$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft File: Ga4x-VSBe65iCMNyEQi46P-LP7w.mft (raw, json) Hash identifier: xqA2Zlk/OX4Jk4pFyp9UeQTE/SrDg+gZMgK7szjejYw= Subject key identifier: 3D:3B:8C:9B:D9:3B:D9:5B:47:52:B1:AD:35:49:45:20:AC:3A:C9:1E Authority key identifier: 19:AE:31:F9:54:81:7B:AE:62:08:C3:72:11:08:B8:E8:FF:8B:3F:BC Certificate issuer: /CN=A91EEB30/serialNumber=19AE31F954817BAE6208C3721108B8E8FF8B3FBC Certificate serial: 0484 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft Manifest number: 047E Signing time: Mon 03 Nov 2025 00:05:12 +0000 Manifest this update: Mon 03 Nov 2025 00:05:11 +0000 Manifest next update: Mon 10 Nov 2025 00:05:11 +0000 Files and hashes: 1: Ga4x-VSBe65iCMNyEQi46P-LP7w.crl (hash: k0EWXO+4Td+jNyqiIAgOSWVFaLERPqPNbINQOuBE72U=) 2: A87BC510622E11EC92E1870CC4F9AE02.roa (hash: 1DZcNpDHzzTtCr5+Y6ZKGblRfHTeQUJGW1MQDytyGms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.crl rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1156 (0x484) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEB30, serialNumber=19AE31F954817BAE6208C3721108B8E8FF8B3FBC Validity Not Before: Nov 3 00:05:11 2025 GMT Not After : Nov 10 00:05:11 2025 GMT Subject: CN=6907f1b8-c5a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9c:fa:06:fc:54:84:13:8e:72:c2:c2:7b:ad: 9c:aa:1d:55:2d:86:e7:b1:cf:56:86:44:e7:85:54: 3a:e3:2a:e0:6f:a0:75:91:fe:b1:83:ca:46:c3:f5: 52:6f:bf:0a:4d:be:41:5c:6b:2c:34:c4:1a:d1:28: d2:01:a5:4c:24:b2:74:83:ae:5c:13:08:ac:16:18: 02:ee:3a:e0:ad:21:a4:26:10:d1:a8:07:ce:dc:69: e3:af:69:3b:9a:19:8e:8d:c3:3b:19:30:2c:eb:6d: ea:a0:a6:fa:65:26:2d:fe:07:e1:19:66:15:95:3e: ef:ca:cc:a3:9f:0e:3f:6f:4b:ee:41:84:2c:0e:ca: 48:84:3d:7c:04:b4:17:5a:af:63:f6:d8:13:d8:5f: 2d:95:17:ae:c5:b7:47:b3:fd:64:ad:3d:cf:2c:2c: 54:bb:95:b2:d3:dc:41:9e:eb:e5:d9:58:d1:96:7d: 44:46:c3:24:e0:89:88:60:9b:2c:41:6c:98:ff:82: 0c:05:7c:17:b1:98:1b:b5:71:16:fe:d0:49:e1:c2: cf:90:56:9a:2f:98:e7:5c:50:d7:5d:17:95:b8:43: a7:9b:73:2d:61:55:30:79:a1:7d:55:d8:53:54:b1: 72:94:0b:be:6d:64:86:05:41:6c:68:db:99:85:a5: 67:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:3B:8C:9B:D9:3B:D9:5B:47:52:B1:AD:35:49:45:20:AC:3A:C9:1E X509v3 Authority Key Identifier: keyid:19:AE:31:F9:54:81:7B:AE:62:08:C3:72:11:08:B8:E8:FF:8B:3F:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:d7:32:e4:4a:ac:5b:0d:32:32:8e:a3:56:a8:b6:b1:2c:a1: 