$ rpki-client -vvf rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft File: GWzuJffRt-pwjOGIczcUM5LORxw.mft (raw, json) Hash identifier: vbo0tbL7YaI+JFMQu6OaWMZ+JDjAOlsIlK5wCmPbolw= Subject key identifier: 81:A5:19:79:14:97:CB:B5:58:B1:C9:4B:51:02:7A:14:E5:37:E3:15 Authority key identifier: 19:6C:EE:25:F7:D1:B7:EA:70:8C:E1:88:73:37:14:33:92:CE:47:1C Certificate issuer: /CN=A9154340/serialNumber=196CEE25F7D1B7EA708CE1887337143392CE471C Certificate serial: 0661 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft Manifest number: 065B Signing time: Tue 04 Nov 2025 22:30:44 +0000 Manifest this update: Tue 04 Nov 2025 22:30:44 +0000 Manifest next update: Tue 11 Nov 2025 22:30:44 +0000 Files and hashes: 1: GWzuJffRt-pwjOGIczcUM5LORxw.crl (hash: 6l1OhIe9WCHIEi+aUql3BonncxzQ8AIyx81Kj3pFrh0=) 2: 8BF559B2A70111EBBAA7C612C4F9AE02.roa (hash: f8Wgv+IoxprOJRGqIQDg8nNXDjXWODO4WSnYU8FiMVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.crl rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:30:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1633 (0x661) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154340, serialNumber=196CEE25F7D1B7EA708CE1887337143392CE471C Validity Not Before: Nov 4 22:30:44 2025 GMT Not After : Nov 11 22:30:44 2025 GMT Subject: CN=690a7e94-534e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bd:77:66:39:04:df:45:ab:88:7a:3d:35:7e: a0:29:39:1a:a1:49:bc:a2:ae:d5:ab:c6:82:da:3b: 32:e8:ab:3a:c4:7f:54:99:7d:c2:89:34:c9:b3:7e: 35:64:63:82:de:fd:7d:61:e0:fb:52:d6:43:ec:c2: 76:90:74:43:41:78:8d:a1:72:bb:53:95:6c:92:5b: 7d:ac:85:51:a5:86:5c:21:12:ce:95:80:1e:62:e2: df:1a:9e:17:2b:cd:58:0e:c3:f8:f8:5e:da:55:74: 89:e6:92:cf:8a:d5:24:0e:4d:47:db:66:ad:41:05: 61:7a:fc:cd:f1:44:13:42:97:4f:fc:4a:3a:d1:ed: 61:95:63:3b:e1:17:40:18:c6:ba:36:7e:0d:ef:14: dd:11:08:c1:e7:39:77:75:09:b4:e0:d3:75:ec:f3: 4d:72:6d:1f:39:44:84:dd:84:ac:06:0a:b5:df:6d: 83:b5:49:9a:97:c8:7b:e7:74:c8:8e:7c:39:a2:b8: 02:cd:b4:0c:6a:1a:ef:1d:b6:6a:71:33:72:9d:63: 80:5e:d6:4d:96:1a:74:19:45:3e:60:bf:0c:e7:21: 34:27:86:2c:4c:48:8a:b9:67:6d:b4:20:94:07:8f: 88:57:fe:12:ca:c0:60:7e:a1:2f:fa:d7:52:3e:74: 3e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A5:19:79:14:97:CB:B5:58:B1:C9:4B:51:02:7A:14:E5:37:E3:15 X509v3 Authority Key Identifier: keyid:19:6C:EE:25:F7:D1:B7:EA:70:8C:E1:88:73:37:14:33:92:CE:47:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:99:87:61:09:91:29:a3:96:fd:b7:35:19:df:a8:2d:f0:4c: a7:8a:d8:61:23:14:74:82:02:2f:85:1e:a9:97:57:d7:20:1a: 95:9a:85:6d:d1:e1:d9:ce:fa:9c:18:98:d8:9d:8a:9e:cd:1f: f5:50:6f:a7:33:d5:81:f1:ae:39:cc:d0:90:b1:0b:02:20:6f: 76:96:63:6a:5d:b0:ff:84:d7:b9:6d:cd:18:df:69:e4:76:67: 19:e4:41:b0:ff:f7:ab:04:ea:d4:b8:ed:27:0a:ae:4f:9e:ee: 4a:2d:56:48:86:8f:d4:13:58:4c:3c:1e:1b:18:f6:a2:d1:fe: a8:87:8e:ef:83:01:cb:c8:e3:46:17:72:af:a9:ae:28:ba:3f: a0:e7:12:9d:92:c8:d4:ae:0c:ff:81:c5:ec:6d:e8:97:b6:05: 5c:c0:e7:95:27:97:a3:8a:cb:47:47:15:ca:14:60:80:f2:c6: e6:a8:2f:2f:3e:17:21:cf:e7:33:a9:af:95:79:40:b0:cf:b7: d5:62:84:87:b6:1f:2e:8f:38:ef:a6:cf:e7:b0:e3:c8:d0:86: e0:36:51:b2:2a:6a:33:ba:6b:48:39:ca:46:92:61:ed:94:42: d0:c8:27:c8:b2:e5:24:fd:09:23:36:52:f8:5d:bc:6a:d6:9b: e9:09:42:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzNDAxMTAvBgNVBAUTKDE5NkNFRTI1RjdEMUI3RUE3MDhDRTE4ODczMzcxNDMz OTJDRTQ3MUMwHhcNMjUxMTA0MjIzMDQ0WhcNMjUxMTExMjIzMDQ0WjAYMRYwFAYD VQQDEw02OTBhN2U5NC01MzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzL13ZjkE30WriHo9NX6gKTkaoUm8oq7Vq8aC2jsy6Ks6xH9UmX3CiTTJs341 ZGOC3v19YeD7UtZD7MJ2kHRDQXiNoXK7U5Vsklt9rIVRpYZcIRLOlYAeYuLfGp4X K81YDsP4+F7aVXSJ5pLPitUkDk1H22atQQVhevzN8UQTQpdP/Eo60e1hlWM74RdA GMa6Nn4N7xTdEQjB5zl3dQm04NN17PNNcm0fOUSE3YSsBgq1322DtUmal8h753TI jnw5orgCzbQMahrvHbZqcTNynWOAXtZNlhp0GUU+YL8M5yE0J4YsTEiKuWdttCCU B4+IV/4SysBgfqEv+tdSPnQ+DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIGlGXkU l8u1WLHJS1ECehTlN+MVMB8GA1UdIwQYMBaAFBls7iX30bfqcIzhiHM3FDOSzkcc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDM0MC9GOEU3NjA3Q0E2 NzcxMUVCOEI0QkIxM0VDNEY5QUUwMi9HV3p1SmZmUnQtcHdqT0dJY3pjVU01TE9S eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0dXenVKZmZSdC1wd2pPR0ljemNVTTVMT1J4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDM0MC9GOEU3NjA3Q0E2NzcxMUVCOEI0QkIxM0VDNEY5QUUwMi9HV3p1SmZmUnQt cHdqT0dJY3pjVU01TE9SeHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfmYdhCZEpo5b9tzUZ36gt8EynithhIxR0ggIvhR6pl1fXIBqVmoVt 0eHZzvqcGJjYnYqezR/1UG+nM9WB8a45zNCQsQsCIG92lmNqXbD/hNe5bc0Y32nk dmcZ5EGw//erBOrUuO0nCq5Pnu5KLVZIho/UE1hMPB4bGPai0f6oh47vgwHLyONG F3Kvqa4ouj+g5xKdksjUrgz/gcXsbeiXtgVcwOeVJ5ejistHRxXKFGCA8sbmqC8v Phchz+czqa+VeUCwz7fVYoSHth8ujzjvps/nsOPI0IbgNlGyKmozumtIOcpGkmHt lELQyCfIsuUk/QkjNlL4Xbxq1pvpCUL+ -----END CERTIFICATE-----Generated at Wed Nov 5 21:41:29 2025 by rpki-client