$ rpki-client -vvf rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft File: giq84EQXvhV7KDO6OwIw3iOEwkA.mft (raw, json) Hash identifier: T9foeGptuIFGVgMTUnGL5/IDhgLldWyI+pEkiJNo8nA= Subject key identifier: 9C:12:D5:D1:95:14:28:6E:C0:CC:F3:4F:6B:E8:60:90:39:CA:AB:2C Authority key identifier: 82:2A:BC:E0:44:17:BE:15:7B:28:33:BA:3B:02:30:DE:23:84:C2:40 Certificate issuer: /CN=A911FCC1/serialNumber=822ABCE04417BE157B2833BA3B0230DE2384C240 Certificate serial: 0BB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft Manifest number: 0BAA Signing time: Sun 02 Nov 2025 18:55:57 +0000 Manifest this update: Sun 02 Nov 2025 18:55:57 +0000 Manifest next update: Sun 09 Nov 2025 18:55:57 +0000 Files and hashes: 1: giq84EQXvhV7KDO6OwIw3iOEwkA.crl (hash: AouewSXt9w4JUuNs8BMblAwbUikpUHfyZVdoLjij0NE=) 2: BFB35A9831E011EA91E99C3CC4F9AE02.roa (hash: 0GHCZ6nEXf3be8gydYVqGJhj2BigeoKuyRGIxasVxbo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.crl rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:55:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2992 (0xbb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FCC1, serialNumber=822ABCE04417BE157B2833BA3B0230DE2384C240 Validity Not Before: Nov 2 18:55:57 2025 GMT Not After : Nov 9 18:55:57 2025 GMT Subject: CN=6907a93d-d7e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:74:c7:74:aa:8a:65:d9:0d:52:a3:78:29:cd: 7f:92:94:a5:91:48:42:90:d3:c1:aa:e3:54:ce:ea: 34:0e:8a:44:77:4f:0a:27:8a:cd:f5:cd:b0:2e:8a: 08:4a:d6:c3:76:ef:25:c5:b3:b8:d9:17:37:4e:c7: 26:de:95:91:99:1c:fe:76:c2:ef:1e:7f:f3:ad:25: b1:ea:02:43:d6:3e:dc:1e:d4:0b:5a:0e:d0:10:1f: 22:4c:8e:ee:10:fb:cb:51:a2:e4:6e:48:1d:b7:5a: fa:6a:0b:4e:c4:fc:10:55:29:eb:45:93:37:d6:76: 27:b6:ae:47:7b:61:2d:77:aa:52:05:ca:15:77:a4: b2:3a:cd:95:21:56:97:bf:fd:50:16:04:5f:e6:f1: 99:11:e4:3e:ab:ad:41:0a:1d:48:19:d1:33:7f:fd: 81:10:84:c9:5e:9e:01:12:a2:08:15:8e:95:94:82: 9a:1e:d5:79:59:36:d5:0d:d0:47:8a:e8:27:1b:90: c0:df:9f:a9:cc:03:05:e6:21:1e:e5:26:7a:ca:34: f5:1a:47:d2:19:c5:5d:7e:d7:a4:24:a8:21:99:83: c1:5a:35:b6:07:17:37:64:17:a6:dc:2b:b5:67:53: ff:91:1d:ee:c8:01:9e:95:ad:67:39:f7:2d:77:a0: 0f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:12:D5:D1:95:14:28:6E:C0:CC:F3:4F:6B:E8:60:90:39:CA:AB:2C X509v3 Authority Key Identifier: keyid:82:2A:BC:E0:44:17:BE:15:7B:28:33:BA:3B:02:30:DE:23:84:C2:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:c5:85:e2:37:b7:3d:d8:5d:1c:a6:16:62:46:68:6e:60:7b: 