$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft File: g-S8t2O4ztA2UZDnKA8KajSzW1E.mft (raw, json) Hash identifier: UR5/3jXmVU0jpD0IIhWWu8yydPkBhWRJLLaMPr43mVQ= Subject key identifier: 48:6A:59:F1:6A:12:53:FC:DD:E0:7F:88:BA:F9:E9:21:7A:30:AA:D6 Authority key identifier: 83:E4:BC:B7:63:B8:CE:D0:36:51:90:E7:28:0F:0A:6A:34:B3:5B:51 Certificate issuer: /CN=A91D4A3A/serialNumber=83E4BCB763B8CED0365190E7280F0A6A34B35B51 Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft Manifest number: 012E Signing time: Wed 05 Nov 2025 04:45:43 +0000 Manifest this update: Wed 05 Nov 2025 04:45:42 +0000 Manifest next update: Wed 12 Nov 2025 04:45:42 +0000 Files and hashes: 1: g-S8t2O4ztA2UZDnKA8KajSzW1E.crl (hash: tPTfc4RN5MhWAyFPxcxSPC9tqhmThSR5o91qk4pToCs=) 2: 8A5FC86AECB511EE8DC7B937C4F9AE02.roa (hash: Vp6oIV4Kwe3FgHjDClftctReHYiAIs5p4BPX7qetipE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.crl rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4A3A, serialNumber=83E4BCB763B8CED0365190E7280F0A6A34B35B51 Validity Not Before: Nov 5 04:45:42 2025 GMT Not After : Nov 12 04:45:42 2025 GMT Subject: CN=690ad676-4934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0f:2a:29:4d:03:8a:53:b7:14:e7:94:86:01: 58:a9:03:81:a3:7d:9d:ca:12:35:88:f4:a1:6f:ff: f5:06:5c:35:90:e1:0d:db:61:bd:2f:c4:88:b9:c8: 95:0f:c7:fa:89:69:20:22:e8:e9:a9:ce:98:73:ae: b4:5a:d3:3d:59:d9:c5:08:1e:b3:41:c4:b9:e3:b9: 93:3c:17:58:09:b0:56:cf:c6:d3:fe:b3:4f:d4:a3: e8:a9:a0:54:d7:f7:c1:26:f5:8e:e3:e4:93:36:a5: 8c:e4:c2:0d:93:25:c8:2c:85:0c:09:f5:7d:75:03: 55:d5:b9:bb:48:32:10:7d:9e:cc:d8:88:2e:57:be: 60:ec:e4:47:8b:62:30:6a:7f:4a:1b:34:18:76:89: 01:44:6a:ee:e1:5a:6c:ba:4a:18:5d:1e:a8:42:42: 10:ad:2b:91:e1:e4:9d:85:1a:bf:e5:2f:3e:c2:f0: 7e:5f:97:1f:c9:fc:69:89:4f:1d:20:40:4f:88:fc: c4:db:54:ea:14:06:9d:f3:33:a9:c4:29:4f:d7:ce: 1a:b3:d9:84:6b:9f:42:d8:f5:33:d8:52:55:fb:54: 0e:68:bb:29:d7:19:66:ec:18:0b:15:3b:39:4c:ae: b2:8a:b0:d0:df:3a:7c:a2:e7:b6:3a:d7:76:e4:1f: 26:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:6A:59:F1:6A:12:53:FC:DD:E0:7F:88:BA:F9:E9:21:7A:30:AA:D6 X509v3 Authority Key Identifier: keyid:83:E4:BC:B7:63:B8:CE:D0:36:51:90:E7:28:0F:0A:6A:34:B3:5B:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:2f:ae:12:85:70:d3:a4:a6:4c:ed:98:bf:67:5c:dd:f2:ac: 