$ rpki-client -vvf rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft File: GagF0CaVVoPz_uVj-Oagonjwv3E.mft (raw, json) Hash identifier: TEDyZWKJgjdC+WV/LjbVDkGBr5qxG/MAmizFazZHBsU= Subject key identifier: CE:DC:E5:83:8E:C9:57:4A:E7:F9:A0:9B:00:41:C5:BA:B0:6F:2E:36 Authority key identifier: 19:A8:05:D0:26:95:56:83:F3:FE:E5:63:F8:E6:A0:A2:78:F0:BF:71 Certificate issuer: /CN=A912111B/serialNumber=19A805D026955683F3FEE563F8E6A0A278F0BF71 Certificate serial: 06AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft Manifest number: 06A9 Signing time: Tue 04 Nov 2025 22:21:26 +0000 Manifest this update: Tue 04 Nov 2025 22:21:25 +0000 Manifest next update: Tue 11 Nov 2025 22:21:25 +0000 Files and hashes: 1: GagF0CaVVoPz_uVj-Oagonjwv3E.crl (hash: JncFBxkFDZ4wNXMsSF5JTAnOtZTrY/vqS6UzgOlsp0I=) 2: 6D3057FC85F511EBB5C36F09C4F9AE02.roa (hash: j+dLoRV+1O81d7fGrVAaKGQRyaLFal/pTYtw+D6AbWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.crl rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1711 (0x6af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912111B, serialNumber=19A805D026955683F3FEE563F8E6A0A278F0BF71 Validity Not Before: Nov 4 22:21:25 2025 GMT Not After : Nov 11 22:21:25 2025 GMT Subject: CN=690a7c66-7f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:68:1a:db:60:25:d0:6a:8f:c6:51:22:d2:75: e5:db:f5:73:52:67:21:b6:9d:ac:97:ff:3c:54:92: 79:83:6f:5c:f5:c2:9e:ce:f0:a6:61:68:81:a8:49: 5d:a0:32:ea:41:f5:f3:d8:f8:f1:af:28:69:b7:20: d8:01:9d:72:ce:9d:5c:6d:a9:c6:f6:87:a9:37:bc: 40:3c:b9:33:33:ac:80:98:e8:4e:98:5e:7c:d6:7e: ad:cb:a0:91:d8:3b:01:cf:3a:f6:fb:38:e7:bf:b5: 22:8a:6d:37:d8:eb:4b:ff:83:31:0f:d0:da:b3:10: 56:89:8c:f1:b5:86:d1:93:ba:e9:28:e0:e5:94:ab: 10:9d:f0:44:a7:7b:96:4e:d8:aa:62:17:b7:2f:61: c4:e4:04:6f:dd:47:32:93:46:22:59:f5:ab:02:ac: 75:7e:3a:2c:7d:a0:d6:01:54:2a:3d:8a:95:bb:48: 05:51:42:19:7f:84:69:55:89:fe:a6:0a:32:20:59: b6:d9:1f:c1:ed:2c:28:b3:6c:64:7a:cb:29:b4:0b: 34:c4:22:b9:d8:f7:84:75:d6:93:17:46:d9:bd:bc: 5b:33:0b:52:6b:90:14:a2:08:e2:71:e7:7b:45:66: fe:ff:6c:07:2d:5a:9f:fe:95:0a:90:1f:54:c8:51: 73:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:DC:E5:83:8E:C9:57:4A:E7:F9:A0:9B:00:41:C5:BA:B0:6F:2E:36 X509v3 Authority Key Identifier: keyid:19:A8:05:D0:26:95:56:83:F3:FE:E5:63:F8:E6:A0:A2:78:F0:BF:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:51:ff:32:dd:28:f1:eb:bd:82:0e:36:c2:98:da:86:ce:4b: 