$ rpki-client -vvf rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft File: gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft (raw, json) Hash identifier: uvkSJDlEmjy8sl8g089iikHW6Qqk67/JG7IMwqPWK0E= Subject key identifier: 9E:A3:A2:06:C2:59:94:C1:AF:A3:A8:4C:A2:A7:23:D3:AB:21:AD:E9 Authority key identifier: 80:21:B1:6B:92:42:1F:77:B7:26:0E:97:E6:AD:8C:1D:24:BD:29:9A Certificate issuer: /CN=A91936BE/serialNumber=8021B16B92421F77B7260E97E6AD8C1D24BD299A Certificate serial: 085E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft Manifest number: 0851 Signing time: Tue 04 Nov 2025 21:10:18 +0000 Manifest this update: Tue 04 Nov 2025 21:10:18 +0000 Manifest next update: Tue 11 Nov 2025 21:10:18 +0000 Files and hashes: 1: gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl (hash: b2GRU8ssU/B6Z2e8Lcg4AA47nFFCYbX0AFaHkIQ/IJY=) 2: 538866F6E44B11EAA31DD984C4F9AE02.roa (hash: bESggwBVi2r8+ztWK2qOS9Hu8xH3ds99tl1f1AVVNNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:10:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2142 (0x85e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91936BE, serialNumber=8021B16B92421F77B7260E97E6AD8C1D24BD299A Validity Not Before: Nov 4 21:10:18 2025 GMT Not After : Nov 11 21:10:18 2025 GMT Subject: CN=690a6bba-1f1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b9:73:79:a3:bc:62:c3:43:3f:c8:a1:fe:e0: be:4e:aa:32:14:20:cc:81:89:ed:fd:03:af:ee:0a: 46:cf:56:86:f2:00:94:23:ab:65:ab:0f:03:fb:5d: b0:c6:5a:3b:d0:f8:4b:9c:17:08:07:aa:51:9b:f6: 53:f3:77:1b:08:ed:b3:5c:fa:f0:cc:db:b2:f7:d5: 3a:75:92:41:39:7e:3c:1f:c9:c7:ba:7b:49:06:59: e2:23:f0:36:9b:30:90:68:d8:46:d1:1c:8a:43:3d: 0d:f6:be:6c:b8:5d:e9:27:29:b1:4d:62:b9:dd:e8: e9:9c:77:97:b0:0a:0a:79:a8:f0:47:74:b8:e7:d0: bd:82:99:08:21:89:78:73:21:48:1d:80:b1:75:34: 1d:9a:00:4a:f9:71:ad:83:46:b8:2b:be:82:bd:94: 91:f4:b2:da:7e:cb:1c:b9:53:a5:67:13:8e:c5:ce: 0d:84:08:21:ab:a9:ca:93:b0:9c:26:7c:b7:97:83: 92:be:97:57:3b:ac:51:ba:be:85:1b:e2:5f:85:3c: 8e:ac:c2:d6:49:de:9b:1b:a0:3e:0b:a0:84:77:b7: 87:9d:4e:2a:44:70:35:86:be:76:8e:1b:b9:9e:ec: 93:24:40:fb:1e:38:8b:f1:90:91:45:54:0f:94:29: 77:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A3:A2:06:C2:59:94:C1:AF:A3:A8:4C:A2:A7:23:D3:AB:21:AD:E9 X509v3 Authority Key Identifier: keyid:80:21:B1:6B:92:42:1F:77:B7:26:0E:97:E6:AD:8C:1D:24:BD:29:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:15:a7:ab:d9:1b:13:cb:d3:9d:62:a0:c0:42:80:fd:de:44: 