28:d6:63:22:96:41:83:34:07:c6:07:d1:0e:7f:8c:56:13:32: 3f:c3:07:b7:0a:6e:5c:22:3d:68:da:95:f1:43:a1:77:7d:7f: 75:53:01:42:d3:1b:1a:b9:ae:e6:01:ca:66:92:bd:64:39:c3: 1c:21:63:72:40:3b:2d:c8:d8:c2:36:6d:9c:1c:44:6c:87:6b: e2:5d:b1:99:78:a0:a7:ff:c1:51:24:dd:87:cc:27:95:7c:99: b9:45:e3:f1:11:ff:4a:08:a1:92:5e:4c:7e:43:c2:48:33:dd: 62:42:78:44:09:d5:14:da:8f:2a:cd:6e:84:28:ea:95:3f:57: d8:d4:2c:82:ca:07:9b:9f:9f:a9:3f:b4:92:f1:72:2f:9d:fc: a8:1e:07:ea:cd:05:8f:8f:f0:85:88:ec:d3:d2:76:49:e1:25: ef:5e:09:b3:78:fd:36:7f:73:17:05:b0:c7:be:c6:07:18:8a: e0:07:7b:1f:e3:80:1c:ea:b7:4b:24:e5:aa:cb:b5:11:b4:75: 52:a2:23:c8:aa:27:3f:51:f7:7d:ab:4c:ca:b3:e5:e7:02:03: be:67:8a:c5:62:b0:af:01:0c:7a:80:fc:93:77:e9:73:37:6d: b9:05:51:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRBM0ExMTAvBgNVBAUTKDgzRTRCQ0I3NjNCOENFRDAzNjUxOTBFNzI4MEYwQTZB MzRCMzVCNTEwHhcNMjUxMTA1MDQ0NTQyWhcNMjUxMTEyMDQ0NTQyWjAYMRYwFAYD VQQDEw02OTBhZDY3Ni00OTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyA8qKU0DilO3FOeUhgFYqQOBo32dyhI1iPShb//1Blw1kOEN22G9L8SIuciV D8f6iWkgIujpqc6Yc660WtM9WdnFCB6zQcS547mTPBdYCbBWz8bT/rNP1KPoqaBU 1/fBJvWO4+STNqWM5MINkyXILIUMCfV9dQNV1bm7SDIQfZ7M2IguV75g7ORHi2Iw an9KGzQYdokBRGru4VpsukoYXR6oQkIQrSuR4eSdhRq/5S8+wvB+X5cfyfxpiU8d IEBPiPzE21TqFAad8zOpxClP184as9mEa59C2PUz2FJV+1QOaLsp1xlm7BgLFTs5 TK6yirDQ3zp8oue2Otd25B8mCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhqWfFq ElP83eB/iLr56SF6MKrWMB8GA1UdIwQYMBaAFIPkvLdjuM7QNlGQ5ygPCmo0s1tR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEEzQS8xODE0RjM2NkVD QjUxMUVFQTQ2NTAzMzdDNEY5QUUwMi9nLVM4dDJPNHp0QTJVWkRuS0E4S2FqU3pX MUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ctUzh0Mk80enRBMlVaRG5LQThLYWpTelcxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NEEzQS8xODE0RjM2NkVDQjUxMUVFQTQ2NTAzMzdDNEY5QUUwMi9nLVM4dDJPNHp0 QTJVWkRuS0E4S2FqU3pXMUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChL64ShXDTpKZM7Zi/Z1zd8qwo1mMilkGDNAfGB9EOf4xWEzI/wwe3 Cm5cIj1o2pXxQ6F3fX91UwFC0xsaua7mAcpmkr1kOcMcIWNyQDstyNjCNm2cHERs h2viXbGZeKCn/8FRJN2HzCeVfJm5RePxEf9KCKGSXkx+Q8JIM91iQnhECdUU2o8q zW6EKOqVP1fY1CyCygebn5+pP7SS8XIvnfyoHgfqzQWPj/CFiOzT0nZJ4SXvXgmz eP02f3MXBbDHvsYHGIrgB3sf44Ac6rdLJOWqy7URtHVSoiPIqic/Ufd9q0zKs+Xn AgO+Z4rFYrCvAQx6gPyTd+lzN225BVHj -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:37 2025 by rpki-client