$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft File: Ga4x-VSBe65iCMNyEQi46P-LP7w.mft (raw, json) Hash identifier: Qbsj96P6u1eW2kUadgafbXseAWecgcApm+/dibLuI2Q= Subject key identifier: 8C:04:82:2A:EA:18:CC:C0:67:21:AD:4C:FD:B7:A6:35:78:94:B1:20 Authority key identifier: 19:AE:31:F9:54:81:7B:AE:62:08:C3:72:11:08:B8:E8:FF:8B:3F:BC Certificate issuer: /CN=A91EEB30/serialNumber=19AE31F954817BAE6208C3721108B8E8FF8B3FBC Certificate serial: 0485 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft Manifest number: 047F Signing time: Wed 05 Nov 2025 00:12:13 +0000 Manifest this update: Wed 05 Nov 2025 00:12:12 +0000 Manifest next update: Wed 12 Nov 2025 00:12:12 +0000 Files and hashes: 1: Ga4x-VSBe65iCMNyEQi46P-LP7w.crl (hash: ekVgpWPS9DnyxCfH93U/EHGvMFyZ3UFHsz7k1ajj9Sg=) 2: A87BC510622E11EC92E1870CC4F9AE02.roa (hash: 1DZcNpDHzzTtCr5+Y6ZKGblRfHTeQUJGW1MQDytyGms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.crl rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1157 (0x485) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEB30, serialNumber=19AE31F954817BAE6208C3721108B8E8FF8B3FBC Validity Not Before: Nov 5 00:12:12 2025 GMT Not After : Nov 12 00:12:12 2025 GMT Subject: CN=690a965c-473f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:36:8b:87:e0:81:78:35:8e:cf:41:07:0a:47: 21:e0:db:eb:bb:9d:bd:87:26:e4:e8:eb:5a:c7:84: 82:7f:4e:08:35:6d:5b:5f:c7:1b:56:1d:06:6f:b0: 4f:19:c7:d7:b5:ce:a6:ed:77:6e:c3:54:26:65:45: 45:49:7f:c3:1c:27:91:01:9c:71:fd:89:c6:12:1d: de:99:bb:6b:2e:b4:93:4b:c5:7a:7f:ba:15:13:45: 47:10:4a:df:39:31:3e:cb:6a:86:bf:10:60:1c:8f: ba:4b:16:93:ed:a3:88:01:c6:f6:1f:8e:3e:81:ce: 6e:eb:8b:a9:6f:31:cd:3b:69:12:b6:42:71:4a:73: e1:3b:c7:7d:0a:f9:fa:2f:9d:cb:d2:8f:55:80:2a: d6:58:1b:83:40:ea:72:df:2c:85:7d:f3:cd:05:21: 31:6a:b9:d0:60:9e:05:b9:99:39:60:57:c6:de:1a: fd:9e:fe:ec:2e:ef:f6:42:e1:9c:67:06:40:83:a3: 16:58:f5:8c:2f:30:f5:b1:4d:79:11:0f:4a:ae:af: 4c:19:cd:ef:44:61:43:41:29:a2:e2:f0:38:d5:d2: 70:fd:52:67:d3:8a:1e:26:92:8a:78:d5:5d:97:c0: 60:92:ce:9f:37:cc:eb:e1:87:30:2b:aa:0f:d2:61: 43:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:04:82:2A:EA:18:CC:C0:67:21:AD:4C:FD:B7:A6:35:78:94:B1:20 X509v3 Authority Key Identifier: keyid:19:AE:31:F9:54:81:7B:AE:62:08:C3:72:11:08:B8:E8:FF:8B:3F:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:56:1a:87:80:43:3e:a8:d8:dd:78:5a:8f:99:3b:ac:6c:c4: 