$ rpki-client -vvf rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft File: 509GTECGWe0lidtmTOjvamxgDEc.mft (raw, json) Hash identifier: AV2u0ogiznCbGrjU3GGJoxf4zMuamvlJEhm5AIuHvjc= Subject key identifier: 21:BA:19:32:66:67:3C:DE:A8:9D:06:13:C8:0B:FE:54:11:FE:33:29 Authority key identifier: E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47 Certificate issuer: /CN=A91A06F2/serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47 Certificate serial: 0B7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft Manifest number: 0B6F Signing time: Sun 02 Nov 2025 19:04:29 +0000 Manifest this update: Sun 02 Nov 2025 19:04:28 +0000 Manifest next update: Sun 09 Nov 2025 19:04:28 +0000 Files and hashes: 1: 509GTECGWe0lidtmTOjvamxgDEc.crl (hash: IYkKYA6VDe92G+axNV9D5fd8eWJELLsC/eHPSVylKoA=) 2: 3BFE8CEC3F4911EAA91D9A7FC4F9AE02.roa (hash: PAA4OxtlazOKwYLjk6aLytCy9NItnRL8j4f8o3mJBHg=) 3: 8B37D2C40D2511EFA2E4D985C4F9AE02.roa (hash: a+Zi9iESugqvqoTYb4WkQmUuVNUV8p+uqNbSEtnaZ8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:04:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2940 (0xb7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A06F2, serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47 Validity Not Before: Nov 2 19:04:28 2025 GMT Not After : Nov 9 19:04:28 2025 GMT Subject: CN=6907ab3d-4bcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:34:93:43:ac:38:f4:00:05:ff:a7:cf:9e:f3: d4:f3:7c:65:df:d7:d7:cb:d5:bb:f6:2b:ae:ca:53: d6:6c:8f:42:76:d4:b9:ad:ff:a1:7e:c2:09:55:74: 78:ed:2f:7c:09:90:cd:cb:42:6d:df:11:20:06:1a: d0:fd:99:7c:20:30:87:24:9b:61:e8:35:a2:05:58: a2:8e:39:16:a2:e2:c7:e3:ef:52:51:4e:cd:75:e6: d6:af:db:7a:51:5f:20:46:4e:21:43:1b:0e:16:7a: 9a:1a:38:63:d1:94:9b:a1:29:00:26:4c:b4:65:84: 06:87:f7:f8:e7:f9:a4:8e:1e:2f:1d:a1:c3:13:91: e0:3a:39:13:67:97:98:f7:0c:ab:2d:93:d5:21:38: 46:5d:1a:cf:be:d2:76:62:57:72:e9:e2:a4:51:65: 92:8d:f9:83:6d:1a:33:55:9a:6e:ce:93:fb:a3:eb: 59:c8:ea:9f:a3:af:27:5a:59:2a:d4:2a:ec:be:cd: f0:7b:8d:58:6f:16:a4:19:63:c0:2e:c5:4c:f6:e4: 02:2f:53:35:3e:62:bf:5d:e2:3a:be:c0:c0:8f:e2: 80:1c:b8:17:f7:9d:4b:17:b9:5b:c8:7e:e8:2f:74: f7:96:c5:ee:5c:e8:85:a3:01:78:e4:41:60:5f:97: 09:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:BA:19:32:66:67:3C:DE:A8:9D:06:13:C8:0B:FE:54:11:FE:33:29 X509v3 Authority Key Identifier: