$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft File: GAee5DmNZxvWR_yoKieU5QowR70.mft (raw, json) Hash identifier: R0c52lY6FOyx7659RxgC5M2VIMnBvoqYFusD6hOG7Jk= Subject key identifier: 43:34:1A:6A:88:B4:DF:0E:CB:9F:1A:42:FC:D0:0F:AB:3C:9B:2F:25 Authority key identifier: 18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD Certificate issuer: /CN=A91DFBE1/serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD Certificate serial: 0A87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft Manifest number: 0A7E Signing time: Sun 02 Nov 2025 19:35:00 +0000 Manifest this update: Sun 02 Nov 2025 19:35:00 +0000 Manifest next update: Sun 09 Nov 2025 19:35:00 +0000 Files and hashes: 1: GAee5DmNZxvWR_yoKieU5QowR70.crl (hash: rI9loconP+7dKfjoIMGK8KGVz3lYlZRAGN66oEmnxLM=) 2: F23D65727CAF11ED87752A6BC4F9AE02.roa (hash: 4R+T9ichUclKYc2esjqc1J6rnOewSsSbS/PRV1Yw9jc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:34:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2695 (0xa87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFBE1, serialNumber=18079EE4398D671BD647FCA82A2794E50A3047BD Validity Not Before: Nov 2 19:35:00 2025 GMT Not After : Nov 9 19:35:00 2025 GMT Subject: CN=6907b264-f4ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d2:49:f3:3c:36:08:f5:24:94:6e:06:5e:6d: 3e:dd:6f:ec:e9:d7:c3:c2:91:13:dc:d2:e1:42:5d: f6:25:e8:f4:c0:7a:8b:e2:34:16:04:d7:56:45:c5: 74:d0:8f:fe:c8:05:10:78:b8:18:57:86:d0:96:51: b9:51:08:ec:7a:f1:66:03:86:b4:a5:3c:07:db:89: 6f:46:1a:ab:65:d3:4f:c8:3a:8f:a5:61:63:30:7a: 91:ce:6d:e4:b3:3a:ed:67:5d:b3:0c:47:a1:7e:a2: 3f:27:72:80:cd:e7:27:3c:b8:2c:c0:e8:85:41:f9: a2:4b:37:ea:61:69:19:08:35:09:f1:a1:1e:2e:7d: 99:50:7b:89:46:73:57:6e:29:c4:fb:95:60:97:65: ad:a8:48:cd:dd:a6:e5:75:46:36:12:7c:73:07:06: 09:9c:8a:9b:dd:a0:75:ff:0e:27:e8:55:d3:4b:dd: 54:10:5c:bd:59:22:85:f0:84:97:58:30:bd:03:d8: 86:39:80:98:87:a3:bb:7f:85:f1:0e:a6:ab:4b:66: 66:94:00:6b:4c:95:ff:38:f1:37:c8:fb:60:69:77: 81:ae:db:57:ee:44:6a:fb:c8:f0:84:6e:49:39:ee: 21:ba:9f:f7:ff:da:f0:90:8b:56:89:e8:94:7c:58: 5f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:34:1A:6A:88:B4:DF:0E:CB:9F:1A:42:FC:D0:0F:AB:3C:9B:2F:25 X509v3 Authority Key Identifier: keyid:18:07:9E:E4:39:8D:67:1B:D6:47:FC:A8:2A:27:94:E5:0A:30:47:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAee5DmNZxvWR_yoKieU5QowR70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFBE1/A7E71EF66EA611EAB546B961C4F9AE02/GAee5DmNZxvWR_yoKieU5QowR70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:0a:6a:52:14:5a:15:97:b8:7c:d5:4e:b3:0c:60:7a:82:5c: 