$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft File: g-S8t2O4ztA2UZDnKA8KajSzW1E.mft (raw, json) Hash identifier: n+K/nAefuvveKgQlZ7XnmccK0QQOMTMMIL1/mJS7ORw= Subject key identifier: E1:B0:F1:86:F4:C0:FD:50:8B:C1:D8:CC:08:9F:01:5D:C5:B9:EB:A7 Authority key identifier: 83:E4:BC:B7:63:B8:CE:D0:36:51:90:E7:28:0F:0A:6A:34:B3:5B:51 Certificate issuer: /CN=A91D4A3A/serialNumber=83E4BCB763B8CED0365190E7280F0A6A34B35B51 Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft Manifest number: 012D Signing time: Mon 03 Nov 2025 04:36:52 +0000 Manifest this update: Mon 03 Nov 2025 04:36:52 +0000 Manifest next update: Mon 10 Nov 2025 04:36:52 +0000 Files and hashes: 1: g-S8t2O4ztA2UZDnKA8KajSzW1E.crl (hash: pJU3gomLENjPN9Yf7ulTP0nwKfH5gyUnOSfB4L/4Gzo=) 2: 8A5FC86AECB511EE8DC7B937C4F9AE02.roa (hash: Vp6oIV4Kwe3FgHjDClftctReHYiAIs5p4BPX7qetipE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.crl rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:36:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4A3A, serialNumber=83E4BCB763B8CED0365190E7280F0A6A34B35B51 Validity Not Before: Nov 3 04:36:52 2025 GMT Not After : Nov 10 04:36:52 2025 GMT Subject: CN=69083164-4577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:20:2e:58:6d:63:f8:dc:8d:1f:08:a5:92:ea: b6:44:88:42:cb:47:c0:00:e0:3b:27:4d:27:24:91: 4c:6d:4e:c1:51:50:55:5b:f0:0c:4a:be:ef:1b:bd: a0:da:9a:b4:13:c7:a3:4e:a5:37:de:7b:6c:bb:29: a7:4e:8e:ac:38:11:56:11:9d:95:ed:f4:a1:fa:29: 23:65:e8:2c:7a:5f:33:c5:ec:b3:a4:65:b0:72:91: e3:d7:c6:da:0b:84:59:2a:0c:5a:45:f4:ef:6a:4a: 67:77:11:de:e7:6a:e3:78:8c:72:03:4b:cb:fc:e8: 08:d1:12:2f:2f:2f:85:34:f4:38:cf:f0:e2:dd:7e: 69:53:ca:db:7b:1b:f1:d9:ac:cc:25:62:d3:7b:c0: dd:80:22:1c:ec:b7:60:53:68:8c:55:ed:bf:f9:bc: a9:c9:1b:b6:b0:30:fb:ab:7d:df:e8:53:40:0a:8b: 2d:73:dc:2d:39:8f:9d:e2:d0:ac:47:9c:ef:4b:56: 5f:fb:f2:eb:19:16:98:57:01:59:f8:a2:2b:fb:20: 69:2a:1d:83:8c:1a:2a:bc:e4:2f:df:18:6c:4b:9d: 9b:5c:03:8a:13:15:3b:b6:e8:06:40:05:12:f4:10: ff:82:7f:4a:3e:6d:9a:70:89:62:62:a4:76:cb:78: f1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B0:F1:86:F4:C0:FD:50:8B:C1:D8:CC:08:9F:01:5D:C5:B9:EB:A7 X509v3 Authority Key Identifier: keyid:83:E4:BC:B7:63:B8:CE:D0:36:51:90:E7:28:0F:0A:6A:34:B3:5B:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:c9:ef:92:ee:5e:8d:92:da:67:22:dd:87:67:c6:fe:52:87: be:b7:b0:5f:db:1a:7b:ba:5d:8e:be:05:35:bf:5a:0f:d9:86: 3f:dd:29:49:69:39:3a:89:be:e4:61:3c:fb:9b:bd:13:5f:bf: 05:c2:20:61:55:23:ec:27:79:95:df:aa:b3:ae:f2:45:54:8d: bb:82:55:65:d9:bf:38:4a:00:85:12:52:71:72:0b:a9:a8:c5: 32:93:67:84:e5:3d:0d:2e:f4:13:a2:7c:1b:04:22:1c:87:01: 0d:90:c1:ce:fc:4c:fb:32:6a:3e:5f:11:f5:87:cf:23:9d:ce: 2d:c8:09:c3:4d:3e:a5:22:8f:b1:9a:82:ae:8b:60:65:ba:a7: 5b:58:7c:eb:78:db:86:7a:c6:00:cc:f2:1c:4e:e9:39:5e:2a: 25:5c:65:d1:44:e7:e4:b6:e3:22:02:28:c2:0c:58:03:8e:3d: 0a:dd:d9:41:ad:42:7f:da:b4:53:1e:8a:9e:0b:dc:ba:5f:7b: 01:8a:b5:ff:af:df:1e:a7:88:19:05:cf:ab:ea:c0:cb:ff:b6: 52:14:f1:5e:0f:c7:c3:ea:85:4a:e3:62:0f:e4:d1:b6:b3:95: b6:87:a5:a7:7a:c0:0a:fc:23:b7:aa:7e:27:e0:f6:f0:77:00: b0:e9:8e:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRBM0ExMTAvBgNVBAUTKDgzRTRCQ0I3NjNCOENFRDAzNjUxOTBFNzI4MEYwQTZB MzRCMzVCNTEwHhcNMjUxMTAzMDQzNjUyWhcNMjUxMTEwMDQzNjUyWjAYMRYwFAYD VQQDEw02OTA4MzE2NC00NTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyAuWG1j+NyNHwilkuq2RIhCy0fAAOA7J00nJJFMbU7BUVBVW/AMSr7vG72g 2pq0E8ejTqU33ntsuymnTo6sOBFWEZ2V7fSh+ikjZegsel8zxeyzpGWwcpHj18ba C4RZKgxaRfTvakpndxHe52rjeIxyA0vL/OgI0RIvLy+FNPQ4z/Di3X5pU8rbexvx 2azMJWLTe8DdgCIc7LdgU2iMVe2/+bypyRu2sDD7q33f6FNACostc9wtOY+d4tCs R5zvS1Zf+/LrGRaYVwFZ+KIr+yBpKh2DjBoqvOQv3xhsS52bXAOKExU7tugGQAUS 9BD/gn9KPm2acIliYqR2y3jxfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGw8Yb0 wP1Qi8HYzAifAV3FueunMB8GA1UdIwQYMBaAFIPkvLdjuM7QNlGQ5ygPCmo0s1tR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEEzQS8xODE0RjM2NkVD QjUxMUVFQTQ2NTAzMzdDNEY5QUUwMi9nLVM4dDJPNHp0QTJVWkRuS0E4S2FqU3pX MUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ctUzh0Mk80enRBMlVaRG5LQThLYWpTelcxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NEEzQS8xODE0RjM2NkVDQjUxMUVFQTQ2NTAzMzdDNEY5QUUwMi9nLVM4dDJPNHp0 QTJVWkRuS0E4S2FqU3pXMUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHye+S7l6NktpnIt2HZ8b+Uoe+t7Bf2xp7ul2OvgU1v1oP2YY/3SlJ aTk6ib7kYTz7m70TX78FwiBhVSPsJ3mV36qzrvJFVI27glVl2b84SgCFElJxcgup qMUyk2eE5T0NLvQTonwbBCIchwENkMHO/Ez7Mmo+XxH1h88jnc4tyAnDTT6lIo+x moKui2BluqdbWHzreNuGesYAzPIcTuk5XiolXGXRROfktuMiAijCDFgDjj0K3dlB rUJ/2rRTHoqeC9y6X3sBirX/r98ep4gZBc+r6sDL/7ZSFPFeD8fD6oVK42IP5NG2 s5W2h6WnesAK/CO3qn4n4PbwdwCw6Y4y -----END CERTIFICATE-----Generated at Tue Nov 4 16:33:25 2025 by rpki-client