$ rpki-client -vvf rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft File: gSxjWrgxJmFeyTROfsbpAu2safU.mft (raw, json) Hash identifier: iyq2kpqQxhSgKDm+C8SU78jx//w2iUFvQZylK8PjszM= Subject key identifier: 97:04:4A:9F:CB:09:99:3C:90:6C:D0:E1:66:5C:5A:4F:FD:E5:3B:16 Authority key identifier: 81:2C:63:5A:B8:31:26:61:5E:C9:34:4E:7E:C6:E9:02:ED:AC:69:F5 Certificate issuer: /CN=A9185F82/serialNumber=812C635AB83126615EC9344E7EC6E902EDAC69F5 Certificate serial: 06E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft Manifest number: 06DA Signing time: Tue 04 Nov 2025 22:06:30 +0000 Manifest this update: Tue 04 Nov 2025 22:06:30 +0000 Manifest next update: Tue 11 Nov 2025 22:06:30 +0000 Files and hashes: 1: gSxjWrgxJmFeyTROfsbpAu2safU.crl (hash: hgAJtfVMPrXpmfKMJ8KaqvGghmrrGd2BiPzNfrerT9Q=) 2: 52EF768073C511EB98AF9867C4F9AE02.roa (hash: 4w/uXYfZSRmzJc52RjrImrLh+EqtuXeWbymI1Ev9aJY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.crl rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:06:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1762 (0x6e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185F82, serialNumber=812C635AB83126615EC9344E7EC6E902EDAC69F5 Validity Not Before: Nov 4 22:06:30 2025 GMT Not After : Nov 11 22:06:30 2025 GMT Subject: CN=690a78e6-ca65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:97:2b:ac:62:67:59:0d:9e:ba:58:0d:29:9c: 0d:f1:64:0e:a8:bb:ed:a4:6f:6d:e5:fd:ab:a3:d5: 84:2e:d8:cf:92:05:f9:35:6e:a4:6a:51:98:09:7f: b2:99:12:97:1b:e8:7f:f7:6b:71:47:3b:ca:48:8b: a6:d1:dd:b1:d0:8c:c8:da:b5:ef:5c:39:6d:9e:52: df:de:24:1b:98:39:28:2d:2c:9a:b7:cb:bd:f4:39: 03:d1:29:23:4c:3b:b6:cf:01:a7:91:9d:2f:e8:f3: bf:16:8e:44:4a:03:14:1e:e0:83:28:d6:2c:dd:8b: 55:ff:ed:16:32:83:02:e6:d9:08:d5:c4:9b:78:df: 2c:46:98:1b:39:ff:af:56:92:72:89:49:ea:b3:3d: a2:07:ef:f5:dc:9c:e9:c5:bf:f1:c6:19:7b:cd:20: e3:57:21:62:89:34:6f:80:bf:72:4d:ed:b5:4f:1c: 04:c1:91:99:41:82:ed:d0:e6:eb:2e:13:20:9a:2c: 4a:2f:76:72:3c:47:34:fd:c0:0e:d8:e5:38:a2:b8: f0:93:65:e8:2f:fc:cd:0c:32:36:61:5f:72:0c:3d: 4b:4f:f4:95:3f:d0:d0:d8:b9:8a:d9:21:68:7c:2d: d0:38:ef:ce:01:dd:16:30:02:7f:2c:ca:15:39:e3: ff:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:04:4A:9F:CB:09:99:3C:90:6C:D0:E1:66:5C:5A:4F:FD:E5:3B:16 X509v3 Authority Key Identifier: keyid:81:2C:63:5A:B8:31:26:61:5E:C9:34:4E:7E:C6:E9:02:ED:AC:69:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:17:ad:5d:14:f9:47:f2:84:e3:43:ae:9a:06:10:71:23:dc: 