$ rpki-client -vvf rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft File: G43u2x08SMwcTCF7lpx5hUGkzHc.mft (raw, json) Hash identifier: e6OVa45Ip2/G+Kxwvfe0Jm1ghFKVKF2OPVuJOVsA21c= Subject key identifier: EC:24:A7:53:48:68:9A:B3:57:F0:6B:4C:4E:42:BF:1F:98:C8:97:01 Authority key identifier: 1B:8D:EE:DB:1D:3C:48:CC:1C:4C:21:7B:96:9C:79:85:41:A4:CC:77 Certificate issuer: /CN=A9124803/serialNumber=1B8DEEDB1D3C48CC1C4C217B969C798541A4CC77 Certificate serial: 06A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft Manifest number: 069B Signing time: Tue 04 Nov 2025 22:25:48 +0000 Manifest this update: Tue 04 Nov 2025 22:25:47 +0000 Manifest next update: Tue 11 Nov 2025 22:25:47 +0000 Files and hashes: 1: G43u2x08SMwcTCF7lpx5hUGkzHc.crl (hash: debxodnm+nlEa6+WB91XCz2Z+nR+bAwoJJn9nicPEmA=) 2: 62CCFF308C7211EB98A6DD43C4F9AE02.roa (hash: lV/cpNWUCFTUuQ8wWKZTK1Tzrge3tnngMyqR3AbKgb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.crl rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:25:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1698 (0x6a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124803, serialNumber=1B8DEEDB1D3C48CC1C4C217B969C798541A4CC77 Validity Not Before: Nov 4 22:25:47 2025 GMT Not After : Nov 11 22:25:47 2025 GMT Subject: CN=690a7d6c-74d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:da:7a:6a:5b:17:0c:89:16:da:f4:24:11:af: 6f:31:3b:50:19:ea:82:37:8f:61:c1:53:55:b6:26: 78:46:10:56:48:4e:54:41:09:c9:19:8d:64:62:c5: 3c:f9:85:a7:76:9f:7e:36:97:0a:ad:54:69:7d:29: 7d:c8:0c:8a:a2:d4:8b:3d:bf:62:03:00:7f:9e:9a: 71:11:fd:d1:54:82:4c:97:a4:26:a9:8e:f9:03:ee: be:ca:7f:1e:78:91:52:6b:69:df:9f:4e:ad:a7:31: 64:28:75:ac:88:6c:85:63:19:c1:0e:a8:72:2d:e7: c7:5a:f5:c6:29:96:52:a7:9d:5f:cf:1d:d4:4e:df: 0e:c4:15:4f:03:32:1d:0c:03:6d:1a:fc:4c:0c:12: 09:92:97:e7:95:f4:b5:36:19:9f:01:ed:40:0e:21: 40:ce:d1:6f:69:f1:79:ff:10:bd:89:ee:0f:55:4f: 29:5e:58:0c:3d:b6:6d:a9:bb:1c:32:ce:0b:9b:6e: 48:44:4e:a7:25:dc:2c:4c:67:e5:76:5e:e6:98:c3: da:8e:d0:32:c9:b0:01:11:6b:08:49:93:a3:34:94: 34:8c:13:e4:61:ba:c6:2a:d8:62:08:29:1e:21:29: f3:5f:b6:42:fe:3a:03:20:ae:7a:cd:41:3b:56:58: c2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:24:A7:53:48:68:9A:B3:57:F0:6B:4C:4E:42:BF:1F:98:C8:97:01 X509v3 Authority Key Identifier: keyid:1B:8D:EE:DB:1D:3C:48:CC:1C:4C:21:7B:96:9C:79:85:41:A4:CC:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:7d:2e:f9:4a:26:20:3f:95:92:20:a6:a5:a4:1c:ff:41:17: 