$ rpki-client -vvf rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft File: gkVvIaH33yOGQR-g7REgZPbrw5o.mft (raw, json) Hash identifier: 8oCOh+UkZ/Be34nJjM7Mq5GyKO33xd9U2zfBUIeDA2A= Subject key identifier: 8D:C1:2D:43:CC:1F:EE:DC:65:0D:21:4A:E5:95:D6:50:89:D2:2F:04 Authority key identifier: 82:45:6F:21:A1:F7:DF:23:86:41:1F:A0:ED:11:20:64:F6:EB:C3:9A Certificate issuer: /CN=A91E94F0/serialNumber=82456F21A1F7DF2386411FA0ED112064F6EBC39A Certificate serial: 0424 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft Manifest number: 041E Signing time: Mon 03 Nov 2025 00:19:49 +0000 Manifest this update: Mon 03 Nov 2025 00:19:48 +0000 Manifest next update: Mon 10 Nov 2025 00:19:48 +0000 Files and hashes: 1: gkVvIaH33yOGQR-g7REgZPbrw5o.crl (hash: uoyUo2qgco5Y2R8BXBnbOG83iUXbQ5ZPBr/ItFFf88Q=) 2: F15E709A880611ECAF18133AC4F9AE02.roa (hash: bpLtQ8qLL6l2ZogXhZIDbdT4T6FC+6P3DrjrNo4piak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.crl rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:19:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1060 (0x424) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E94F0, serialNumber=82456F21A1F7DF2386411FA0ED112064F6EBC39A Validity Not Before: Nov 3 00:19:48 2025 GMT Not After : Nov 10 00:19:48 2025 GMT Subject: CN=6907f524-1752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c4:5c:05:c8:aa:e3:90:ca:b7:a0:fe:ed:93: 60:d5:51:99:40:1e:fc:1a:cd:3e:61:a0:dd:54:d9: fb:9c:3f:23:13:94:17:3d:d0:33:8f:31:c0:f7:b5: 3f:9e:ce:f6:78:74:a5:9e:2c:bb:1e:26:83:35:5f: b0:d7:4b:bd:cd:3c:51:25:a1:f3:6e:8d:3d:fa:37: 4a:61:ae:74:b8:95:4e:55:b0:94:fe:93:97:d4:fc: 7b:76:4a:25:8b:93:10:af:74:65:bb:90:88:b7:ed: 89:2d:83:38:15:aa:fe:7c:7f:08:f0:47:ef:30:fc: 67:08:6f:d8:6a:e7:44:2d:3f:77:f7:3e:1e:af:84: 3b:1e:d0:e9:b3:39:73:62:0b:62:16:a4:32:76:c9: 0e:76:e0:68:5e:1d:dc:2b:3c:d5:f7:c7:11:3d:bd: 40:61:c3:94:5a:a2:08:b0:8a:f3:47:0e:f8:0f:84: 33:55:d7:c6:74:8d:05:fe:9f:d9:14:ce:b4:5a:af: d7:49:12:74:d1:bb:f7:fe:cf:aa:2a:a0:2a:fd:43: 94:05:8d:dc:6e:92:e4:2c:4e:5b:d6:a7:dd:46:8f: 19:09:1e:26:71:20:00:34:86:d6:e6:65:8c:9a:11: d4:4a:16:80:4e:21:80:f8:c4:dc:86:74:ea:22:de: 44:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C1:2D:43:CC:1F:EE:DC:65:0D:21:4A:E5:95:D6:50:89:D2:2F:04 X509v3 Authority Key Identifier: keyid:82:45:6F:21:A1:F7:DF:23:86:41:1F:A0:ED:11:20:64:F6:EB:C3:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gkVvIaH33yOGQR-g7REgZPbrw5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E94F0/E4B1BD38880211ECBF3C1D32C4F9AE02/gkVvIaH33yOGQR-g7REgZPbrw5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:76:37:92:61:93:57:ff:61:c0:6f:1d:32:03:a8:39:79:8d: 