$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft File: gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft (raw, json) Hash identifier: 9m3kRI7eTCXgDwMaJJBcuzMIshbV49vQmGKCTItzo0o= Subject key identifier: B1:27:E4:A0:02:F5:B0:74:A5:B7:AC:DA:76:E7:3B:E7:04:A4:B2:EF Authority key identifier: 82:CA:10:4D:C5:F2:AF:F5:33:FB:F6:8C:F2:98:F4:0F:BD:48:1F:04 Certificate issuer: /CN=A91EA0F7/serialNumber=82CA104DC5F2AFF533FBF68CF298F40FBD481F04 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft Manifest number: 4A Signing time: Mon 03 Nov 2025 07:39:30 +0000 Manifest this update: Mon 03 Nov 2025 07:39:30 +0000 Manifest next update: Mon 10 Nov 2025 07:39:30 +0000 Files and hashes: 1: gsoQTcXyr_Uz-_aM8pj0D71IHwQ.crl (hash: Jkdg+w/0WoVxnh4z2YDIoulPvnIQHU39s630MqL4Z28=) 2: 8A9CF2DEB4D311F0A84CEE1EC4F9AE02.roa (hash: S8iQ1WKz3ZWJ+bpf44oizB2yWlxKeDlDls7es6li9nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.crl rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:39:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA0F7, serialNumber=82CA104DC5F2AFF533FBF68CF298F40FBD481F04 Validity Not Before: Nov 3 07:39:30 2025 GMT Not After : Nov 10 07:39:30 2025 GMT Subject: CN=69085c32-54b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fd:5b:77:38:43:f4:ad:2c:23:f8:80:d7:f3: e0:a2:7b:3d:23:05:27:7b:78:45:7e:f6:d8:a8:dc: c0:24:64:de:15:47:c1:2b:56:64:68:33:03:ad:06: 76:e6:08:8e:57:3b:91:4b:73:42:5c:7f:25:29:ac: 5b:42:d0:13:17:d8:ef:d2:b5:85:8c:08:e3:59:13: 45:c7:25:76:09:cb:7c:be:e5:49:41:3e:33:9a:4e: 20:f7:3a:a8:ba:98:06:74:75:dd:c6:11:fc:4a:50: 56:f6:34:0c:f6:9b:af:10:0c:81:15:0b:53:89:85: 9a:19:21:5f:dc:18:85:49:c3:40:64:73:55:b4:15: eb:e1:01:f4:ac:0c:cd:91:e8:f4:b6:5a:07:f3:3c: a5:15:f3:a3:db:95:bc:22:74:c4:b8:fa:d1:3f:5e: cc:0b:37:56:c6:7b:0d:5d:e8:e5:c5:8f:9c:b7:a4: cc:5c:ef:4d:c7:91:77:d5:23:c0:7d:20:1d:b0:d2: f3:56:52:8d:5b:16:8b:0c:7f:56:dc:77:de:52:dd: 94:d5:3d:0c:d2:da:ee:bf:32:27:0f:d0:77:c7:2b: ff:83:44:f2:08:6d:86:40:ee:c7:38:8b:ca:86:31: 40:28:25:2d:70:fc:04:bc:db:e2:48:d7:be:74:a1: 2f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:27:E4:A0:02:F5:B0:74:A5:B7:AC:DA:76:E7:3B:E7:04:A4:B2:EF X509v3 Authority Key Identifier: keyid:82:CA:10:4D:C5:F2:AF:F5:33:FB:F6:8C:F2:98:F4:0F:BD:48:1F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:d9:bd:3c:58:d7:e7:42:12:fa:45:91:d2:67:50:93:4b:b9: 