$ rpki-client -vvf rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft File: gaDPnOmqqZDtGv6KgwpweHT5qr4.mft (raw, json) Hash identifier: iY/VCjp5w7FNmD4GMWOqeFsbp4eY56+PQw8Vcnbd9gY= Subject key identifier: CB:32:A4:61:81:C4:E1:0F:86:F2:50:5C:E1:19:19:C4:28:52:84:44 Authority key identifier: 81:A0:CF:9C:E9:AA:A9:90:ED:1A:FE:8A:83:0A:70:78:74:F9:AA:BE Certificate issuer: /CN=A9157450/serialNumber=81A0CF9CE9AAA990ED1AFE8A830A707874F9AABE Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft Manifest number: 0107 Signing time: Mon 03 Nov 2025 04:59:57 +0000 Manifest this update: Mon 03 Nov 2025 04:59:57 +0000 Manifest next update: Mon 10 Nov 2025 04:59:57 +0000 Files and hashes: 1: gaDPnOmqqZDtGv6KgwpweHT5qr4.crl (hash: QqayKDG9sdLYD6lzV4/UI3XEDNkRuDTcW1e40yx7JK0=) 2: B71C4F80253711EFA1D2A943C4F9AE02.roa (hash: H+qQQZmD1p/qPnv6XT6KRZsCtfSFefjGnHy0mI1YrpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.crl rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:59:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157450, serialNumber=81A0CF9CE9AAA990ED1AFE8A830A707874F9AABE Validity Not Before: Nov 3 04:59:57 2025 GMT Not After : Nov 10 04:59:57 2025 GMT Subject: CN=690836cd-4f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:75:ac:1f:01:dd:86:f8:ef:36:f9:29:e1:22: 46:91:d9:81:fd:fe:08:0d:d1:6d:da:7f:6b:91:06: 26:5d:c1:3b:0d:22:6f:6a:8c:d0:4a:c0:8c:c3:63: 48:eb:85:7b:8e:d8:86:6f:1f:9b:94:3e:8f:79:36: 9a:25:05:8f:d0:4a:69:68:e6:ec:47:96:30:81:5f: 81:5f:71:ef:73:f5:42:59:ca:f0:0e:f2:63:27:49: f8:a7:94:f8:dc:87:62:f5:a1:02:af:e5:f3:46:d9: 42:a8:9d:b0:c8:af:4b:64:9b:2f:30:e6:e4:4a:59: 6e:6c:6b:38:77:21:52:92:fe:d7:c2:aa:15:d5:d6: c3:ba:c0:c2:2e:d2:80:68:d0:c8:78:1c:24:45:e2: ea:ec:0f:07:09:fe:e1:24:31:38:08:2b:29:44:59: c3:ef:23:8b:8e:50:e4:53:26:fc:d0:11:fc:3e:8c: 5b:d3:e0:c6:47:b2:56:48:84:e0:27:7c:3a:60:c4: ab:1e:7d:6f:57:ed:74:b8:9f:b8:8b:3f:52:49:a4: 14:be:07:42:c7:b7:6b:00:d4:2d:9b:d8:32:de:b7: 20:3d:e5:e9:81:d8:a9:c7:bb:c6:71:19:06:32:c6: 44:17:19:b5:32:79:c9:c5:d2:e5:b0:9d:06:79:ca: 0a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:32:A4:61:81:C4:E1:0F:86:F2:50:5C:E1:19:19:C4:28:52:84:44 X509v3 Authority Key Identifier: keyid:81:A0:CF:9C:E9:AA:A9:90:ED:1A:FE:8A:83:0A:70:78:74:F9:AA:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:05:7a:7f:53:53:47:55:a7:34:80:30:c0:2f:0f:25:e0:cf: 