$ rpki-client -vvf rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft File: GiOYaENWXf_IAPgP8pa6sa03FOw.mft (raw, json) Hash identifier: F6ZZHX5fE/RCDn9CyMtsesha0XSoiZO5V9meD0vcpH8= Subject key identifier: 71:CE:8F:38:80:8A:FF:BA:A8:38:A6:0D:CB:F4:54:2B:C5:21:55:EA Authority key identifier: 1A:23:98:68:43:56:5D:FF:C8:00:F8:0F:F2:96:BA:B1:AD:37:14:EC Certificate issuer: /CN=A911F55D/serialNumber=1A23986843565DFFC800F80FF296BAB1AD3714EC Certificate serial: 03AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft Manifest number: 03A3 Signing time: Wed 05 Nov 2025 00:49:05 +0000 Manifest this update: Wed 05 Nov 2025 00:49:05 +0000 Manifest next update: Wed 12 Nov 2025 00:49:05 +0000 Files and hashes: 1: GiOYaENWXf_IAPgP8pa6sa03FOw.crl (hash: CvHcJpA/ZlW1BUA7zInRk8hBKGz8CQ9M+Rvgyc4otbc=) 2: 96C26F3EB7AD11ECA2E94A7EC4F9AE02.roa (hash: 07YWg9g83guD20U5WpW8ibBwLyL4HcWmJhNvyQx5O2s=) 3: 977ED926B7AD11ECA2E94A7EC4F9AE02.roa (hash: l9YGphPLih+4p0TDLk8PQxvCJvvtiquaBZzq1Oot6Xw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.crl rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:49:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 941 (0x3ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F55D, serialNumber=1A23986843565DFFC800F80FF296BAB1AD3714EC Validity Not Before: Nov 5 00:49:05 2025 GMT Not After : Nov 12 00:49:05 2025 GMT Subject: CN=690a9f01-aeb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c6:f9:d3:de:e9:4e:50:cc:86:7c:52:80:dc: 35:ac:6c:d1:cf:fe:4e:40:9a:8b:a8:7c:5f:0b:07: 55:10:f0:1e:24:80:c8:d1:2f:5d:b9:6d:08:87:df: 13:d0:25:55:68:f9:15:e2:f4:28:0e:2b:5f:ed:12: fc:27:ec:74:a9:c9:8d:b0:04:66:f8:a1:4c:fa:32: 0d:a7:9c:9d:4e:36:a1:fc:4d:d9:90:2f:0a:c5:2b: 6c:50:5d:e8:bd:d6:94:02:f9:8a:d4:0a:fb:5a:f7: e1:10:cf:0f:2e:10:1c:f5:cc:14:a5:66:4d:5a:c4: fe:fd:f3:60:80:61:7f:c1:fd:ba:6d:99:26:66:0d: 3d:a9:bd:ca:ec:06:0c:3f:7c:ff:80:d5:82:2b:6b: 3d:aa:2c:7b:a8:dc:00:dc:a2:9c:82:7d:12:aa:67: 84:e8:22:57:90:fc:eb:36:29:a8:6a:be:11:0f:6d: 9a:36:97:ce:eb:a0:7a:3d:71:d9:4c:f0:50:f2:7e: 21:82:eb:57:3f:3f:14:e9:d6:08:66:5d:fd:2e:7c: ed:5f:01:d8:49:13:c8:8d:8e:4c:40:83:52:0b:18: e5:4f:b4:78:e4:31:77:6c:ab:01:7f:8b:03:38:29: 14:d7:80:3c:37:c2:d0:c3:ac:42:49:5f:d8:7e:ac: f5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:CE:8F:38:80:8A:FF:BA:A8:38:A6:0D:CB:F4:54:2B:C5:21:55:EA X509v3 Authority Key Identifier: