$ rpki-client -vvf rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft File: gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft (raw, json) Hash identifier: LJ8x3EHq/8e2RqZ5CfQSWXZ2CkEcx27GiHsiMBXXqmk= Subject key identifier: E9:80:4D:6E:61:8C:11:3E:CD:81:ED:85:F8:42:C3:FA:0A:E9:3D:2B Authority key identifier: 81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24 Certificate issuer: /CN=A912096C/serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124 Certificate serial: 07AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft Manifest number: 07A1 Signing time: Tue 04 Nov 2025 21:31:50 +0000 Manifest this update: Tue 04 Nov 2025 21:31:50 +0000 Manifest next update: Tue 11 Nov 2025 21:31:50 +0000 Files and hashes: 1: gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl (hash: u7frhLfXYthOYLSufImu6vowOZXNSKbMmFwtUarr0aY=) 2: 7D7B467CE06011EDBB10FD53C4F9AE02.roa (hash: S7PCclJgGscLtYe2Pj+Y6a3iFp4ZeeTuzvJeZrm+yCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1962 (0x7aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912096C, serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124 Validity Not Before: Nov 4 21:31:50 2025 GMT Not After : Nov 11 21:31:50 2025 GMT Subject: CN=690a70c6-9f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:b5:64:4b:52:7b:c8:cc:44:04:08:21:56:3e: 21:4f:e2:83:d9:4d:54:d2:33:87:f2:f0:8a:ce:cb: 4f:b7:3c:34:7d:94:92:aa:a1:05:d5:05:9d:1e:d8: 69:f3:05:6c:84:13:07:08:cd:b2:37:96:be:39:2e: 30:4d:ef:23:d2:f7:27:6b:93:ae:1f:f2:73:ec:fd: d0:47:82:cb:8b:c1:39:0c:69:5f:e7:41:ca:f6:11: 77:d8:51:60:50:79:c7:a9:e1:32:95:d7:48:f8:fc: 23:7b:a8:71:b9:0f:02:91:a8:4f:db:4b:96:42:77: 7b:dd:76:bb:fa:dd:6d:10:93:22:57:39:5a:4b:b4: 5c:51:46:81:ef:aa:8c:04:24:88:48:a1:49:c9:59: 3d:35:de:2e:02:36:59:f2:7d:18:ea:de:bb:a4:2c: f6:4f:3f:de:2c:4b:56:37:aa:30:ac:07:a7:9a:90: a3:e3:e1:bc:6d:93:cc:bc:a1:d8:37:a3:06:7e:28: fc:c9:75:eb:61:b1:e7:42:7e:4f:68:d6:5f:7a:b9: a2:23:7d:55:45:62:7f:a9:78:18:9b:3b:6e:b4:bf: 81:c8:67:08:19:b0:4d:55:86:60:3e:e4:c4:e9:af: 8c:68:07:42:8d:24:67:b9:f1:ae:ec:21:a9:bb:f3: 62:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:80:4D:6E:61:8C:11:3E:CD:81:ED:85:F8:42:C3:FA:0A:E9:3D:2B X509v3 Authority Key Identifier: keyid:81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:cc:32:07:3e:50:f5:65:89:aa:5e:a9:e0:e6:e9:2f:45:f7: 63:3e:26:44:37:51:72:13:50:10:a9:07:30:54:a3:84:d0:ec: 51:2c:18:91:f0:83:56:5c:24:69:d8:19:60:6c:2c:8d:47:cf: b0:64:ca:91:ef:f9:9e:21:12:d9:7e:c7:a0:75:b5:0f:20:6a: 7e:49:15:35:e9:9f:e6:a3:4c:a0:da:07:09:57:f1:0a:15:0e: 8c:26:df:c3:93:7f:20:f8:5d:83:f7:ac:d3:2b:c2:82:6d:f4: f3:56:17:71:d5:e0:42:d3:29:50:5f:47:dc:ab:84:59:27:76: f7:83:4a:27:5d:db:3b:d4:e3:df:f8:da:f7:79:83:0a:63:a9: 86:20:07:d1:56:74:f7:73:a0:b5:1a:f3:58:bc:3e:cb:39:7a: b5:c8:bb:5f:39:d1:3d:8f:c0:34:5c:4f:35:44:cb:a7:74:10: 43:6a:37:1d:a8:5a:7e:5f:f7:90:cf:56:c3:b6:5c:f9:07:35: da:bc:84:04:a6:53:60:18:e1:b8:20:ef:04:7e:a6:65:59:e1: 7f:e8:8d:f3:11:ff:3e:7d:e4:c6:12:a0:7f:24:2b:74:59:e7: 6f:58:43:2f:69:aa:c9:59:3b:27:d1:31:de:b4:e0:d7:dd:1f: 46:0e:4c:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NkMxMTAvBgNVBAUTKDgxOTc2NjNBN0Y2MzQ3RDU5MUI2QjJCOUFERDVBMkQ1 NzRFOTExMjQwHhcNMjUxMTA0MjEzMTUwWhcNMjUxMTExMjEzMTUwWjAYMRYwFAYD VQQDEw02OTBhNzBjNi05ZjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8rVkS1J7yMxEBAghVj4hT+KD2U1U0jOH8vCKzstPtzw0fZSSqqEF1QWdHthp 8wVshBMHCM2yN5a+OS4wTe8j0vcna5OuH/Jz7P3QR4LLi8E5DGlf50HK9hF32FFg UHnHqeEylddI+Pwje6hxuQ8CkahP20uWQnd73Xa7+t1tEJMiVzlaS7RcUUaB76qM BCSISKFJyVk9Nd4uAjZZ8n0Y6t67pCz2Tz/eLEtWN6owrAenmpCj4+G8bZPMvKHY N6MGfij8yXXrYbHnQn5PaNZfermiI31VRWJ/qXgYmztutL+ByGcIGbBNVYZgPuTE 6a+MaAdCjSRnufGu7CGpu/NiqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOmATW5h jBE+zYHthfhCw/oK6T0rMB8GA1UdIwQYMBaAFIGXZjp/Y0fVkbayua3VotV06REk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk2Qy8xRDMxQzE4NDI4 OTIxMUVCQUM4Q0NFMTNDNEY5QUUwMi9nWmRtT245alI5V1J0cks1cmRXaTFYVHBF U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2daZG1PbjlqUjlXUnRySzVyZFdpMVhUcEVTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk2Qy8xRDMxQzE4NDI4OTIxMUVCQUM4Q0NFMTNDNEY5QUUwMi9nWmRtT245alI5 V1J0cks1cmRXaTFYVHBFU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/zDIHPlD1ZYmqXqng5ukvRfdjPiZEN1FyE1AQqQcwVKOE0OxRLBiR 8INWXCRp2BlgbCyNR8+wZMqR7/meIRLZfsegdbUPIGp+SRU16Z/mo0yg2gcJV/EK FQ6MJt/Dk38g+F2D96zTK8KCbfTzVhdx1eBC0ylQX0fcq4RZJ3b3g0onXds71OPf +Nr3eYMKY6mGIAfRVnT3c6C1GvNYvD7LOXq1yLtfOdE9j8A0XE81RMundBBDajcd qFp+X/eQz1bDtlz5BzXavIQEplNgGOG4IO8EfqZlWeF/6I3zEf8+feTGEqB/JCt0 WedvWEMvaarJWTsn0THetODX3R9GDkxg -----END CERTIFICATE-----Generated at Wed Nov 5 04:00:24 2025 by rpki-client