$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft File: GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft (raw, json) Hash identifier: wM481tVpDp1xi9GF9aeog/xrNI2k15xq8xRRN/f/7b0= Subject key identifier: F0:91:4E:44:37:91:BD:85:5F:02:72:65:37:89:47:A0:CF:A0:3F:7E Authority key identifier: 18:E9:29:7A:1F:1A:18:CB:87:9A:7E:12:4B:51:07:C4:40:57:3C:63 Certificate issuer: /CN=A91DF195/serialNumber=18E9297A1F1A18CB879A7E124B5107C440573C63 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft Manifest number: 1A Signing time: Mon 03 Nov 2025 07:50:21 +0000 Manifest this update: Mon 03 Nov 2025 07:50:21 +0000 Manifest next update: Mon 10 Nov 2025 07:50:20 +0000 Files and hashes: 1: GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl (hash: 0utZCki+JK/mVp4pA6snMYgg17vs8w675ACjGewHH8Y=) 2: B226671A93CF11F0AFB6CD40C4F9AE02.roa (hash: ngks6JND6Z6i0nLhplVqWNOwGOFboijRbjaCtOqBPMU=) 3: DCD091AA93D111F0B0A32B0BC4F9AE02.roa (hash: apbntEW54Z7A4caHXTIqLm5PS8fFH3F9o/xC7IDPABM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF195, serialNumber=18E9297A1F1A18CB879A7E124B5107C440573C63 Validity Not Before: Nov 3 07:50:21 2025 GMT Not After : Nov 10 07:50:20 2025 GMT Subject: CN=69085ebd-8903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4c:25:44:23:29:08:b0:7a:9b:ec:de:40:7e: 41:83:d9:42:d9:80:42:0b:5d:a6:bf:af:9a:a4:22: 9f:ae:17:a8:25:17:55:f6:cf:2f:37:c1:e5:10:6f: b6:43:00:29:11:b7:8f:9e:d9:d4:76:2d:f4:91:e4: 03:31:d3:7d:0c:d9:26:21:f2:12:99:3c:20:90:24: 0d:7c:e7:12:f0:11:ae:06:ef:8f:3e:b1:4e:7f:2e: 5f:2c:58:ae:12:d9:6c:81:ac:82:a9:18:42:dd:15: df:21:37:28:70:1c:15:94:8d:b3:12:4b:3b:15:b2: 4d:6f:1a:62:84:07:4c:9f:95:57:fe:f2:ec:52:8b: cc:78:27:34:cc:c0:8c:0b:6d:2d:2f:3e:2f:9d:be: c2:b3:b0:8a:71:2d:36:23:52:26:07:4b:5c:e4:7b: 19:d4:f6:a5:90:30:21:10:52:8b:be:d0:42:eb:a7: 21:c9:dd:0f:5c:4d:f2:2a:c6:4b:1f:58:8c:14:ad: 43:fb:f9:e6:5a:c1:db:43:03:64:39:16:29:b7:8b: e6:68:ac:d3:bf:d8:34:4f:90:16:ab:f6:38:12:c1: 86:d5:36:99:4b:80:fd:ed:13:a0:9a:af:71:45:bb: e0:ef:03:71:c4:8a:2f:86:b3:49:1f:7f:2a:a2:07: b1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:91:4E:44:37:91:BD:85:5F:02:72:65:37:89:47:A0:CF:A0:3F:7E X509v3 Authority Key Identifier: keyid:18:E9:29:7A:1F:1A:18:CB:87:9A:7E:12:4B:51:07:C4:40:57:3C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:ce:94:d8:1d:d4:e9:47:ba:6d:01:78:30:bd:20:33:a6:11: 