keyid:1A:23:98:68:43:56:5D:FF:C8:00:F8:0F:F2:96:BA:B1:AD:37:14:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:b1:aa:aa:24:15:ec:0d:55:e8:4d:92:01:b6:d1:59:2f:bc: 73:bb:18:5e:44:f7:3e:49:80:68:68:0a:43:04:2d:74:93:1d: 4b:25:5b:f6:61:62:ac:9f:23:d9:3b:25:12:20:28:5f:ea:70: 3e:02:2f:3d:4d:89:26:75:31:39:70:0d:50:79:ef:df:a9:78: 07:f9:6a:25:61:88:b6:e0:1b:dc:e7:21:e4:60:98:d3:75:75: ea:ca:2f:86:91:94:e9:39:9b:2e:41:23:f1:e9:2e:df:6c:3a: c6:b1:a6:0b:ff:a0:e5:73:56:5b:c8:e0:93:ca:2a:22:c6:3a: 24:e6:88:79:59:5f:24:fc:40:1b:7c:0b:78:48:68:9d:b6:42: 98:6d:fc:05:7e:22:b3:76:33:40:41:56:b3:01:31:60:a6:60: 40:db:0d:23:be:a9:2a:88:81:23:70:46:06:58:ea:7e:3e:e8: 48:95:38:5f:5d:0b:99:94:79:4b:5d:ac:e2:9b:ee:75:93:25: f9:ba:0d:b8:0a:58:59:ff:e7:25:54:96:77:66:79:25:a6:ed: 37:3a:b3:1b:1c:83:63:ec:7b:57:aa:8c:eb:04:f9:0b:f8:36: 35:fc:02:a0:2b:a2:59:f4:ec:95:d3:8f:26:28:f0:29:83:64: a3:81:21:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1NUQxMTAvBgNVBAUTKDFBMjM5ODY4NDM1NjVERkZDODAwRjgwRkYyOTZCQUIx QUQzNzE0RUMwHhcNMjUxMTA1MDA0OTA1WhcNMjUxMTEyMDA0OTA1WjAYMRYwFAYD VQQDEw02OTBhOWYwMS1hZWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArcb5097pTlDMhnxSgNw1rGzRz/5OQJqLqHxfCwdVEPAeJIDI0S9duW0Ih98T 0CVVaPkV4vQoDitf7RL8J+x0qcmNsARm+KFM+jINp5ydTjah/E3ZkC8KxStsUF3o vdaUAvmK1Ar7WvfhEM8PLhAc9cwUpWZNWsT+/fNggGF/wf26bZkmZg09qb3K7AYM P3z/gNWCK2s9qix7qNwA3KKcgn0SqmeE6CJXkPzrNimoar4RD22aNpfO66B6PXHZ TPBQ8n4hgutXPz8U6dYIZl39LnztXwHYSRPIjY5MQINSCxjlT7R45DF3bKsBf4sD OCkU14A8N8LQw6xCSV/Yfqz1IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHHOjziA iv+6qDimDcv0VCvFIVXqMB8GA1UdIwQYMBaAFBojmGhDVl3/yAD4D/KWurGtNxTs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjU1RC80MEU0M0I4MEI3 QUIxMUVDOUU1NTMxN0RDNEY5QUUwMi9HaU9ZYUVOV1hmX0lBUGdQOHBhNnNhMDNG T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dpT1lhRU5XWGZfSUFQZ1A4cGE2c2EwM0ZPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjU1RC80MEU0M0I4MEI3QUIxMUVDOUU1NTMxN0RDNEY5QUUwMi9HaU9ZYUVOV1hm X0lBUGdQOHBhNnNhMDNGT3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrsaqqJBXsDVXoTZIBttFZL7xzuxheRPc+SYBoaApDBC10kx1LJVv2 YWKsnyPZOyUSIChf6nA+Ai89TYkmdTE5cA1Qee/fqXgH+WolYYi24Bvc5yHkYJjT dXXqyi+GkZTpOZsuQSPx6S7fbDrGsaYL/6Dlc1ZbyOCTyioixjok5oh5WV8k/EAb fAt4SGidtkKYbfwFfiKzdjNAQVazATFgpmBA2w0jvqkqiIEjcEYGWOp+PuhIlThf XQuZlHlLXazim+51kyX5ug24ClhZ/+clVJZ3Znklpu03OrMbHINj7HtXqozrBPkL +DY1/AKgK6JZ9OyV048mKPApg2SjgSFV -----END CERTIFICATE-----Generated at Wed Nov 5 10:00:58 2025 by rpki-client