$ rpki-client -vvf rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft File: G2L9XgPTM3qi3E4VB5QUQEextjo.mft (raw, json) Hash identifier: aqqNCBkPopIE1qnlWp74zFcfyWe+6jVennUmrMFLVI8= Subject key identifier: 5E:69:6F:C2:5C:48:7C:49:88:50:24:0C:1D:BE:DA:30:C2:7E:B8:2F Authority key identifier: 1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A Certificate issuer: /CN=A916C643/serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Certificate serial: 0551 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft Manifest number: 0544 Signing time: Tue 04 Nov 2025 23:32:47 +0000 Manifest this update: Tue 04 Nov 2025 23:32:47 +0000 Manifest next update: Tue 11 Nov 2025 23:32:47 +0000 Files and hashes: 1: G2L9XgPTM3qi3E4VB5QUQEextjo.crl (hash: gcNdvuYrCOazY2W/XXVx0XEawbsYe9om4GOVxoSWW0o=) 2: 594A0BF2152E11EC94BCB264C4F9AE02.roa (hash: De+KbU1rQ+e7QR643NvX9xdd94W0D5EZXh2X3vA8FwY=) 3: 5A0804A4152E11EC94BCB264C4F9AE02.roa (hash: Xz85fL4HDodJp9813Pf30AvPpXYXiy5+u/nD3T6D6uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:32:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1361 (0x551) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C643, serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Validity Not Before: Nov 4 23:32:47 2025 GMT Not After : Nov 11 23:32:47 2025 GMT Subject: CN=690a8d1f-73d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c0:4e:5b:50:4a:48:b1:e9:89:3c:e2:6f:09: d0:47:8e:85:f5:3d:6f:16:30:ce:0a:e5:5a:cb:70: cd:a0:70:28:c5:7a:d7:69:3b:d2:b4:8e:61:d7:a9: 89:16:b2:5d:af:87:3e:69:c2:c2:13:e4:7d:f9:94: b4:60:9e:fe:40:3c:8f:a4:13:0c:c4:1f:99:3e:42: b4:33:03:04:91:ac:1d:87:59:4d:c3:23:59:d9:04: ff:f7:9a:68:d3:42:63:fc:4d:14:ee:8a:e3:af:a6: 07:1c:0d:21:51:bf:5c:98:1c:ff:25:b7:c1:47:9c: 12:c5:5d:e2:f8:c8:da:2a:6a:8c:22:ed:c6:6c:83: d8:c5:ba:8e:50:eb:a6:bf:c0:c2:6c:8e:2a:b9:a9: 5d:0a:11:d4:6e:a1:fc:01:5c:49:d1:68:40:a5:5a: 90:1a:1a:6f:41:a4:b1:7c:01:11:70:c0:7b:e8:94: b3:27:f0:d4:f5:fc:b1:95:7c:0a:38:25:7a:49:fa: e3:86:f4:9e:68:94:e1:ff:de:6e:f0:fa:22:0e:38: 5a:09:98:44:b4:7e:00:8b:b9:97:a2:b5:ee:24:e5: b6:7c:90:ac:f0:86:4b:55:6f:92:19:56:18:4e:ae: 44:9d:92:c6:2f:8b:0f:03:86:10:53:a3:4d:f4:0f: 70:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:69:6F:C2:5C:48:7C:49:88:50:24:0C:1D:BE:DA:30:C2:7E:B8:2F X509v3 Authority Key Identifier: keyid:1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:6d:c5:65:bc:bd:b2:06:ed:9f:f0:d1:4c:f6:b3:5b:3c:64: 