53:6e:29:7c:90:58:41:04:51:e6:0d:4a:7c:b7:df:24:41:b5: a3:29:6c:17:ec:07:84:13:f7:89:a0:12:dd:31:85:d7:b6:30: f1:65:83:52:94:37:ce:51:46:66:71:c2:ef:6a:73:47:cb:35: 8f:12:dd:fb:82:3f:4b:8c:57:ee:fd:88:aa:5f:85:8e:40:51: 87:aa:74:79:cc:51:fd:e9:2f:57:17:00:76:93:c0:86:5f:cf: b4:5f:39:d6:53:0c:93:c9:6a:51:2e:bc:ba:6f:e3:5d:27:da: 8c:77:5d:de:49:6f:27:41:86:bf:10:a7:6a:a7:16:fb:84:ba: ab:f3:a9:9c:3c:f5:a7:2c:6c:e9:1c:d3:d5:6f:5b:28:72:2d: a7:50:e2:ba:b5:01:0e:0f:5a:b2:48:ce:c1:ec:9d:93:ef:d1: 6e:5e:16:64:b2:40:a1:4b:42:d1:b9:67:c0:43:a2:b2:3d:7c: e9:e5:23:85:0b:0c:29:44:7e:c3:b2:71:0d:2d:c3:43:01:06: 80:36:b9:16:bb:b3:c2:f2:a7:e1:fd:f7:f2:5a:ed:4b:66:b0: dc:7b:0b:71:de:94:7f:7d:04:87:23:0d:02:99:a6:00:e3:a3: 89:70:54:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk0RjAxMTAvBgNVBAUTKDgyNDU2RjIxQTFGN0RGMjM4NjQxMUZBMEVEMTEyMDY0 RjZFQkMzOUEwHhcNMjUxMTAzMDAxOTQ4WhcNMjUxMTEwMDAxOTQ4WjAYMRYwFAYD VQQDEw02OTA3ZjUyNC0xNzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApMRcBciq45DKt6D+7ZNg1VGZQB78Gs0+YaDdVNn7nD8jE5QXPdAzjzHA97U/ ns72eHSlniy7HiaDNV+w10u9zTxRJaHzbo09+jdKYa50uJVOVbCU/pOX1Px7dkol i5MQr3Rlu5CIt+2JLYM4Far+fH8I8EfvMPxnCG/YaudELT939z4er4Q7HtDpszlz YgtiFqQydskOduBoXh3cKzzV98cRPb1AYcOUWqIIsIrzRw74D4QzVdfGdI0F/p/Z FM60Wq/XSRJ00bv3/s+qKqAq/UOUBY3cbpLkLE5b1qfdRo8ZCR4mcSAANIbW5mWM mhHUShaATiGA+MTchnTqIt5EWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3BLUPM H+7cZQ0hSuWV1lCJ0i8EMB8GA1UdIwQYMBaAFIJFbyGh998jhkEfoO0RIGT268Oa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTRGMC9FNEIxQkQzODg4 MDIxMUVDQkYzQzFEMzJDNEY5QUUwMi9na1Z2SWFIMzN5T0dRUi1nN1JFZ1pQYnJ3 NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2drVnZJYUgzM3lPR1FSLWc3UkVnWlBicnc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTRGMC9FNEIxQkQzODg4MDIxMUVDQkYzQzFEMzJDNEY5QUUwMi9na1Z2SWFIMzN5 T0dRUi1nN1JFZ1pQYnJ3NW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFdjeSYZNX/2HAbx0yA6g5eY1Tbil8kFhBBFHmDUp8t98kQbWjKWwX 7AeEE/eJoBLdMYXXtjDxZYNSlDfOUUZmccLvanNHyzWPEt37gj9LjFfu/YiqX4WO QFGHqnR5zFH96S9XFwB2k8CGX8+0XznWUwyTyWpRLry6b+NdJ9qMd13eSW8nQYa/ EKdqpxb7hLqr86mcPPWnLGzpHNPVb1soci2nUOK6tQEOD1qySM7B7J2T79FuXhZk skChS0LRuWfAQ6KyPXzp5SOFCwwpRH7DsnENLcNDAQaANrkWu7PC8qfh/ffyWu1L ZrDcewtx3pR/fQSHIw0CmaYA46OJcFR3 -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:52 2025 by rpki-client