$ rpki-client -vvf rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft File: sGbiQQUMOMNJyyXUQBRFD09QGK4.mft (raw, json) Hash identifier: rA+L5sbb8ybJtiqIFmF7VNGhg0f64T2McuMGiLG/ZIo= Subject key identifier: BA:5C:F8:7A:47:C5:82:9F:E7:AB:05:B9:43:15:81:35:C5:7C:4A:D1 Authority key identifier: B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE Certificate issuer: /CN=A916CE83/serialNumber=B066E241050C38C349CB25D44014450F4F5018AE Certificate serial: 108B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft Manifest number: 1076 Signing time: Mon 20 Oct 2025 17:51:31 +0000 Manifest this update: Mon 20 Oct 2025 17:51:30 +0000 Manifest next update: Mon 27 Oct 2025 17:51:30 +0000 Files and hashes: 1: sGbiQQUMOMNJyyXUQBRFD09QGK4.crl (hash: kZsJaJNcsM8wrtI8x+Apzv+NQPgh9rxDgtbr7NriyMs=) 2: 6657C8D243B911E9AE253437C4F9AE02.roa (hash: lt8gmY8g1SyOkxFazii9tDuABaAafi0NX+TiAw/IKTA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4235 (0x108b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CE83, serialNumber=B066E241050C38C349CB25D44014450F4F5018AE Validity Not Before: Oct 20 17:51:30 2025 GMT Not After : Oct 27 17:51:30 2025 GMT Subject: CN=68f676a3-661c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:51:36:f2:6a:1f:63:e0:4a:2c:c3:0d:81:09: 41:f7:00:85:9d:94:b7:4f:e9:2c:fc:82:e1:85:37: 54:cd:1a:49:39:dd:5d:90:b8:c5:60:f6:8d:e9:3a: 3d:a0:a4:f6:2a:86:ee:90:e0:d7:10:4c:91:35:c8: bb:89:5c:67:24:db:9c:bf:48:48:62:60:5e:03:f9: 04:a7:3b:37:c0:ab:f5:7a:7e:88:03:34:01:ae:09: f0:61:32:91:e3:64:02:48:a2:ca:9f:48:a0:7c:10: 77:11:4e:65:1c:6c:47:51:4f:f7:11:af:54:ac:21: 69:6b:72:18:d6:cd:54:bd:b3:05:1c:66:0a:f3:2d: ab:af:fa:5d:69:ba:b9:01:27:2f:07:bd:72:34:b6: 3f:f4:cb:32:ef:38:a2:22:50:7d:7b:37:5b:0e:cc: a9:aa:9b:cf:23:13:13:a6:03:57:3f:18:21:a3:28: 45:09:04:fd:24:4a:0f:fa:a7:88:ba:db:f5:e1:d0: 99:1c:6b:43:6f:18:23:11:8e:6c:a3:56:e6:ed:93: 54:e2:90:19:4f:55:07:9b:3e:ba:aa:a5:4c:84:bb: d3:e6:a2:e5:de:99:fb:a5:b7:31:33:86:a2:7f:06: 9a:77:d8:3a:e6:c4:b2:61:dd:8d:d9:84:1f:c6:0e: cf:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:5C:F8:7A:47:C5:82:9F:E7:AB:05:B9:43:15:81:35:C5:7C:4A:D1 X509v3 Authority Key Identifier: keyid:B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:53:26:89:04:3d:a2:37:b8:3f:40:ac:81:3a:48:d7:05:f1: ba:75:27:9f:d8:e5:96:70:ce:00:5d:88:d5:37:98:ec:07:08: ee:8d:4c:5b:f0:4e:c5:ab:98:6a:4c:6f:1e:34:bb:b2:d9:0d: 75:a6:45:52:f4:dd:00:a6:03:e3:bf:a6:80:d3:4d:51:eb:cc: 16:18:9e:73:3f:09:df:21:ae:7a:99:8e:4e:4d:a2:3d:ea:87: e7:6d:fe:cd:fe:14:0e:1c:10:a4:c1:e1:2a:fb:a7:8b:2a:78: cb:99:80:09:21:9a:4b:38:01:14:8a:9a:2f:92:09:5e:5b:83: bf:35:a1:28:49:d1:ec:36:33:e7:55:89:86:30:0e:7c:2e:02: 90:dc:26:d6:54:86:a6:39:4c:05:47:61:ee:88:dc:c7:5e:dd: 83:c1:12:06:50:9e:7a:ea:38:00:4f:51:63:84:d4:41:42:3d: c0:d8:1f:d6:aa:05:47:59:91:d6:b8:c4:28:28:7e:d7:0b:e5: 2a:3f:80:a1:f0:16:69:75:9f:e6:10:23:96:79:17:10:c3:00: 9f:08:d1:f8:bf:e1:cc:21:b6:53:86:83:cf:2a:dd:aa:b1:39: 1d:53:b4:8d:e8:19:10:ae:0d:d2:b0:73:83:b6:56:2f:91:52: 57:03:73:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNFODMxMTAvBgNVBAUTKEIwNjZFMjQxMDUwQzM4QzM0OUNCMjVENDQwMTQ0NTBG NEY1MDE4QUUwHhcNMjUxMDIwMTc1MTMwWhcNMjUxMDI3MTc1MTMwWjAYMRYwFAYD VQQDEw02OGY2NzZhMy02NjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1E28mofY+BKLMMNgQlB9wCFnZS3T+ks/ILhhTdUzRpJOd1dkLjFYPaN6To9 oKT2KobukODXEEyRNci7iVxnJNucv0hIYmBeA/kEpzs3wKv1en6IAzQBrgnwYTKR 42QCSKLKn0igfBB3EU5lHGxHUU/3Ea9UrCFpa3IY1s1UvbMFHGYK8y2rr/pdabq5 AScvB71yNLY/9Msy7ziiIlB9ezdbDsypqpvPIxMTpgNXPxghoyhFCQT9JEoP+qeI utv14dCZHGtDbxgjEY5so1bm7ZNU4pAZT1UHmz66qqVMhLvT5qLl3pn7pbcxM4ai fwaad9g65sSyYd2N2YQfxg7PPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLpc+HpH xYKf56sFuUMVgTXFfErRMB8GA1UdIwQYMBaAFLBm4kEFDDjDScsl1EAURQ9PUBiu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0U4My85NTY0MTkxQTQz QjgxMUU5QUJBMjJBMzRDNEY5QUUwMi9zR2JpUVFVTU9NTkp5eVhVUUJSRkQwOVFH SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NHYmlRUVVNT01OSnl5WFVRQlJGRDA5UUdLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0U4My85NTY0MTkxQTQzQjgxMUU5QUJBMjJBMzRDNEY5QUUwMi9zR2JpUVFVTU9N Tkp5eVhVUUJSRkQwOVFHSzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJUyaJBD2iN7g/QKyBOkjXBfG6dSef2OWWcM4AXYjVN5jsBwjujUxb 8E7Fq5hqTG8eNLuy2Q11pkVS9N0ApgPjv6aA001R68wWGJ5zPwnfIa56mY5OTaI9 6ofnbf7N/hQOHBCkweEq+6eLKnjLmYAJIZpLOAEUipovkgleW4O/NaEoSdHsNjPn VYmGMA58LgKQ3CbWVIamOUwFR2HuiNzHXt2DwRIGUJ566jgAT1FjhNRBQj3A2B/W qgVHWZHWuMQoKH7XC+UqP4Ch8BZpdZ/mECOWeRcQwwCfCNH4v+HMIbZThoPPKt2q sTkdU7SN6BkQrg3SsHODtlYvkVJXA3NL -----END CERTIFICATE-----Generated at Mon Oct 20 21:39:30 2025 by rpki-client