2d:dd:a5:83:bf:1f:cd:77:ae:bf:19:57:85:06:cf:b9:aa:76: 58:46:a8:82:80:a8:a6:fb:3f:a4:49:c9:35:d4:c2:9a:f1:de: a7:c7:77:5f:10:af:9c:97:c4:0c:25:4d:6d:0e:91:12:17:f9: e5:69:6a:cd:be:45:89:ec:b6:36:fc:ba:20:13:9c:2a:8f:a0: 7b:f0:99:3b:d8:67:0d:b8:27:03:92:3f:d9:1e:b1:fb:4e:69: 03:c1:a5:9d:21:8d:87:a2:73:a5:44:6a:b1:bc:32:d0:b1:88: a5:6a:d0:46:a7:a0:27:34:38:72:e7:e4:2b:05:a3:1e:49:41: 7f:ce:b0:4d:0d:85:95:34:72:14:2d:e4:bd:13:5b:af:f0:1b: ba:9a:e3:ad:80:72:ea:b8:70:76:39:c5:2d:5a:2f:e3:16:b9: 5e:d3:db:f7:cb:d1:3f:c9:34:b3:35:76:e3:32:ec:4a:65:e9: dc:12:ab:48:b6:d7:2d:2c:46:26:d9:85:33:ee:5f:55:07:f7: 1c:23:e5:7b:db:69:9e:28:af:ba:f4:31:57:f4:04:ea:0a:4e: d1:88:42:86:d5:1a:87:45:6c:e7:0c:04:b3:61:19:2e:33:2a: a3:4f:58:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZCRTExMTAvBgNVBAUTKDE4MDc5RUU0Mzk4RDY3MUJENjQ3RkNBODJBMjc5NEU1 MEEzMDQ3QkQwHhcNMjUxMTAyMTkzNTAwWhcNMjUxMTA5MTkzNTAwWjAYMRYwFAYD VQQDEw02OTA3YjI2NC1mNGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3NJJ8zw2CPUklG4GXm0+3W/s6dfDwpET3NLhQl32Jej0wHqL4jQWBNdWRcV0 0I/+yAUQeLgYV4bQllG5UQjsevFmA4a0pTwH24lvRhqrZdNPyDqPpWFjMHqRzm3k szrtZ12zDEehfqI/J3KAzecnPLgswOiFQfmiSzfqYWkZCDUJ8aEeLn2ZUHuJRnNX binE+5Vgl2WtqEjN3abldUY2EnxzBwYJnIqb3aB1/w4n6FXTS91UEFy9WSKF8ISX WDC9A9iGOYCYh6O7f4XxDqarS2ZmlABrTJX/OPE3yPtgaXeBrttX7kRq+8jwhG5J Oe4hup/3/9rwkItWieiUfFhfRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEM0GmqI tN8Oy58aQvzQD6s8my8lMB8GA1UdIwQYMBaAFBgHnuQ5jWcb1kf8qConlOUKMEe9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkJFMS9BN0U3MUVGNjZF QTYxMUVBQjU0NkI5NjFDNEY5QUUwMi9HQWVlNURtTlp4dldSX3lvS2llVTVRb3dS NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dBZWU1RG1OWnh2V1JfeW9LaWVVNVFvd1I3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkJFMS9BN0U3MUVGNjZFQTYxMUVBQjU0NkI5NjFDNEY5QUUwMi9HQWVlNURtTlp4 dldSX3lvS2llVTVRb3dSNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvCmpSFFoVl7h81U6zDGB6glwt3aWDvx/Nd66/GVeFBs+5qnZYRqiC gKim+z+kSck11MKa8d6nx3dfEK+cl8QMJU1tDpESF/nlaWrNvkWJ7LY2/LogE5wq j6B78Jk72GcNuCcDkj/ZHrH7TmkDwaWdIY2HonOlRGqxvDLQsYilatBGp6AnNDhy 5+QrBaMeSUF/zrBNDYWVNHIULeS9E1uv8Bu6muOtgHLquHB2OcUtWi/jFrle09v3 y9E/yTSzNXbjMuxKZencEqtIttctLEYm2YUz7l9VB/ccI+V722meKK+69DFX9ATq Ck7RiEKG1RqHRWznDASzYRkuMyqjT1ih -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:14 2025 by rpki-client