$ rpki-client -vvf rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft File: -GGkJMXdlLdB2BgJtff_OVVjdl4.mft (raw, json) Hash identifier: u0fC9kIdCpj3juVZSH+RMl1wLfvWsPuY4vSvMGZ+WYU= Subject key identifier: A0:CF:1A:99:1C:14:93:CE:E1:BD:29:D1:1B:AA:36:FC:0E:5D:A7:EB Authority key identifier: F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E Certificate issuer: /CN=A915B6E9/serialNumber=F861A424C5DD94B741D81809B5F7FF395563765E Certificate serial: 042D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft Manifest number: 0426 Signing time: Wed 05 Nov 2025 00:26:49 +0000 Manifest this update: Wed 05 Nov 2025 00:26:49 +0000 Manifest next update: Wed 12 Nov 2025 00:26:49 +0000 Files and hashes: 1: -GGkJMXdlLdB2BgJtff_OVVjdl4.crl (hash: S5AfxuZL/CRPj9NjwWaOx5ESertLUKEI6BtJ0hDaf6k=) 2: D2438C7C4B1F11EDAF41BC7FC4F9AE02.roa (hash: tt7O9YQ0p71DCEEFVfdI/EIIH0WIFOY0otBzHdQ0+Os=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.crl rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1069 (0x42d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B6E9, serialNumber=F861A424C5DD94B741D81809B5F7FF395563765E Validity Not Before: Nov 5 00:26:49 2025 GMT Not After : Nov 12 00:26:49 2025 GMT Subject: CN=690a99c9-888d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:68:bb:dc:73:1f:05:ca:7d:b3:74:44:79:7a: 17:3b:13:b0:39:4a:5f:7b:84:66:d4:44:69:16:a6: 5d:b4:39:eb:ea:70:30:bb:79:e2:f6:88:78:82:d4: 24:58:0c:52:cb:bd:a0:a8:21:91:8b:cc:f0:5b:61: 78:48:cb:b4:61:b1:e3:78:cc:df:17:ee:43:f7:b2: 40:e3:b5:2c:cc:1f:6c:44:e6:ad:24:8e:0f:23:c6: a2:f6:03:c6:70:8a:e7:e3:82:c3:db:72:7c:56:47: 63:c3:aa:28:66:5d:cb:14:66:4f:f3:32:42:e1:d5: 4b:1d:7e:d8:9f:03:b4:dc:ff:54:b6:4c:d7:50:ed: cc:69:46:da:16:e5:23:80:c2:e7:3d:b1:37:ec:39: f8:27:67:57:2d:18:3b:0c:3d:40:d8:07:28:df:d0: 49:c2:20:a4:a8:3a:17:12:c8:5c:1a:19:13:d5:a1: ec:d6:60:52:e4:c9:4d:df:4b:05:9a:01:bb:6b:45: b2:8e:d4:64:68:ec:69:85:8d:a0:e7:1d:a7:5a:76: c1:8e:0a:9c:39:3b:fc:4c:a5:fd:ae:37:79:d3:8a: fc:c1:f4:50:43:08:f3:f5:61:c9:f8:a1:f6:88:70: b2:40:57:9f:1b:a1:56:2e:6c:f4:4d:8c:ee:4c:c1: cc:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:CF:1A:99:1C:14:93:CE:E1:BD:29:D1:1B:AA:36:FC:0E:5D:A7:EB X509v3 Authority Key Identifier: keyid:F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:41:e5:57:29:c5:0b:bf:30:6d:18:f1:68:bc:cd:5a:28:ab: 