4d:30:cd:d7:d0:35:9b:71:b8:00:cd:39:63:e8:cf:94:2c:39: 01:ea:41:68:7e:5a:92:e1:30:ba:1c:10:04:71:2f:bd:0b:c4: 22:07:07:16:ac:06:18:12:6c:47:7c:0e:5f:07:9b:c4:5d:7a: c3:0b:b5:43:3f:81:71:52:30:fb:c0:55:f0:c2:88:24:2d:28: a5:84:a4:19:a6:dd:86:5b:db:e6:d2:1e:2d:aa:fc:b8:4b:81: 7e:80:06:20:eb:e8:1e:5f:92:63:d1:5c:dc:bc:1d:44:98:41: 26:77:a5:d4:85:ab:a2:0c:50:08:b3:0b:d0:b8:0d:06:48:1a: 0b:7a:b5:28:36:a5:3d:ef:cd:44:d5:bf:12:9c:43:10:e5:98: 90:89:f0:19:33:31:0a:c9:a7:29:6c:22:79:ab:c2:69:d7:36: da:96:8b:44:c7:b8:22:65:c5:2f:e8:33:f9:23:d1:9f:42:27: 00:33:7b:8d:69:67:c4:05:e9:50:9f:c4:61:5e:3a:2b:5d:98: 05:50:6f:d2:80:67:04:56:ee:57:8e:fb:fa:31:e5:37:dd:76: df:35:04:ef:a2:7e:a4:00:ec:99:3c:87:55:fe:38:33:41:56: 48:3d:ed:78 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RjE5NTExMC8GA1UEBRMoMThFOTI5N0ExRjFBMThDQjg3OUE3RTEyNEI1MTA3QzQ0 MDU3M0M2MzAeFw0yNTExMDMwNzUwMjFaFw0yNTExMTAwNzUwMjBaMBgxFjAUBgNV BAMTDTY5MDg1ZWJkLTg5MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1TCVEIykIsHqb7N5AfkGD2ULZgEILXaa/r5qkIp+uF6glF1X2zy83weUQb7ZD ACkRt4+e2dR2LfSR5AMx030M2SYh8hKZPCCQJA185xLwEa4G748+sU5/Ll8sWK4S 2WyBrIKpGELdFd8hNyhwHBWUjbMSSzsVsk1vGmKEB0yflVf+8uxSi8x4JzTMwIwL bS0vPi+dvsKzsIpxLTYjUiYHS1zkexnU9qWQMCEQUou+0ELrpyHJ3Q9cTfIqxksf WIwUrUP7+eZawdtDA2Q5Fim3i+ZorNO/2DRPkBar9jgSwYbVNplLgP3tE6Car3FF u+DvA3HEii+Gs0kffyqiB7HRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8JFORDeR vYVfAnJlN4lHoM+gP34wHwYDVR0jBBgwFoAUGOkpeh8aGMuHmn4SS1EHxEBXPGMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGMTk1LzZCNjY2OTBBOTM4 QTExRjBCQkQ2MjM4NUM0RjlBRTAyL0dPa3BlaDhhR011SG1uNFNTMUVIeEVCWFBH TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR09rcGVoOGFHTXVIbW40U1MxRUh4RUJYUEdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG MTk1LzZCNjY2OTBBOTM4QTExRjBCQkQ2MjM4NUM0RjlBRTAyL0dPa3BlaDhhR011 SG1uNFNTMUVIeEVCWFBHTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADDOlNgd1OlHum0BeDC9IDOmEU0wzdfQNZtxuADNOWPoz5QsOQHqQWh+ WpLhMLocEARxL70LxCIHBxasBhgSbEd8Dl8Hm8RdesMLtUM/gXFSMPvAVfDCiCQt KKWEpBmm3YZb2+bSHi2q/LhLgX6ABiDr6B5fkmPRXNy8HUSYQSZ3pdSFq6IMUAiz C9C4DQZIGgt6tSg2pT3vzUTVvxKcQxDlmJCJ8BkzMQrJpylsInmrwmnXNtqWi0TH uCJlxS/oM/kj0Z9CJwAze41pZ8QF6VCfxGFeOitdmAVQb9KAZwRW7leO+/ox5Tfd dt81BO+ifqQA7Jk8h1X+ODNBVkg97Xg= -----END CERTIFICATE-----Generated at Wed Nov 5 00:02:49 2025 by rpki-client