWbPVAheq4c26QvPRHoLJopR6RmHJL+ UIMAJilhFGzE4epWnevWRAjRFxdl074s+rhVdM21I2YadispoXQEZDGX/zg5yP/D nkCotkyMATLmm4TW0Lu5xkn7JNybrGx9OO1lj9vayq8/yizwdpg0yuyUpCY2/Iol 2M+NQUSoEmfsfda8O66fBrXHXM9PUAIXIwxu2BTtryGrfZKJbyoSshrOVJI71DkR OxvvXAnJcZxVT1i/YSE/aTd+6WGZsWbg -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:38 2025 by rpki-client