$ rpki-client -vvf rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft File: gg6Gox8rF_yjbfi-YIssk2qDvYA.mft (raw, json) Hash identifier: NHoz/BTMszuXsSWMJXxcrSsdYZ38kMUZ3+TGwceJquQ= Subject key identifier: DD:83:47:D5:76:8C:5E:97:3B:81:50:86:4D:B3:F1:2D:77:B6:F8:5E Authority key identifier: 82:0E:86:A3:1F:2B:17:FC:A3:6D:F8:BE:60:8B:2C:93:6A:83:BD:80 Certificate issuer: /CN=A918B837/serialNumber=820E86A31F2B17FCA36DF8BE608B2C936A83BD80 Certificate serial: 0B6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft Manifest number: 0B66 Signing time: Mon 20 Oct 2025 19:47:56 +0000 Manifest this update: Mon 20 Oct 2025 19:47:56 +0000 Manifest next update: Mon 27 Oct 2025 19:47:56 +0000 Files and hashes: 1: gg6Gox8rF_yjbfi-YIssk2qDvYA.crl (hash: DklwEh9Mev5qQ+cfiHEfRHCkFO+Pwc9egp4gn+RM4EQ=) 2: 3D4023BE283611EBA9595178C4F9AE02.roa (hash: p0gLqXYHMAKfZmsW1hgHdRTIbATt3w5OE3zBkqIYM3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.crl rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 19:47:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2925 (0xb6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B837, serialNumber=820E86A31F2B17FCA36DF8BE608B2C936A83BD80 Validity Not Before: Oct 20 19:47:56 2025 GMT Not After : Oct 27 19:47:56 2025 GMT Subject: CN=68f691ec-5828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ce:0f:7a:60:74:76:d6:83:80:79:de:0a:c3: d3:df:ff:49:03:41:57:5e:18:15:a9:c1:5c:77:65: 62:90:bd:8c:0f:2a:65:b7:9b:d6:c1:b5:bc:2a:2c: f0:c5:b9:74:7e:c4:84:1e:07:19:81:b5:d3:89:0a: 60:69:79:8b:cd:b4:71:6b:1d:eb:b4:ff:4c:26:74: 5e:06:2e:15:d1:07:32:ef:68:9b:03:d5:7b:82:2b: 94:c1:37:27:07:ca:1b:06:f0:dd:a1:d3:2b:2f:60: e1:01:82:95:ec:d3:1e:c0:9d:c4:82:0e:96:a7:bf: 76:a3:19:a1:19:83:72:e6:90:f4:cf:a0:d7:35:2c: fd:f6:82:82:8d:a4:87:21:90:90:09:76:f4:09:4e: 18:7f:08:4d:de:a2:b7:ad:4b:8d:0d:3e:63:8b:8d: e1:f9:87:62:e9:a7:4b:83:b3:24:6b:4d:db:13:6f: f9:50:a8:fa:9d:08:1e:83:0f:37:26:d8:6b:33:b3: 0a:40:7a:bc:ed:99:eb:f2:08:61:c6:52:3d:ee:62: 5a:df:4d:ae:bc:6d:fe:82:a9:f5:07:ff:1f:ad:fe: aa:8d:4a:1c:86:78:e4:f1:ca:9c:cc:72:f1:09:4f: 4f:b0:7a:68:c2:ae:b5:d9:10:d4:d5:80:29:a8:8c: 95:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:83:47:D5:76:8C:5E:97:3B:81:50:86:4D:B3:F1:2D:77:B6:F8:5E X509v3 Authority Key Identifier: keyid:82:0E:86:A3:1F:2B:17:FC:A3:6D:F8:BE:60:8B:2C:93:6A:83:BD:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:c8:38:f3:44:bf:59:f4:94:33:1e:04:1d:8d:72:29:95:0e: 