$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft File: gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft (raw, json) Hash identifier: /SVRuukiSgkaTDvkyX58zBdWY1nXL5JFrbyAnht2hiw= Subject key identifier: 8B:45:9D:26:34:82:16:FA:90:7F:F9:9B:42:D3:2B:2C:88:63:15:AF Authority key identifier: 82:CA:10:4D:C5:F2:AF:F5:33:FB:F6:8C:F2:98:F4:0F:BD:48:1F:04 Certificate issuer: /CN=A91EA0F7/serialNumber=82CA104DC5F2AFF533FBF68CF298F40FBD481F04 Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft Manifest number: 4B Signing time: Wed 05 Nov 2025 07:51:08 +0000 Manifest this update: Wed 05 Nov 2025 07:51:07 +0000 Manifest next update: Wed 12 Nov 2025 07:51:07 +0000 Files and hashes: 1: gsoQTcXyr_Uz-_aM8pj0D71IHwQ.crl (hash: HHR5I6YilPrzNAutP4sWXkcmAgNgOHlckTk/Xs5NFkA=) 2: 8A9CF2DEB4D311F0A84CEE1EC4F9AE02.roa (hash: S8iQ1WKz3ZWJ+bpf44oizB2yWlxKeDlDls7es6li9nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.crl rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA0F7, serialNumber=82CA104DC5F2AFF533FBF68CF298F40FBD481F04 Validity Not Before: Nov 5 07:51:07 2025 GMT Not After : Nov 12 07:51:07 2025 GMT Subject: CN=690b01eb-3435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ba:24:3c:b6:dc:9c:6d:37:6b:bb:f6:aa:a2: 92:94:f8:1a:1a:92:18:06:7f:8b:af:f5:23:7f:b8: 85:c0:e0:28:c3:9c:ac:6d:bc:49:9a:f1:80:d4:5e: e2:93:cf:f0:91:12:2d:35:a0:17:c1:ac:07:77:08: 1e:75:9d:06:98:7d:7c:a9:0e:e8:fc:40:1d:c9:f1: e6:45:d1:15:28:04:09:19:02:41:9c:af:8a:a4:f5: a8:c0:5d:31:f6:b5:b1:79:4c:78:5d:07:0d:11:28: 9f:7f:39:9a:58:a8:14:91:dc:0e:f9:70:6b:fd:98: 5b:9e:99:10:3f:bb:3d:3b:50:1a:9d:2a:18:47:11: dd:e9:c9:4b:e2:b3:1a:c0:b2:b8:f2:5d:b5:f0:84: 3a:d0:ad:8c:81:4b:e0:2c:00:28:cc:97:c9:2b:cb: 43:97:89:83:f0:97:2c:52:38:f0:15:2e:b1:0a:ad: ae:3e:08:2a:f9:b5:90:ae:ab:9e:7e:0b:3c:6f:ba: 35:8d:93:00:bd:de:21:c4:bd:ad:de:23:b8:a4:5a: fa:3f:c0:f3:4a:c4:7d:57:58:71:3b:6a:8c:a2:b0: c3:ea:fe:85:cd:bf:f4:ca:94:cf:7e:d8:ee:4b:8b: 71:70:08:41:58:05:b5:03:47:f4:2e:15:1c:5a:8a: 55:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:45:9D:26:34:82:16:FA:90:7F:F9:9B:42:D3:2B:2C:88:63:15:AF X509v3 Authority Key Identifier: keyid:82:CA:10:4D:C5:F2:AF:F5:33:FB:F6:8C:F2:98:F4:0F:BD:48:1F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:0c:8d:9f:1c:41:a3:9e:00:20:a5:48:bc:03:7d:9f:36:15: c3:2f:d5:5f:2d:96:d1:15:ca:2f:4c:1b:f5:6d:66:98:6e:a5: ed:d8:93:f7:4f:6a:c4:84:45:c3:a3:4c:06:ea:8a:7c:81:2c: 78:02:5c:32:42:33:47:ee:33:6f:40:77:02:fc:83:03:78:65: 4c:9e:92:2a:cc:01:88:25:15:00:14:59:ba:0c:22:7e:0d:9b: ed:fa:a2:5a:0a:83:fe:8f:8e:ba:3f:7a:ad:6f:70:b7:88:ac: f5:6e:c2:34:aa:3b:50:af:31:8a:ba:a5:f4:45:e0:8e:b7:14: ad:6e:af:93:f3:a6:8e:5f:61:9d:94:73:0f:6a:97:9f:b9:99: 65:4f:72:8d:82:b3:5c:32:7d:68:55:6f:43:02:bd:30:7e:d8: ad:aa:0f:b6:e0:38:71:64:5f:60:71:b3:82:09:52:59:fd:df: 16:e0:31:96:6c:ed:b3:f2:11:13:ce:94:93:7c:aa:23:44:44: 96:4d:1f:c3:db:91:13:37:d5:d2:27:41:74:04:51:82:80:70: 59:f7:64:c7:ed:91:4f:08:a3:ef:fd:f7:a0:df:8c:3d:37:cb: a8:32:17:1a:ae:55:bf:27:6e:bb:80:be:ad:8d:31:89:52:c7: 7e:b0:d0:49 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTBGNzExMC8GA1UEBRMoODJDQTEwNERDNUYyQUZGNTMzRkJGNjhDRjI5OEY0MEZC RDQ4MUYwNDAeFw0yNTExMDUwNzUxMDdaFw0yNTExMTIwNzUxMDdaMBgxFjAUBgNV BAMTDTY5MGIwMWViLTM0MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpuiQ8ttycbTdru/aqopKU+BoakhgGf4uv9SN/uIXA4CjDnKxtvEma8YDUXuKT z/CREi01oBfBrAd3CB51nQaYfXypDuj8QB3J8eZF0RUoBAkZAkGcr4qk9ajAXTH2 tbF5THhdBw0RKJ9/OZpYqBSR3A75cGv9mFuemRA/uz07UBqdKhhHEd3pyUvisxrA srjyXbXwhDrQrYyBS+AsACjMl8kry0OXiYPwlyxSOPAVLrEKra4+CCr5tZCuq55+ CzxvujWNkwC93iHEva3eI7ikWvo/wPNKxH1XWHE7aoyisMPq/oXNv/TKlM9+2O5L i3FwCEFYBbUDR/QuFRxailX3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUi0WdJjSC FvqQf/mbQtMrLIhjFa8wHwYDVR0jBBgwFoAUgsoQTcXyr/Uz+/aM8pj0D71IHwQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBMEY3LzBEOENDOUQ2NzY2 QzExRjA5RkNBMTkyREM0RjlBRTAyL2dzb1FUY1h5cl9Vei1fYU04cGowRDcxSUh3 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ3NvUVRjWHlyX1V6LV9hTThwajBENzFJSHdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB MEY3LzBEOENDOUQ2NzY2QzExRjA5RkNBMTkyREM0RjlBRTAyL2dzb1FUY1h5cl9V ei1fYU04cGowRDcxSUh3US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD0MjZ8cQaOeACClSLwDfZ82FcMv1V8tltEVyi9MG/VtZphupe3Yk/dP asSERcOjTAbqinyBLHgCXDJCM0fuM29AdwL8gwN4ZUyekirMAYglFQAUWboMIn4N m+36oloKg/6Pjro/eq1vcLeIrPVuwjSqO1CvMYq6pfRF4I63FK1ur5Pzpo5fYZ2U cw9ql5+5mWVPco2Cs1wyfWhVb0MCvTB+2K2qD7bgOHFkX2Bxs4IJUln93xbgMZZs 7bPyERPOlJN8qiNERJZNH8PbkRM31dInQXQEUYKAcFn3ZMftkU8Io+/996DfjD03 y6gyFxquVb8nbruAvq2NMYlSx36w0Ek= -----END CERTIFICATE-----Generated at Wed Nov 5 19:32:46 2025 by rpki-client