$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft File: rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft (raw, json) Hash identifier: K/ksuOYaz+cPZHH9GidrHYs/NPxT/w4KjtX+LJIVlXI= Subject key identifier: D9:2E:53:B8:05:9E:54:CC:C5:FC:57:00:FD:9F:7F:C4:D3:0D:EF:B4 Authority key identifier: AC:6A:05:C1:9D:E3:77:FA:FE:AD:A8:87:0C:90:E4:3D:DD:E8:2D:32 Certificate issuer: /CN=A9141BAE/serialNumber=AC6A05C19DE377FAFEADA8870C90E43DDDE82D32 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft Manifest number: 1F Signing time: Sun 19 Oct 2025 11:21:01 +0000 Manifest this update: Sun 19 Oct 2025 11:21:00 +0000 Manifest next update: Sun 26 Oct 2025 11:21:00 +0000 Files and hashes: 1: rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl (hash: F5H5iWYSMYCPs+gRyHDav6jnnNXlL09/O0OiEW45eYo=) 2: DE43ED5E814111F09CB97D40C4F9AE02.roa (hash: dTfOPNG1kntTr8AnSgtfUPWTvUN95iBYag0K3k/COcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141BAE, serialNumber=AC6A05C19DE377FAFEADA8870C90E43DDDE82D32 Validity Not Before: Oct 19 11:21:00 2025 GMT Not After : Oct 26 11:21:00 2025 GMT Subject: CN=68f4c99d-d916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9c:2e:19:ab:c2:ed:6c:bc:90:72:6e:40:ff: 05:29:08:fa:a6:4a:e8:a5:b0:3f:9a:ce:05:a3:ea: c9:b6:4e:84:e8:5f:f8:a0:a1:b6:7a:0c:b6:56:a2: e1:40:e3:5f:b6:c3:76:6e:29:d5:a6:25:6f:de:01: 1a:fa:34:ed:0d:34:b0:64:d4:c2:3e:ec:2a:db:bb: 5e:be:c2:6b:76:36:2d:b4:a6:35:2f:c2:00:12:a0: 7c:c5:a6:ed:6b:b4:c2:bb:b5:ba:ab:ba:1c:72:b3: be:bf:8c:0f:3e:92:1c:a9:bc:b7:a4:58:5c:48:f5: bf:e5:fd:d9:e8:d4:fc:ad:0e:10:de:88:8c:4d:11: 0e:31:65:09:db:25:32:8f:f7:9b:45:76:cc:ce:90: bc:e3:f4:23:e6:dd:21:84:34:f1:39:47:27:20:75: 92:d0:1d:01:31:93:18:28:1f:f2:08:f7:b4:1f:e3: 05:1b:4e:91:80:dd:b7:0e:02:ad:2b:17:02:52:05: 95:8c:ac:e0:cc:ce:7d:8f:3e:c1:f9:fa:5f:4d:7e: ba:ad:1b:6d:81:9c:09:0d:c7:8c:fb:42:5a:38:6b: 96:7f:55:f4:48:f7:5a:fe:fd:51:33:07:de:da:e1: d0:40:8a:de:05:2e:b7:ee:a3:ed:fd:af:d9:c3:a0: b9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:2E:53:B8:05:9E:54:CC:C5:FC:57:00:FD:9F:7F:C4:D3:0D:EF:B4 X509v3 Authority Key Identifier: keyid:AC:6A:05:C1:9D:E3:77:FA:FE:AD:A8:87:0C:90:E4:3D:DD:E8:2D:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d8:e2:03:7f:57:6e:54:60:6f:f6:4a:af:62:e4:a8:4d:8b:55: 