92:d5:a3:a7:8c:20:01:06:97:39:2d:6b:7e:a9:a8:ed:83:4c: 8a:de:2a:65:f6:4c:6c:dc:19:d2:80:76:2f:bf:df:fa:5e:38: a5:17:a7:8d:76:bc:b5:84:4e:17:f6:2a:2f:fc:54:43:40:2f: bf:66:00:d4:7b:c0:66:14:e0:c1:52:76:20:9f:1e:44:80:94: 50:fa:9d:cf:e4:4c:ba:b0:ad:8a:fb:3e:53:d7:5b:b4:be:6e: 61:2f:20:a5:3a:6e:cb:6f:41:5b:05:21:55:4b:8f:55:0c:dd: 23:e5:9f:dc:4a:25:8e:42:0b:37:65:b2:b3:bb:77:1c:7b:6e: 45:b1:e9:a6:34:f9:73:a2:05:26:e3:1c:1c:d2:fa:83:83:e8: 5a:f8:4f:90:c0:d8:7c:42:7e:1a:35:30:6e:46:2f:7f:db:cc: 62:ad:5f:88:ab:48:ce:23:7d:cf:34:a9:78:b4:4d:9c:e2:7a: c3:ef:76:9f:68:4b:cc:e6:5d:13:a6:71:74:7c:59:27:94:7d: 26:69:53:80:ad:25:45:ec:52:7a:61:ee:59:9d:fd:30:67:d3: 8b:44:93:d3:28:fc:94:e7:80:68:3a:5b:82:63:0d:c9:20:e3: e7:b3:07:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc0NTAxMTAvBgNVBAUTKDgxQTBDRjlDRTlBQUE5OTBFRDFBRkU4QTgzMEE3MDc4 NzRGOUFBQkUwHhcNMjUxMTAzMDQ1OTU3WhcNMjUxMTEwMDQ1OTU3WjAYMRYwFAYD VQQDEw02OTA4MzZjZC00ZjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXWsHwHdhvjvNvkp4SJGkdmB/f4IDdFt2n9rkQYmXcE7DSJvaozQSsCMw2NI 64V7jtiGbx+blD6PeTaaJQWP0EppaObsR5YwgV+BX3Hvc/VCWcrwDvJjJ0n4p5T4 3Idi9aECr+XzRtlCqJ2wyK9LZJsvMObkSllubGs4dyFSkv7XwqoV1dbDusDCLtKA aNDIeBwkReLq7A8HCf7hJDE4CCspRFnD7yOLjlDkUyb80BH8Poxb0+DGR7JWSITg J3w6YMSrHn1vV+10uJ+4iz9SSaQUvgdCx7drANQtm9gy3rcgPeXpgdipx7vGcRkG MsZEFxm1MnnJxdLlsJ0GecoKdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMsypGGB xOEPhvJQXOEZGcQoUoREMB8GA1UdIwQYMBaAFIGgz5zpqqmQ7Rr+ioMKcHh0+aq+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzQ1MC84MkQ5QkEwNjI1 MzYxMUVGOUExQ0VGMjNDNEY5QUUwMi9nYURQbk9tcXFaRHRHdjZLZ3dwd2VIVDVx cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dhRFBuT21xcVpEdEd2Nktnd3B3ZUhUNXFyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzQ1MC84MkQ5QkEwNjI1MzYxMUVGOUExQ0VGMjNDNEY5QUUwMi9nYURQbk9tcXFa RHRHdjZLZ3dwd2VIVDVxcjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzBXp/U1NHVac0gDDALw8l4M+S1aOnjCABBpc5LWt+qajtg0yK3ipl 9kxs3BnSgHYvv9/6XjilF6eNdry1hE4X9iov/FRDQC+/ZgDUe8BmFODBUnYgnx5E gJRQ+p3P5Ey6sK2K+z5T11u0vm5hLyClOm7Lb0FbBSFVS49VDN0j5Z/cSiWOQgs3 ZbKzu3cce25FsemmNPlzogUm4xwc0vqDg+ha+E+QwNh8Qn4aNTBuRi9/28xirV+I q0jOI33PNKl4tE2c4nrD73afaEvM5l0TpnF0fFknlH0maVOArSVF7FJ6Ye5Znf0w Z9OLRJPTKPyU54BoOluCYw3JIOPnsweK -----END CERTIFICATE-----Generated at Tue Nov 4 08:19:20 2025 by rpki-client