$ rpki-client -vvf rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft File: G0PzVWVtEI4w0YQ03rV5PPagGjA.mft (raw, json) Hash identifier: dZFpxgKULCeD+RsT73j4TyoAiiE9oBI13p6q3pL8jWk= Subject key identifier: 2E:3C:FD:78:5D:2A:45:8F:B9:EB:D8:60:37:61:87:E2:A1:9D:84:43 Authority key identifier: 1B:43:F3:55:65:6D:10:8E:30:D1:84:34:DE:B5:79:3C:F6:A0:1A:30 Certificate issuer: /CN=A916B0EA/serialNumber=1B43F355656D108E30D18434DEB5793CF6A01A30 Certificate serial: 0C87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft Manifest number: 14E4 Signing time: Tue 04 Nov 2025 18:36:17 +0000 Manifest this update: Tue 04 Nov 2025 18:36:17 +0000 Manifest next update: Tue 11 Nov 2025 18:36:17 +0000 Files and hashes: 1: G0PzVWVtEI4w0YQ03rV5PPagGjA.crl (hash: IjXIz5rLOoIh7n4k8M9e0i5JCQQG2dOCauHIE0Adq+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.crl rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:36:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3207 (0xc87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B0EA, serialNumber=1B43F355656D108E30D18434DEB5793CF6A01A30 Validity Not Before: Nov 4 18:36:17 2025 GMT Not After : Nov 11 18:36:17 2025 GMT Subject: CN=690a47a1-55ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6f:95:dd:5a:41:5c:64:d4:95:2b:73:35:d1: 15:e4:75:f9:0b:c6:c5:e4:44:dd:ac:d7:c2:fc:2e: 64:c2:a9:b6:eb:d1:39:e8:9c:84:b2:46:5e:eb:2c: 3e:e1:18:99:40:3b:c7:1c:96:93:99:51:f5:7d:02: 28:aa:d5:d8:e9:e3:de:6e:72:89:c6:2a:17:0f:73: 89:97:d1:a4:ff:d4:1b:b5:d7:ed:96:a6:5e:9f:55: 51:f3:04:53:76:31:2c:00:80:46:66:44:d3:a9:13: 1f:b8:a0:a6:86:e7:49:6f:c8:45:29:6a:5b:1d:c6: 33:09:1a:82:f6:15:a3:5f:ec:0f:4e:27:d7:d8:04: ef:11:6b:6e:58:76:73:09:32:b0:50:95:1c:e3:4c: 01:5b:4c:31:d6:1c:0f:4d:14:0a:75:dd:ac:81:92: f6:88:22:cd:8e:13:70:42:0d:98:6e:fa:73:b5:d8: ff:b9:4e:7d:3a:7e:bc:3c:dc:56:89:1e:3d:7a:94: a5:8d:33:39:3c:fa:e9:b2:bf:8a:99:4e:c8:3a:29: 04:cf:1e:45:ad:ae:8a:e3:8a:6f:ed:cf:6e:8b:d5: 93:2e:42:07:f6:60:86:b0:1b:55:61:54:59:a0:96: 6c:ea:af:74:56:ed:67:a2:2e:b9:e1:74:3d:6e:58: 60:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:3C:FD:78:5D:2A:45:8F:B9:EB:D8:60:37:61:87:E2:A1:9D:84:43 X509v3 Authority Key Identifier: keyid:1B:43:F3:55:65:6D:10:8E:30:D1:84:34:DE:B5:79:3C:F6:A0:1A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:7f:2c:a7:9f:0a:b9:6a:63:01:c3:33:a8:75:94:13:71:d7: 