4f:8f:33:90:a5:aa:63:26:b6:bd:3f:01:b8:89:4f:3a:28:97: d7:3e:4e:d2:5d:11:bd:5d:63:28:11:32:43:52:20:2c:94:6c: e8:e9:99:3a:09:87:7e:33:f2:6a:96:80:4b:f6:71:3b:38:d7: 83:b4:a2:62:b9:b1:e2:73:4b:00:b1:04:de:9e:ea:84:e2:a0: 7f:a0:f5:fe:0b:36:70:b4:97:92:48:44:c8:b3:1e:7d:86:f4: 5a:d1:f5:d9:4d:40:86:61:da:6c:ff:9b:1a:fd:98:85:ed:24: f9:47:48:e3:2b:29:c8:86:60:7d:01:69:85:da:1a:57:19:7b: f1:db:80:62:a0:0f:28:ea:0f:64:90:36:f3:4a:06:9e:1f:c9: c4:c2:49:71:f3:36:64:d2:f7:19:34:dd:1b:a1:bf:a3:a1:dd: 6a:72:77:cf:21:05:27:8a:41:56:af:b3:45:71:6c:e2:a1:7b: cd:8f:95:82:63:1d:fc:6c:cf:63:70:65:31:67:96:40:fe:1c: 36:e9:e5:37:ca:87:6d:60:9f:58:26:fb:b9:6e:e5:b0:d6:bc: ff:3c:d5:9c:23:4f:c7:f4:1e:72:e7:d2:cf:c4:80:bc:34:07: 8a:d2:b3:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI2RTkxMTAvBgNVBAUTKEY4NjFBNDI0QzVERDk0Qjc0MUQ4MTgwOUI1RjdGRjM5 NTU2Mzc2NUUwHhcNMjUxMTA1MDAyNjQ5WhcNMjUxMTEyMDAyNjQ5WjAYMRYwFAYD VQQDEw02OTBhOTljOS04ODhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnmi73HMfBcp9s3REeXoXOxOwOUpfe4Rm1ERpFqZdtDnr6nAwu3ni9oh4gtQk WAxSy72gqCGRi8zwW2F4SMu0YbHjeMzfF+5D97JA47UszB9sROatJI4PI8ai9gPG cIrn44LD23J8Vkdjw6ooZl3LFGZP8zJC4dVLHX7YnwO03P9UtkzXUO3MaUbaFuUj gMLnPbE37Dn4J2dXLRg7DD1A2Aco39BJwiCkqDoXEshcGhkT1aHs1mBS5MlN30sF mgG7a0WyjtRkaOxphY2g5x2nWnbBjgqcOTv8TKX9rjd504r8wfRQQwjz9WHJ+KH2 iHCyQFefG6FWLmz0TYzuTMHMxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKDPGpkc FJPO4b0p0RuqNvwOXafrMB8GA1UdIwQYMBaAFPhhpCTF3ZS3QdgYCbX3/zlVY3Ze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjZFOS8wQTE2OTE5Qzg1 OEUxMUVDOUMwMjg0NTRDNEY5QUUwMi8tR0drSk1YZGxMZEIyQmdKdGZmX09WVmpk bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1HR2tKTVhkbExkQjJCZ0p0ZmZfT1ZWamRsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjZFOS8wQTE2OTE5Qzg1OEUxMUVDOUMwMjg0NTRDNEY5QUUwMi8tR0drSk1YZGxM ZEIyQmdKdGZmX09WVmpkbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPQeVXKcULvzBtGPFovM1aKKtPjzOQpapjJra9PwG4iU86KJfXPk7S XRG9XWMoETJDUiAslGzo6Zk6CYd+M/JqloBL9nE7ONeDtKJiubHic0sAsQTenuqE 4qB/oPX+CzZwtJeSSETIsx59hvRa0fXZTUCGYdps/5sa/ZiF7ST5R0jjKynIhmB9 AWmF2hpXGXvx24BioA8o6g9kkDbzSgaeH8nEwklx8zZk0vcZNN0bob+jod1qcnfP IQUnikFWr7NFcWzioXvNj5WCYx38bM9jcGUxZ5ZA/hw26eU3yodtYJ9YJvu5buWw 1rz/PNWcI0/H9B5y59LPxIC8NAeK0rOH -----END CERTIFICATE-----Generated at Wed Nov 5 23:05:37 2025 by rpki-client