keyid:E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:2b:2a:38:9e:48:fd:03:e9:08:04:5b:45:24:72:2c:d2:29: f3:39:57:c6:cf:5f:46:66:37:68:e4:14:6a:32:65:ba:40:43: 70:9b:ed:e2:10:85:26:5c:45:06:89:20:96:39:0e:a0:71:cb: 39:0f:3d:0c:11:14:ac:0d:cd:15:ef:ce:60:ab:5b:e5:36:dc: 7e:9f:be:0c:e8:f1:5f:e5:3a:53:cd:a2:41:f7:98:f6:9c:01: f0:cb:04:28:b9:2f:05:0d:a1:93:f8:18:0e:4e:f3:a4:59:66: ca:b3:7c:c8:bc:75:50:be:64:1d:5b:50:46:d8:73:c4:48:e9: 55:6b:77:07:20:05:94:53:b1:08:56:3e:22:4d:49:bd:d0:5b: 5b:3d:d1:3a:e5:44:6c:cb:ba:ce:2b:a6:4e:39:1f:28:f6:be: e2:16:17:9b:b8:04:59:d1:ee:e9:4c:9a:97:c8:6e:85:19:04: 50:4b:d1:d6:d6:66:63:7f:53:4b:d5:5d:ed:27:90:85:08:92: d5:c0:60:b5:d7:82:22:95:8e:07:1a:31:98:2a:55:88:71:90: 0c:d5:f8:b0:c8:c7:e9:05:f1:f3:a6:cd:4b:ec:e5:3c:70:c5: f5:f4:3e:b4:a4:3e:33:8d:06:c7:d1:91:73:9d:25:60:3b:8d: b4:e9:0d:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA2RjIxMTAvBgNVBAUTKEU3NEY0NjRDNDA4NjU5RUQyNTg5REI2NjRDRThFRjZB NkM2MDBDNDcwHhcNMjUxMTAyMTkwNDI4WhcNMjUxMTA5MTkwNDI4WjAYMRYwFAYD VQQDEw02OTA3YWIzZC00YmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1jSTQ6w49AAF/6fPnvPU83xl39fXy9W79iuuylPWbI9CdtS5rf+hfsIJVXR4 7S98CZDNy0Jt3xEgBhrQ/Zl8IDCHJJth6DWiBViijjkWouLH4+9SUU7NdebWr9t6 UV8gRk4hQxsOFnqaGjhj0ZSboSkAJky0ZYQGh/f45/mkjh4vHaHDE5HgOjkTZ5eY 9wyrLZPVIThGXRrPvtJ2Yldy6eKkUWWSjfmDbRozVZpuzpP7o+tZyOqfo68nWlkq 1Crsvs3we41YbxakGWPALsVM9uQCL1M1PmK/XeI6vsDAj+KAHLgX951LF7lbyH7o L3T3lsXuXOiFowF45EFgX5cJqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCG6GTJm ZzzeqJ0GE8gL/lQR/jMpMB8GA1UdIwQYMBaAFOdPRkxAhlntJYnbZkzo72psYAxH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDZGMi84QjhDNEREMjNG NDcxMUVBOEU1REE4N0NDNEY5QUUwMi81MDlHVEVDR1dlMGxpZHRtVE9qdmFteGdE RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUwOUdURUNHV2UwbGlkdG1UT2p2YW14Z0RFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDZGMi84QjhDNEREMjNGNDcxMUVBOEU1REE4N0NDNEY5QUUwMi81MDlHVEVDR1dl MGxpZHRtVE9qdmFteGdERWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSKyo4nkj9A+kIBFtFJHIs0inzOVfGz19GZjdo5BRqMmW6QENwm+3i EIUmXEUGiSCWOQ6gccs5Dz0MERSsDc0V785gq1vlNtx+n74M6PFf5TpTzaJB95j2 nAHwywQouS8FDaGT+BgOTvOkWWbKs3zIvHVQvmQdW1BG2HPESOlVa3cHIAWUU7EI Vj4iTUm90FtbPdE65URsy7rOK6ZOOR8o9r7iFhebuARZ0e7pTJqXyG6FGQRQS9HW 1mZjf1NL1V3tJ5CFCJLVwGC114IilY4HGjGYKlWIcZAM1fiwyMfpBfHzps1L7OU8 cMX19D60pD4zjQbH0ZFznSVgO4206Q0D -----END CERTIFICATE-----Generated at Tue Nov 4 01:03:48 2025 by rpki-client