$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft File: G0cdrc2RIJM1E26s9syYiChlSyo.mft (raw, json) Hash identifier: xdqU5Dj4JB+VTcfsqAdxjVDTu68Gei/+XwZKDEL2mAQ= Subject key identifier: 1B:8D:3B:D4:32:C8:A0:D5:85:C4:5D:C0:76:A1:4E:2D:78:06:80:D5 Authority key identifier: 1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A Certificate issuer: /CN=A91C9606/serialNumber=1B471DADCD91209335136EACF6CC988828654B2A Certificate serial: 0D7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft Manifest number: 0D66 Signing time: Fri 31 Oct 2025 18:08:26 +0000 Manifest this update: Fri 31 Oct 2025 18:08:26 +0000 Manifest next update: Fri 07 Nov 2025 18:08:26 +0000 Files and hashes: 1: G0cdrc2RIJM1E26s9syYiChlSyo.crl (hash: //p0pXv08hoHCVRSqQvlCX9d1o3ZnLFZ65H+bqMrFSo=) 2: 06370CB2DB9211E9B70EDD2EC4F9AE02.roa (hash: tiA64s/MRKlR1BkumxbFlRLnmMmyLTM+IqS1j/mgdbk=) 3: 7A9CD75E23E311F0BB28EA29C4F9AE02.roa (hash: yftNfagXlQP7kWCYM4or16TNugYWxYDf4262IfQW/IU=) 4: 645EF9CADB9311E988E56C33C4F9AE02.roa (hash: 9JHcHgmG+w7bGvnU6/Eo85gv0xWCdlnreQQjOwseAsk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 18:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3450 (0xd7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9606, serialNumber=1B471DADCD91209335136EACF6CC988828654B2A Validity Not Before: Oct 31 18:08:26 2025 GMT Not After : Nov 7 18:08:26 2025 GMT Subject: CN=6904fb1a-d172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2a:a2:3d:2b:7c:3d:e6:50:ed:77:bb:60:d3: 7e:de:89:02:7a:72:49:6b:98:57:2b:a2:6a:2c:d1: 06:65:23:dd:53:73:a0:ba:63:a7:af:c3:6f:04:0a: d0:25:cf:eb:be:b0:48:e0:94:4a:7f:0d:fc:54:ba: fa:70:74:1c:1b:3c:61:85:d2:7a:25:d6:8a:4a:9a: 14:bc:6a:f7:6b:23:23:64:e9:d3:d4:b1:d1:b6:9c: e7:c4:44:3e:b9:0b:81:79:33:26:b9:7d:9d:b0:ad: 81:8e:2d:1f:f6:14:b5:01:6f:31:14:d5:ea:95:dc: 02:ad:fc:8f:09:dd:88:44:5a:6a:8f:68:1d:8e:1b: 74:8c:45:b4:54:e7:cf:45:c8:e0:b1:77:2b:8d:64: f5:ab:5f:f4:ce:e8:ef:93:17:35:ff:c5:d0:a5:9d: 13:94:7f:e4:a4:b1:1e:3b:5b:ef:e0:1f:89:32:4e: d4:ad:b2:c4:9a:d1:f8:3f:d1:0e:a5:92:84:0c:6d: be:f9:47:bc:05:b6:2b:23:0b:0b:be:d4:e7:78:1a: ea:c7:53:af:41:01:4b:4e:e4:6d:60:1c:a3:dc:5e: c0:76:7b:66:9a:01:90:44:d2:0b:6a:9d:26:2e:29: cf:fe:ac:a3:9c:e3:4d:aa:9c:93:d8:79:d7:1a:92: 43:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:8D:3B:D4:32:C8:A0:D5:85:C4:5D:C0:76:A1:4E:2D:78:06:80:D5 X509v3 Authority Key Identifier: