$ rpki-client -vvf rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft File: gg6Gox8rF_yjbfi-YIssk2qDvYA.mft (raw, json) Hash identifier: DhQTXMe6WfgYuVpXlWwUuaeTgjmgKshHL4OueVrF0IQ= Subject key identifier: 57:9F:C7:F9:C5:64:7F:DB:09:06:59:5C:E9:84:76:A5:8C:79:EC:C0 Authority key identifier: 82:0E:86:A3:1F:2B:17:FC:A3:6D:F8:BE:60:8B:2C:93:6A:83:BD:80 Certificate issuer: /CN=A918B837/serialNumber=820E86A31F2B17FCA36DF8BE608B2C936A83BD80 Certificate serial: 0B74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft Manifest number: 0B6D Signing time: Sun 02 Nov 2025 19:04:06 +0000 Manifest this update: Sun 02 Nov 2025 19:04:06 +0000 Manifest next update: Sun 09 Nov 2025 19:04:06 +0000 Files and hashes: 1: gg6Gox8rF_yjbfi-YIssk2qDvYA.crl (hash: LCTcmiemmS/5mzXVAKWWqBpRbRTvN85jUjs1fraZnTo=) 2: 3D4023BE283611EBA9595178C4F9AE02.roa (hash: p0gLqXYHMAKfZmsW1hgHdRTIbATt3w5OE3zBkqIYM3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.crl rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:04:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2932 (0xb74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B837, serialNumber=820E86A31F2B17FCA36DF8BE608B2C936A83BD80 Validity Not Before: Nov 2 19:04:06 2025 GMT Not After : Nov 9 19:04:06 2025 GMT Subject: CN=6907ab26-d47f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5e:ee:5c:3b:d3:58:e5:7b:02:0b:d6:1e:8d: ff:7c:2e:56:e3:11:9e:21:9f:47:c4:ae:92:14:da: b2:5d:88:27:0c:d1:20:85:da:83:00:a7:10:1c:4d: 00:95:84:df:db:ee:1c:4f:ff:ea:95:5f:f6:60:a1: 8d:6b:f8:e4:fb:21:7c:84:19:cb:58:be:a4:9a:08: 1c:07:1a:a1:c7:99:48:9e:b0:60:57:9f:74:26:68: 7b:7d:bb:20:3c:6c:06:77:d7:c1:10:3d:2e:e7:16: 85:58:cd:c2:14:11:ce:f7:fe:88:97:f8:4e:09:23: ce:c7:38:02:07:8c:c5:43:0f:55:a5:e5:64:ce:ae: 05:a9:65:5e:5d:f9:8d:2f:b7:50:7d:35:8b:a3:d8: e0:13:db:6c:aa:bc:cd:52:e5:dc:73:bd:51:13:83: dc:df:c0:03:8a:a1:d6:8e:48:96:a7:f2:36:43:fd: 9f:d4:36:c7:cb:6e:26:58:5c:cc:43:eb:6a:1e:54: cc:80:72:0c:a6:e2:11:09:6d:42:46:a3:24:03:aa: e3:9b:e7:b2:16:fe:79:33:db:34:da:c2:b2:ea:6c: 53:2a:cf:c9:bd:36:8d:46:68:cf:ab:13:b9:28:b1: 15:e1:e9:97:2d:54:9b:75:b5:58:69:8c:15:fa:d0: 4c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:9F:C7:F9:C5:64:7F:DB:09:06:59:5C:E9:84:76:A5:8C:79:EC:C0 X509v3 Authority Key Identifier: keyid:82:0E:86:A3:1F:2B:17:FC:A3:6D:F8:BE:60:8B:2C:93:6A:83:BD:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:14:dd:95:2a:b6:80:09:d9:5b:e1:ec:9f:d8:9c:ba:3e:8d: