$ rpki-client -vvf rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft File: GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft (raw, json) Hash identifier: aSbkNb5sOWdXA2fvG9Rpq0LIDoqz5J/EA6S+t4TsveU= Subject key identifier: E8:46:8C:33:76:B1:C9:35:44:33:F1:0F:DE:9B:8F:86:06:30:8B:6E Authority key identifier: 18:ED:AB:B2:82:0C:E2:5F:90:E8:63:5C:13:B7:F0:D4:5F:04:63:76 Certificate issuer: /CN=A9155810/serialNumber=18EDABB2820CE25F90E8635C13B7F0D45F046376 Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft Manifest number: A6 Signing time: Wed 05 Nov 2025 06:30:28 +0000 Manifest this update: Wed 05 Nov 2025 06:30:27 +0000 Manifest next update: Wed 12 Nov 2025 06:30:27 +0000 Files and hashes: 1: GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.crl (hash: wAVPfQ22APi1rl3zxCALDRIMi0muE7539OBvf2wgwkQ=) 2: 1BC9B310C88E11EF8E789228C4F9AE02.roa (hash: S0OXmYbNImJgx4uOC0U7mhQnmuYrYNwVWM5SzyT3w3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.crl rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:30:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155810, serialNumber=18EDABB2820CE25F90E8635C13B7F0D45F046376 Validity Not Before: Nov 5 06:30:27 2025 GMT Not After : Nov 12 06:30:27 2025 GMT Subject: CN=690aef04-339e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c2:3d:83:55:b9:ae:e4:e3:80:2e:b1:c6:5b: 81:a9:83:0d:20:ad:cb:ce:5c:f6:d5:26:d5:f8:28: f8:4a:6c:ea:5e:e5:5a:c4:2b:19:bc:4f:73:63:5d: 50:e7:f8:72:d6:13:b9:46:50:cb:25:d7:29:8c:97: 12:e8:1a:d8:5d:0c:94:97:90:b7:44:e2:f6:28:be: 7c:10:7e:91:92:93:dd:0a:9e:4b:c9:54:03:7f:9e: 80:fa:12:af:e3:20:7c:ac:8c:ef:42:2c:bc:cc:5c: fb:bb:7e:0c:7e:1f:79:ee:cb:f8:9d:d0:23:5b:5f: 8e:ef:df:4c:6a:c6:7e:9a:84:c0:82:d5:94:bf:fe: da:49:45:a6:21:8b:6a:0b:0e:fc:8f:d4:5f:70:0a: 99:ca:59:02:70:91:8c:62:d3:be:e4:51:65:37:5a: a0:6f:34:2e:2c:d1:f2:11:d0:28:b1:97:bb:8e:01: 7b:1a:a8:12:bd:d6:64:a0:33:4d:4e:c6:39:79:26: e6:77:69:e4:ec:da:5a:ec:05:b0:91:b7:f3:6f:13: e1:eb:14:02:f6:00:df:d7:75:73:de:fc:df:4a:20: 80:5b:99:8c:d6:97:b4:6f:8b:87:73:db:a8:b4:a8: c7:ae:15:64:f3:0e:e4:16:ce:27:0f:ff:45:c2:1b: 41:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:46:8C:33:76:B1:C9:35:44:33:F1:0F:DE:9B:8F:86:06:30:8B:6E X509v3 Authority Key Identifier: keyid:18:ED:AB:B2:82:0C:E2:5F:90:E8:63:5C:13:B7:F0:D4:5F:04:63:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:5c:30:f7:99:ec:85:22:d3:71:e0:46:91:7a:84:9b:17:ca: 