80:44:66:54:12:4c:a5:69:07:e1:c1:39:d9:10:8d:87:55:ef: 5f:2e:ee:4c:e2:55:9b:75:aa:35:79:02:a6:ca:03:a3:ac:31: a7:c0:cc:dc:92:c5:f1:9a:71:18:90:55:25:64:28:71:54:d5: 17:c1:85:d2:ae:48:f7:0e:33:08:b0:b9:37:d8:17:4a:8a:26: 5a:25:fc:8d:0b:09:3f:7d:6c:ca:b6:c8:69:31:4e:9a:65:bd: 20:1d:eb:99:6f:99:9c:09:d4:09:bb:36:c6:3c:01:e0:4a:fc: e6:51:f5:9c:f6:ac:33:50:83:6e:e9:23:05:c5:9f:11:b2:37: 7d:8d:b2:30:c2:ee:17:e9:59:8f:d9:09:9d:28:cc:4e:2a:73: dc:1d:e3:98:fc:92:0e:87:0c:f7:d2:55:cd:61:f1:85:48:22: 6e:c7:74:8e:1f:12:d1:d9:fc:cd:97:72:b7:26:63:9e:19:e8: da:19:b8:e1:40:bf:84:35:16:b6:67:98:78:0e:35:23:53:c3: bf:f6:2d:a4:1f:79:6d:04:0d:2c:fb:4b:06:f7:1d:f2:9f:87: 45:76:cb:82:9c:0a:63:67:31:93:a8:20:1e:5d:90:94:2e:fe: 04:eb:b2:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIwRUExMTAvBgNVBAUTKDFCNDNGMzU1NjU2RDEwOEUzMEQxODQzNERFQjU3OTND RjZBMDFBMzAwHhcNMjUxMTA0MTgzNjE3WhcNMjUxMTExMTgzNjE3WjAYMRYwFAYD VQQDEw02OTBhNDdhMS01NWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2+V3VpBXGTUlStzNdEV5HX5C8bF5ETdrNfC/C5kwqm269E56JyEskZe6yw+ 4RiZQDvHHJaTmVH1fQIoqtXY6ePebnKJxioXD3OJl9Gk/9QbtdftlqZen1VR8wRT djEsAIBGZkTTqRMfuKCmhudJb8hFKWpbHcYzCRqC9hWjX+wPTifX2ATvEWtuWHZz CTKwUJUc40wBW0wx1hwPTRQKdd2sgZL2iCLNjhNwQg2Ybvpztdj/uU59On68PNxW iR49epSljTM5PPrpsr+KmU7IOikEzx5Fra6K44pv7c9ui9WTLkIH9mCGsBtVYVRZ oJZs6q90Vu1noi654XQ9blhg+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC48/Xhd KkWPuevYYDdhh+KhnYRDMB8GA1UdIwQYMBaAFBtD81VlbRCOMNGENN61eTz2oBow MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjBFQS80RDhFNDlCMDBC NzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9HMFB6VldWdEVJNHcwWVEwM3JWNVBQYWdH akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cwUHpWV1Z0RUk0dzBZUTAzclY1UFBhZ0dqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjBFQS80RDhFNDlCMDBCNzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9HMFB6VldWdEVJ NHcwWVEwM3JWNVBQYWdHakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBofyynnwq5amMBwzOodZQTcdeARGZUEkylaQfhwTnZEI2HVe9fLu5M 4lWbdao1eQKmygOjrDGnwMzcksXxmnEYkFUlZChxVNUXwYXSrkj3DjMIsLk32BdK iiZaJfyNCwk/fWzKtshpMU6aZb0gHeuZb5mcCdQJuzbGPAHgSvzmUfWc9qwzUINu 6SMFxZ8Rsjd9jbIwwu4X6VmP2QmdKMxOKnPcHeOY/JIOhwz30lXNYfGFSCJux3SO HxLR2fzNl3K3JmOeGejaGbjhQL+ENRa2Z5h4DjUjU8O/9i2kH3ltBA0s+0sG9x3y n4dFdsuCnApjZzGTqCAeXZCULv4E67Kl -----END CERTIFICATE-----Generated at Wed Nov 5 18:49:11 2025 by rpki-client