$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9FA2/1C88B03A846411EAA9941540C4F9AE02/-gfo6rqEcKil_kuhPnXZ5f6jOyc.mft File: -gfo6rqEcKil_kuhPnXZ5f6jOyc.mft (raw, json) Hash identifier: ATTA+gkr4qdhbBzT448UGYGloBnHqd+mqG4LkGbD9JY= Subject key identifier: 42:5B:A7:D0:0F:21:A4:0A:B8:B3:99:BA:FA:D0:CB:46:42:1D:E4:FF Authority key identifier: FA:07:E8:EA:BA:84:70:A8:A5:FE:4B:A1:3E:75:D9:E5:FE:A3:3B:27 Certificate issuer: /CN=A91F9FA2/serialNumber=FA07E8EABA8470A8A5FE4BA13E75D9E5FEA33B27 Certificate serial: 0A0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gfo6rqEcKil_kuhPnXZ5f6jOyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9FA2/1C88B03A846411EAA9941540C4F9AE02/-gfo6rqEcKil_kuhPnXZ5f6jOyc.mft Manifest number: 0A06 Signing time: Tue 04 Nov 2025 19:56:20 +0000 Manifest this update: Tue 04 Nov 2025 19:56:20 +0000 Manifest next update: Tue 11 Nov 2025 19:56:20 +0000 Files and hashes: 1: -gfo6rqEcKil_kuhPnXZ5f6jOyc.crl (hash: BhWFYxXM6CzpPJPByrpZEgHZsky5FvGV3I66d1lcOCY=) 2: 0893031C846611EA9B99E043C4F9AE02.roa (hash: 3hay+KNg/2l74ymUeo3rJ7DbBbo6k73NfQvBnuqkfBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9FA2/1C88B03A846411EAA9941540C4F9AE02/-gfo6rqEcKil_kuhPnXZ5f6jOyc.crl rsync://rpki.apnic.net/member_repository/A91F9FA2/1C88B03A846411EAA9941540C4F9AE02/-gfo6rqEcKil_kuhPnXZ5f6jOyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gfo6rqEcKil_kuhPnXZ5f6jOyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:56:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2574 (0xa0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9FA2, serialNumber=FA07E8EABA8470A8A5FE4BA13E75D9E5FEA33B27 Validity Not Before: Nov 4 19:56:20 2025 GMT Not After : Nov 11 19:56:20 2025 GMT Subject: CN=690a5a64-1e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4e:9c:67:3f:2b:58:89:b5:58:7e:05:f4:09: e3:c0:5c:69:ac:7d:3d:fb:f5:f2:b8:91:15:f5:4d: 2b:6d:1a:68:4b:8f:4f:fa:ad:8c:bc:50:7c:7a:80: e2:fd:95:bb:ba:f2:b3:06:df:3f:e8:33:fa:58:99: 15:02:c2:91:e3:02:a2:a6:e4:d0:72:52:9f:35:5f: 28:82:fd:66:2d:25:31:55:45:bd:8a:1d:3e:a0:b0: c0:08:73:e5:9e:fb:94:7c:34:e2:f1:2d:39:75:17: bc:b5:08:00:66:5a:b5:c8:db:0e:b5:5a:40:6f:92: 29:3d:87:08:69:bc:99:ea:83:61:18:5c:c6:8b:6e: 33:0b:ba:76:bc:90:4c:43:54:8a:81:27:ad:a6:6b: 23:ab:4d:62:80:6c:3a:47:58:d6:52:18:80:20:a8: 59:4e:00:21:4f:89:c1:fe:ee:f9:12:ef:56:3e:05: 5d:c3:8c:4c:ad:34:88:95:ca:a5:6d:ed:e1:d8:80: 15:e5:03:79:a1:46:62:29:48:01:03:fe:7e:f7:3a: dd:4f:e3:4f:bc:20:8c:4e:89:75:59:de:f0:ad:8a: 33:21:18:e7:7f:0c:fe:0a:23:0f:4f:39:b5:c0:1d: 0e:9e:6a:27:17:6a:cf:d5:5c:81:23:ec:74:da:7c: dd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:5B:A7:D0:0F:21:A4:0A:B8:B3:99:BA:FA:D0:CB:46:42:1D:E4:FF X509v3 Authority Key Identifier: keyid:FA:07:E8:EA:BA:84:70:A8:A5:FE:4B:A1:3E:75:D9:E5:FE:A3:3B:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9FA2/1C88B03A846411EAA9941540C4F9AE02/-gfo6rqEcKil_kuhPnXZ5f6jOyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gfo6rqEcKil_kuhPnXZ5f6jOyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FA2/1C88B03A846411EAA9941540C4F9AE02/-gfo6rqEcKil_kuhPnXZ5f6jOyc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:30:33:3a:ca:96:1a:1b:bb:b5:a5:a8:5f:84:c6:41:6e:37: fa:fa:25:37:4e:d6:50:97:33:e7:f7:4f:fe:65:d8:35:2b:1e: b7:08:31:27:08:8c:c4:e9:7c:26:f4:a5:57:56:86:16:8f:6e: 61:d4:55:1a:59:bc:ad:d1:07:65:f7:af:16:72:7c:6d:a7:5e: 85:9b:dc:da:19:bb:f7:10:c0:b1:dc:44:be:9a:ca:51:64:91: f2:f4:5d:6f:36:ee:25:6a:61:7f:56:d9:b9:cf:2b:96:e3:f8: cb:19:62:10:c6:c5:61:3c:9d:14:9d:4c:f2:aa:7b:b3:4c:5a: 2c:5a:3a:81:50:1a:ae:b6:20:ef:b2:62:07:36:b2:44:e9:48: 99:3a:71:64:a1:af:d9:96:97:a2:33:90:a0:0c:52:5b:13:16: b5:64:51:2f:a0:e4:36:ab:95:2f:10:71:f6:46:dc:85:e5:8b: 51:06:0c:60:b6:5b:0c:13:ad:df:09:2e:b6:9d:eb:fe:c1:eb: 49:1f:10:19:24:7a:45:4d:fe:3c:26:a2:15:0e:a1:83:c7:6a: a9:58:92:44:7a:92:50:36:96:09:57:df:04:6a:7f:c0:c5:de: 30:c7:75:d4:78:ec:c0:bf:fa:76:5e:65:c6:f1:52:38:88:d8: ee:01:f7:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGQTIxMTAvBgNVBAUTKEZBMDdFOEVBQkE4NDcwQThBNUZFNEJBMTNFNzVEOUU1 RkVBMzNCMjcwHhcNMjUxMTA0MTk1NjIwWhcNMjUxMTExMTk1NjIwWjAYMRYwFAYD VQQDEw02OTBhNWE2NC0xZTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArk6cZz8rWIm1WH4F9AnjwFxprH09+/XyuJEV9U0rbRpoS49P+q2MvFB8eoDi /ZW7uvKzBt8/6DP6WJkVAsKR4wKipuTQclKfNV8ogv1mLSUxVUW9ih0+oLDACHPl nvuUfDTi8S05dRe8tQgAZlq1yNsOtVpAb5IpPYcIabyZ6oNhGFzGi24zC7p2vJBM Q1SKgSetpmsjq01igGw6R1jWUhiAIKhZTgAhT4nB/u75Eu9WPgVdw4xMrTSIlcql be3h2IAV5QN5oUZiKUgBA/5+9zrdT+NPvCCMTol1Wd7wrYozIRjnfwz+CiMPTzm1 wB0OnmonF2rP1VyBI+x02nzdOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJbp9AP IaQKuLOZuvrQy0ZCHeT/MB8GA1UdIwQYMBaAFPoH6Oq6hHCopf5LoT512eX+ozsn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUZBMi8xQzg4QjAzQTg0 NjQxMUVBQTk5NDE1NDBDNEY5QUUwMi8tZ2ZvNnJxRWNLaWxfa3VoUG5YWjVmNmpP eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1nZm82cnFFY0tpbF9rdWhQblhaNWY2ak95Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUZBMi8xQzg4QjAzQTg0NjQxMUVBQTk5NDE1NDBDNEY5QUUwMi8tZ2ZvNnJxRWNL aWxfa3VoUG5YWjVmNmpPeWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPMDM6ypYaG7u1pahfhMZBbjf6+iU3TtZQlzPn90/+Zdg1Kx63CDEn CIzE6Xwm9KVXVoYWj25h1FUaWbyt0Qdl968Wcnxtp16Fm9zaGbv3EMCx3ES+mspR ZJHy9F1vNu4lamF/Vtm5zyuW4/jLGWIQxsVhPJ0UnUzyqnuzTFosWjqBUBqutiDv smIHNrJE6UiZOnFkoa/ZlpeiM5CgDFJbExa1ZFEvoOQ2q5UvEHH2RtyF5YtRBgxg tlsME63fCS62nev+wetJHxAZJHpFTf48JqIVDqGDx2qpWJJEepJQNpYJV98Ean/A xd4wx3XUeOzAv/p2XmXG8VI4iNjuAfcD -----END CERTIFICATE-----Generated at Wed Nov 5 12:04:21 2025 by rpki-client