1b:82:30:09:8b:b5:b6:97:20:9c:f2:df:fc:57:22:3a:39:fc: 47:53:6a:52:27:c9:3e:34:ce:b8:ff:65:89:1e:8d:3a:2a:6a: 6d:f9:4d:0e:ae:22:48:7a:27:46:49:7b:25:dd:6a:52:d6:40: eb:96:70:21:73:d0:3b:ff:c8:33:28:78:3a:95:84:6d:cd:17: 52:c6:1b:d0:79:12:0f:ce:a4:ad:ff:f9:74:45:4b:28:12:80: 47:98:3c:05:c4:64:a9:03:9d:f1:d3:92:0a:e9:56:b2:ff:2b: 7f:1b:3c:52:51:df:e5:87:e2:13:69:26:74:56:ed:bb:d8:c8: a0:b5:f8:5c:da:3f:ab:ad:70:2d:ad:c6:d0:e1:d2:9f:3d:40: 98:0f:0b:6f:4e:f9:48:86:2f:66:1e:c4:9a:6d:3c:a7:64:4a: 1e:ec:13:75:57:45:36:0c:ab:96:16:31:5b:c1:a7:3f:42:03: 1a:d0:aa:fb:8f:b9:fe:6f:8f:95:13:7e:5f:b6:78:4b:51:36: bd:a9:59:d9:84:88:0f:2e:d3:a6:15:f9:22:10:82:32:14:89: b7:6b:4e:0d:81:87:0d:dc:3b:0d:6b:92:df:ed:d4:1d:ee:a3: f5:50:93:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM2NDMxMTAvBgNVBAUTKDFCNjJGRDVFMDNEMzMzN0FBMkRDNEUxNTA3OTQxNDQw NDdCMUI2M0EwHhcNMjUxMTA0MjMzMjQ3WhcNMjUxMTExMjMzMjQ3WjAYMRYwFAYD VQQDEw02OTBhOGQxZi03M2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAysBOW1BKSLHpiTzibwnQR46F9T1vFjDOCuVay3DNoHAoxXrXaTvStI5h16mJ FrJdr4c+acLCE+R9+ZS0YJ7+QDyPpBMMxB+ZPkK0MwMEkawdh1lNwyNZ2QT/95po 00Jj/E0U7orjr6YHHA0hUb9cmBz/JbfBR5wSxV3i+MjaKmqMIu3GbIPYxbqOUOum v8DCbI4qualdChHUbqH8AVxJ0WhApVqQGhpvQaSxfAERcMB76JSzJ/DU9fyxlXwK OCV6SfrjhvSeaJTh/95u8PoiDjhaCZhEtH4Ai7mXorXuJOW2fJCs8IZLVW+SGVYY Tq5EnZLGL4sPA4YQU6NN9A9wMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF5pb8Jc SHxJiFAkDB2+2jDCfrgvMB8GA1UdIwQYMBaAFBti/V4D0zN6otxOFQeUFEBHsbY6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzY0My9BNUQ4ODRDNDE1 MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0zcWkzRTRWQjVRVVFFZXh0 am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cyTDlYZ1BUTTNxaTNFNFZCNVFVUUVleHRqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzY0My9BNUQ4ODRDNDE1MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0z cWkzRTRWQjVRVVFFZXh0am8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvbcVlvL2yBu2f8NFM9rNbPGQbgjAJi7W2lyCc8t/8VyI6OfxHU2pS J8k+NM64/2WJHo06Kmpt+U0OriJIeidGSXsl3WpS1kDrlnAhc9A7/8gzKHg6lYRt zRdSxhvQeRIPzqSt//l0RUsoEoBHmDwFxGSpA53x05IK6Vay/yt/GzxSUd/lh+IT aSZ0Vu272Migtfhc2j+rrXAtrcbQ4dKfPUCYDwtvTvlIhi9mHsSabTynZEoe7BN1 V0U2DKuWFjFbwac/QgMa0Kr7j7n+b4+VE35ftnhLUTa9qVnZhIgPLtOmFfkiEIIy FIm3a04NgYcN3DsNa5Lf7dQd7qP1UJPr -----END CERTIFICATE-----Generated at Wed Nov 5 22:31:19 2025 by rpki-client