49:e8:2c:32:d7:90:f4:e1:e5:08:d0:c5:5d:03:06:9c:88:98: 47:e9:9d:9c:fe:15:94:23:cd:0d:84:6f:62:20:0d:d3:f0:71: 6c:84:cb:5a:13:01:3a:c9:cf:21:f1:ad:f2:a6:6e:c5:14:ef: d8:9d:76:de:db:43:e9:38:1e:95:a7:92:88:44:cb:47:3d:f6: cb:98:39:52:7a:f6:7e:9c:71:d8:58:f4:61:86:32:87:82:13: a2:8c:8b:0b:b0:f9:35:60:46:2a:ed:a0:50:75:2f:c6:9c:32: ad:09:0e:39:ae:5f:74:1e:66:22:db:18:f4:08:23:0a:c9:d2: d2:43:f0:8d:64:79:e3:02:91:21:3e:bf:3b:a4:49:72:57:2f: be:c1:7d:13:d2:58:e0:27:f8:cf:e1:fd:2c:a7:14:5f:f7:32: 43:81:0e:cb:7c:cb:ed:85:3f:e8:25:ac:d0:e6:42:7d:b1:b5: cb:34:21:c5:56:8d:e1:d3:11:8c:b8:d6:a7:0f:76:0a:17:0c: 48:4d:16:38:72:59:2a:48:8c:e4:5a:03:7b:bf:df:6b:d9:88: 6d:7b:d7:17:a2:6a:b6:e6:fe:90:9e:e0:6e:76:d5:a1:f3:80: a2:fc:d9:cf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTBGNzExMC8GA1UEBRMoODJDQTEwNERDNUYyQUZGNTMzRkJGNjhDRjI5OEY0MEZC RDQ4MUYwNDAeFw0yNTExMDMwNzM5MzBaFw0yNTExMTAwNzM5MzBaMBgxFjAUBgNV BAMTDTY5MDg1YzMyLTU0YjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0/Vt3OEP0rSwj+IDX8+Ciez0jBSd7eEV+9tio3MAkZN4VR8ErVmRoMwOtBnbm CI5XO5FLc0JcfyUprFtC0BMX2O/StYWMCONZE0XHJXYJy3y+5UlBPjOaTiD3Oqi6 mAZ0dd3GEfxKUFb2NAz2m68QDIEVC1OJhZoZIV/cGIVJw0Bkc1W0FevhAfSsDM2R 6PS2WgfzPKUV86PblbwidMS4+tE/XswLN1bGew1d6OXFj5y3pMxc703HkXfVI8B9 IB2w0vNWUo1bFosMf1bcd95S3ZTVPQzS2u6/MicP0HfHK/+DRPIIbYZA7sc4i8qG MUAoJS1w/AS82+JI1750oS+HAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsSfkoAL1 sHSlt6zaduc75wSksu8wHwYDVR0jBBgwFoAUgsoQTcXyr/Uz+/aM8pj0D71IHwQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBMEY3LzBEOENDOUQ2NzY2 QzExRjA5RkNBMTkyREM0RjlBRTAyL2dzb1FUY1h5cl9Vei1fYU04cGowRDcxSUh3 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ3NvUVRjWHlyX1V6LV9hTThwajBENzFJSHdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB MEY3LzBEOENDOUQ2NzY2QzExRjA5RkNBMTkyREM0RjlBRTAyL2dzb1FUY1h5cl9V ei1fYU04cGowRDcxSUh3US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAjZvTxY1+dCEvpFkdJnUJNLuUnoLDLXkPTh5QjQxV0DBpyImEfpnZz+ FZQjzQ2Eb2IgDdPwcWyEy1oTATrJzyHxrfKmbsUU79iddt7bQ+k4HpWnkohEy0c9 9suYOVJ69n6ccdhY9GGGMoeCE6KMiwuw+TVgRirtoFB1L8acMq0JDjmuX3QeZiLb GPQIIwrJ0tJD8I1keeMCkSE+vzukSXJXL77BfRPSWOAn+M/h/SynFF/3MkOBDst8 y+2FP+glrNDmQn2xtcs0IcVWjeHTEYy41qcPdgoXDEhNFjhyWSpIjORaA3u/32vZ iG171xeiarbm/pCe4G521aHzgKL82c8= -----END CERTIFICATE-----Generated at Wed Nov 5 05:37:54 2025 by rpki-client