keyid:1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:31:bc:65:51:49:da:e7:b9:22:c2:73:2f:75:7f:da:6c:30: d5:18:c9:2e:03:6f:28:27:4b:b2:c4:17:ca:0d:02:e7:52:56: 30:1c:51:05:43:7c:a4:60:82:0c:35:8c:e3:bf:5e:d3:58:a4: 25:36:17:d7:30:7c:f4:61:d0:e2:e4:0e:ac:74:be:e5:9c:bc: 86:aa:49:05:18:c0:9e:90:79:54:47:ad:ec:04:af:9d:e0:7f: 8c:bb:87:73:71:0b:e5:8c:9d:3e:3e:2a:44:20:c9:5b:39:ab: 76:3d:d2:6b:82:48:4e:1e:ff:64:b3:ea:1c:c0:e7:a9:cc:82: 5d:dd:48:6c:e0:81:c1:3a:c6:4a:2a:fa:fe:2d:6f:49:61:87: 92:ea:ac:43:d1:a3:e6:60:e5:9a:82:f3:8d:1c:b2:f8:05:33: 47:b2:b1:d8:dd:2c:c0:07:ae:aa:1a:62:95:c9:77:ea:b3:cd: d7:58:f7:2c:a1:86:74:44:71:01:39:8a:c3:cc:5e:3e:32:a3: b1:96:68:d4:ca:47:e8:29:62:e4:bf:d8:4a:69:86:70:fe:b3: cd:6f:eb:3c:02:27:44:23:cf:fb:07:f7:28:8f:2b:da:fb:31: 1a:7a:2b:72:88:7b:00:76:3f:9a:fc:ac:aa:fb:96:7e:e5:ae: ce:a0:e8:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk2MDYxMTAvBgNVBAUTKDFCNDcxREFEQ0Q5MTIwOTMzNTEzNkVBQ0Y2Q0M5ODg4 Mjg2NTRCMkEwHhcNMjUxMDMxMTgwODI2WhcNMjUxMTA3MTgwODI2WjAYMRYwFAYD VQQDEw02OTA0ZmIxYS1kMTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnyqiPSt8PeZQ7Xe7YNN+3okCenJJa5hXK6JqLNEGZSPdU3OgumOnr8NvBArQ Jc/rvrBI4JRKfw38VLr6cHQcGzxhhdJ6JdaKSpoUvGr3ayMjZOnT1LHRtpznxEQ+ uQuBeTMmuX2dsK2Bji0f9hS1AW8xFNXqldwCrfyPCd2IRFpqj2gdjht0jEW0VOfP RcjgsXcrjWT1q1/0zujvkxc1/8XQpZ0TlH/kpLEeO1vv4B+JMk7UrbLEmtH4P9EO pZKEDG2++Ue8BbYrIwsLvtTneBrqx1OvQQFLTuRtYByj3F7AdntmmgGQRNILap0m LinP/qyjnONNqpyT2HnXGpJDZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBuNO9Qy yKDVhcRdwHahTi14BoDVMB8GA1UdIwQYMBaAFBtHHa3NkSCTNRNurPbMmIgoZUsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTYwNi85QzlGOUY5QURC OTAxMUU5QTNDMTJGMkNDNEY5QUUwMi9HMGNkcmMyUklKTTFFMjZzOXN5WWlDaGxT eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cwY2RyYzJSSUpNMUUyNnM5c3lZaUNobFN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTYwNi85QzlGOUY5QURCOTAxMUU5QTNDMTJGMkNDNEY5QUUwMi9HMGNkcmMyUklK TTFFMjZzOXN5WWlDaGxTeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJMbxlUUna57kiwnMvdX/abDDVGMkuA28oJ0uyxBfKDQLnUlYwHFEF Q3ykYIIMNYzjv17TWKQlNhfXMHz0YdDi5A6sdL7lnLyGqkkFGMCekHlUR63sBK+d 4H+Mu4dzcQvljJ0+PipEIMlbOat2PdJrgkhOHv9ks+ocwOepzIJd3Uhs4IHBOsZK Kvr+LW9JYYeS6qxD0aPmYOWagvONHLL4BTNHsrHY3SzAB66qGmKVyXfqs83XWPcs oYZ0RHEBOYrDzF4+MqOxlmjUykfoKWLkv9hKaYZw/rPNb+s8AidEI8/7B/cojyva +zEaeityiHsAdj+a/Kyq+5Z+5a7OoOhJ -----END CERTIFICATE-----Generated at Sat Nov 1 14:44:19 2025 by rpki-client