3f:d5:86:51:4b:dd:3b:8c:db:fb:35:fc:45:44:dc:5d:66:e4: 32:3d:ac:5e:1e:fb:95:30:46:67:c3:89:41:7e:6f:4c:b5:55: bb:d2:2d:87:73:b8:76:8c:92:fc:20:77:34:92:a2:47:01:91: 59:b2:94:6d:be:2b:31:2c:94:ed:39:34:d8:0a:dc:52:c4:bc: 74:87:a6:d9:2e:74:26:fd:e0:e2:a6:f6:f6:65:ab:0b:e9:6a: c4:da:42:d0:33:23:20:db:dd:e7:de:31:0c:52:67:6a:40:21: 4d:70:6f:d7:c6:2e:80:46:78:bf:6a:37:9c:46:e9:37:e9:bf: 0c:ed:09:50:62:db:a9:4a:c9:d8:a9:6f:f4:08:a8:a5:6b:72: a4:ac:f8:f1:dd:d9:e1:0c:7a:86:48:94:ff:10:f2:72:2e:15: 4c:08:7d:b9:02:cf:3e:01:ff:f7:15:fe:97:39:f3:cf:09:9c: 96:e5:b8:67:38:c4:9c:db:95:9a:aa:98:33:75:80:91:bb:f2: d7:58:35:52:ec:5a:ba:07:00:45:ce:36:e7:b6:5d:e1:8e:85: a3:cd:bb:c0:d8:e4:2d:c1:36:4a:d9:b5:c5:be:6f:f3:f9:fd: 51:9c:0c:66 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MUJBRTExMC8GA1UEBRMoQUM2QTA1QzE5REUzNzdGQUZFQURBODg3MEM5MEU0M0RE REU4MkQzMjAeFw0yNTEwMTkxMTIxMDBaFw0yNTEwMjYxMTIxMDBaMBgxFjAUBgNV BAMTDTY4ZjRjOTlkLWQ5MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7nC4Zq8LtbLyQcm5A/wUpCPqmSuilsD+azgWj6sm2ToToX/igobZ6DLZWouFA 41+2w3ZuKdWmJW/eARr6NO0NNLBk1MI+7Crbu16+wmt2Ni20pjUvwgASoHzFpu1r tMK7tbqruhxys76/jA8+khypvLekWFxI9b/l/dno1PytDhDeiIxNEQ4xZQnbJTKP 95tFdszOkLzj9CPm3SGENPE5RycgdZLQHQExkxgoH/II97Qf4wUbTpGA3bcOAq0r FwJSBZWMrODMzn2PPsH5+l9NfrqtG22BnAkNx4z7Qlo4a5Z/VfRI91r+/VEzB97a 4dBAit4FLrfuo+39r9nDoLkNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2S5TuAWe VMzF/FcA/Z9/xNMN77QwHwYDVR0jBBgwFoAUrGoFwZ3jd/r+raiHDJDkPd3oLTIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxQkFFLzcyMDM3OUEyODE0 MTExRjA4OEQwNTEzRkM0RjlBRTAyL3JHb0Z3WjNqZF9yLXJhaUhESkRrUGQzb0xU SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvckdvRndaM2pkX3ItcmFpSERKRGtQZDNvTFRJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx QkFFLzcyMDM3OUEyODE0MTExRjA4OEQwNTEzRkM0RjlBRTAyL3JHb0Z3WjNqZF9y LXJhaUhESkRrUGQzb0xUSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANjiA39XblRgb/ZKr2LkqE2LVT/VhlFL3TuM2/s1/EVE3F1m5DI9rF4e +5UwRmfDiUF+b0y1VbvSLYdzuHaMkvwgdzSSokcBkVmylG2+KzEslO05NNgK3FLE vHSHptkudCb94OKm9vZlqwvpasTaQtAzIyDb3efeMQxSZ2pAIU1wb9fGLoBGeL9q N5xG6TfpvwztCVBi26lKydipb/QIqKVrcqSs+PHd2eEMeoZIlP8Q8nIuFUwIfbkC zz4B//cV/pc5888JnJbluGc4xJzblZqqmDN1gJG78tdYNVLsWroHAEXONue2XeGO haPNu8DY5C3BNkrZtcW+b/P5/VGcDGY= -----END CERTIFICATE-----Generated at Mon Oct 20 03:42:35 2025 by rpki-client