00:db:b2:ad:bd:fc:8e:21:23:64:87:43:c5:74:37:df:bc:91: 7b:48:9f:47:4e:fa:5f:51:2e:c0:80:7b:b7:2a:14:76:94:9b: 88:67:9f:2e:77:44:ed:d5:9e:7d:72:9e:0d:fa:5a:cd:01:45: 38:55:ec:29:15:f1:4e:0e:f9:8e:81:1c:12:d8:b4:49:65:61: 4a:3a:cc:5e:24:6d:d5:79:f3:bf:33:b4:61:84:25:39:a3:52: eb:88:61:c1:b0:2b:f8:96:c7:e7:93:88:e2:4d:13:13:87:72: 78:8c:e1:86:44:01:95:f0:cb:33:bc:da:ac:cd:1f:78:f6:a4: 9a:e8:5d:38:79:c5:dd:c7:87:bd:af:51:6a:2c:e1:ce:d3:66: 30:1d:fb:ee:4a:8f:e8:73:a1:5e:04:6a:07:58:5c:51:e4:0d: c9:c1:1a:fb:95:30:ca:f4:b6:2b:17:1f:d1:31:fb:3a:68:0b: 77:93:ff:24:34:e4:b2:22:12:f9:c0:48:5c:67:7a:84:8f:da: 74:d9:53:c7:4f:5f:e5:68:68:f6:e0:11:64:c5:da:f3:b1:3c: c9:7d:c6:db:45:c9:5d:fd:32:6b:9e:c4:e6:3b:e7:12:04:51: 44:53:5d:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVCMzAxMTAvBgNVBAUTKDE5QUUzMUY5NTQ4MTdCQUU2MjA4QzM3MjExMDhCOEU4 RkY4QjNGQkMwHhcNMjUxMTA1MDAxMjEyWhcNMjUxMTEyMDAxMjEyWjAYMRYwFAYD VQQDEw02OTBhOTY1Yy00NzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTaLh+CBeDWOz0EHCkch4Nvru529hybk6Otax4SCf04INW1bX8cbVh0Gb7BP GcfXtc6m7Xduw1QmZUVFSX/DHCeRAZxx/YnGEh3embtrLrSTS8V6f7oVE0VHEErf OTE+y2qGvxBgHI+6SxaT7aOIAcb2H44+gc5u64upbzHNO2kStkJxSnPhO8d9Cvn6 L53L0o9VgCrWWBuDQOpy3yyFffPNBSExarnQYJ4FuZk5YFfG3hr9nv7sLu/2QuGc ZwZAg6MWWPWMLzD1sU15EQ9Krq9MGc3vRGFDQSmi4vA41dJw/VJn04oeJpKKeNVd l8Bgks6fN8zr4YcwK6oP0mFDrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIwEgirq GMzAZyGtTP23pjV4lLEgMB8GA1UdIwQYMBaAFBmuMflUgXuuYgjDchEIuOj/iz+8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUIzMC85RENFQjYzODYy MkMxMUVDODE4RUEwMEJDNEY5QUUwMi9HYTR4LVZTQmU2NWlDTU55RVFpNDZQLUxQ N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dhNHgtVlNCZTY1aUNNTnlFUWk0NlAtTFA3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUIzMC85RENFQjYzODYyMkMxMUVDODE4RUEwMEJDNEY5QUUwMi9HYTR4LVZTQmU2 NWlDTU55RVFpNDZQLUxQN3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdVhqHgEM+qNjdeFqPmTusbMQA27KtvfyOISNkh0PFdDffvJF7SJ9H TvpfUS7AgHu3KhR2lJuIZ58ud0Tt1Z59cp4N+lrNAUU4VewpFfFODvmOgRwS2LRJ ZWFKOsxeJG3VefO/M7RhhCU5o1LriGHBsCv4lsfnk4jiTRMTh3J4jOGGRAGV8Msz vNqszR949qSa6F04ecXdx4e9r1FqLOHO02YwHfvuSo/oc6FeBGoHWFxR5A3JwRr7 lTDK9LYrFx/RMfs6aAt3k/8kNOSyIhL5wEhcZ3qEj9p02VPHT1/laGj24BFkxdrz sTzJfcbbRcld/TJrnsTmO+cSBFFEU12P -----END CERTIFICATE-----Generated at Wed Nov 5 10:02:12 2025 by rpki-client