$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft File: anyGILARkTWk4pZxECAuepIQ_XY.mft (raw, json) Hash identifier: D69/rKYzwV5SgjfjUlkLCg36rQzdfZs437JwZ2WdXIQ= Subject key identifier: 7F:56:B7:88:06:69:57:AD:DA:D3:F6:16:DB:8C:33:C6:6D:8A:51:F7 Authority key identifier: 6A:7C:86:20:B0:11:91:35:A4:E2:96:71:10:20:2E:7A:92:10:FD:76 Certificate issuer: /CN=A91D2659/serialNumber=6A7C8620B0119135A4E2967110202E7A9210FD76 Certificate serial: 0D01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft Manifest number: 0CFA Signing time: Sun 02 Nov 2025 18:03:52 +0000 Manifest this update: Sun 02 Nov 2025 18:03:51 +0000 Manifest next update: Sun 09 Nov 2025 18:03:51 +0000 Files and hashes: 1: anyGILARkTWk4pZxECAuepIQ_XY.crl (hash: UCgcaS/hcH4zZHsqgldLC/6d5LUuQoiLJJeiJFYhmsc=) 2: 3ED2E738F0C511E9AD7DCC11C4F9AE02.roa (hash: Wr1nIVXklBpPXHRfvPiRNdEC8EzroDNqpMylbn6Uxs4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.crl rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:03:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3329 (0xd01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2659, serialNumber=6A7C8620B0119135A4E2967110202E7A9210FD76 Validity Not Before: Nov 2 18:03:51 2025 GMT Not After : Nov 9 18:03:51 2025 GMT Subject: CN=69079d07-f86f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8d:6a:fe:ec:78:a0:ae:10:92:ef:b6:c8:f7: ed:c7:31:9d:01:5a:38:96:46:4a:fa:32:25:d7:4f: eb:a8:51:62:f2:23:36:4b:76:96:40:71:2b:1f:f0: 0f:e1:11:ce:3d:82:a2:f4:72:e2:35:12:1e:67:3b: ab:3f:68:a3:0e:79:b0:dc:c6:e9:da:d9:bd:bf:2a: 8d:55:a5:2e:1e:7b:6d:cf:17:2b:65:71:9d:d9:d1: 92:bd:3a:bd:88:9b:6f:63:b4:bf:b7:d9:90:42:d2: 07:2e:43:7c:4c:70:3e:b1:67:43:ea:36:59:dc:fd: 0a:f0:10:e8:49:af:6e:98:ac:99:80:d5:62:c1:08: e6:79:16:67:8a:08:68:9c:c7:ef:ac:ac:01:94:01: fa:a2:c1:43:29:b1:d2:8d:b3:a1:0f:35:66:5d:74: f2:59:77:58:78:f0:95:3d:71:14:8e:3d:3f:96:37: 2a:3f:fa:6d:48:df:c2:14:63:72:e6:ac:61:9e:ca: 3a:fc:e5:c4:1e:7e:17:58:be:4f:94:cd:90:52:4a: 9e:57:d4:93:b6:91:bb:85:5d:46:53:f9:70:63:08: 4b:c3:ba:06:e0:3d:08:a1:cf:84:27:4a:a5:70:06: 3e:90:be:b9:82:87:b0:c1:4e:60:40:1d:37:bb:57: 47:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:56:B7:88:06:69:57:AD:DA:D3:F6:16:DB:8C:33:C6:6D:8A:51:F7 X509v3 Authority Key Identifier: keyid:6A:7C:86:20:B0:11:91:35:A4:E2:96:71:10:20:2E:7A:92:10:FD:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:60:63:3a:ae:9f:e3:8c:97:2e:e8:8d:0b:76:f9:bd:8d:3e: