$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft File: -gRcYwK4c-iDZfqaAhSZtPPFhog.mft (raw, json) Hash identifier: v/IJqoktvIGdoAtch3lS0SDyfV5xHAS3iauCJuTONFM= Subject key identifier: 44:09:0D:B6:E9:76:3A:4D:A7:78:9D:DD:85:22:44:E5:04:25:FE:58 Authority key identifier: FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88 Certificate issuer: /CN=A91853D3/serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688 Certificate serial: 0596 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft Manifest number: 0584 Signing time: Sun 02 Nov 2025 23:18:22 +0000 Manifest this update: Sun 02 Nov 2025 23:18:22 +0000 Manifest next update: Sun 09 Nov 2025 23:18:22 +0000 Files and hashes: 1: -gRcYwK4c-iDZfqaAhSZtPPFhog.crl (hash: gJQPXZi2tgVPTIBgwSjs13fOq75F9lDmk9nPNmVfSp8=) 2: 52A1A77A6ECF11F0B2785815C4F9AE02.roa (hash: ZDRfk70st2kL6l3vbu2GItPWm8/EuvkzaT+2ep7EeqM=) 3: 533744C46ECF11F0B2785815C4F9AE02.roa (hash: uUR+Mj6HGg21UkWJm4BYFdMGN66Z7qsc9O4hlsYytz4=) 4: 14A59A26E15B11ECA05C9236C4F9AE02.roa (hash: Qt+ZMJoprDK28LqGcHvKCLmc3Omlf+abplideksk7Gc=) 5: D62399042D1E11EE8C614E3EC4F9AE02.roa (hash: dy7HlTozJjIKYVnOC7Ac5E0oRz65i8VQkjJrYKePISw=) 6: 36C4FAAAA9FC11EEBEF3E64AC4F9AE02.roa (hash: RH9GugeUqxFAlpVwNYGHYX1wxhyc5gJGTmNYoQjg2Ew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:18:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1430 (0x596) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91853D3, serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688 Validity Not Before: Nov 2 23:18:22 2025 GMT Not After : Nov 9 23:18:22 2025 GMT Subject: CN=6907e6be-afd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:05:a2:16:53:5f:82:17:6d:3c:ce:b3:14:b9: 4b:39:2d:6d:28:42:45:94:be:74:17:b7:70:9d:60: ff:5a:5c:cf:fb:a0:85:f0:8b:76:70:b5:eb:24:81: 27:6c:ec:cc:2a:ab:1e:b4:eb:e1:f0:50:62:3b:ea: 96:ef:7c:06:74:87:ec:ce:ec:63:ca:05:01:aa:b8: 98:47:3e:1d:9a:c1:2e:7d:29:68:68:73:26:b8:2e: ab:35:da:2f:64:02:7e:57:78:14:bb:ed:0c:61:02: 5c:84:67:81:11:34:d7:05:bb:b8:6f:a3:3c:c4:96: 52:6e:bb:95:2a:06:39:03:61:69:40:59:da:aa:62: 1f:9e:ff:67:92:9f:40:5b:af:90:1c:a6:8f:f0:29: 93:49:3b:af:f5:21:27:d9:ec:b9:4f:e9:45:5b:ca: d8:75:04:b1:da:3b:b5:10:af:95:d0:1f:f7:b7:67: 2e:f1:8f:e1:11:61:a0:83:35:ed:a3:19:50:8f:b7: 6a:46:92:8b:2b:e3:2f:98:b0:34:96:04:d6:40:d1: c6:57:54:34:22:71:a2:8c:41:f4:e5:46:5a:35:ef: f8:86:c8:a7:f3:d8:99:93:5a:46:0c:7a:22:2b:da: e7:e5:f3:b4:fb:64:dd:e5:e7:76:3c:0d:88:41:98: cd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:09:0D:B6:E9:76:3A:4D:A7:78:9D:DD:85:22:44:E5:04:25:FE:58 