7b:b1:81:42:d0:d8:a3:21:ad:bd:fc:d9:8e:0f:ed:d0:25:6a: 61:c2:cd:e2:a8:24:70:f6:2b:5a:ba:40:b6:90:86:cd:78:69: 1b:e1:08:92:84:08:a1:cf:e0:97:3f:56:14:d1:1c:80:7f:b4: 97:c5:70:6c:7b:a3:76:15:71:be:70:c6:8f:c9:70:c0:8f:d3: dd:98:36:24:ba:42:93:e1:67:2e:17:77:86:7b:4d:82:2b:72: f6:ed:66:b1:2d:0f:53:a0:14:45:70:51:a3:00:52:e0:61:cd: 3e:cb:b8:21:57:0c:24:06:d6:30:37:67:22:41:dc:ea:6b:53: 34:29:a0:a1:4d:75:a9:4c:f7:b6:7b:ff:0d:62:0f:99:06:c0: 52:31:f1:d5:d5:48:78:8c:5f:a1:49:cd:ea:f4:92:04:bc:d3: 39:54:dc:8e:b7:3b:e4:86:02:8c:7e:32:ad:52:c3:20:22:ed: a1:0e:58:0b:1a:80:dd:57:bc:4a:71:2b:25:4b:97:1d:f2:c6: bf:ea:03:40:48:73:46:1e:a0:05:69:5f:90:c1:f0:3b:16:b5: 46:c7:e7:4f:8f:43:1e:1d:92:0b:1c:16:77:57:53:29:85:5e: 08:61:3c:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ4MDMxMTAvBgNVBAUTKDFCOERFRURCMUQzQzQ4Q0MxQzRDMjE3Qjk2OUM3OTg1 NDFBNENDNzcwHhcNMjUxMTA0MjIyNTQ3WhcNMjUxMTExMjIyNTQ3WjAYMRYwFAYD VQQDEw02OTBhN2Q2Yy03NGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9p6alsXDIkW2vQkEa9vMTtQGeqCN49hwVNVtiZ4RhBWSE5UQQnJGY1kYsU8 +YWndp9+NpcKrVRpfSl9yAyKotSLPb9iAwB/nppxEf3RVIJMl6QmqY75A+6+yn8e eJFSa2nfn06tpzFkKHWsiGyFYxnBDqhyLefHWvXGKZZSp51fzx3UTt8OxBVPAzId DANtGvxMDBIJkpfnlfS1NhmfAe1ADiFAztFvafF5/xC9ie4PVU8pXlgMPbZtqbsc Ms4Lm25IRE6nJdwsTGfldl7mmMPajtAyybABEWsISZOjNJQ0jBPkYbrGKthiCCke ISnzX7ZC/joDIK56zUE7VljCBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwkp1NI aJqzV/BrTE5Cvx+YyJcBMB8GA1UdIwQYMBaAFBuN7tsdPEjMHEwhe5aceYVBpMx3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDgwMy85NzdENzM2MDhD NzAxMUVCQUVBMTEzNDFDNEY5QUUwMi9HNDN1MngwOFNNd2NUQ0Y3bHB4NWhVR2t6 SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0M3UyeDA4U013Y1RDRjdscHg1aFVHa3pIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDgwMy85NzdENzM2MDhDNzAxMUVCQUVBMTEzNDFDNEY5QUUwMi9HNDN1MngwOFNN d2NUQ0Y3bHB4NWhVR2t6SGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCifS75SiYgP5WSIKalpBz/QRd7sYFC0NijIa29/NmOD+3QJWphws3i qCRw9itaukC2kIbNeGkb4QiShAihz+CXP1YU0RyAf7SXxXBse6N2FXG+cMaPyXDA j9PdmDYkukKT4WcuF3eGe02CK3L27WaxLQ9ToBRFcFGjAFLgYc0+y7ghVwwkBtYw N2ciQdzqa1M0KaChTXWpTPe2e/8NYg+ZBsBSMfHV1Uh4jF+hSc3q9JIEvNM5VNyO tzvkhgKMfjKtUsMgIu2hDlgLGoDdV7xKcSslS5cd8sa/6gNASHNGHqAFaV+QwfA7 FrVGx+dPj0MeHZILHBZ3V1MphV4IYTw1 -----END CERTIFICATE-----Generated at Wed Nov 5 17:18:33 2025 by rpki-client