$ rpki-client -vvf rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft File: goqGO92fRnXqGDzaoQT1SyN3Lkk.mft (raw, json) Hash identifier: SkvJEYwBNGnrFpsJj350eZHPIZZkV9q5S1V4Cv9I4F0= Subject key identifier: CA:96:D2:E3:AC:44:0F:A9:C2:C8:6B:E1:6D:40:11:4A:4D:10:C2:F9 Authority key identifier: 82:8A:86:3B:DD:9F:46:75:EA:18:3C:DA:A1:04:F5:4B:23:77:2E:49 Certificate issuer: /CN=A913D4B2/serialNumber=828A863BDD9F4675EA183CDAA104F54B23772E49 Certificate serial: 06C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft Manifest number: 06C3 Signing time: Sat 18 Oct 2025 23:32:13 +0000 Manifest this update: Sat 18 Oct 2025 23:32:12 +0000 Manifest next update: Sat 25 Oct 2025 23:32:12 +0000 Files and hashes: 1: goqGO92fRnXqGDzaoQT1SyN3Lkk.crl (hash: 9E9YNO9tbwO4ZpaIJYQq2fOa19YG68HCLFVHPqVrYfM=) 2: C148AF5C9B4811EBB3FAE847C4F9AE02.roa (hash: ElM40kRXls4915TJFeuEiV6vcriAHquSzfVrwEFHIlI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.crl rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:32:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1736 (0x6c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D4B2, serialNumber=828A863BDD9F4675EA183CDAA104F54B23772E49 Validity Not Before: Oct 18 23:32:12 2025 GMT Not After : Oct 25 23:32:12 2025 GMT Subject: CN=68f4237c-3b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:96:58:56:9e:9f:a8:7c:06:40:29:d3:1a:f5: dd:82:5d:76:46:22:20:09:ee:82:62:57:79:56:70: fa:56:c2:4e:aa:aa:f1:91:f8:dc:bd:e7:de:e6:7f: e2:51:b9:11:f3:3a:d9:76:d4:66:55:a9:38:a6:cc: 42:40:23:90:2d:34:0c:46:16:4c:24:a5:85:c8:50: 89:8d:4d:38:15:c9:a6:20:38:f2:57:be:c7:45:da: e3:2a:cb:eb:d5:df:8f:2d:ac:e0:f5:41:78:d3:e8: 94:a0:bb:48:1f:84:8a:76:ff:c3:49:fe:c3:f3:9b: ae:6b:1e:1d:81:b7:ad:fa:a2:71:bb:e5:b9:62:32: b8:69:d8:7f:6a:1f:05:9e:88:2a:ec:9e:85:86:70: 5e:76:ee:0b:f8:a8:6c:b0:0e:04:9a:e7:33:0a:3e: e8:e2:be:03:a8:88:5f:32:2a:2d:37:e2:40:f5:54: ee:59:80:08:7a:80:14:e2:d0:21:98:15:f2:13:fd: a8:bb:2f:1d:1f:91:fe:02:6e:ed:40:79:43:b3:4e: e8:a6:13:64:1b:eb:9e:8c:13:80:fe:a7:a7:b1:fa: 2d:54:43:b6:53:f4:b8:07:2e:df:2c:5f:77:c6:4e: 1a:f9:5e:46:62:fe:b6:b7:5b:33:4e:5e:48:ba:6a: ca:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:96:D2:E3:AC:44:0F:A9:C2:C8:6B:E1:6D:40:11:4A:4D:10:C2:F9 X509v3 Authority Key Identifier: keyid:82:8A:86:3B:DD:9F:46:75:EA:18:3C:DA:A1:04:F5:4B:23:77:2E:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:79:69:e2:82:1f:49:33:db:79:04:c0:90:ed:e4:58:4b:15: d7:2a:7a:2b:38:0a:ae:92:18:3f:5d:37:8e:c0:4d:76:94:a8: e2:7f:56:53:0d:c7:cf:0c:6f:16:1c:de:4a:f0:74:70:68:74: 17:02:9a:7b:40:50:25:c0:a3:2c:6e:9b:3d:3f:e4:8a:f8:a7: 15:68:d4:bd:3c:d0:da:d5:41:41:1a:a4:16:37:ae:5f:3d:42: 67:cf:6f:0e:6a:d3:7a:13:96:4e:95:dc:a0:58:3d:a0:50:3d: 7b:97:94:51:21:54:93:0b:e7:4c:14:e7:9a:7f:16:dd:09:7d: 95:53:db:bf:f6:fd:f6:a9:7e:a9:f0:9e:24:5d:39:ea:a9:84: 78:42:3a:9e:08:82:be:ab:a5:8d:d1:fb:02:5e:b2:93:44:8c: d9:3e:33:14:c5:85:fe:bc:6e:b7:ac:7c:12:65:ef:ea:97:ca: 82:f0:87:cd:54:75:6e:08:28:04:6b:5c:95:ac:83:ad:84:fa: 33:7f:0f:71:73:10:06:ae:0c:1b:f8:82:65:62:1f:19:80:f4: 9f:e7:2c:5a:ff:19:9e:e5:19:67:c3:b4:cc:e1:7b:13:36:1b: e2:6a:92:3a:5a:43:28:d6:6c:02:16:fd:43:7e:bd:f1:58:6b: 55:48:43:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q0QjIxMTAvBgNVBAUTKDgyOEE4NjNCREQ5RjQ2NzVFQTE4M0NEQUExMDRGNTRC MjM3NzJFNDkwHhcNMjUxMDE4MjMzMjEyWhcNMjUxMDI1MjMzMjEyWjAYMRYwFAYD VQQDEw02OGY0MjM3Yy0zYjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ZZYVp6fqHwGQCnTGvXdgl12RiIgCe6CYld5VnD6VsJOqqrxkfjcvefe5n/i UbkR8zrZdtRmVak4psxCQCOQLTQMRhZMJKWFyFCJjU04FcmmIDjyV77HRdrjKsvr 1d+PLazg9UF40+iUoLtIH4SKdv/DSf7D85uuax4dgbet+qJxu+W5YjK4adh/ah8F nogq7J6FhnBedu4L+KhssA4EmuczCj7o4r4DqIhfMiotN+JA9VTuWYAIeoAU4tAh mBXyE/2ouy8dH5H+Am7tQHlDs07ophNkG+uejBOA/qensfotVEO2U/S4By7fLF93 xk4a+V5GYv62t1szTl5IumrKSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqW0uOs RA+pwshr4W1AEUpNEML5MB8GA1UdIwQYMBaAFIKKhjvdn0Z16hg82qEE9Usjdy5J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDRCMi9CNEIyMENBRTc4 NDExMUVCQjM0ODA5NjFDNEY5QUUwMi9nb3FHTzkyZlJuWHFHRHphb1FUMVN5TjNM a2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dvcUdPOTJmUm5YcUdEemFvUVQxU3lOM0xray5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDRCMi9CNEIyMENBRTc4NDExMUVCQjM0ODA5NjFDNEY5QUUwMi9nb3FHTzkyZlJu WHFHRHphb1FUMVN5TjNMa2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXeWnigh9JM9t5BMCQ7eRYSxXXKnorOAqukhg/XTeOwE12lKjif1ZT DcfPDG8WHN5K8HRwaHQXApp7QFAlwKMsbps9P+SK+KcVaNS9PNDa1UFBGqQWN65f PUJnz28OatN6E5ZOldygWD2gUD17l5RRIVSTC+dMFOeafxbdCX2VU9u/9v32qX6p 8J4kXTnqqYR4QjqeCIK+q6WN0fsCXrKTRIzZPjMUxYX+vG63rHwSZe/ql8qC8IfN VHVuCCgEa1yVrIOthPozfw9xcxAGrgwb+IJlYh8ZgPSf5yxa/xme5Rlnw7TM4XsT NhviapI6WkMo1mwCFv1Dfr3xWGtVSEP1 -----END CERTIFICATE-----Generated at Sun Oct 19 23:30:43 2025 by rpki-client