$ rpki-client -vvf rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft File: goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft (raw, json) Hash identifier: NSw9dzzBIUNgnjqLNmrxYztGBHOtcZtRnotQyGLpgbI= Subject key identifier: A3:51:E3:1D:DD:F4:48:88:81:20:1B:FB:77:2C:DC:F6:96:38:33:03 Authority key identifier: 82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24 Certificate issuer: /CN=A914C99C/serialNumber=82818DD2239DE8335D22ADCE3DF190A310B70024 Certificate serial: 05E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft Manifest number: 05E1 Signing time: Sun 02 Nov 2025 22:58:35 +0000 Manifest this update: Sun 02 Nov 2025 22:58:34 +0000 Manifest next update: Sun 09 Nov 2025 22:58:34 +0000 Files and hashes: 1: goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl (hash: 74oM+a/TtJ99fRt/dwLuVVv5E0GqogTx4/go+ml8wWs=) 2: 95B0A0606C5811ED882F827DC4F9AE02.roa (hash: bTxB6rDqe5W838nV/qkoLeLUMklQqO8XCDilOupFQgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:58:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1510 (0x5e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C99C, serialNumber=82818DD2239DE8335D22ADCE3DF190A310B70024 Validity Not Before: Nov 2 22:58:34 2025 GMT Not After : Nov 9 22:58:34 2025 GMT Subject: CN=6907e21a-90f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b8:5b:d0:7c:52:47:78:46:cb:11:12:00:a2: eb:37:81:11:87:d5:73:cc:3a:14:26:5c:c9:e0:43: 78:4d:aa:04:75:4a:ce:5b:c8:a1:7c:d0:1e:37:9e: bc:46:87:25:b7:ee:71:20:8e:ae:fc:cb:d6:48:20: 6d:3c:c4:3b:1b:c8:25:12:b7:79:af:76:7f:c3:ae: cf:77:02:82:3d:5e:85:1c:80:98:d8:8b:c6:67:12: 23:59:df:ab:48:f6:ed:e9:2d:56:6d:bc:cd:b3:27: e1:5c:8c:1b:46:1f:10:fb:2d:e2:07:03:61:46:3b: 66:23:b5:f4:7c:45:f5:0d:24:8f:08:04:bb:6f:7c: c0:e5:d7:cc:47:fc:82:c4:cc:90:5b:4f:57:ef:a4: 1d:1f:ce:8b:51:c1:2e:5d:37:e1:5e:83:7f:72:23: 86:fe:e8:4f:f8:b2:14:55:14:c8:4d:ea:90:4d:f9: e8:f0:79:59:89:f9:e6:43:23:60:f3:55:a5:ec:36: 36:ed:28:b1:ee:52:c8:bb:03:83:50:50:b3:6a:e8: 61:a0:f4:aa:2a:c8:b5:8f:8f:79:5e:27:22:6b:96: ae:98:ce:b3:3d:07:a8:ef:00:ad:72:d5:9e:ed:08: 18:61:84:02:fb:82:26:d9:fe:6c:e4:c6:9e:30:9f: 47:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:51:E3:1D:DD:F4:48:88:81:20:1B:FB:77:2C:DC:F6:96:38:33:03 X509v3 Authority Key Identifier: keyid:82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:6a:58:fb:c9:54:65:f3:c1:c8:ec:db:49:ca:1d:b6:6e:b6: 