$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft File: G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft (raw, json) Hash identifier: KgcrzQgJ/TNg5tQn54lq4Pm5c0aXPCCC3tlxrgnoWgk= Subject key identifier: 3F:CC:F1:FB:77:E9:A0:54:DB:AB:E3:5B:3D:85:7B:C8:65:2A:D3:2B Authority key identifier: 1B:D6:33:6B:97:86:8C:2F:54:EB:3D:94:78:D3:9E:41:73:1D:44:87 Certificate issuer: /CN=A911DF56/serialNumber=1BD6336B97868C2F54EB3D9478D39E41731D4487 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft Manifest number: 3F Signing time: Mon 03 Nov 2025 07:27:13 +0000 Manifest this update: Mon 03 Nov 2025 07:27:12 +0000 Manifest next update: Mon 10 Nov 2025 07:27:12 +0000 Files and hashes: 1: G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl (hash: tiBchxv/9YdSJsuzyVVm4HiO08fcxrBxepTt15TERHI=) 2: C31F44C25BD211F0962D6F5BC4F9AE02.roa (hash: BfA3s4/uFwS/+pxJ7ydc7p+vBZQ3SLc68WxBr74xpL8=) 3: 6D18C6E88FF311F0B3309340C4F9AE02.roa (hash: c9l4QPfF5HgbdK2wjGcEEf1Z5xYqEsv1DWpNYE3IzBw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DF56, serialNumber=1BD6336B97868C2F54EB3D9478D39E41731D4487 Validity Not Before: Nov 3 07:27:12 2025 GMT Not After : Nov 10 07:27:12 2025 GMT Subject: CN=69085951-63ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:43:22:b1:cf:c3:63:0f:37:79:1c:ed:dc:8d: 0f:df:d6:ee:bb:c0:1c:fe:22:51:02:a1:8d:42:c5: bd:88:7e:02:a3:fb:25:2e:37:2a:38:98:30:be:a4: 8b:2c:28:09:4b:9f:1f:43:80:32:46:a8:ae:de:19: 5c:cd:f7:7b:5f:94:f9:2e:7d:e8:49:11:0f:6e:28: 73:25:4c:62:07:16:de:c8:df:47:90:10:83:86:bf: ad:a4:06:28:d1:af:59:27:4e:f8:53:b4:52:73:79: 15:44:ce:76:c3:22:bf:d7:f1:40:e7:eb:54:15:fe: 80:dc:87:26:6a:1c:75:a9:b4:ca:c5:e2:28:76:78: 0f:85:08:d7:ef:c9:ac:fb:87:89:2c:60:62:7c:57: e3:d7:86:31:12:31:5f:81:a1:93:e6:93:08:2f:fe: 36:76:63:0f:39:b2:6e:de:70:7d:cc:af:29:2c:4f: d7:19:1b:84:4e:ad:df:0b:8a:75:d1:ef:63:1c:9f: 00:5a:bf:2f:72:d6:4e:40:0a:f3:e4:ad:e8:82:93: 9d:5c:a4:7f:a7:c0:75:d8:47:6f:c2:e3:8e:f5:3a: 71:5a:9b:5f:cd:59:fa:53:94:32:6d:4f:b1:f8:b1: 15:a3:d4:83:9a:a7:b2:12:2e:1e:ca:47:0e:df:17: a4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:CC:F1:FB:77:E9:A0:54:DB:AB:E3:5B:3D:85:7B:C8:65:2A:D3:2B X509v3 Authority Key Identifier: keyid:1B:D6:33:6B:97:86:8C:2F:54:EB:3D:94:78:D3:9E:41:73:1D:44:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:56:d0:8f:95:a1:23:5d:9d:48:86:fa:71:0e:dd:38:ff:e4: ad:17:5a:29:df:8e:84:71:64:b5:ca:c7:1a:d2:9b:f7:b5:c6: 34:db:d7:2b:e2:6e:fd:08:d8:ca:da:8e:49:8a:df:86:67:fb: 7c:03:6c:45:82:e5:80:2b:22:40:e1:7b:4e:29:67:f4:fd:81: 21:b1:94:0c:a0:59:78:60:2b:41:7c:5f:84:f7:14:4d:3e:ec: 20:a8:fe:f0:4c:aa:d8:7d:95:75:75:db:2f:09:a4:2c:12:4d: 34:4e:d0:7a:8b:aa:43:16:da:64:b6:65:1e:a1:cc:a9:4e:95: 9b:56:b0:bb:5c:2f:e4:65:0c:c4:9c:b9:87:18:c1:6f:41:10: 53:c0:24:40:b6:96:27:f9:0f:46:99:fe:04:47:8b:a6:dd:0a: 62:9f:53:9c:cc:d8:fd:c4:9c:be:7c:f0:21:db:1c:19:be:e7: 94:7d:67:cd:b4:13:18:b8:91:fa:fa:d6:a9:c2:96:61:b6:9a: 86:2e:2b:18:b7:21:29:74:19:6f:65:d5:25:05:70:c9:6a:2a: c3:86:cd:e7:b5:57:d1:af:8b:e3:ca:7e:c6:09:2b:94:88:be: 94:70:90:cd:46:40:bb:ec:11:53:79:bb:5c:75:43:3c:8c:a6: 51:16:c2:92 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx REY1NjExMC8GA1UEBRMoMUJENjMzNkI5Nzg2OEMyRjU0RUIzRDk0NzhEMzlFNDE3 MzFENDQ4NzAeFw0yNTExMDMwNzI3MTJaFw0yNTExMTAwNzI3MTJaMBgxFjAUBgNV BAMTDTY5MDg1OTUxLTYzZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUQyKxz8NjDzd5HO3cjQ/f1u67wBz+IlECoY1Cxb2IfgKj+yUuNyo4mDC+pIss KAlLnx9DgDJGqK7eGVzN93tflPkufehJEQ9uKHMlTGIHFt7I30eQEIOGv62kBijR r1knTvhTtFJzeRVEznbDIr/X8UDn61QV/oDchyZqHHWptMrF4ih2eA+FCNfvyaz7 h4ksYGJ8V+PXhjESMV+BoZPmkwgv/jZ2Yw85sm7ecH3MryksT9cZG4ROrd8LinXR 72McnwBavy9y1k5ACvPkreiCk51cpH+nwHXYR2/C4471OnFam1/NWfpTlDJtT7H4 sRWj1IOap7ISLh7KRw7fF6SJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUP8zx+3fp oFTbq+NbPYV7yGUq0yswHwYDVR0jBBgwFoAUG9Yza5eGjC9U6z2UeNOeQXMdRIcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFERjU2LzZENUU2QTU0NUJE MjExRjBCNzM3RDQ1QUM0RjlBRTAyL0c5WXphNWVHakM5VTZ6MlVlTk9lUVhNZFJJ Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRzlZemE1ZUdqQzlVNnoyVWVOT2VRWE1kUkljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFE RjU2LzZENUU2QTU0NUJEMjExRjBCNzM3RDQ1QUM0RjlBRTAyL0c5WXphNWVHakM5 VTZ6MlVlTk9lUVhNZFJJYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAFW0I+VoSNdnUiG+nEO3Tj/5K0XWinfjoRxZLXKxxrSm/e1xjTb1yvi bv0I2MrajkmK34Zn+3wDbEWC5YArIkDhe04pZ/T9gSGxlAygWXhgK0F8X4T3FE0+ 7CCo/vBMqth9lXV12y8JpCwSTTRO0HqLqkMW2mS2ZR6hzKlOlZtWsLtcL+RlDMSc uYcYwW9BEFPAJEC2lif5D0aZ/gRHi6bdCmKfU5zM2P3EnL588CHbHBm+55R9Z820 Exi4kfr61qnClmG2moYuKxi3ISl0GW9l1SUFcMlqKsOGzee1V9Gvi+PKfsYJK5SI vpRwkM1GQLvsEVN5u1x1QzyMplEWwpI= -----END CERTIFICATE-----Generated at Wed Nov 5 04:45:09 2025 by rpki-client