02:07:7a:a8:88:a9:01:43:b6:54:d0:f7:b0:8b:d4:10:68:44: e7:37:1e:5d:65:a8:fa:c9:1f:35:76:f6:90:2e:08:ff:d5:b2: 3d:9e:6f:79:6f:c6:da:1a:e5:8a:f9:bd:a9:86:08:be:58:b2: 45:5d:82:61:b2:99:aa:5d:8d:4d:18:5e:68:7b:b3:ac:09:b2: 1a:69:27:79:19:f0:3a:0c:51:10:0f:7e:30:09:93:7b:4d:c5: fc:82:38:87:97:29:4a:67:a9:db:cf:34:59:aa:e9:b5:5c:81: 83:a2:d9:b1:b7:5b:4a:79:e7:7a:e5:b8:ba:a4:ca:db:5d:b7: 26:60:0c:e1:93:28:46:20:32:0d:a1:dc:bb:a7:4f:63:61:e9: d6:56:bd:02:05:e4:21:2c:bb:2b:0e:e9:53:ae:75:d7:90:e0: 9a:c7:e7:e7:4b:9c:6a:ea:2e:40:db:90:27:38:da:dd:d8:78: 2c:6f:bd:bf:53:5f:8b:0c:73:72:f4:31:9f:1f:7a:cb:36:a3: 0b:92:4b:24:6e:2c:a8:12:cf:d5:4e:03:a4:58:05:6a:a9:06: 60:ff:8d:a9:49:d7:b6:31:bf:17:89:e8:5e:60:3e:4b:89:89: c2:10:92:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI4MzcxMTAvBgNVBAUTKDgyMEU4NkEzMUYyQjE3RkNBMzZERjhCRTYwOEIyQzkz NkE4M0JEODAwHhcNMjUxMDIwMTk0NzU2WhcNMjUxMDI3MTk0NzU2WjAYMRYwFAYD VQQDEw02OGY2OTFlYy01ODI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsc4PemB0dtaDgHneCsPT3/9JA0FXXhgVqcFcd2VikL2MDyplt5vWwbW8Kizw xbl0fsSEHgcZgbXTiQpgaXmLzbRxax3rtP9MJnReBi4V0Qcy72ibA9V7giuUwTcn B8obBvDdodMrL2DhAYKV7NMewJ3Egg6Wp792oxmhGYNy5pD0z6DXNSz99oKCjaSH IZCQCXb0CU4YfwhN3qK3rUuNDT5ji43h+Ydi6adLg7Mka03bE2/5UKj6nQgegw83 JthrM7MKQHq87Znr8ghhxlI97mJa302uvG3+gqn1B/8frf6qjUochnjk8cqczHLx CU9PsHpowq612RDU1YApqIyV+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2DR9V2 jF6XO4FQhk2z8S13tvheMB8GA1UdIwQYMBaAFIIOhqMfKxf8o234vmCLLJNqg72A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjgzNy84MzMwMEUyRTNF MDkxMUVBQTRFMTNGMTlDNEY5QUUwMi9nZzZHb3g4ckZfeWpiZmktWUlzc2sycUR2 WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnNkdveDhyRl95amJmaS1ZSXNzazJxRHZZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjgzNy84MzMwMEUyRTNFMDkxMUVBQTRFMTNGMTlDNEY5QUUwMi9nZzZHb3g4ckZf eWpiZmktWUlzc2sycUR2WUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkyDjzRL9Z9JQzHgQdjXIplQ4CB3qoiKkBQ7ZU0Pewi9QQaETnNx5d Zaj6yR81dvaQLgj/1bI9nm95b8baGuWK+b2phgi+WLJFXYJhspmqXY1NGF5oe7Os CbIaaSd5GfA6DFEQD34wCZN7TcX8gjiHlylKZ6nbzzRZqum1XIGDotmxt1tKeed6 5bi6pMrbXbcmYAzhkyhGIDINody7p09jYenWVr0CBeQhLLsrDulTrnXXkOCax+fn S5xq6i5A25AnONrd2Hgsb72/U1+LDHNy9DGfH3rLNqMLkkskbiyoEs/VTgOkWAVq qQZg/42pSde2Mb8XieheYD5LiYnCEJJE -----END CERTIFICATE-----Generated at Mon Oct 20 23:36:47 2025 by rpki-client