b7:c4:57:7c:4a:97:4b:96:04:aa:8e:53:cd:d7:a6:8c:b7:d1: 4d:73:99:b0:3b:e7:84:15:27:05:4a:51:07:65:64:b2:6b:b2: 5e:ab:9b:ec:80:cb:66:c4:e8:42:48:f9:37:6b:d7:95:18:c6: 24:a5:cd:c5:27:da:96:ff:c0:41:58:bc:67:e8:cf:69:2f:2a: bf:48:a3:10:78:c9:4c:19:2b:f7:17:5b:bd:16:83:95:47:7b: 48:a5:5f:e6:ec:83:74:9a:42:31:3e:7b:8d:0b:1d:ee:56:29: 54:0c:11:ab:34:30:a7:45:63:9f:db:3b:e1:81:e9:2d:83:ad: 3f:96:cb:59:7e:11:ff:b2:4d:91:3a:00:6f:79:a8:4e:ca:24: 2c:cd:e2:99:95:05:e7:fa:94:87:b7:2c:06:c0:3c:a1:ea:27: 6f:08:f7:68:69:2d:78:73:2c:e4:ca:25:e5:cc:54:3a:e8:ae: a6:ea:d4:5d:dd:2e:9c:26:c6:79:84:59:f1:8f:8b:a0:11:c5: 45:e7:61:3e:cc:e4:1e:2e:af:e7:12:a4:dc:dd:6d:d6:18:f6: d9:88:c7:49:e0:a8:52:6a:00:a7:a8:67:ed:06:07:7f:6d:6b: cb:85:7b:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI2NTkxMTAvBgNVBAUTKDZBN0M4NjIwQjAxMTkxMzVBNEUyOTY3MTEwMjAyRTdB OTIxMEZENzYwHhcNMjUxMTAyMTgwMzUxWhcNMjUxMTA5MTgwMzUxWjAYMRYwFAYD VQQDEw02OTA3OWQwNy1mODZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxI1q/ux4oK4Qku+2yPftxzGdAVo4lkZK+jIl10/rqFFi8iM2S3aWQHErH/AP 4RHOPYKi9HLiNRIeZzurP2ijDnmw3Mbp2tm9vyqNVaUuHnttzxcrZXGd2dGSvTq9 iJtvY7S/t9mQQtIHLkN8THA+sWdD6jZZ3P0K8BDoSa9umKyZgNViwQjmeRZnigho nMfvrKwBlAH6osFDKbHSjbOhDzVmXXTyWXdYePCVPXEUjj0/ljcqP/ptSN/CFGNy 5qxhnso6/OXEHn4XWL5PlM2QUkqeV9STtpG7hV1GU/lwYwhLw7oG4D0Ioc+EJ0ql cAY+kL65goewwU5gQB03u1dHjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9Wt4gG aVet2tP2FtuMM8ZtilH3MB8GA1UdIwQYMBaAFGp8hiCwEZE1pOKWcRAgLnqSEP12 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjY1OS9DNDY4RTlDNkYw QzMxMUU5OTI2Q0NEMEVDNEY5QUUwMi9hbnlHSUxBUmtUV2s0cFp4RUNBdWVwSVFf WFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FueUdJTEFSa1RXazRwWnhFQ0F1ZXBJUV9YWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjY1OS9DNDY4RTlDNkYwQzMxMUU5OTI2Q0NEMEVDNEY5QUUwMi9hbnlHSUxBUmtU V2s0cFp4RUNBdWVwSVFfWFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKYGM6rp/jjJcu6I0Ldvm9jT63xFd8SpdLlgSqjlPN16aMt9FNc5mw O+eEFScFSlEHZWSya7Jeq5vsgMtmxOhCSPk3a9eVGMYkpc3FJ9qW/8BBWLxn6M9p Lyq/SKMQeMlMGSv3F1u9FoOVR3tIpV/m7IN0mkIxPnuNCx3uVilUDBGrNDCnRWOf 2zvhgektg60/lstZfhH/sk2ROgBveahOyiQszeKZlQXn+pSHtywGwDyh6idvCPdo aS14cyzkyiXlzFQ66K6m6tRd3S6cJsZ5hFnxj4ugEcVF52E+zOQeLq/nEqTc3W3W GPbZiMdJ4KhSagCnqGftBgd/bWvLhXu1 -----END CERTIFICATE-----Generated at Tue Nov 4 07:22:39 2025 by rpki-client