14:11:f2:13:aa:3f:4b:a5:e8:b8:f9:46:1e:9d:37:2a:e7:41: c5:62:fb:3d:17:1b:85:d1:e6:c9:5e:c0:fa:dc:ee:1e:e1:6c: e3:c8:0c:e6:c4:c9:a5:a5:44:43:a5:ba:96:cc:11:6e:3b:ab: 8c:76:09:20:1f:46:3a:46:52:bd:8b:1c:ea:47:05:f4:cf:b1: bf:f1:89:47:4c:bd:be:12:88:a3:39:7a:ed:d3:51:32:d7:32: 2f:1c:85:67:ac:d3:d5:1e:4d:fe:ff:5f:58:e1:88:96:b7:52: 3e:0f:69:f6:0f:bc:c5:75:b9:b5:0c:73:29:32:1c:33:1c:0c: fb:ad:fa:61:97:30:9a:cd:a2:2e:cc:70:cd:5e:7b:95:84:40: be:18:1e:87:a8:33:41:4d:64:9d:5c:df:14:fd:bc:ba:b3:56: 32:49:7b:8b:ee:28:e3:52:d5:6d:ec:72:3a:5a:96:ba:b3:44: 61:52:92:8b:73:2d:50:9e:20:33:da:0e:93:61:b3:7a:b3:13: 14:fe:8a:3b:9b:09:68:37:39:18:a6:b3:47:8b:44:14:83:d7: 19:64:f9:b1:f3:e0:26:d3:c0:5e:51:ac:5a:fb:aa:b6:d2:ce: 63:cd:fa:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVGODIxMTAvBgNVBAUTKDgxMkM2MzVBQjgzMTI2NjE1RUM5MzQ0RTdFQzZFOTAy RURBQzY5RjUwHhcNMjUxMTA0MjIwNjMwWhcNMjUxMTExMjIwNjMwWjAYMRYwFAYD VQQDEw02OTBhNzhlNi1jYTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ZcrrGJnWQ2eulgNKZwN8WQOqLvtpG9t5f2ro9WELtjPkgX5NW6kalGYCX+y mRKXG+h/92txRzvKSIum0d2x0IzI2rXvXDltnlLf3iQbmDkoLSyat8u99DkD0Skj TDu2zwGnkZ0v6PO/Fo5ESgMUHuCDKNYs3YtV/+0WMoMC5tkI1cSbeN8sRpgbOf+v VpJyiUnqsz2iB+/13Jzpxb/xxhl7zSDjVyFiiTRvgL9yTe21TxwEwZGZQYLt0Obr LhMgmixKL3ZyPEc0/cAO2OU4orjwk2XoL/zNDDI2YV9yDD1LT/SVP9DQ2LmK2SFo fC3QOO/OAd0WMAJ/LMoVOeP/EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJcESp/L CZk8kGzQ4WZcWk/95TsWMB8GA1UdIwQYMBaAFIEsY1q4MSZhXsk0Tn7G6QLtrGn1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUY4Mi80MDkxQkM3MDcz QzMxMUVCQjgzOUU2NjRDNEY5QUUwMi9nU3hqV3JneEptRmV5VFJPZnNicEF1MnNh ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dTeGpXcmd4Sm1GZXlUUk9mc2JwQXUyc2FmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUY4Mi80MDkxQkM3MDczQzMxMUVCQjgzOUU2NjRDNEY5QUUwMi9nU3hqV3JneEpt RmV5VFJPZnNicEF1MnNhZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEF61dFPlH8oTjQ66aBhBxI9wUEfITqj9Lpei4+UYenTcq50HFYvs9 FxuF0ebJXsD63O4e4WzjyAzmxMmlpURDpbqWzBFuO6uMdgkgH0Y6RlK9ixzqRwX0 z7G/8YlHTL2+EoijOXrt01Ey1zIvHIVnrNPVHk3+/19Y4YiWt1I+D2n2D7zFdbm1 DHMpMhwzHAz7rfphlzCazaIuzHDNXnuVhEC+GB6HqDNBTWSdXN8U/by6s1YySXuL 7ijjUtVt7HI6Wpa6s0RhUpKLcy1QniAz2g6TYbN6sxMU/oo7mwloNzkYprNHi0QU g9cZZPmx8+Am08BeUaxa+6q20s5jzfqE -----END CERTIFICATE-----Generated at Wed Nov 5 15:43:44 2025 by rpki-client