f5:52:f8:32:db:6e:18:e0:83:f9:68:15:e2:86:bb:61:ba:d0: 0f:73:83:51:2a:2e:3d:40:f0:8d:e4:98:59:f7:81:f6:ba:50: d7:a7:6f:c3:ab:36:60:06:a0:4d:a4:5c:19:22:fd:2c:bd:6e: ba:6f:55:8c:be:40:e1:a4:85:fd:c8:5e:ad:72:6b:2c:db:a0: e1:1c:ff:65:02:56:26:4e:50:27:69:33:58:2d:dd:dc:c9:f8: 09:58:ad:a1:6f:32:38:28:9d:ce:fd:22:f3:9e:55:f6:e0:23: 63:e3:9b:e3:15:78:e9:ab:ce:64:98:11:9f:02:32:31:52:a0: 09:37:12:5b:f2:7f:60:3b:83:96:7e:f5:d8:75:9f:6f:94:be: e2:b8:d5:5c:62:31:83:6f:36:77:46:f1:0e:c8:0b:a7:dc:16: c0:39:e5:2e:ab:b0:c8:9a:73:cd:3b:6b:74:c2:ff:38:2b:f5: e4:df:fe:c0:1e:ff:1e:6e:1b:ae:46:b1:72:25:e0:b2:62:c9: d2:77:8a:7a:b3:56:35:d6:31:d7:95:88:4b:10:8d:2f:eb:7a: 61:b8:68:92:41:e2:4e:10:61:1a:e2:df:4e:50:a2:91:63:e0: f9:db:50:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI4MzcxMTAvBgNVBAUTKDgyMEU4NkEzMUYyQjE3RkNBMzZERjhCRTYwOEIyQzkz NkE4M0JEODAwHhcNMjUxMTAyMTkwNDA2WhcNMjUxMTA5MTkwNDA2WjAYMRYwFAYD VQQDEw02OTA3YWIyNi1kNDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnF7uXDvTWOV7AgvWHo3/fC5W4xGeIZ9HxK6SFNqyXYgnDNEghdqDAKcQHE0A lYTf2+4cT//qlV/2YKGNa/jk+yF8hBnLWL6kmggcBxqhx5lInrBgV590Jmh7fbsg PGwGd9fBED0u5xaFWM3CFBHO9/6Il/hOCSPOxzgCB4zFQw9VpeVkzq4FqWVeXfmN L7dQfTWLo9jgE9tsqrzNUuXcc71RE4Pc38ADiqHWjkiWp/I2Q/2f1DbHy24mWFzM Q+tqHlTMgHIMpuIRCW1CRqMkA6rjm+eyFv55M9s02sKy6mxTKs/JvTaNRmjPqxO5 KLEV4emXLVSbdbVYaYwV+tBM/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFefx/nF ZH/bCQZZXOmEdqWMeezAMB8GA1UdIwQYMBaAFIIOhqMfKxf8o234vmCLLJNqg72A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjgzNy84MzMwMEUyRTNF MDkxMUVBQTRFMTNGMTlDNEY5QUUwMi9nZzZHb3g4ckZfeWpiZmktWUlzc2sycUR2 WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnNkdveDhyRl95amJmaS1ZSXNzazJxRHZZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjgzNy84MzMwMEUyRTNFMDkxMUVBQTRFMTNGMTlDNEY5QUUwMi9nZzZHb3g4ckZf eWpiZmktWUlzc2sycUR2WUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjFN2VKraACdlb4eyf2Jy6Po31Uvgy224Y4IP5aBXihrthutAPc4NR Ki49QPCN5JhZ94H2ulDXp2/DqzZgBqBNpFwZIv0svW66b1WMvkDhpIX9yF6tcmss 26DhHP9lAlYmTlAnaTNYLd3cyfgJWK2hbzI4KJ3O/SLznlX24CNj45vjFXjpq85k mBGfAjIxUqAJNxJb8n9gO4OWfvXYdZ9vlL7iuNVcYjGDbzZ3RvEOyAun3BbAOeUu q7DImnPNO2t0wv84K/Xk3/7AHv8ebhuuRrFyJeCyYsnSd4p6s1Y11jHXlYhLEI0v 63phuGiSQeJOEGEa4t9OUKKRY+D521CJ -----END CERTIFICATE-----Generated at Tue Nov 4 19:01:34 2025 by rpki-client