7b:99:9f:3e:92:43:29:e7:fc:c8:24:1c:52:56:bc:9a:16:48: 4d:f7:cb:6d:85:57:73:bb:18:a8:cd:09:30:ca:f9:02:77:7b: 40:94:b9:9f:3d:da:3d:89:a8:25:65:35:ce:13:59:4d:d1:1e: 02:d7:0d:cd:f1:2d:39:34:8f:1d:e7:18:92:c5:73:94:a5:96: 49:77:bd:51:a5:07:08:ba:82:87:6a:4d:2f:1c:23:83:00:70: 5a:12:3c:a8:7a:b1:4f:c6:91:dd:21:05:55:19:a2:0f:62:ab: 5f:0e:22:69:94:f3:0c:59:35:ab:e9:29:f9:c2:7f:d8:aa:39: 6a:11:84:1e:9d:b5:66:e5:50:18:bb:d1:26:00:7f:44:f1:60: 7b:b7:fa:8f:df:03:ac:1a:0f:31:22:84:ec:24:bb:76:c7:62: 8e:36:5b:96:51:a4:b6:fe:4a:f4:d1:70:1b:86:36:22:48:60: 38:f6:fd:4e:aa:e3:dc:86:0e:13:60:be:80:62:e4:0c:5c:65: 58:38:dd:8c:42:81:b4:e8:69:9b:76:85:82:0a:c6:78:dc:f2: fc:a2:88:c5:17:3a:e5:47:db:95:3e:d7:13:1c:50:90:c9:6c: 2b:2a:10:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM2QkUxMTAvBgNVBAUTKDgwMjFCMTZCOTI0MjFGNzdCNzI2MEU5N0U2QUQ4QzFE MjRCRDI5OUEwHhcNMjUxMTA0MjExMDE4WhcNMjUxMTExMjExMDE4WjAYMRYwFAYD VQQDEw02OTBhNmJiYS0xZjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArblzeaO8YsNDP8ih/uC+TqoyFCDMgYnt/QOv7gpGz1aG8gCUI6tlqw8D+12w xlo70PhLnBcIB6pRm/ZT83cbCO2zXPrwzNuy99U6dZJBOX48H8nHuntJBlniI/A2 mzCQaNhG0RyKQz0N9r5suF3pJymxTWK53ejpnHeXsAoKeajwR3S459C9gpkIIYl4 cyFIHYCxdTQdmgBK+XGtg0a4K76CvZSR9LLafsscuVOlZxOOxc4NhAghq6nKk7Cc Jny3l4OSvpdXO6xRur6FG+JfhTyOrMLWSd6bG6A+C6CEd7eHnU4qRHA1hr52jhu5 nuyTJED7HjiL8ZCRRVQPlCl3KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6jogbC WZTBr6OoTKKnI9OrIa3pMB8GA1UdIwQYMBaAFIAhsWuSQh93tyYOl+atjB0kvSma MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzZCRS9DQTA2NjY4Q0U0 NDgxMUVBODEwQjAzODBDNEY5QUUwMi9nQ0d4YTVKQ0gzZTNKZzZYNXEyTUhTUzlL Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDR3hhNUpDSDNlM0pnNlg1cTJNSFNTOUtaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzZCRS9DQTA2NjY4Q0U0NDgxMUVBODEwQjAzODBDNEY5QUUwMi9nQ0d4YTVKQ0gz ZTNKZzZYNXEyTUhTUzlLWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6Faer2RsTy9OdYqDAQoD93kR7mZ8+kkMp5/zIJBxSVryaFkhN98tt hVdzuxiozQkwyvkCd3tAlLmfPdo9iaglZTXOE1lN0R4C1w3N8S05NI8d5xiSxXOU pZZJd71RpQcIuoKHak0vHCODAHBaEjyoerFPxpHdIQVVGaIPYqtfDiJplPMMWTWr 6Sn5wn/YqjlqEYQenbVm5VAYu9EmAH9E8WB7t/qP3wOsGg8xIoTsJLt2x2KONluW UaS2/kr00XAbhjYiSGA49v1OquPchg4TYL6AYuQMXGVYON2MQoG06GmbdoWCCsZ4 3PL8oojFFzrlR9uVPtcTHFCQyWwrKhBl -----END CERTIFICATE-----Generated at Wed Nov 5 08:10:08 2025 by rpki-client