$ rpki-client -vvf rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft File: gmqoO74CQNE5BqurRkMX6eercO8.mft (raw, json) Hash identifier: Acxii7W11K5Y9wbSHr9Lm91OXKc5cnh4nisU9eVpAZ4= Subject key identifier: 31:F8:7D:1F:0E:B1:F0:F4:2E:CD:63:06:B4:C4:00:E0:26:0D:7C:7C Authority key identifier: 82:6A:A8:3B:BE:02:40:D1:39:06:AB:AB:46:43:17:E9:E7:AB:70:EF Certificate issuer: /CN=A916C473/serialNumber=826AA83BBE0240D13906ABAB464317E9E7AB70EF Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft Manifest number: 3C Signing time: Mon 03 Nov 2025 07:28:33 +0000 Manifest this update: Mon 03 Nov 2025 07:28:33 +0000 Manifest next update: Mon 10 Nov 2025 07:28:33 +0000 Files and hashes: 1: gmqoO74CQNE5BqurRkMX6eercO8.crl (hash: KSIYSbizSIJpeMCyBGYo5JaGqUAtiJqM6bgqA/TLCkA=) 2: DA98BA4C5DE011F0B1CD4C75C4F9AE02.roa (hash: x4FID5zbs9gmZN9FkmWfh+nLmyFuv96NIL9YO3x5RdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.crl rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C473, serialNumber=826AA83BBE0240D13906ABAB464317E9E7AB70EF Validity Not Before: Nov 3 07:28:33 2025 GMT Not After : Nov 10 07:28:33 2025 GMT Subject: CN=690859a1-294e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:74:07:aa:69:20:1b:76:5c:ac:0b:8d:de:d7: ba:d7:35:4c:44:f4:80:87:6e:68:49:cb:a6:19:00: f6:76:63:b7:02:52:2c:a5:16:2b:8e:c2:4a:66:c3: e0:45:79:90:0f:c7:45:32:16:6c:e3:f4:dd:c6:49: d1:f2:de:67:5f:ec:b4:09:18:37:d4:88:80:64:e0: b9:0e:2e:b6:ee:c3:dc:4a:c7:99:f7:23:4c:98:36: 1a:2a:fb:af:f5:72:8f:70:ac:81:c8:7d:df:b8:1f: 8b:a0:4b:7b:b7:38:81:44:61:eb:fb:15:03:b8:ec: 14:d3:d5:1e:2b:18:70:89:36:0c:a4:ea:26:c9:75: 8f:24:53:96:7f:98:35:e0:59:2d:40:a7:0b:ec:8d: 8c:da:f3:cd:7c:85:75:77:06:59:a4:72:a5:3d:58: dd:c1:08:d6:24:a6:67:f3:50:a2:72:14:7e:75:20: 06:1f:98:8f:40:f9:fa:65:36:46:e4:fb:59:4d:17: 1a:87:c6:49:8d:be:d0:d8:b8:a4:4a:d0:68:4d:0c: c1:b6:34:1a:12:14:1d:9f:08:29:e6:ce:8e:0d:b9: ed:ec:98:bf:a3:e6:f0:ec:f3:72:22:e2:11:30:d7: 76:e1:d9:10:59:07:81:74:4b:2a:bb:1e:7e:a7:56: 27:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F8:7D:1F:0E:B1:F0:F4:2E:CD:63:06:B4:C4:00:E0:26:0D:7C:7C X509v3 Authority Key Identifier: keyid:82:6A:A8:3B:BE:02:40:D1:39:06:AB:AB:46:43:17:E9:E7:AB:70:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:96:26:3d:58:aa:3f:a9:97:09:85:95:f9:01:5c:4f:25:e1: bb:51:4b:b4:d6:c0:bb:8a:6f:46:7d:89:e9:f3:74:8c:ac:7d: 7c:49:34:1a:61:c3:66:13:bc:74:f2:03:20:38:36:7d:75:2e: bc:ac:52:44:fa:04:4c:3e:93:b5:21:0d:69:ba:d3:65:05:43: f0:21:1c:9c:7a:cf:e1:46:49:24:25:94:a4:8a:cc:86:21:b6: 0f:b2:71:53:da:0d:5c:10:1d:a8:f3:9c:3a:49:66:9b:1f:8c: 40:5b:96:43:a4:51:26:a7:00:45:53:6b:30:cb:a5:26:31:6a: 5d:ca:7e:ee:6a:17:42:5d:85:f7:c4:de:40:f5:4c:a4:62:8c: 19:67:24:8f:4d:94:19:a7:b5:50:7a:62:74:04:12:9f:bb:ab: 76:67:81:d9:3a:3c:d4:bb:d2:e7:90:41:13:4f:32:93:a2:9c: ac:35:98:2f:4c:78:e6:e6:42:1d:fb:53:28:50:10:d2:7a:0f: 3f:07:c7:dd:e7:04:b8:eb:c2:e6:8b:18:22:17:62:88:c4:5b: 74:fa:79:48:e1:83:a1:d9:02:5d:76:02:bd:70:f6:f6:cd:44: a6:ac:fd:2f:7f:45:bd:19:02:ee:d4:2e:8b:88:7f:2c:f7:f4: 9b:01:8a:95 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QzQ3MzExMC8GA1UEBRMoODI2QUE4M0JCRTAyNDBEMTM5MDZBQkFCNDY0MzE3RTlF N0FCNzBFRjAeFw0yNTExMDMwNzI4MzNaFw0yNTExMTAwNzI4MzNaMBgxFjAUBgNV BAMTDTY5MDg1OWExLTI5NGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0dAeqaSAbdlysC43e17rXNUxE9ICHbmhJy6YZAPZ2Y7cCUiylFiuOwkpmw+BF eZAPx0UyFmzj9N3GSdHy3mdf7LQJGDfUiIBk4LkOLrbuw9xKx5n3I0yYNhoq+6/1 co9wrIHIfd+4H4ugS3u3OIFEYev7FQO47BTT1R4rGHCJNgyk6ibJdY8kU5Z/mDXg WS1ApwvsjYza8818hXV3BlmkcqU9WN3BCNYkpmfzUKJyFH51IAYfmI9A+fplNkbk +1lNFxqHxkmNvtDYuKRK0GhNDMG2NBoSFB2fCCnmzo4Nue3smL+j5vDs83Ii4hEw 13bh2RBZB4F0Syq7Hn6nVifjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMfh9Hw6x 8PQuzWMGtMQA4CYNfHwwHwYDVR0jBBgwFoAUgmqoO74CQNE5BqurRkMX6eercO8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDNDczL0Y1N0QyMzMwNURE RjExRjBBNUJGRDY2RkM0RjlBRTAyL2dtcW9PNzRDUU5FNUJxdXJSa01YNmVlcmNP OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ21xb083NENRTkU1QnF1clJrTVg2ZWVyY084LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD NDczL0Y1N0QyMzMwNURERjExRjBBNUJGRDY2RkM0RjlBRTAyL2dtcW9PNzRDUU5F NUJxdXJSa01YNmVlcmNPOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAACWJj1Yqj+plwmFlfkBXE8l4btRS7TWwLuKb0Z9ienzdIysfXxJNBph w2YTvHTyAyA4Nn11LrysUkT6BEw+k7UhDWm602UFQ/AhHJx6z+FGSSQllKSKzIYh tg+ycVPaDVwQHajznDpJZpsfjEBblkOkUSanAEVTazDLpSYxal3Kfu5qF0JdhffE 3kD1TKRijBlnJI9NlBmntVB6YnQEEp+7q3Zngdk6PNS70ueQQRNPMpOinKw1mC9M eObmQh37UyhQENJ6Dz8Hx93nBLjrwuaLGCIXYojEW3T6eUjhg6HZAl12Ar1w9vbN RKas/S9/Rb0ZAu7ULouIfyz39JsBipU= -----END CERTIFICATE-----Generated at Wed Nov 5 05:17:03 2025 by rpki-client