$ rpki-client -vvf rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft File: goqGO92fRnXqGDzaoQT1SyN3Lkk.mft (raw, json) Hash identifier: d4MR3309fczHlLR4OiaXE9Nz4hMhZGMmB5PN/lFeSgY= Subject key identifier: 34:25:9C:9B:6A:A2:65:04:93:49:9A:5E:DB:8F:78:26:D0:66:72:56 Authority key identifier: 82:8A:86:3B:DD:9F:46:75:EA:18:3C:DA:A1:04:F5:4B:23:77:2E:49 Certificate issuer: /CN=A913D4B2/serialNumber=828A863BDD9F4675EA183CDAA104F54B23772E49 Certificate serial: 06D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft Manifest number: 06CB Signing time: Tue 04 Nov 2025 22:08:39 +0000 Manifest this update: Tue 04 Nov 2025 22:08:38 +0000 Manifest next update: Tue 11 Nov 2025 22:08:38 +0000 Files and hashes: 1: goqGO92fRnXqGDzaoQT1SyN3Lkk.crl (hash: lhtbVvF+RIQ2oUqr6U0rvwV4Df19wWAiX3QV4QMPq+Q=) 2: C148AF5C9B4811EBB3FAE847C4F9AE02.roa (hash: ElM40kRXls4915TJFeuEiV6vcriAHquSzfVrwEFHIlI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.crl rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:08:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1744 (0x6d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D4B2, serialNumber=828A863BDD9F4675EA183CDAA104F54B23772E49 Validity Not Before: Nov 4 22:08:38 2025 GMT Not After : Nov 11 22:08:38 2025 GMT Subject: CN=690a7966-0b0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:45:87:c7:6c:61:72:eb:7d:d2:b0:0a:5a:4d: b7:31:35:85:85:1f:72:25:a6:36:e9:bc:e7:f9:16: 48:f3:d4:b3:04:76:50:4f:60:9b:87:42:7f:d7:27: ca:e7:b2:86:9e:27:3d:a1:44:61:66:b7:bc:f8:ff: a3:8c:b1:fc:1a:20:bd:34:25:21:4e:26:87:9d:34: 10:6d:92:31:ea:d2:59:25:4f:30:52:2f:48:05:33: 7a:fc:fd:bc:82:3b:ea:08:43:1e:e2:c9:6d:11:31: 8e:ec:33:60:b5:c8:83:08:7e:60:c2:c4:b9:fd:23: 8a:fa:ce:03:c4:8f:25:82:22:a2:a2:96:60:5c:b5: 80:89:f2:d7:f2:6f:aa:4d:cc:5a:dc:03:ac:05:ac: 5e:17:07:c7:67:39:6a:50:be:e2:b2:85:a1:4e:af: f9:1d:ae:fc:87:c9:09:50:dc:1a:cb:cc:bf:e1:33: f1:01:c9:ff:ee:7a:19:12:51:e9:6b:d2:a7:7e:9b: d6:3a:62:ea:a6:78:d5:1a:a9:8b:a6:e4:83:b9:0e: ee:ba:fd:f6:f1:56:12:02:cb:70:90:e8:db:30:8c: 00:ce:ac:65:14:6e:ea:24:47:3e:f8:9f:59:92:2a: bb:f4:59:f7:59:0f:3b:ad:bb:c7:1f:82:e8:b6:39: d2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:25:9C:9B:6A:A2:65:04:93:49:9A:5E:DB:8F:78:26:D0:66:72:56 X509v3 Authority Key Identifier: keyid:82:8A:86:3B:DD:9F:46:75:EA:18:3C:DA:A1:04:F5:4B:23:77:2E:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:ff:be:bb:50:67:52:d8:d5:16:5c:8e:c1:09:9d:4e:c3:29: 