$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft File: g1sFZ9k-rArjJOofFrPDnLGzOI4.mft (raw, json) Hash identifier: gjga9v7ZNeORsHDRQdP83VAL4BNYsPcd5Fx7FFFChpc= Subject key identifier: A1:3A:CC:CF:82:43:E4:4C:F7:91:36:98:44:0C:EF:FA:5D:97:17:A1 Authority key identifier: 83:5B:05:67:D9:3E:AC:0A:E3:24:EA:1F:16:B3:C3:9C:B1:B3:38:8E Certificate issuer: /CN=A911F5B7/serialNumber=835B0567D93EAC0AE324EA1F16B3C39CB1B3388E Certificate serial: 0B19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft Manifest number: 0CE4 Signing time: Tue 04 Nov 2025 19:25:40 +0000 Manifest this update: Tue 04 Nov 2025 19:25:40 +0000 Manifest next update: Tue 11 Nov 2025 19:25:40 +0000 Files and hashes: 1: g1sFZ9k-rArjJOofFrPDnLGzOI4.crl (hash: PTduX08aHe8+SzEYJwf1BiTEdLOTh38tqsWAG8wttKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.crl rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:25:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2841 (0xb19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5B7, serialNumber=835B0567D93EAC0AE324EA1F16B3C39CB1B3388E Validity Not Before: Nov 4 19:25:40 2025 GMT Not After : Nov 11 19:25:40 2025 GMT Subject: CN=690a5334-ac44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f2:03:da:03:4f:2d:5a:84:bb:54:91:d0:56: dd:78:30:13:5d:90:51:58:a6:75:4f:11:49:d0:cb: 09:0a:4b:db:24:46:da:fc:57:86:90:20:cf:9d:21: 4e:85:4e:66:58:bf:40:9e:ea:9d:03:16:7d:20:61: 2d:02:f8:e1:bf:d2:e6:c9:9f:9c:be:8a:ce:0d:cf: bb:a4:c6:e8:58:b3:c9:d4:67:b8:73:c9:28:bf:14: 05:d0:b5:af:6e:ed:17:c2:49:74:01:86:1c:c2:29: be:c1:aa:95:2c:d2:0d:e6:b1:a8:db:01:ab:76:a1: a6:ae:0e:68:1d:ea:3a:5d:40:32:d8:d0:b2:7e:aa: e3:a8:69:a6:11:fd:00:ec:4d:01:53:20:a8:a1:03: b8:8b:80:55:4a:48:28:b6:08:4d:9f:c8:51:7e:1c: 75:0e:0d:d9:1d:e9:df:8f:59:4d:3b:70:e4:2a:fb: 5f:ca:46:c6:e3:8b:4a:d6:9d:d6:9e:d1:ad:b0:74: 02:a3:88:e3:ac:fb:f7:00:95:48:91:66:2e:47:62: a3:37:b6:19:86:e6:62:71:26:2a:9d:39:c2:12:8d: 7b:d6:02:30:f3:40:3d:39:96:5a:18:53:ab:9e:7b: 81:01:68:29:75:b9:66:77:9b:47:e5:e7:4c:8e:1d: ce:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:3A:CC:CF:82:43:E4:4C:F7:91:36:98:44:0C:EF:FA:5D:97:17:A1 X509v3 Authority Key Identifier: keyid:83:5B:05:67:D9:3E:AC:0A:E3:24:EA:1F:16:B3:C3:9C:B1:B3:38:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:44:b3:87:46:9a:5c:70:52:d0:5b:2b:83:57:c6:b0:27:bc: 