$ rpki-client -vvf rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft File: G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft (raw, json) Hash identifier: TDGu31vu45tJPvzIVYLv+43lgM9ZUSNJpwLhuWjdyA4= Subject key identifier: 7E:E9:69:8D:29:F1:3E:AD:D9:84:83:FC:4E:15:C6:9A:93:4A:01:AB Authority key identifier: 1B:82:12:DB:F1:55:3C:3B:76:1F:19:9E:5E:05:A2:D1:09:8D:CD:47 Certificate issuer: /CN=A9117FA3/serialNumber=1B8212DBF1553C3B761F199E5E05A2D1098DCD47 Certificate serial: 0C1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4IS2_FVPDt2HxmeXgWi0QmNzUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft Manifest number: 0C12 Signing time: Sat 18 Oct 2025 19:35:45 +0000 Manifest this update: Sat 18 Oct 2025 19:35:44 +0000 Manifest next update: Sat 25 Oct 2025 19:35:44 +0000 Files and hashes: 1: G4IS2_FVPDt2HxmeXgWi0QmNzUc.crl (hash: FTvYdBfpI2Ctyr2P1V2P7Cu6VrAF4b2gs12CjXvU7ck=) 2: 53409F861D9C11EAA3FD402FC4F9AE02.roa (hash: j4q/tAbU5GnUtv3RJxFUk0GDbMAP6oPzZx57GUeGw58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.crl rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4IS2_FVPDt2HxmeXgWi0QmNzUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3099 (0xc1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117FA3, serialNumber=1B8212DBF1553C3B761F199E5E05A2D1098DCD47 Validity Not Before: Oct 18 19:35:44 2025 GMT Not After : Oct 25 19:35:44 2025 GMT Subject: CN=68f3ec11-2deb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7f:e3:c9:6c:b4:5d:87:7d:a6:2f:44:8e:41: 6f:2c:fe:16:b2:d3:af:a0:04:95:84:5e:24:07:da: 80:4f:2a:52:60:30:36:f6:20:44:3f:be:73:1e:cb: e3:02:53:de:64:87:17:d8:8a:89:56:1e:dd:5c:ce: 45:f6:11:f5:06:9e:74:f5:73:58:30:91:97:bf:94: 6f:d6:b4:7f:cd:be:22:eb:b1:cf:a5:fb:89:9b:59: d4:3b:2a:9c:b7:61:15:71:f4:84:38:18:b8:a1:7a: 67:d3:ff:c1:aa:0b:3c:3d:3e:22:b3:fa:45:c8:0a: 46:6c:b6:8c:b7:5a:2d:8c:77:50:ec:5b:56:3e:08: bc:1c:f9:01:ff:97:22:90:24:d7:da:17:04:50:28: c2:15:39:cb:36:e8:ef:03:43:77:ea:04:52:d5:eb: 35:e3:94:a2:45:8b:5c:ac:a1:d2:37:a2:a3:96:cb: 01:17:bf:cc:68:de:c4:aa:2b:3d:94:d2:d0:3a:75: 72:d6:ea:a4:b0:94:14:f7:ca:19:91:e4:f6:83:11: 76:2e:02:84:31:13:46:bc:ce:02:2b:4d:d4:b3:98: 80:7b:0c:1e:9f:f4:31:9e:84:a4:d9:f5:db:aa:8d: ba:01:e0:eb:b7:ac:cc:8d:23:a9:75:e8:67:aa:e7: 1f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E9:69:8D:29:F1:3E:AD:D9:84:83:FC:4E:15:C6:9A:93:4A:01:AB X509v3 Authority Key Identifier: keyid:1B:82:12:DB:F1:55:3C:3B:76:1F:19:9E:5E:05:A2:D1:09:8D:CD:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4IS2_FVPDt2HxmeXgWi0QmNzUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:4e:2e:de:c4:bd:1f:97:5b:c2:cd:24:f9:25:02:10:5e:23: d2:3c:36:b1:83:35:ca:16:8c:ef:e3:64:f7:88:be:6e:cc:37: 47:97:3d:f5:b1:e1:3d:99:69:bb:84:96:37:c6:80:38:d3:e0: 21:d6:33:d9:26:7e:37:16:e4:42:a2:47:ee:71:39:94:59:58: a8:f2:a9:83:7c:e2:4b:e4:7f:80:2b:5f:ce:4a:3a:9a:d4:3c: 43:79:10:68:9d:e5:8b:00:9d:f8:98:ad:0f:6e:8e:5c:9e:d5: c8:35:e3:3d:86:36:5b:c7:77:68:bc:ef:04:d1:f0:8b:8a:51: 3a:f0:1c:d6:b9:23:46:b6:fa:75:2c:a5:06:ce:55:01:f0:54: 26:96:c0:db:31:94:69:75:b2:d7:83:78:f1:5d:03:b4:ff:b0: af:a5:c3:37:71:95:32:28:02:13:2e:8e:71:9e:60:91:a4:7a: 4f:8f:fd:7a:e7:95:39:b0:10:11:45:67:51:3e:2a:bd:0e:fe: c4:9a:0d:00:5b:32:66:b8:00:86:fa:bd:71:f0:56:51:0c:6b: e2:4b:b7:67:91:13:1d:1b:6b:f6:09:4b:b8:c2:6c:4c:a2:0c: f5:27:1f:f4:c9:c1:12:25:c8:83:45:30:be:84:fb:2d:2f:71: 10:6c:78:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdGQTMxMTAvBgNVBAUTKDFCODIxMkRCRjE1NTNDM0I3NjFGMTk5RTVFMDVBMkQx MDk4RENENDcwHhcNMjUxMDE4MTkzNTQ0WhcNMjUxMDI1MTkzNTQ0WjAYMRYwFAYD VQQDEw02OGYzZWMxMS0yZGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwX/jyWy0XYd9pi9EjkFvLP4WstOvoASVhF4kB9qATypSYDA29iBEP75zHsvj AlPeZIcX2IqJVh7dXM5F9hH1Bp509XNYMJGXv5Rv1rR/zb4i67HPpfuJm1nUOyqc t2EVcfSEOBi4oXpn0//Bqgs8PT4is/pFyApGbLaMt1otjHdQ7FtWPgi8HPkB/5ci kCTX2hcEUCjCFTnLNujvA0N36gRS1es145SiRYtcrKHSN6KjlssBF7/MaN7Eqis9 lNLQOnVy1uqksJQU98oZkeT2gxF2LgKEMRNGvM4CK03Us5iAewwen/QxnoSk2fXb qo26AeDrt6zMjSOpdehnqucfcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7paY0p 8T6t2YSD/E4VxpqTSgGrMB8GA1UdIwQYMBaAFBuCEtvxVTw7dh8Znl4FotEJjc1H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0ZBMy81OTMwNzMzNjFE OUIxMUVBODYwRUNCMkRDNEY5QUUwMi9HNElTMl9GVlBEdDJIeG1lWGdXaTBRbU56 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0SVMyX0ZWUER0Mkh4bWVYZ1dpMFFtTnpVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0ZBMy81OTMwNzMzNjFEOUIxMUVBODYwRUNCMkRDNEY5QUUwMi9HNElTMl9GVlBE dDJIeG1lWGdXaTBRbU56VWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWTi7exL0fl1vCzST5JQIQXiPSPDaxgzXKFozv42T3iL5uzDdHlz31 seE9mWm7hJY3xoA40+Ah1jPZJn43FuRCokfucTmUWVio8qmDfOJL5H+AK1/OSjqa 1DxDeRBoneWLAJ34mK0Pbo5cntXINeM9hjZbx3dovO8E0fCLilE68BzWuSNGtvp1 LKUGzlUB8FQmlsDbMZRpdbLXg3jxXQO0/7CvpcM3cZUyKAITLo5xnmCRpHpPj/16 55U5sBARRWdRPiq9Dv7Emg0AWzJmuACG+r1x8FZRDGviS7dnkRMdG2v2CUu4wmxM ogz1Jx/0ycESJciDRTC+hPstL3EQbHia -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:51 2025 by rpki-client