$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft File: Soo5XlVsx_Garmqwav8GeUSVa0Y.mft (raw, json) Hash identifier: xngpEcCw0kaU45Wi1tu0Emvjo465sW7nTTLE020Fsao= Subject key identifier: D3:0D:DF:18:3A:FE:10:3C:3A:F2:7C:E5:DA:0E:00:22:76:67:9D:91 Authority key identifier: 4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46 Certificate issuer: /CN=A91CFD5A/serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46 Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft Manifest number: 0152 Signing time: Mon 03 Nov 2025 04:14:35 +0000 Manifest this update: Mon 03 Nov 2025 04:14:34 +0000 Manifest next update: Mon 10 Nov 2025 04:14:34 +0000 Files and hashes: 1: Soo5XlVsx_Garmqwav8GeUSVa0Y.crl (hash: v4KoGu2pp1czdSqT6lPKuo/mEZlltmXJnYUE3fFexzw=) 2: D60B1BCCB9AF11EE97EEDB49C4F9AE02.roa (hash: VWW3LG8bH56OHxKp9a6acMJUcTvLWrd2aS1b8cisvbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:14:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFD5A, serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46 Validity Not Before: Nov 3 04:14:34 2025 GMT Not After : Nov 10 04:14:34 2025 GMT Subject: CN=69082c2a-14ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:80:49:05:6f:2a:2d:a0:c6:36:88:6e:c4:47: ad:7b:95:af:ce:d5:92:f0:52:40:41:0e:f4:23:5b: 57:b5:e3:e1:a3:16:ea:08:8b:bb:ea:70:0c:9c:a0: 4b:87:d9:f9:ed:4d:23:f2:b2:74:0e:24:7b:bc:71: e4:60:e1:21:b5:b6:4a:62:e6:1e:0c:97:fe:72:b6: b3:1a:f0:c4:bd:c9:e3:97:ab:e1:84:09:0f:be:3d: 0a:7a:fb:2f:2f:86:87:91:43:8f:42:7c:bf:27:fa: e5:76:b0:b0:94:e9:0a:61:80:9f:ea:28:5e:b3:7e: 1f:33:f8:2d:18:c0:d8:95:16:88:80:a0:ac:9b:be: 2f:b8:f9:75:8e:fa:cb:ee:1d:12:1a:dd:45:7e:bb: d7:39:5f:e6:14:3f:81:73:5a:08:38:cb:38:26:29: 63:7c:8c:ed:42:95:b3:c9:a7:7d:8d:cd:a5:72:3b: 1e:30:7f:1c:ef:68:c0:5c:71:6d:a3:f7:da:c9:08: 82:83:47:32:3b:e8:8a:83:2f:6a:a6:be:81:a4:92: 44:62:02:6a:a3:ff:fb:a2:a5:c1:e3:3d:ee:39:0a: 2e:78:00:09:7a:4c:26:8d:22:2b:f8:b8:31:75:1e: 12:66:da:f6:93:4c:71:00:c2:e7:71:df:97:0d:d8: 48:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:0D:DF:18:3A:FE:10:3C:3A:F2:7C:E5:DA:0E:00:22:76:67:9D:91 X509v3 Authority Key Identifier: keyid:4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:c4:65:96:98:1f:3f:b9:e1:58:a7:40:d4:30:da:5b:b7:5b: 46:d1:8e:c4:8a:d4:90:ec:07:ec:ca:7e:2b:93:2d:44:09:69: 1c:ac:8e:26:e9:d0:a1:43:29:77:cb:bf:75:c3:c1:08:08:75: a0:5e:c6:97:80:be:98:0e:a2:cc:23:8d:1d:d6:9b:86:4e:49: 52:60:68:f2:3a:09:56:92:52:e8:7f:76:05:d0:bf:9a:26:d6: d4:cd:bb:c7:e2:a1:a5:3f:87:58:8a:cd:2c:7b:14:e3:2b:d1: c0:11:67:8d:2c:c2:f8:0e:3a:fa:d9:de:ad:77:10:c2:53:02: 33:a8:68:33:bd:ed:6a:80:52:91:6d:77:c4:bb:b4:db:91:ea: 99:a5:fe:d8:2e:a6:90:9d:06:8b:f6:0c:59:f9:82:a3:1f:56: 83:15:7a:a6:5c:f7:a2:54:d7:57:06:b9:c2:ee:b3:4c:6d:e1: 0a:3a:fd:24:de:35:d7:1c:a6:9c:48:9f:d3:90:30:68:6c:fe: 5f:3b:6c:4f:64:02:18:d9:08:3b:42:59:78:ea:97:c2:62:17: 55:87:62:90:b8:5b:df:86:d9:b3:11:37:b9:11:fe:8e:02:e3: a6:4a:c6:27:cd:0e:4b:b3:eb:bd:39:26:24:bf:9e:0d:94:93: 46:c3:e6:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZENUExMTAvBgNVBAUTKDRBOEEzOTVFNTU2Q0M3RjE5QUFFNkFCMDZBRkYwNjc5 NDQ5NTZCNDYwHhcNMjUxMTAzMDQxNDM0WhcNMjUxMTEwMDQxNDM0WjAYMRYwFAYD VQQDEw02OTA4MmMyYS0xNGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA44BJBW8qLaDGNohuxEete5WvztWS8FJAQQ70I1tXtePhoxbqCIu76nAMnKBL h9n57U0j8rJ0DiR7vHHkYOEhtbZKYuYeDJf+crazGvDEvcnjl6vhhAkPvj0Kevsv L4aHkUOPQny/J/rldrCwlOkKYYCf6ihes34fM/gtGMDYlRaIgKCsm74vuPl1jvrL 7h0SGt1FfrvXOV/mFD+Bc1oIOMs4JiljfIztQpWzyad9jc2lcjseMH8c72jAXHFt o/fayQiCg0cyO+iKgy9qpr6BpJJEYgJqo//7oqXB4z3uOQoueAAJekwmjSIr+Lgx dR4SZtr2k0xxAMLncd+XDdhIewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMN3xg6 /hA8OvJ85doOACJ2Z52RMB8GA1UdIwQYMBaAFEqKOV5VbMfxmq5qsGr/BnlElWtG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkQ1QS8yMzc1QjMwNkI5 NDUxMUVFQkI4MTg4MzRDNEY5QUUwMi9Tb281WGxWc3hfR2FybXF3YXY4R2VVU1Zh MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NvbzVYbFZzeF9HYXJtcXdhdjhHZVVTVmEwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkQ1QS8yMzc1QjMwNkI5NDUxMUVFQkI4MTg4MzRDNEY5QUUwMi9Tb281WGxWc3hf R2FybXF3YXY4R2VVU1ZhMFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9xGWWmB8/ueFYp0DUMNpbt1tG0Y7EitSQ7Afsyn4rky1ECWkcrI4m 6dChQyl3y791w8EICHWgXsaXgL6YDqLMI40d1puGTklSYGjyOglWklLof3YF0L+a JtbUzbvH4qGlP4dYis0sexTjK9HAEWeNLML4Djr62d6tdxDCUwIzqGgzve1qgFKR bXfEu7TbkeqZpf7YLqaQnQaL9gxZ+YKjH1aDFXqmXPeiVNdXBrnC7rNMbeEKOv0k 3jXXHKacSJ/TkDBobP5fO2xPZAIY2Qg7Qll46pfCYhdVh2KQuFvfhtmzETe5Ef6O AuOmSsYnzQ5Ls+u9OSYkv54NlJNGw+YK -----END CERTIFICATE-----Generated at Tue Nov 4 01:10:11 2025 by rpki-client