01:61:02:b9:e7:c9:81:9f:fc:f3:b2:e2:b1:6b:6f:2a:fb:dd: 8d:49:cc:cf:67:1e:33:8c:f3:8a:9a:27:7b:9f:5f:78:b6:30: d4:08:9b:d4:05:16:62:6b:7a:96:f6:b3:11:e7:14:42:d7:6f: c8:60:15:e7:da:ea:08:d7:cd:84:ec:f3:26:4c:3e:c1:43:e9: 6c:22:9c:12:be:59:63:91:f3:d5:60:f0:da:30:41:1b:ca:f7: 0f:af:bb:2e:27:79:d6:d3:dc:84:7d:0b:22:ad:20:a8:d6:4c: dd:06:88:b7:ab:c5:29:78:f7:54:9d:53:01:1c:99:8b:63:03: e0:a5:24:11:b6:7c:75:08:1e:61:a5:7c:6e:06:7e:c6:fe:e3: 21:0c:c0:97:a5:c2:09:5d:fb:51:1c:5a:79:ec:84:c1:4e:75: c2:6a:51:fe:0a:06:d3:d3:f1:da:ed:53:04:83:e0:b8:c6:ae: 9c:2f:f0:1d:ec:a4:8c:b7:7a:1b:ee:96:87:da:c7:2b:41:81: 3c:3b:e5:bb:ab:69:1d:42:a7:d6:59:5f:bd:d3:12:c5:62:1f: 60:1b:1e:96:de:4c:da:69:21:b2:32:76:be:15:36:83:18:ed: be:99:44:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjExMUIxMTAvBgNVBAUTKDE5QTgwNUQwMjY5NTU2ODNGM0ZFRTU2M0Y4RTZBMEEy NzhGMEJGNzEwHhcNMjUxMTA0MjIyMTI1WhcNMjUxMTExMjIyMTI1WjAYMRYwFAYD VQQDEw02OTBhN2M2Ni03ZjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApmga22Al0GqPxlEi0nXl2/VzUmchtp2sl/88VJJ5g29c9cKezvCmYWiBqEld oDLqQfXz2PjxryhptyDYAZ1yzp1cbanG9oepN7xAPLkzM6yAmOhOmF581n6ty6CR 2DsBzzr2+zjnv7Uiim032OtL/4MxD9DasxBWiYzxtYbRk7rpKODllKsQnfBEp3uW TtiqYhe3L2HE5ARv3Ucyk0YiWfWrAqx1fjosfaDWAVQqPYqVu0gFUUIZf4RpVYn+ pgoyIFm22R/B7Swos2xkessptAs0xCK52PeEddaTF0bZvbxbMwtSa5AUogjiced7 RWb+/2wHLVqf/pUKkB9UyFFzRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7c5YOO yVdK5/mgmwBBxbqwby42MB8GA1UdIwQYMBaAFBmoBdAmlVaD8/7lY/jmoKJ48L9x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTExQi8zQkQyOEYxQTg1 RjMxMUVCQTEwNDJEODBDNEY5QUUwMi9HYWdGMENhVlZvUHpfdVZqLU9hZ29uand2 M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dhZ0YwQ2FWVm9Qel91VmotT2Fnb25qd3YzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTExQi8zQkQyOEYxQTg1RjMxMUVCQTEwNDJEODBDNEY5QUUwMi9HYWdGMENhVlZv UHpfdVZqLU9hZ29uand2M0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4Uf8y3Sjx672CDjbCmNqGzksBYQK558mBn/zzsuKxa28q+92NSczP Zx4zjPOKmid7n194tjDUCJvUBRZia3qW9rMR5xRC12/IYBXn2uoI182E7PMmTD7B Q+lsIpwSvlljkfPVYPDaMEEbyvcPr7suJ3nW09yEfQsirSCo1kzdBoi3q8UpePdU nVMBHJmLYwPgpSQRtnx1CB5hpXxuBn7G/uMhDMCXpcIJXftRHFp57ITBTnXCalH+ CgbT0/Ha7VMEg+C4xq6cL/Ad7KSMt3ob7paH2scrQYE8O+W7q2kdQqfWWV+90xLF Yh9gGx6W3kzaaSGyMna+FTaDGO2+mURN -----END CERTIFICATE-----Generated at Wed Nov 5 08:01:17 2025 by rpki-client