$ rpki-client -vvf rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft File: gBf49rHsAjxINqRXp7BYQqBxnyg.mft (raw, json) Hash identifier: 9UUdE2fcjTquWyNnjGkzXqxgNAZYFvaD0giEkDKMf9g= Subject key identifier: 12:50:76:A0:40:D7:01:3A:F9:3B:32:F4:46:32:03:58:BF:3F:8D:2E Authority key identifier: 80:17:F8:F6:B1:EC:02:3C:48:36:A4:57:A7:B0:58:42:A0:71:9F:28 Certificate issuer: /CN=A913B088/serialNumber=8017F8F6B1EC023C4836A457A7B05842A0719F28 Certificate serial: 0B92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBf49rHsAjxINqRXp7BYQqBxnyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft Manifest number: 0B8B Signing time: Tue 04 Nov 2025 19:07:30 +0000 Manifest this update: Tue 04 Nov 2025 19:07:29 +0000 Manifest next update: Tue 11 Nov 2025 19:07:29 +0000 Files and hashes: 1: gBf49rHsAjxINqRXp7BYQqBxnyg.crl (hash: bAp43WrDhhulCsXy0NrAhfAqtN8NeG7uD/VbfFDoU/I=) 2: 6DEDEF66387A11EA9450A37CC4F9AE02.roa (hash: o4u5Q2Jc2gCY8tVjsD1bgPzcbwwoDr6mqctN+7fPekU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.crl rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBf49rHsAjxINqRXp7BYQqBxnyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:07:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2962 (0xb92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B088, serialNumber=8017F8F6B1EC023C4836A457A7B05842A0719F28 Validity Not Before: Nov 4 19:07:29 2025 GMT Not After : Nov 11 19:07:29 2025 GMT Subject: CN=690a4ef1-cbe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5b:3f:b6:15:fa:33:df:ee:bc:c1:7e:0b:a8: 40:d9:36:b8:be:3a:e7:8d:fa:e2:48:ba:bf:ca:8c: c6:90:74:01:65:ed:e4:d7:a0:cb:a8:f0:d8:18:af: a0:67:01:d7:10:8e:90:ad:59:6f:94:7e:78:e3:2d: 7b:0e:e6:60:f8:29:69:1d:f9:96:16:9a:10:78:c9: 82:f3:a1:c1:85:03:3b:81:b4:ea:e7:54:49:25:ae: cb:78:81:78:39:12:83:7c:7f:8f:76:e3:43:55:3e: 29:06:93:4a:01:a1:37:b9:50:c1:1c:ce:fd:f6:16: 90:86:b8:3d:d7:5c:e8:19:52:33:3f:0c:95:20:21: 8d:9b:67:cb:6f:e5:f4:76:be:f8:12:ff:3d:bb:fc: d6:c0:dd:ed:ac:96:34:f4:b3:94:31:05:42:9a:4e: 27:8c:4b:73:02:51:0b:ed:9b:1b:4b:a5:19:96:1e: 39:30:dc:db:d2:ad:14:ac:c6:f2:0c:ec:1f:55:2d: 57:37:3b:26:80:84:28:14:5e:ad:d3:f1:1d:1b:95: 3b:6e:c0:3f:5a:63:31:41:32:a2:a8:0c:e0:87:ea: fe:c7:9d:96:d6:97:d7:47:77:f3:a3:3a:7e:63:75: 31:3e:5f:ee:5d:0a:33:4e:c1:39:49:34:fd:86:f1: e7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:50:76:A0:40:D7:01:3A:F9:3B:32:F4:46:32:03:58:BF:3F:8D:2E X509v3 Authority Key Identifier: keyid:80:17:F8:F6:B1:EC:02:3C:48:36:A4:57:A7:B0:58:42:A0:71:9F:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBf49rHsAjxINqRXp7BYQqBxnyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B088/F569CF76387711EA93695179C4F9AE02/gBf49rHsAjxINqRXp7BYQqBxnyg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:c8:29:32:6f:9d:a8:3a:b6:ad:3a:3a:44:77:c9:f8:a2:9f: 8a:84:84:bd:85:df:55:a1:85:9a:ed:2d:e5:0a:ae:49:06:99: cf:08:0a:21:12:17:f3:16:bf:48:37:fe:07:0e:10:48:1b:be: dd:bc:1e:a0:56:c4:f2:5d:6f:6f:f9:17:91:e6:8a:84:e8:52: 7e:75:7f:74:2b:34:65:30:fc:27:fd:e2:e9:a1:bf:54:c4:f6: 2a:27:ff:54:ca:c5:09:b2:e6:dc:0c:db:33:0a:1f:78:c9:40: 35:f4:09:d4:3b:54:b0:73:9b:43:0c:d9:26:94:13:93:9c:f3: 39:cd:76:03:10:47:fb:f9:2d:51:7d:0a:a7:0f:6a:81:d5:13: 1d:11:7b:03:24:51:53:59:49:05:ad:02:2e:e5:33:f7:11:8b: 1f:a8:2e:aa:1f:30:4c:b9:48:c0:08:58:80:05:43:4b:6e:d2: c5:66:1e:39:b6:f3:e4:bd:aa:87:30:49:8e:1b:af:f9:5c:28: da:c5:fb:aa:7a:52:4c:04:cf:47:41:14:a1:c8:99:d7:d4:3a: b1:2c:fa:ff:d9:c5:74:a9:8d:cf:3e:3a:3c:e1:c2:ce:ce:df: 30:0b:90:bd:62:fd:f0:03:3e:58:ee:bd:28:ad:a6:e5:40:2c: 47:b6:f1:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IwODgxMTAvBgNVBAUTKDgwMTdGOEY2QjFFQzAyM0M0ODM2QTQ1N0E3QjA1ODQy QTA3MTlGMjgwHhcNMjUxMTA0MTkwNzI5WhcNMjUxMTExMTkwNzI5WjAYMRYwFAYD VQQDEw02OTBhNGVmMS1jYmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFs/thX6M9/uvMF+C6hA2Ta4vjrnjfriSLq/yozGkHQBZe3k16DLqPDYGK+g ZwHXEI6QrVlvlH544y17DuZg+ClpHfmWFpoQeMmC86HBhQM7gbTq51RJJa7LeIF4 ORKDfH+PduNDVT4pBpNKAaE3uVDBHM799haQhrg911zoGVIzPwyVICGNm2fLb+X0 dr74Ev89u/zWwN3trJY09LOUMQVCmk4njEtzAlEL7ZsbS6UZlh45MNzb0q0UrMby DOwfVS1XNzsmgIQoFF6t0/EdG5U7bsA/WmMxQTKiqAzgh+r+x52W1pfXR3fzozp+ Y3UxPl/uXQozTsE5STT9hvHnZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJQdqBA 1wE6+Tsy9EYyA1i/P40uMB8GA1UdIwQYMBaAFIAX+Pax7AI8SDakV6ewWEKgcZ8o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjA4OC9GNTY5Q0Y3NjM4 NzcxMUVBOTM2OTUxNzlDNEY5QUUwMi9nQmY0OXJIc0FqeElOcVJYcDdCWVFxQnhu eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dCZjQ5ckhzQWp4SU5xUlhwN0JZUXFCeG55Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjA4OC9GNTY5Q0Y3NjM4NzcxMUVBOTM2OTUxNzlDNEY5QUUwMi9nQmY0OXJIc0Fq eElOcVJYcDdCWVFxQnhueWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgyCkyb52oOratOjpEd8n4op+KhIS9hd9VoYWa7S3lCq5JBpnPCAoh EhfzFr9IN/4HDhBIG77dvB6gVsTyXW9v+ReR5oqE6FJ+dX90KzRlMPwn/eLpob9U xPYqJ/9UysUJsubcDNszCh94yUA19AnUO1Swc5tDDNkmlBOTnPM5zXYDEEf7+S1R fQqnD2qB1RMdEXsDJFFTWUkFrQIu5TP3EYsfqC6qHzBMuUjACFiABUNLbtLFZh45 tvPkvaqHMEmOG6/5XCjaxfuqelJMBM9HQRShyJnX1DqxLPr/2cV0qY3PPjo84cLO zt8wC5C9Yv3wAz5Y7r0orablQCxHtvEq -----END CERTIFICATE-----Generated at Wed Nov 5 12:07:05 2025 by rpki-client