4a:2d:9f:25:65:89:3c:fb:46:e2:0e:72:ad:09:1f:9b:f5:c8: 2e:18:75:56:78:36:9e:a3:fb:4a:93:98:d6:b7:e7:ab:49:5c: 75:ec:37:2f:5f:3d:26:b4:8f:aa:e1:bd:9f:46:cb:22:6d:e9: f9:88:57:8a:65:3e:16:46:62:e2:6b:26:7f:75:53:e7:85:72: 7b:a0:72:34:51:1b:c3:e5:4d:fe:cf:97:3e:f6:79:23:ae:d3: 07:b1:64:28:41:8c:98:53:1e:10:95:f7:75:ed:7d:b3:cf:1c: b5:8d:0a:7b:e6:14:75:07:04:31:0e:70:2a:48:f6:f1:97:b8: a7:53:a2:e8:62:f2:18:8c:b0:87:71:f0:55:0d:2e:5b:de:39: 0b:b3:dc:f6:b3:9f:42:46:b5:1c:5f:32:1b:7f:13:8b:1c:e7: 64:46:4e:43:80:26:d5:11:c9:70:20:66:83:f1:ba:c7:7d:9f: 35:c2:38:f7:90:a5:97:36:0d:5e:ed:a5:09:32:8b:9d:53:12: e7:52:91:0f:bc:32:d2:eb:8d:8b:9f:bb:ec:6a:9b:0c:d5:f1: 83:1f:53:8d:5d:1f:cc:b9:4a:c8:93:cf:12:90:d7:46:54:18: 6d:fc:6c:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q0QjIxMTAvBgNVBAUTKDgyOEE4NjNCREQ5RjQ2NzVFQTE4M0NEQUExMDRGNTRC MjM3NzJFNDkwHhcNMjUxMTA0MjIwODM4WhcNMjUxMTExMjIwODM4WjAYMRYwFAYD VQQDEw02OTBhNzk2Ni0wYjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3EWHx2xhcut90rAKWk23MTWFhR9yJaY26bzn+RZI89SzBHZQT2Cbh0J/1yfK 57KGnic9oURhZre8+P+jjLH8GiC9NCUhTiaHnTQQbZIx6tJZJU8wUi9IBTN6/P28 gjvqCEMe4sltETGO7DNgtciDCH5gwsS5/SOK+s4DxI8lgiKiopZgXLWAifLX8m+q Tcxa3AOsBaxeFwfHZzlqUL7isoWhTq/5Ha78h8kJUNway8y/4TPxAcn/7noZElHp a9KnfpvWOmLqpnjVGqmLpuSDuQ7uuv328VYSAstwkOjbMIwAzqxlFG7qJEc++J9Z kiq79Fn3WQ87rbvHH4LotjnSsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQlnJtq omUEk0maXtuPeCbQZnJWMB8GA1UdIwQYMBaAFIKKhjvdn0Z16hg82qEE9Usjdy5J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDRCMi9CNEIyMENBRTc4 NDExMUVCQjM0ODA5NjFDNEY5QUUwMi9nb3FHTzkyZlJuWHFHRHphb1FUMVN5TjNM a2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dvcUdPOTJmUm5YcUdEemFvUVQxU3lOM0xray5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDRCMi9CNEIyMENBRTc4NDExMUVCQjM0ODA5NjFDNEY5QUUwMi9nb3FHTzkyZlJu WHFHRHphb1FUMVN5TjNMa2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCm/767UGdS2NUWXI7BCZ1OwylKLZ8lZYk8+0biDnKtCR+b9cguGHVW eDaeo/tKk5jWt+erSVx17DcvXz0mtI+q4b2fRssiben5iFeKZT4WRmLiayZ/dVPn hXJ7oHI0URvD5U3+z5c+9nkjrtMHsWQoQYyYUx4Qlfd17X2zzxy1jQp75hR1BwQx DnAqSPbxl7inU6LoYvIYjLCHcfBVDS5b3jkLs9z2s59CRrUcXzIbfxOLHOdkRk5D gCbVEclwIGaD8brHfZ81wjj3kKWXNg1e7aUJMoudUxLnUpEPvDLS642Ln7vsapsM 1fGDH1ONXR/MuUrIk88SkNdGVBht/GzO -----END CERTIFICATE-----Generated at Wed Nov 5 10:01:54 2025 by rpki-client