$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft File: gja7zXAtSCL93VuwVmDPEDjsjH4.mft (raw, json) Hash identifier: qx2T3i05eRV3OmfMbTQfRlyPUoQduNvnCj3mejGD6iY= Subject key identifier: 00:6C:37:80:E2:46:A5:28:DB:88:2F:5F:58:95:C5:43:D8:CF:A3:A4 Authority key identifier: 82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E Certificate issuer: /CN=A911AE4B/serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E Certificate serial: 0887 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft Manifest number: 087E Signing time: Tue 04 Nov 2025 20:40:37 +0000 Manifest this update: Tue 04 Nov 2025 20:40:36 +0000 Manifest next update: Tue 11 Nov 2025 20:40:36 +0000 Files and hashes: 1: gja7zXAtSCL93VuwVmDPEDjsjH4.crl (hash: ry4UfJYvJ3wj/qVIyuo4/TzGpMuhwKzZ0uRo5/oRazI=) 2: 3ABFAC2231E211EFA341983CC4F9AE02.roa (hash: UaoBno6EmWaBFcw5TBVRPYFiWGMBoSDzhu3pQGtDygg=) 3: 63B7CB76D0E511EA9916E053C4F9AE02.roa (hash: 4fGi9gJaC/oEbDcGBoBEInsd7LIWjlkoV1ytai5f/QA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:40:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2183 (0x887) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE4B, serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E Validity Not Before: Nov 4 20:40:36 2025 GMT Not After : Nov 11 20:40:36 2025 GMT Subject: CN=690a64c4-4d31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c8:4d:28:bd:9a:2f:ed:9f:84:a4:63:e6:3c: fb:06:1b:2b:d9:ae:c4:04:17:5b:c5:b2:07:ac:5b: 6b:47:2c:3b:ff:95:f0:75:83:44:9b:de:87:ad:84: 0b:c2:30:4b:dc:f1:e5:b0:1c:18:76:ab:c5:69:28: 1a:52:11:5c:50:96:d8:15:62:3e:4d:40:2d:0c:67: 00:9b:17:e9:5d:8c:cc:a0:c1:73:a9:9a:1a:ae:1b: 13:96:3a:7e:a4:a1:3a:b8:a2:5c:15:d6:80:43:64: f9:e2:70:5c:32:e5:a7:96:94:5d:b9:2e:3b:c0:32: 41:d0:dd:4c:f1:99:6b:06:20:14:ef:b2:d7:0b:73: 1d:8d:de:33:fe:ec:bf:76:47:8f:98:70:45:65:20: 81:ca:dd:49:d5:d3:e7:49:f0:b0:37:62:14:39:64: 47:43:1b:9a:07:30:9a:ab:3f:05:bc:c9:16:dd:b1: 90:74:5b:33:9b:a3:ab:0a:d4:dd:bb:46:f0:39:89: b4:1f:cd:51:b5:27:1f:4e:2f:e0:77:75:0d:72:d8: 88:69:43:b7:69:0f:e3:43:63:70:4b:ab:88:8f:f4: cb:57:48:91:1c:59:cb:c7:f9:9f:6d:68:f1:fe:bf: ed:62:9a:3c:56:7b:9e:24:3f:fb:46:1d:ef:4c:b2: 0f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:6C:37:80:E2:46:A5:28:DB:88:2F:5F:58:95:C5:43:D8:CF:A3:A4 X509v3 Authority Key Identifier: keyid:82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:95:cb:61:33:6e:9c:44:5f:48:15:12:1e:e1:2d:73:ce:e1: 4a:7f:79:0f:10:7a:b0:67:75:24:84:2a:a8:24:5f:cb:7c:8e: 62:1d:f1:b9:ef:e7:c0:cb:09:77:72:78:7b:45:c9:e1:4b:4b: 87:85:87:5e:5d:db:9b:d9:d9:3b:cb:30:e0:a6:44:d0:00:5c: a0:66:99:0c:f2:54:80:7b:4b:c0:03:9a:c6:f7:82:ae:6e:e7: 21:f6:71:b2:56:89:2a:8c:2c:36:9b:07:0f:db:72:84:f7:d5: 61:60:dd:15:50:47:e3:12:55:dd:11:05:98:c2:dc:43:5e:84: 81:2e:4c:9a:ac:2c:ae:d1:39:8b:dd:e9:82:da:5f:f2:48:c6: 24:7a:0e:4d:c6:61:f2:6b:8f:80:11:db:78:3d:7d:90:6c:46: 2b:4f:e9:8a:6e:ef:ca:6f:c7:ef:ea:23:8c:ad:85:98:df:19: 42:43:46:c3:66:42:ec:b0:da:68:9f:a8:8c:41:81:0f:56:b2: 66:a6:d5:58:2b:e1:12:ff:63:2d:03:e4:88:3c:91:08:4f:b2: 4c:44:51:ae:58:8e:e3:07:15:08:5f:67:13:a3:8d:38:dd:0d: bc:52:52:ef:2a:6f:8a:6e:a5:76:5d:b6:c2:76:40:8e:91:27: 32:a6:4e:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFNEIxMTAvBgNVBAUTKDgyMzZCQkNENzAyRDQ4MjJGRERENUJCMDU2NjBDRjEw MzhFQzhDN0UwHhcNMjUxMTA0MjA0MDM2WhcNMjUxMTExMjA0MDM2WjAYMRYwFAYD VQQDEw02OTBhNjRjNC00ZDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8hNKL2aL+2fhKRj5jz7Bhsr2a7EBBdbxbIHrFtrRyw7/5XwdYNEm96HrYQL wjBL3PHlsBwYdqvFaSgaUhFcUJbYFWI+TUAtDGcAmxfpXYzMoMFzqZoarhsTljp+ pKE6uKJcFdaAQ2T54nBcMuWnlpRduS47wDJB0N1M8ZlrBiAU77LXC3Mdjd4z/uy/ dkePmHBFZSCByt1J1dPnSfCwN2IUOWRHQxuaBzCaqz8FvMkW3bGQdFszm6OrCtTd u0bwOYm0H81RtScfTi/gd3UNctiIaUO3aQ/jQ2NwS6uIj/TLV0iRHFnLx/mfbWjx /r/tYpo8VnueJD/7Rh3vTLIPCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABsN4Di RqUo24gvX1iVxUPYz6OkMB8GA1UdIwQYMBaAFII2u81wLUgi/d1bsFZgzxA47Ix+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU0Qi8yNEE2OEU5Q0Qw RTMxMUVBOUE3M0I5NEZDNEY5QUUwMi9namE3elhBdFNDTDkzVnV3Vm1EUEVEanNq SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dqYTd6WEF0U0NMOTNWdXdWbURQRURqc2pINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU0Qi8yNEE2OEU5Q0QwRTMxMUVBOUE3M0I5NEZDNEY5QUUwMi9namE3elhBdFND TDkzVnV3Vm1EUEVEanNqSDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBlcthM26cRF9IFRIe4S1zzuFKf3kPEHqwZ3UkhCqoJF/LfI5iHfG5 7+fAywl3cnh7RcnhS0uHhYdeXdub2dk7yzDgpkTQAFygZpkM8lSAe0vAA5rG94Ku buch9nGyVokqjCw2mwcP23KE99VhYN0VUEfjElXdEQWYwtxDXoSBLkyarCyu0TmL 3emC2l/ySMYkeg5NxmHya4+AEdt4PX2QbEYrT+mKbu/Kb8fv6iOMrYWY3xlCQ0bD ZkLssNpon6iMQYEPVrJmptVYK+ES/2MtA+SIPJEIT7JMRFGuWI7jBxUIX2cTo404 3Q28UlLvKm+KbqV2XbbCdkCOkScypk4q -----END CERTIFICATE-----Generated at Wed Nov 5 14:44:14 2025 by rpki-client