X509v3 Authority Key Identifier: keyid:FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:2e:07:45:9b:1c:4a:cb:6e:de:b9:f5:37:9a:0d:1c:35:a7: dd:0f:60:85:b8:f1:1e:25:90:c5:8a:37:39:11:1b:38:15:a8: 17:e6:34:73:fc:6c:98:7c:e4:a8:07:c0:a7:d9:b2:a9:93:c8: f0:d9:1f:96:5f:77:c0:9c:12:dd:9c:67:89:28:36:58:41:df: 8b:18:e4:a9:fc:96:2e:65:7e:83:ad:da:c1:d8:4b:01:2b:3c: f6:29:88:fa:d3:d6:8f:bb:e4:69:ea:2d:2c:bc:ce:8a:3e:4f: d5:2f:dd:35:d9:d7:28:b2:89:77:4d:c6:7f:59:6a:07:a5:e0: e6:88:23:ea:55:09:03:37:9d:54:ae:8d:1e:3a:e0:bc:f4:55: ca:22:3c:30:dc:a0:f1:99:b0:c2:6d:57:cf:a1:0b:7f:7f:20: c9:5d:91:7c:58:c4:62:93:b4:ea:66:eb:6e:0c:c8:71:db:4c: ee:68:c1:02:a0:f6:57:1f:1c:5b:6c:42:f2:96:b9:44:60:e7: 12:fe:0a:3a:98:8b:ff:31:3e:bf:40:9d:26:89:dd:15:52:25: d7:32:63:6d:01:44:b5:20:2b:3c:e7:d3:77:02:6c:e5:7a:fe: 36:2d:09:85:eb:95:b7:48:ef:76:33:70:d7:0a:59:99:b5:05: 62:46:a3:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUzRDMxMTAvBgNVBAUTKEZBMDQ1QzYzMDJCODczRTg4MzY1RkE5QTAyMTQ5OUI0 RjNDNTg2ODgwHhcNMjUxMTAyMjMxODIyWhcNMjUxMTA5MjMxODIyWjAYMRYwFAYD VQQDEw02OTA3ZTZiZS1hZmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmQWiFlNfghdtPM6zFLlLOS1tKEJFlL50F7dwnWD/WlzP+6CF8It2cLXrJIEn bOzMKqsetOvh8FBiO+qW73wGdIfszuxjygUBqriYRz4dmsEufSloaHMmuC6rNdov ZAJ+V3gUu+0MYQJchGeBETTXBbu4b6M8xJZSbruVKgY5A2FpQFnaqmIfnv9nkp9A W6+QHKaP8CmTSTuv9SEn2ey5T+lFW8rYdQSx2ju1EK+V0B/3t2cu8Y/hEWGggzXt oxlQj7dqRpKLK+MvmLA0lgTWQNHGV1Q0InGijEH05UZaNe/4hsin89iZk1pGDHoi K9rn5fO0+2Td5ed2PA2IQZjNHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQJDbbp djpNp3id3YUiROUEJf5YMB8GA1UdIwQYMBaAFPoEXGMCuHPog2X6mgIUmbTzxYaI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTNEMy82RUMwRTM2ODAw MEExMUVDOEMyODcyNTJDNEY5QUUwMi8tZ1JjWXdLNGMtaURaZnFhQWhTWnRQUEZo b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1nUmNZd0s0Yy1pRFpmcWFBaFNadFBQRmhvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTNEMy82RUMwRTM2ODAwMEExMUVDOEMyODcyNTJDNEY5QUUwMi8tZ1JjWXdLNGMt aURaZnFhQWhTWnRQUEZob2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDLgdFmxxKy27eufU3mg0cNafdD2CFuPEeJZDFijc5ERs4FagX5jRz /GyYfOSoB8Cn2bKpk8jw2R+WX3fAnBLdnGeJKDZYQd+LGOSp/JYuZX6DrdrB2EsB Kzz2KYj609aPu+Rp6i0svM6KPk/VL9012dcosol3TcZ/WWoHpeDmiCPqVQkDN51U ro0eOuC89FXKIjww3KDxmbDCbVfPoQt/fyDJXZF8WMRik7TqZutuDMhx20zuaMEC oPZXHxxbbELylrlEYOcS/go6mIv/MT6/QJ0mid0VUiXXMmNtAUS1ICs859N3Amzl ev42LQmF65W3SO92M3DXClmZtQViRqPx -----END CERTIFICATE-----Generated at Tue Nov 4 20:22:54 2025 by rpki-client