53:76:e0:18:ee:c0:fc:14:33:42:7b:0d:1f:33:76:62:7d:fa: ea:ab:91:8a:48:8b:36:ae:2e:d1:13:b3:bd:9a:af:e1:1c:1a: da:ec:77:1c:02:ae:c3:24:5a:56:3b:56:b6:87:7a:07:c5:e6: 98:dd:0a:17:c9:0a:a1:ea:ba:c5:ba:75:6e:60:10:f1:7a:29: 65:e8:74:98:4b:f6:cd:b7:31:08:20:da:d6:96:0a:26:05:89: c4:b4:71:70:13:a0:ea:eb:bc:bc:85:90:a5:47:ae:26:05:99: 02:77:64:9c:ac:63:a9:ef:41:2b:21:04:eb:7d:ed:d9:a8:4e: 73:3a:fc:f1:49:db:04:93:93:73:91:48:96:9a:15:c8:a9:cc: bc:b2:8a:2d:cb:fe:0f:df:7b:b3:7c:b2:c2:6f:86:65:f0:8b: b8:ea:67:3d:aa:7b:a7:0a:17:29:e4:33:39:d2:73:bc:b2:41: 2f:ef:46:86:40:ff:2a:d7:2b:48:fd:9d:35:ec:d3:6c:a6:aa: b7:60:bd:fa:c7:47:de:7d:99:61:07:c9:4d:28:21:e2:71:cc: 01:01:3c:29:17:b9:ba:75:07:c3:a1:1e:65:1c:bd:0a:5d:92: 6d:42:6f:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU4MTAxMTAvBgNVBAUTKDE4RURBQkIyODIwQ0UyNUY5MEU4NjM1QzEzQjdGMEQ0 NUYwNDYzNzYwHhcNMjUxMTA1MDYzMDI3WhcNMjUxMTEyMDYzMDI3WjAYMRYwFAYD VQQDEw02OTBhZWYwNC0zMzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssI9g1W5ruTjgC6xxluBqYMNIK3Lzlz21SbV+Cj4SmzqXuVaxCsZvE9zY11Q 5/hy1hO5RlDLJdcpjJcS6BrYXQyUl5C3ROL2KL58EH6RkpPdCp5LyVQDf56A+hKv 4yB8rIzvQiy8zFz7u34Mfh957sv4ndAjW1+O799MasZ+moTAgtWUv/7aSUWmIYtq Cw78j9RfcAqZylkCcJGMYtO+5FFlN1qgbzQuLNHyEdAosZe7jgF7GqgSvdZkoDNN TsY5eSbmd2nk7Npa7AWwkbfzbxPh6xQC9gDf13Vz3vzfSiCAW5mM1pe0b4uHc9uo tKjHrhVk8w7kFs4nD/9FwhtBwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOhGjDN2 sck1RDPxD96bj4YGMItuMB8GA1UdIwQYMBaAFBjtq7KCDOJfkOhjXBO38NRfBGN2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTgxMC83QkE4RDM5Q0M3 MDgxMUVGQTg5QjBDNUZDNEY5QUUwMi9HTzJyc29JTTRsLVE2R05jRTdmdzFGOEVZ M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dPMnJzb0lNNGwtUTZHTmNFN2Z3MUY4RVkzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTgxMC83QkE4RDM5Q0M3MDgxMUVGQTg5QjBDNUZDNEY5QUUwMi9HTzJyc29JTTRs LVE2R05jRTdmdzFGOEVZM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnXDD3meyFItNx4EaReoSbF8pTduAY7sD8FDNCew0fM3Ziffrqq5GK SIs2ri7RE7O9mq/hHBra7HccAq7DJFpWO1a2h3oHxeaY3QoXyQqh6rrFunVuYBDx eill6HSYS/bNtzEIINrWlgomBYnEtHFwE6Dq67y8hZClR64mBZkCd2ScrGOp70Er IQTrfe3ZqE5zOvzxSdsEk5NzkUiWmhXIqcy8sooty/4P33uzfLLCb4Zl8Iu46mc9 qnunChcp5DM50nO8skEv70aGQP8q1ytI/Z017NNspqq3YL36x0fefZlhB8lNKCHi ccwBATwpF7m6dQfDoR5lHL0KXZJtQm/I -----END CERTIFICATE-----Generated at Wed Nov 5 18:19:14 2025 by rpki-client