08:92:bc:ee:ff:85:8f:43:50:3f:5e:b7:42:f3:17:81:56:5f: 14:e8:48:1a:fb:a6:4c:51:f6:5e:fb:1f:e9:fc:d3:bf:4c:d5: 22:f3:17:6e:40:84:c2:12:22:b9:c6:16:a7:03:88:dc:cb:f3: d0:ce:83:10:89:9b:42:9d:aa:5f:fa:f0:7e:57:3f:39:66:13: 14:a2:cd:00:8f:14:6f:79:01:b8:41:dd:4a:53:cd:b8:4a:a1: 73:83:4e:37:f8:9c:48:19:80:ef:4d:80:ce:9d:1f:0a:e8:b8: 92:d4:2d:4b:be:80:32:77:c9:3b:58:3f:80:67:8d:70:29:d5: 97:53:bb:2f:43:4e:88:5b:2f:e8:8a:7f:d7:d3:c9:dc:dc:ca: ee:f9:d7:9b:3d:91:6d:0d:78:bd:9c:e4:ab:68:67:4f:cc:c1: ec:bb:c6:0b:44:61:26:f9:26:21:1e:5c:d6:eb:35:a1:e9:4b: de:2b:b8:45:e6:f0:54:7c:a4:32:63:d1:b3:ee:63:b9:76:3e: 48:32:72:0d:0a:6f:5d:b2:f4:cc:16:ca:b5:f3:15:bb:db:9e: 7d:01:73:fb:ed:53:11:62:a4:8e:03:de:77:42:34:33:aa:ca: 2d:7f:91:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM5OUMxMTAvBgNVBAUTKDgyODE4REQyMjM5REU4MzM1RDIyQURDRTNERjE5MEEz MTBCNzAwMjQwHhcNMjUxMTAyMjI1ODM0WhcNMjUxMTA5MjI1ODM0WjAYMRYwFAYD VQQDEw02OTA3ZTIxYS05MGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1bhb0HxSR3hGyxESAKLrN4ERh9VzzDoUJlzJ4EN4TaoEdUrOW8ihfNAeN568 Roclt+5xII6u/MvWSCBtPMQ7G8glErd5r3Z/w67PdwKCPV6FHICY2IvGZxIjWd+r SPbt6S1WbbzNsyfhXIwbRh8Q+y3iBwNhRjtmI7X0fEX1DSSPCAS7b3zA5dfMR/yC xMyQW09X76QdH86LUcEuXTfhXoN/ciOG/uhP+LIUVRTITeqQTfno8HlZifnmQyNg 81Wl7DY27Six7lLIuwODUFCzauhhoPSqKsi1j495Xicia5aumM6zPQeo7wCtctWe 7QgYYYQC+4Im2f5s5MaeMJ9HDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNR4x3d 9EiIgSAb+3cs3PaWODMDMB8GA1UdIwQYMBaAFIKBjdIjnegzXSKtzj3xkKMQtwAk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Qzk5Qy8yQTFBRTlFQ0Q1 NzIxMUVCQTYwRUQwNTdDNEY5QUUwMi9nb0dOMGlPZDZETmRJcTNPUGZHUW94QzNB Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dvR04waU9kNkROZElxM09QZkdRb3hDM0FDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Qzk5Qy8yQTFBRTlFQ0Q1NzIxMUVCQTYwRUQwNTdDNEY5QUUwMi9nb0dOMGlPZDZE TmRJcTNPUGZHUW94QzNBQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoalj7yVRl88HI7NtJyh22brYIkrzu/4WPQ1A/XrdC8xeBVl8U6Ega +6ZMUfZe+x/p/NO/TNUi8xduQITCEiK5xhanA4jcy/PQzoMQiZtCnapf+vB+Vz85 ZhMUos0AjxRveQG4Qd1KU824SqFzg043+JxIGYDvTYDOnR8K6LiS1C1LvoAyd8k7 WD+AZ41wKdWXU7svQ06IWy/oin/X08nc3Mru+debPZFtDXi9nOSraGdPzMHsu8YL RGEm+SYhHlzW6zWh6UveK7hF5vBUfKQyY9Gz7mO5dj5IMnINCm9dsvTMFsq18xW7 2559AXP77VMRYqSOA953QjQzqsotf5Hd -----END CERTIFICATE-----Generated at Tue Nov 4 08:19:23 2025 by rpki-client