$ rpki-client -vvf rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft File: mgZOprZttN4gyTzAQbhaFwbIBnI.mft (raw, json) Hash identifier: uwNxU2tdVLsK34RZI1/UqA6IUCe6i/Kmh37T4/TkSbo= Subject key identifier: 63:CB:F8:CC:98:EE:42:32:C8:BF:1C:BD:43:4E:60:5D:A7:9F:4A:64 Authority key identifier: 9A:06:4E:A6:B6:6D:B4:DE:20:C9:3C:C0:41:B8:5A:17:06:C8:06:72 Certificate issuer: /CN=A913A5BD/serialNumber=9A064EA6B66DB4DE20C93CC041B85A1706C80672 Certificate serial: 02A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgZOprZttN4gyTzAQbhaFwbIBnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft Manifest number: 02A1 Signing time: Mon 03 Nov 2025 01:29:45 +0000 Manifest this update: Mon 03 Nov 2025 01:29:44 +0000 Manifest next update: Mon 10 Nov 2025 01:29:44 +0000 Files and hashes: 1: mgZOprZttN4gyTzAQbhaFwbIBnI.crl (hash: gSRO1CIhNMDo7NdVG95ZZgwQoZ9QGAgvAojuSEUqDOg=) 2: C6B3DBFE1CF911EDBAE62F45C4F9AE02.roa (hash: omp1fXUs+vDBv/MaKIuGTrmCJ5TEGYnfoKG3I8GKsAA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.crl rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgZOprZttN4gyTzAQbhaFwbIBnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 678 (0x2a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A5BD, serialNumber=9A064EA6B66DB4DE20C93CC041B85A1706C80672 Validity Not Before: Nov 3 01:29:44 2025 GMT Not After : Nov 10 01:29:44 2025 GMT Subject: CN=69080588-0a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d7:dd:fa:95:02:12:4a:3d:1d:58:87:65:7c: 66:27:99:c1:c0:31:10:e4:3e:2d:f8:12:41:ba:76: 09:85:4c:ea:b1:ec:71:11:94:91:d5:5f:6d:19:b9: aa:c1:6d:6c:00:f4:ee:02:b4:25:b6:bf:64:46:50: 3b:ab:70:1d:4a:22:3f:a9:33:d7:56:d7:db:85:09: 54:96:2c:7a:f1:a7:70:cf:38:23:aa:15:65:3e:fb: e9:8d:e4:ba:25:b7:90:29:28:c9:a8:88:d4:1f:bc: b4:0a:57:02:0a:1b:30:78:97:05:f6:34:6a:a7:a9: 96:ea:c3:c0:9a:32:15:2b:c0:c5:a7:ab:7e:f5:bd: 27:c8:de:cc:f2:49:44:37:04:30:6d:93:68:f5:e4: fb:7a:4c:de:23:33:06:a0:50:75:81:8c:fa:e7:ad: 26:6f:6d:57:e2:f7:9b:65:35:24:2b:59:d0:16:1b: 09:5c:21:e6:89:94:63:78:3b:84:ef:4b:fe:e6:cc: f2:b0:cd:f3:c9:58:8f:6b:ea:06:25:3a:79:de:62: 0a:ad:ba:b8:24:4e:85:af:1c:27:71:a8:7a:48:e2: c7:c6:fd:c0:4e:13:fd:bf:e0:ad:31:e6:91:5c:87: 1d:c3:3d:1d:96:0c:63:9a:c0:f6:76:46:16:0b:46: 64:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:CB:F8:CC:98:EE:42:32:C8:BF:1C:BD:43:4E:60:5D:A7:9F:4A:64 X509v3 Authority Key Identifier: keyid:9A:06:4E:A6:B6:6D:B4:DE:20:C9:3C:C0:41:B8:5A:17:06:C8:06:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgZOprZttN4gyTzAQbhaFwbIBnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:54:76:2a:75:fa:4d:9b:43:3d:2f:c7:05:43:e7:9f:53:cb: 50:0f:10:b2:08:48:93:c3:b2:74:00:56:12:1b:e4:cf:1f:27: 76:75:a7:92:46:4e:f3:4a:f1:fb:63:28:75:83:2c:03:bd:70: 8c:61:c2:72:23:05:f3:90:da:f5:24:e2:e4:32:65:37:ea:86: e2:e5:44:02:1e:a5:67:ae:2f:ea:c6:34:b1:14:cd:43:85:46: cb:6a:3b:21:ba:4d:87:0a:58:9d:44:24:04:f3:ed:70:e2:46: 1c:49:e7:8e:79:14:d3:e0:6f:b6:39:83:5f:29:d1:6c:5b:54: bd:e6:e7:f3:01:0e:d6:b8:0c:40:3c:22:67:66:62:ac:c5:23: f9:23:ea:ce:61:95:77:c8:c3:cf:7c:59:51:54:55:95:71:58: 2a:97:ce:ac:e3:05:5b:be:e4:ba:e3:b6:64:ac:76:be:48:bb: 46:c7:6e:ca:6b:d4:80:16:86:5a:6b:24:1e:a7:e4:57:c8:38: ba:c8:c5:5b:8f:49:16:52:d9:a3:95:e4:40:d0:c2:73:5e:c8: 76:58:e1:ae:09:94:8c:8f:07:bc:d7:2e:89:b0:88:12:35:1d: 1f:e4:94:73:46:b7:e7:cd:a5:7e:98:18:69:c6:30:1c:9b:72: 27:a7:b9:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E1QkQxMTAvBgNVBAUTKDlBMDY0RUE2QjY2REI0REUyMEM5M0NDMDQxQjg1QTE3 MDZDODA2NzIwHhcNMjUxMTAzMDEyOTQ0WhcNMjUxMTEwMDEyOTQ0WjAYMRYwFAYD VQQDEw02OTA4MDU4OC0wYTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtfd+pUCEko9HViHZXxmJ5nBwDEQ5D4t+BJBunYJhUzqsexxEZSR1V9tGbmq wW1sAPTuArQltr9kRlA7q3AdSiI/qTPXVtfbhQlUlix68adwzzgjqhVlPvvpjeS6 JbeQKSjJqIjUH7y0ClcCChsweJcF9jRqp6mW6sPAmjIVK8DFp6t+9b0nyN7M8klE NwQwbZNo9eT7ekzeIzMGoFB1gYz6560mb21X4vebZTUkK1nQFhsJXCHmiZRjeDuE 70v+5szysM3zyViPa+oGJTp53mIKrbq4JE6Frxwncah6SOLHxv3AThP9v+CtMeaR XIcdwz0dlgxjmsD2dkYWC0ZkgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGPL+MyY 7kIyyL8cvUNOYF2nn0pkMB8GA1UdIwQYMBaAFJoGTqa2bbTeIMk8wEG4WhcGyAZy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTVCRC81NEVFRjUxNDFD RjcxMUVEQTAwRkQzNDNDNEY5QUUwMi9tZ1pPcHJadHRONGd5VHpBUWJoYUZ3YklC bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21nWk9wclp0dE40Z3lUekFRYmhhRndiSUJuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTVCRC81NEVFRjUxNDFDRjcxMUVEQTAwRkQzNDNDNEY5QUUwMi9tZ1pPcHJadHRO NGd5VHpBUWJoYUZ3YklCbkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaVHYqdfpNm0M9L8cFQ+efU8tQDxCyCEiTw7J0AFYSG+TPHyd2daeS Rk7zSvH7Yyh1gywDvXCMYcJyIwXzkNr1JOLkMmU36obi5UQCHqVnri/qxjSxFM1D hUbLajshuk2HClidRCQE8+1w4kYcSeeOeRTT4G+2OYNfKdFsW1S95ufzAQ7WuAxA PCJnZmKsxSP5I+rOYZV3yMPPfFlRVFWVcVgql86s4wVbvuS647ZkrHa+SLtGx27K a9SAFoZaayQep+RXyDi6yMVbj0kWUtmjleRA0MJzXsh2WOGuCZSMjwe81y6JsIgS NR0f5JRzRrfnzaV+mBhpxjAcm3Inp7m1 -----END CERTIFICATE-----Generated at Tue Nov 4 21:34:40 2025 by rpki-client