$ rpki-client -vvf rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft File: gO0g9_wH3gyfPBuOKunNP85u2yE.mft (raw, json) Hash identifier: 3S833GrxyWJ2fKEPebnFKn8XnwG1cRBQotacuG4Ip8Y= Subject key identifier: 42:4B:62:48:34:FB:CC:7E:49:7C:DC:90:50:7D:22:3C:82:EF:B3:88 Authority key identifier: 80:ED:20:F7:FC:07:DE:0C:9F:3C:1B:8E:2A:E9:CD:3F:CE:6E:DB:21 Certificate issuer: /CN=A915BE00/serialNumber=80ED20F7FC07DE0C9F3C1B8E2AE9CD3FCE6EDB21 Certificate serial: 0599 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft Manifest number: 0591 Signing time: Sun 02 Nov 2025 23:12:04 +0000 Manifest this update: Sun 02 Nov 2025 23:12:03 +0000 Manifest next update: Sun 09 Nov 2025 23:12:03 +0000 Files and hashes: 1: gO0g9_wH3gyfPBuOKunNP85u2yE.crl (hash: Ca0J7q1IGUAPuMyfIF3lNaiO1ufCqjT8+W7w/iHKLkY=) 2: 972D6576112511F08AC1A549C4F9AE02.roa (hash: QOFOeJ0/TitkOVKuCtknVXKhDl8rDuqKOlqBjNU794M=) 3: 513D702E112511F081CC4E49C4F9AE02.roa (hash: Kg31LYu7Durk6j8slLyu/vJtO9Dfls9nej9ZAhspvEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.crl rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1433 (0x599) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BE00, serialNumber=80ED20F7FC07DE0C9F3C1B8E2AE9CD3FCE6EDB21 Validity Not Before: Nov 2 23:12:03 2025 GMT Not After : Nov 9 23:12:03 2025 GMT Subject: CN=6907e543-fd77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:28:8c:bb:d0:ae:e9:c5:68:1b:15:4f:6b:ed: 34:cf:d7:1c:fd:97:16:ad:59:b5:67:26:c7:86:6c: 82:0c:ea:3e:9b:07:4b:0b:1f:fe:11:a8:94:19:12: e2:de:bf:63:ea:50:2e:31:b3:80:3d:f1:42:2a:79: 12:2f:8c:cd:af:b5:61:4b:e5:ee:38:07:3f:38:24: be:c5:6f:2d:3d:67:31:eb:81:76:ba:82:90:37:a6: d9:ae:d6:7d:3d:2d:ab:0d:5f:0b:b6:bb:45:fc:b6: 1d:1e:09:97:c4:f3:57:ec:89:e1:f1:d5:7a:eb:20: a7:9a:c8:7f:53:86:8c:e3:c9:e0:da:27:a9:5d:54: c2:82:96:7d:bc:62:90:ed:41:8e:d5:7f:d5:7a:37: ad:38:ce:3c:3c:78:a3:b8:13:02:b6:da:ea:c3:2f: c3:61:4b:27:64:94:41:d1:b4:d5:c6:06:f1:4c:3d: 19:fc:89:c6:66:7d:ac:35:e2:db:09:0d:18:c0:ab: 21:66:a6:3e:bf:9a:5f:16:78:dc:aa:4e:af:cc:05: 9c:34:f3:92:97:54:8c:32:6e:8d:43:e5:1c:0e:40: 30:87:7e:6e:3c:bd:b4:d3:ce:45:5a:1f:f5:5c:7d: 5d:4b:e5:f4:47:26:ab:e9:62:2e:ef:30:1f:e7:e7: 9e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4B:62:48:34:FB:CC:7E:49:7C:DC:90:50:7D:22:3C:82:EF:B3:88 X509v3 Authority Key Identifier: keyid:80:ED:20:F7:FC:07:DE:0C:9F:3C:1B:8E:2A:E9:CD:3F:CE:6E:DB:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:0a:99:f3:95:56:c3:9b:87:d9:77:db:fc:67:c3:3f:20:af: 67:3d:a0:1d:6f:32:d4:8c:2a:b1:78:18:62:4d:20:64:45:6f: e6:ba:47:ed:11:c4:a7:fd:d0:26:e9:8e:2f:b0:81:0d:99:b7: 78:4c:9b:87:35:02:6a:d1:95:3b:e2:7a:8f:9d:34:17:70:66: b1:58:74:b9:95:f4:45:13:99:8a:58:50:e9:e4:4a:2b:23:78: 1c:0e:c8:ae:e6:40:b5:96:72:ca:70:58:f3:b0:67:1a:2a:5b: aa:d3:f3:1b:b1:29:b7:2d:e1:54:9a:11:39:c3:e5:de:87:ca: 04:33:2a:c0:78:8f:39:67:af:ce:2b:83:69:c0:e3:3c:5c:5e: 3e:ac:9f:46:e9:ef:c8:b1:a6:ee:9d:32:51:2b:de:25:35:30: 0c:bf:d6:d0:4c:6c:b9:f6:eb:98:0c:5a:2d:94:7c:af:25:86: 08:bf:9b:f6:33:f8:c3:6d:df:48:fa:b5:0e:cc:46:a5:81:e2: 4d:8e:51:f5:63:54:0e:fb:7e:52:74:d2:5f:b6:ed:c7:7d:d0: 09:a1:a1:af:47:6e:9c:97:10:04:e0:d3:4f:d5:6e:03:15:c7: 9b:ee:98:b7:5b:5e:cb:85:e6:3a:3f:72:78:0c:74:ba:90:a4: a0:c2:be:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJFMDAxMTAvBgNVBAUTKDgwRUQyMEY3RkMwN0RFMEM5RjNDMUI4RTJBRTlDRDNG Q0U2RURCMjEwHhcNMjUxMTAyMjMxMjAzWhcNMjUxMTA5MjMxMjAzWjAYMRYwFAYD VQQDEw02OTA3ZTU0My1mZDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4CiMu9Cu6cVoGxVPa+00z9cc/ZcWrVm1ZybHhmyCDOo+mwdLCx/+EaiUGRLi 3r9j6lAuMbOAPfFCKnkSL4zNr7VhS+XuOAc/OCS+xW8tPWcx64F2uoKQN6bZrtZ9 PS2rDV8LtrtF/LYdHgmXxPNX7Inh8dV66yCnmsh/U4aM48ng2iepXVTCgpZ9vGKQ 7UGO1X/VejetOM48PHijuBMCttrqwy/DYUsnZJRB0bTVxgbxTD0Z/InGZn2sNeLb CQ0YwKshZqY+v5pfFnjcqk6vzAWcNPOSl1SMMm6NQ+UcDkAwh35uPL20085FWh/1 XH1dS+X0Ryar6WIu7zAf5+eelwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJLYkg0 +8x+SXzckFB9IjyC77OIMB8GA1UdIwQYMBaAFIDtIPf8B94MnzwbjirpzT/Obtsh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkUwMC8zRDBCMjEyQUY0 RkQxMUVCQTUyQ0UyMTFDNEY5QUUwMi9nTzBnOV93SDNneWZQQnVPS3VuTlA4NXUy eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dPMGc5X3dIM2d5ZlBCdU9LdW5OUDg1dTJ5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkUwMC8zRDBCMjEyQUY0RkQxMUVCQTUyQ0UyMTFDNEY5QUUwMi9nTzBnOV93SDNn eWZQQnVPS3VuTlA4NXUyeUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5CpnzlVbDm4fZd9v8Z8M/IK9nPaAdbzLUjCqxeBhiTSBkRW/mukft EcSn/dAm6Y4vsIENmbd4TJuHNQJq0ZU74nqPnTQXcGaxWHS5lfRFE5mKWFDp5Eor I3gcDsiu5kC1lnLKcFjzsGcaKluq0/MbsSm3LeFUmhE5w+Xeh8oEMyrAeI85Z6/O K4NpwOM8XF4+rJ9G6e/IsabunTJRK94lNTAMv9bQTGy59uuYDFotlHyvJYYIv5v2 M/jDbd9I+rUOzEalgeJNjlH1Y1QO+35SdNJftu3HfdAJoaGvR26clxAE4NNP1W4D Fceb7pi3W17LheY6P3J4DHS6kKSgwr5e -----END CERTIFICATE-----Generated at Tue Nov 4 16:04:37 2025 by rpki-client