96:95:55:5d:86:1a:df:bd:5c:32:93:37:6e:76:57:3b:ce:b9: 2d:ee:cc:0c:c1:54:ee:67:74:f0:95:64:74:49:ec:33:9f:81: 35:5d:9e:44:60:32:e3:3e:96:49:6b:de:7e:b0:15:2b:5f:ef: 70:96:1a:9e:9b:e8:d1:0e:48:16:4f:b0:1e:23:1e:64:72:bb: df:9d:c8:05:d3:b2:62:67:36:2e:af:ad:8d:f1:7a:e7:4f:97: e7:6b:86:30:5d:ce:67:f5:d8:85:19:0c:92:c6:ee:6e:93:ec: 1f:2c:6e:65:a9:40:c3:2e:15:ab:f8:c8:e4:e2:fa:ec:27:c2: 71:44:ab:29:b2:2c:82:c5:bb:f5:2d:d5:31:60:2b:18:a5:99: 06:f8:4f:38:21:d4:65:a9:0a:0a:4a:76:1e:d2:be:8f:ff:e8: 7e:f0:13:65:e8:14:90:40:8f:a5:b0:9b:a1:4c:f4:2b:ba:cb: 98:ce:04:da:84:d3:18:d9:8a:e9:e6:65:65:9d:31:3b:73:bd: c1:8d:c5:f7:6a:19:2a:6c:d9:56:8d:da:d7:41:3a:00:dc:e7: fd:a2:05:6c:7b:27:8e:e0:60:ac:7d:3b:74:7e:c6:b7:34:a6: af:46:7c:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVCMzAxMTAvBgNVBAUTKDE5QUUzMUY5NTQ4MTdCQUU2MjA4QzM3MjExMDhCOEU4 RkY4QjNGQkMwHhcNMjUxMTAzMDAwNTExWhcNMjUxMTEwMDAwNTExWjAYMRYwFAYD VQQDEw02OTA3ZjFiOC1jNWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5z6BvxUhBOOcsLCe62cqh1VLYbnsc9WhkTnhVQ64yrgb6B1kf6xg8pGw/VS b78KTb5BXGssNMQa0SjSAaVMJLJ0g65cEwisFhgC7jrgrSGkJhDRqAfO3Gnjr2k7 mhmOjcM7GTAs623qoKb6ZSYt/gfhGWYVlT7vysyjnw4/b0vuQYQsDspIhD18BLQX Wq9j9tgT2F8tlReuxbdHs/1krT3PLCxUu5Wy09xBnuvl2VjRln1ERsMk4ImIYJss QWyY/4IMBXwXsZgbtXEW/tBJ4cLPkFaaL5jnXFDXXReVuEOnm3MtYVUweaF9VdhT VLFylAu+bWSGBUFsaNuZhaVnOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD07jJvZ O9lbR1KxrTVJRSCsOskeMB8GA1UdIwQYMBaAFBmuMflUgXuuYgjDchEIuOj/iz+8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUIzMC85RENFQjYzODYy MkMxMUVDODE4RUEwMEJDNEY5QUUwMi9HYTR4LVZTQmU2NWlDTU55RVFpNDZQLUxQ N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dhNHgtVlNCZTY1aUNNTnlFUWk0NlAtTFA3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUIzMC85RENFQjYzODYyMkMxMUVDODE4RUEwMEJDNEY5QUUwMi9HYTR4LVZTQmU2 NWlDTU55RVFpNDZQLUxQN3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz1zLkSqxbDTIyjqNWqLaxLKGWlVVdhhrfvVwykzdudlc7zrkt7swM wVTuZ3TwlWR0Sewzn4E1XZ5EYDLjPpZJa95+sBUrX+9wlhqem+jRDkgWT7AeIx5k crvfncgF07JiZzYur62N8XrnT5fna4YwXc5n9diFGQySxu5uk+wfLG5lqUDDLhWr +Mjk4vrsJ8JxRKspsiyCxbv1LdUxYCsYpZkG+E84IdRlqQoKSnYe0r6P/+h+8BNl 6BSQQI+lsJuhTPQrusuYzgTahNMY2Yrp5mVlnTE7c73BjcX3ahkqbNlWjdrXQToA 3Of9ogVseyeO4GCsfTt0fsa3NKavRnwC -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:19 2025 by rpki-client