$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft File: gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft (raw, json) Hash identifier: Ase9/WiUJpa4hBxGIES26wTmbNLYeOHA+HM5ix1xIM0= Subject key identifier: 71:EB:30:80:73:31:01:79:CD:84:19:CD:71:BE:F6:FB:48:4D:30:C6 Authority key identifier: 80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 Certificate issuer: /CN=A911DA8C/serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Certificate serial: 0369 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft Manifest number: 0364 Signing time: Wed 05 Nov 2025 01:01:42 +0000 Manifest this update: Wed 05 Nov 2025 01:01:42 +0000 Manifest next update: Wed 12 Nov 2025 01:01:42 +0000 Files and hashes: 1: gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl (hash: QYdjIBHo64g9mmjp+Szg3RF0VaSavp017Q055lwe0D8=) 2: D0279B7AD10A11ECA78C081CC4F9AE02.roa (hash: rpEeJfHec6qq3m3hz9oQ0Fj5z6c+WSBf/B8pGM1lwQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 873 (0x369) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DA8C, serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Validity Not Before: Nov 5 01:01:42 2025 GMT Not After : Nov 12 01:01:42 2025 GMT Subject: CN=690aa1f6-610b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:54:1a:c8:ed:ff:0f:f3:47:c4:48:1f:ab:58: 8c:5b:93:b7:8d:a8:68:6a:8f:e0:eb:33:86:8f:1f: 1a:28:5b:b3:e9:9f:12:8c:ed:f4:5d:46:d7:d5:c4: 61:3c:ca:85:4b:7e:0e:9b:ba:19:18:b1:4c:3a:08: 2b:c0:cf:13:73:4e:8a:19:e2:39:84:3c:7d:af:6b: 19:10:51:13:47:bd:2f:6e:2f:2a:c8:df:d5:30:36: 1e:ef:1c:9a:ae:29:93:f6:8c:22:40:7b:b0:76:eb: f2:4f:36:a4:b1:be:2d:20:43:24:3a:52:c2:5f:a0: 9a:04:3b:49:d5:37:6a:33:59:fc:ea:e4:ab:3b:34: 55:d1:1b:a9:03:52:64:87:d0:0d:36:1e:ee:c9:8c: 71:47:8c:d1:ec:a6:3c:d4:e5:fa:1c:e8:8a:bf:d9: 82:4c:3a:a0:15:c4:83:d0:ab:7f:cc:63:9f:13:1e: 69:38:da:18:aa:8e:ac:6f:20:8f:7e:2b:06:9c:3f: f0:79:76:15:c9:25:35:a1:47:3a:a5:77:78:74:01: cf:ec:a7:a2:70:a7:54:5d:29:3e:b1:47:67:92:4f: 51:8b:e8:f1:e6:a4:e0:8b:d0:71:79:73:f7:26:f7: 9f:7b:83:c1:d8:a5:22:aa:03:9f:47:eb:e9:79:bd: bb:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:EB:30:80:73:31:01:79:CD:84:19:CD:71:BE:F6:FB:48:4D:30:C6 X509v3 Authority Key Identifier: keyid:80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:38:18:8f:5e:3d:9e:96:b8:49:3c:2d:f7:04:5c:79:45:2d: a8:9d:22:ef:95:22:8d:9f:89:fe:fa:01:63:cc:b9:47:8e:a1: cd:16:10:ae:d2:5a:94:2d:8d:fb:1e:24:0e:db:3c:2d:e2:91: c7:81:4f:f2:d8:6d:df:ff:4f:dd:78:84:67:d1:30:bf:15:20: 34:44:b4:2b:8e:f5:8e:db:52:5f:50:3d:0e:b9:9d:c3:ac:7f: 44:20:b3:35:25:9b:69:06:66:12:b5:0e:f5:60:91:cd:32:ee: 7a:cd:5c:27:00:60:dc:93:17:43:4a:f7:da:91:bb:72:2d:78: 50:cd:9f:af:16:9e:ea:54:ce:04:30:9e:a8:b5:68:7c:7a:32: 91:3d:10:c4:87:2f:ca:66:a2:b5:1c:c0:e6:6f:ab:3c:30:6f: e9:53:a8:30:d7:ec:f0:49:86:aa:a7:64:d8:89:24:cc:f1:e5: c0:9e:cf:1d:ee:46:de:0e:72:17:9f:59:5d:f7:4d:67:e1:a8: c2:16:70:b1:f9:38:43:4d:6f:17:e2:c4:ae:f4:3c:49:1e:72: 0b:40:d7:d1:7f:eb:d0:96:5e:ea:22:51:71:e8:ba:2d:50:4e: 18:07:8b:04:00:63:44:fa:2d:76:c8:d3:8b:21:e9:7a:73:ff: a8:06:1a:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURBOEMxMTAvBgNVBAUTKDgwMzE4ODZFN0U2MDlFNEY0QTM0NkE0NTEwODExMDQw Njg3NUZFQzgwHhcNMjUxMTA1MDEwMTQyWhcNMjUxMTEyMDEwMTQyWjAYMRYwFAYD VQQDEw02OTBhYTFmNi02MTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1lQayO3/D/NHxEgfq1iMW5O3jahoao/g6zOGjx8aKFuz6Z8SjO30XUbX1cRh PMqFS34Om7oZGLFMOggrwM8Tc06KGeI5hDx9r2sZEFETR70vbi8qyN/VMDYe7xya rimT9owiQHuwduvyTzaksb4tIEMkOlLCX6CaBDtJ1TdqM1n86uSrOzRV0RupA1Jk h9ANNh7uyYxxR4zR7KY81OX6HOiKv9mCTDqgFcSD0Kt/zGOfEx5pONoYqo6sbyCP fisGnD/weXYVySU1oUc6pXd4dAHP7KeicKdUXSk+sUdnkk9Ri+jx5qTgi9BxeXP3 Jvefe4PB2KUiqgOfR+vpeb272QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHHrMIBz MQF5zYQZzXG+9vtITTDGMB8GA1UdIwQYMBaAFIAxiG5+YJ5PSjRqRRCBEEBodf7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE4Qy9GMzE2NEMyMEQx MDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25rOUtOR3BGRUlFUVFHaDFf c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dER0libjVnbms5S05HcEZFSUVRUUdoMV9zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REE4Qy9GMzE2NEMyMEQxMDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25r OUtOR3BGRUlFUVFHaDFfc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/OBiPXj2elrhJPC33BFx5RS2onSLvlSKNn4n++gFjzLlHjqHNFhCu 0lqULY37HiQO2zwt4pHHgU/y2G3f/0/deIRn0TC/FSA0RLQrjvWO21JfUD0OuZ3D rH9EILM1JZtpBmYStQ71YJHNMu56zVwnAGDckxdDSvfakbtyLXhQzZ+vFp7qVM4E MJ6otWh8ejKRPRDEhy/KZqK1HMDmb6s8MG/pU6gw1+zwSYaqp2TYiSTM8eXAns8d 7kbeDnIXn1ld901n4ajCFnCx+ThDTW8X4sSu9DxJHnILQNfRf+vQll7qIlFx6Lot UE4YB4sEAGNE+i12yNOLIel6c/+oBhok -----END CERTIFICATE-----Generated at Wed Nov 5 05:47:25 2025 by rpki-client