$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft File: G0cdrc2RIJM1E26s9syYiChlSyo.mft (raw, json) Hash identifier: uJ4Yky0QQhoIPSaKdMIIXrlHbgPk7isZgw4lYPEK8s0= Subject key identifier: 6A:5D:84:15:D2:4A:7D:5B:C1:46:62:6B:0C:C9:41:32:2D:75:78:FF Authority key identifier: 1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A Certificate issuer: /CN=A91C9606/serialNumber=1B471DADCD91209335136EACF6CC988828654B2A Certificate serial: 0D81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft Manifest number: 0D6A Signing time: Tue 04 Nov 2025 18:07:29 +0000 Manifest this update: Tue 04 Nov 2025 18:07:29 +0000 Manifest next update: Tue 11 Nov 2025 18:07:29 +0000 Files and hashes: 1: G0cdrc2RIJM1E26s9syYiChlSyo.crl (hash: 9Uo98yEJ08bSiShJH5GNGesZyuZBawGfwiAT6FV7O3U=) 2: 06370CB2DB9211E9B70EDD2EC4F9AE02.roa (hash: xgrmtihEAIC7r7A0n9PNHwvlGM/iGDMTmZv2Djjmrdg=) 3: 7A9CD75E23E311F0BB28EA29C4F9AE02.roa (hash: 0Y8jmQQMOsA8otW6hBByMKVBJCFql/NpiEG5lBKFsfk=) 4: 645EF9CADB9311E988E56C33C4F9AE02.roa (hash: JRQ7BF2DG2XDWDJQSYzrLycUZShYsOsnU2Hj3xscnfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:07:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3457 (0xd81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9606, serialNumber=1B471DADCD91209335136EACF6CC988828654B2A Validity Not Before: Nov 4 18:07:29 2025 GMT Not After : Nov 11 18:07:29 2025 GMT Subject: CN=690a40e1-ba0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:aa:f0:de:b8:97:60:1b:3d:2f:e3:22:5b:7e: fb:1f:ed:6e:5d:1e:36:46:60:e7:13:a0:16:fa:af: 77:f2:23:6d:d5:0c:ca:14:22:49:79:80:d5:ea:d5: 91:df:2a:a4:a6:28:80:be:07:d7:ce:b6:ee:08:d8: 17:be:a4:fa:36:51:c8:d2:ed:6e:99:86:78:94:c9: 8d:61:f2:0d:1f:bb:1c:0d:42:a8:2a:32:fb:f7:9a: c8:5a:d9:58:96:fc:0a:ae:34:22:af:b5:b5:91:b8: 57:d0:cf:49:1f:0e:85:07:51:5d:e5:3b:dc:de:86: 23:19:cd:3e:16:5e:61:f3:5c:37:e5:de:39:ba:d3: eb:c0:e8:6a:cc:10:3a:a6:8f:93:fe:04:0a:db:2d: 75:86:b7:bf:09:72:89:e2:e1:77:5a:79:54:22:dd: 3b:04:28:2b:4f:a5:cc:11:7a:f4:a9:e5:3e:e9:81: f7:d1:95:42:fc:d3:08:34:7e:25:6e:48:aa:bd:ed: dd:81:28:72:d5:41:da:15:cc:5e:27:14:41:a3:6f: 12:0c:7b:fd:cc:17:6c:49:1f:25:4e:28:03:63:35: 01:1c:bb:53:20:02:80:5d:d3:40:ab:e3:0b:02:46: 27:60:b2:5f:06:8a:6a:36:dc:85:33:4d:11:7f:2f: 20:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:5D:84:15:D2:4A:7D:5B:C1:46:62:6B:0C:C9:41:32:2D:75:78:FF X509v3 Authority Key Identifier: keyid:1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:92:71:76:c3:4b:2f:85:fb:80:4c:b4:a6:1f:51:b8:4a:22: 2b:ad:d6:75:14:9d:17:e6:d4:70:93:8d:e0:b4:8f:65:7d:1b: ba:3d:3b:15:9a:af:e5:63:a4:0a:20:97:71:cd:f9:96:da:1d: b7:f8:07:cc:36:b7:08:6e:18:e0:85:a9:65:48:43:e5:b4:71: f8:ff:e9:1e:b3:7f:5f:01:32:ae:65:3c:47:98:f8:5c:7c:5b: 4a:72:48:ea:88:4a:49:35:26:4d:cb:de:2b:61:df:3a:f2:36: 9a:56:7e:f1:bc:86:df:b4:a5:15:ea:8c:18:02:a5:a5:63:04: a2:de:7a:fa:76:aa:c5:02:d4:e1:8f:59:64:d4:6d:a1:78:d9: 64:e7:d8:c7:35:80:1c:ea:ab:06:1c:2e:63:8c:b0:60:12:44: 5f:78:8c:db:fd:24:3c:ea:43:14:c1:2b:a9:7c:cd:e9:78:d4: ce:c5:56:c2:a3:6e:c1:00:dc:f2:67:38:bc:68:4d:ff:ee:c8: e6:6b:1d:69:c3:84:59:34:c1:b5:28:47:5d:5f:91:b7:33:ad: 87:79:a9:81:0a:2f:d0:24:cb:8f:b5:63:03:f1:b7:2a:10:56: ea:ca:54:fb:94:cd:07:78:23:cc:77:bc:18:f9:61:74:64:a6: 39:e0:3a:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk2MDYxMTAvBgNVBAUTKDFCNDcxREFEQ0Q5MTIwOTMzNTEzNkVBQ0Y2Q0M5ODg4 Mjg2NTRCMkEwHhcNMjUxMTA0MTgwNzI5WhcNMjUxMTExMTgwNzI5WjAYMRYwFAYD VQQDEw02OTBhNDBlMS1iYTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqrw3riXYBs9L+MiW377H+1uXR42RmDnE6AW+q938iNt1QzKFCJJeYDV6tWR 3yqkpiiAvgfXzrbuCNgXvqT6NlHI0u1umYZ4lMmNYfINH7scDUKoKjL795rIWtlY lvwKrjQir7W1kbhX0M9JHw6FB1Fd5Tvc3oYjGc0+Fl5h81w35d45utPrwOhqzBA6 po+T/gQK2y11hre/CXKJ4uF3WnlUIt07BCgrT6XMEXr0qeU+6YH30ZVC/NMINH4l bkiqve3dgShy1UHaFcxeJxRBo28SDHv9zBdsSR8lTigDYzUBHLtTIAKAXdNAq+ML AkYnYLJfBopqNtyFM00Rfy8gKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGpdhBXS Sn1bwUZiawzJQTItdXj/MB8GA1UdIwQYMBaAFBtHHa3NkSCTNRNurPbMmIgoZUsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTYwNi85QzlGOUY5QURC OTAxMUU5QTNDMTJGMkNDNEY5QUUwMi9HMGNkcmMyUklKTTFFMjZzOXN5WWlDaGxT eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cwY2RyYzJSSUpNMUUyNnM5c3lZaUNobFN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTYwNi85QzlGOUY5QURCOTAxMUU5QTNDMTJGMkNDNEY5QUUwMi9HMGNkcmMyUklK TTFFMjZzOXN5WWlDaGxTeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuknF2w0svhfuATLSmH1G4SiIrrdZ1FJ0X5tRwk43gtI9lfRu6PTsV mq/lY6QKIJdxzfmW2h23+AfMNrcIbhjghallSEPltHH4/+kes39fATKuZTxHmPhc fFtKckjqiEpJNSZNy94rYd868jaaVn7xvIbftKUV6owYAqWlYwSi3nr6dqrFAtTh j1lk1G2heNlk59jHNYAc6qsGHC5jjLBgEkRfeIzb/SQ86kMUwSupfM3peNTOxVbC o27BANzyZzi8aE3/7sjmax1pw4RZNMG1KEddX5G3M62HeamBCi/QJMuPtWMD8bcq EFbqylT7lM0HeCPMd7wY+WF0ZKY54Dq3 -----END CERTIFICATE-----Generated at Wed Nov 5 23:35:36 2025 by rpki-client