89:37:fd:b2:b6:b1:ff:5e:cf:61:5d:e4:51:8b:51:c2:fc:fe: b8:6f:2b:aa:50:36:a9:90:76:f0:1b:a0:f9:0a:0d:3d:35:86: e1:5c:9d:8b:c4:ef:4f:89:19:0f:09:28:5e:a2:d2:d9:cd:db: ed:37:06:6a:ba:a4:e5:32:0b:c5:e2:b8:e3:fb:84:04:eb:b8: ef:3b:84:84:5f:e3:21:21:5f:8a:25:28:36:5a:d5:88:f2:aa: 87:0a:7f:01:8b:33:62:a5:2e:26:81:11:8b:12:07:77:5d:24: de:35:e2:77:01:d1:05:a7:b6:8e:68:b5:7e:21:d5:80:80:79: 9e:fe:e6:6f:74:75:f5:3d:9d:d5:69:94:b4:47:02:37:a4:7b: 3c:b9:2a:d1:42:03:80:f6:cb:af:89:f7:5f:9e:21:55:bc:72: dc:c3:71:13:9a:bb:a0:17:ba:ab:43:63:4e:ba:1a:13:be:fe: 2f:1f:a1:41:5f:b5:7a:52:70:c5:20:e0:fa:c2:c3:14:dd:1a: 85:40:45:8c:82:57:ff:60:46:6b:cb:0d:ca:e4:17:5f:f3:9c: 71:2e:2e:51:e3:39:6b:bd:d9:66:dd:32:0a:0a:c5:ab:e7:d3: 47:2a:c8:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1QjcxMTAvBgNVBAUTKDgzNUIwNTY3RDkzRUFDMEFFMzI0RUExRjE2QjNDMzlD QjFCMzM4OEUwHhcNMjUxMTA0MTkyNTQwWhcNMjUxMTExMTkyNTQwWjAYMRYwFAYD VQQDEw02OTBhNTMzNC1hYzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2vID2gNPLVqEu1SR0FbdeDATXZBRWKZ1TxFJ0MsJCkvbJEba/FeGkCDPnSFO hU5mWL9AnuqdAxZ9IGEtAvjhv9LmyZ+cvorODc+7pMboWLPJ1Ge4c8kovxQF0LWv bu0Xwkl0AYYcwim+waqVLNIN5rGo2wGrdqGmrg5oHeo6XUAy2NCyfqrjqGmmEf0A 7E0BUyCooQO4i4BVSkgotghNn8hRfhx1Dg3ZHenfj1lNO3DkKvtfykbG44tK1p3W ntGtsHQCo4jjrPv3AJVIkWYuR2KjN7YZhuZicSYqnTnCEo171gIw80A9OZZaGFOr nnuBAWgpdblmd5tH5edMjh3O+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKE6zM+C Q+RM95E2mEQM7/pdlxehMB8GA1UdIwQYMBaAFINbBWfZPqwK4yTqHxazw5yxsziO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVCNy83MUU3QTIyMjUx OTUxMUVBODQ2NEJBNzhDNEY5QUUwMi9nMXNGWjlrLXJBcmpKT29mRnJQRG5MR3pP STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cxc0ZaOWstckFyakpPb2ZGclBEbkxHek9JNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVCNy83MUU3QTIyMjUxOTUxMUVBODQ2NEJBNzhDNEY5QUUwMi9nMXNGWjlrLXJB cmpKT29mRnJQRG5MR3pPSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRRLOHRppccFLQWyuDV8awJ7yJN/2ytrH/Xs9hXeRRi1HC/P64byuq UDapkHbwG6D5Cg09NYbhXJ2LxO9PiRkPCSheotLZzdvtNwZquqTlMgvF4rjj+4QE 67jvO4SEX+MhIV+KJSg2WtWI8qqHCn8BizNipS4mgRGLEgd3XSTeNeJ3AdEFp7aO aLV+IdWAgHme/uZvdHX1PZ3VaZS0RwI3pHs8uSrRQgOA9suvifdfniFVvHLcw3ET mrugF7qrQ2NOuhoTvv4vH6FBX7V6UnDFIOD6wsMU3RqFQEWMglf/YEZryw3K5Bdf 85xxLi5R4zlrvdlm3TIKCsWr59NHKsjX -----END CERTIFICATE-----Generated at Wed Nov 5 04:46:29 2025 by rpki-client