58:5d:ab:16:10:23:82:0c:46:5f:b6:da:1f:50:03:4b:72:dc: dc:4f:c9:17:a2:d2:3c:fc:89:e3:99:d3:8b:36:bc:d0:62:2f: ab:2c:59:be:3d:1f:ee:c1:d7:54:8c:75:03:0c:b6:c6:a2:ed: a7:2e:9b:a9:36:69:91:41:e4:68:c7:d0:d7:21:ac:bf:11:7c: ba:dd:83:d0:83:2a:59:f9:b5:38:26:c7:80:77:b8:ce:87:5e: 6a:52:12:7a:11:96:e5:22:f1:5a:39:b2:f0:6a:71:91:8d:7b: d1:34:c2:58:c8:20:9b:52:0f:77:80:ca:98:98:f2:58:54:2a: 0d:9b:6d:72:7e:9e:38:23:29:fd:38:39:e9:a0:48:28:7a:0e: cf:81:3a:5d:c5:e4:77:ab:4b:fa:7c:e3:63:1c:12:95:c6:28: 39:f4:a7:cf:34:bc:a1:b7:f9:88:df:8a:46:c1:2d:bc:65:d6: a6:54:cd:6c:57:5d:a8:4c:58:87:87:e5:d6:68:6f:be:ac:e8: 5f:90:b6:a7:5a:ff:e9:89:d5:06:08:51:19:e4:2d:02:1c:94: 52:5d:4e:c8:19:63:fc:f0:9e:70:5d:2d:c5:d1:b0:84:e1:f6: 94:1c:11:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZDQzExMTAvBgNVBAUTKDgyMkFCQ0UwNDQxN0JFMTU3QjI4MzNCQTNCMDIzMERF MjM4NEMyNDAwHhcNMjUxMTAyMTg1NTU3WhcNMjUxMTA5MTg1NTU3WjAYMRYwFAYD VQQDEw02OTA3YTkzZC1kN2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoHTHdKqKZdkNUqN4Kc1/kpSlkUhCkNPBquNUzuo0DopEd08KJ4rN9c2wLooI StbDdu8lxbO42Rc3Tscm3pWRmRz+dsLvHn/zrSWx6gJD1j7cHtQLWg7QEB8iTI7u EPvLUaLkbkgdt1r6agtOxPwQVSnrRZM31nYntq5He2Etd6pSBcoVd6SyOs2VIVaX v/1QFgRf5vGZEeQ+q61BCh1IGdEzf/2BEITJXp4BEqIIFY6VlIKaHtV5WTbVDdBH iugnG5DA35+pzAMF5iEe5SZ6yjT1GkfSGcVdftekJKghmYPBWjW2Bxc3ZBem3Cu1 Z1P/kR3uyAGela1nOfctd6AP0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJwS1dGV FChuwMzzT2voYJA5yqssMB8GA1UdIwQYMBaAFIIqvOBEF74VeygzujsCMN4jhMJA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkNDMS8xNDk4RkM5RTMx RTAxMUVBODM3QkRFM0JDNEY5QUUwMi9naXE4NEVRWHZoVjdLRE82T3dJdzNpT0V3 a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dpcTg0RVFYdmhWN0tETzZPd0l3M2lPRXdrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkNDMS8xNDk4RkM5RTMxRTAxMUVBODM3QkRFM0JDNEY5QUUwMi9naXE4NEVRWHZo VjdLRE82T3dJdzNpT0V3a0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASxYXiN7c92F0cphZiRmhuYHtYXasWECOCDEZfttofUANLctzcT8kX otI8/InjmdOLNrzQYi+rLFm+PR/uwddUjHUDDLbGou2nLpupNmmRQeRox9DXIay/ EXy63YPQgypZ+bU4JseAd7jOh15qUhJ6EZblIvFaObLwanGRjXvRNMJYyCCbUg93 gMqYmPJYVCoNm21yfp44Iyn9ODnpoEgoeg7PgTpdxeR3q0v6fONjHBKVxig59KfP NLyht/mI34pGwS28ZdamVM1sV12oTFiHh+XWaG++rOhfkLanWv/pidUGCFEZ5C0C HJRSXU7IGWP88J5wXS3F0bCE4faUHBEb -----END CERTIFICATE-----Generated at Tue Nov 4 12:36:11 2025 by rpki-client