$ rpki-client -vvf rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft File: GkUkezobAmknHXRsWl-sAUX_MyI.mft (raw, json) Hash identifier: ROtj7D9lT5jsCVunG3vQXqct3HfqhdgqmHFy0sGVjRw= Subject key identifier: FF:30:39:17:E8:3A:9B:54:5F:56:D5:C8:FD:63:B9:9A:21:5A:D1:0B Authority key identifier: 1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22 Certificate issuer: /CN=A911A2B1/serialNumber=1A45247B3A1B0269271D746C5A5FAC0145FF3322 Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft Manifest number: 0123 Signing time: Sun 19 Oct 2025 07:36:05 +0000 Manifest this update: Sun 19 Oct 2025 07:36:05 +0000 Manifest next update: Sun 26 Oct 2025 07:36:05 +0000 Files and hashes: 1: GkUkezobAmknHXRsWl-sAUX_MyI.crl (hash: 2EaI66KjbnBr0uLJA7d/aVnJ77Whqt18r2nuZqMxjv4=) 2: F44E8EBCF3B511EE8451152DC4F9AE02.roa (hash: +JGbQRGke2HupIxlNl9DhNlER0ydSKi+ap3XfaIlCYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.crl rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:36:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A2B1, serialNumber=1A45247B3A1B0269271D746C5A5FAC0145FF3322 Validity Not Before: Oct 19 07:36:05 2025 GMT Not After : Oct 26 07:36:05 2025 GMT Subject: CN=68f494e5-dbf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:dd:72:af:09:ee:03:93:54:33:db:5a:08:85: 27:9e:ba:6a:fa:9e:43:33:ff:10:71:a0:32:f9:86: e6:9d:55:c8:cc:c7:3f:e5:e4:5b:47:82:3b:fa:74: 8e:cd:67:85:ac:6b:9f:e2:fa:0c:dd:c7:3b:5a:b7: 50:d6:95:73:f8:51:3f:dd:86:a9:e5:74:88:2e:84: 0d:c5:91:8b:73:a3:11:f6:b0:de:4e:b0:29:e2:6d: 88:e8:8c:24:9f:d8:e8:3b:76:e9:f9:19:a4:55:f3: ba:c9:46:54:40:95:cb:36:c4:db:a2:d8:73:de:5b: aa:a6:d6:ac:ab:28:0a:71:41:ef:87:c0:4f:d1:76: f5:eb:c7:97:83:66:3c:95:e1:01:91:36:3e:30:80: c2:71:69:91:4c:4b:e5:43:34:5d:66:ae:ca:0d:a1: b3:01:a5:11:79:83:73:ab:46:24:61:1b:18:2d:88: e8:41:5a:0f:ea:9c:67:26:8d:4d:9c:8c:87:5b:fe: a4:9c:d4:8d:91:54:43:90:42:8a:f3:36:03:11:e1: 47:11:8c:51:ef:3e:c3:3f:a7:8a:91:1a:a6:a8:75: 06:97:0c:53:f1:e6:e5:a8:7a:40:fb:b7:49:fc:3f: 59:c3:ed:5d:93:6a:ae:da:9e:14:84:b0:d9:fa:ab: 46:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:30:39:17:E8:3A:9B:54:5F:56:D5:C8:FD:63:B9:9A:21:5A:D1:0B X509v3 Authority Key Identifier: keyid:1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ce:88:75:4f:93:e8:8c:9e:b5:07:00:13:d9:c5:4f:43:27: 9a:29:98:63:51:0e:ac:3c:db:c2:50:90:c6:89:0c:22:84:da: 3a:ef:06:c7:39:d3:8e:79:e0:15:84:11:65:8c:4f:4b:d9:70: 04:52:42:c2:14:28:6c:d5:22:b9:10:12:4d:d1:34:e8:35:86: c6:80:ff:c4:de:b3:68:2c:f9:00:dd:80:55:47:2c:4b:c8:81: 04:a1:89:2a:47:1c:82:cb:ee:22:d4:de:8e:1d:ec:1a:27:67: e4:0d:9f:00:4b:5a:a4:be:06:ba:9b:a1:ec:9c:74:6b:77:29: 7c:e1:95:64:d1:20:2a:2a:d3:be:47:21:f3:9f:8e:d7:f3:5a: 29:56:58:01:59:e6:85:79:9d:ca:1e:64:99:9f:26:e6:72:f4: 55:2e:37:da:81:de:de:2e:40:f7:8e:50:e6:66:ef:fa:30:2b: 1d:75:9d:39:2e:d4:67:e8:5f:bf:e9:22:5b:f2:e0:6e:40:f6: e2:1e:37:bc:cb:4e:4c:4e:f2:65:35:cb:17:40:cc:b7:07:14: 6a:05:e6:92:9a:64:cf:12:62:30:b7:bf:18:23:22:a8:c2:c2: 9a:01:ba:fb:b3:86:49:d5:43:45:5b:fc:37:29:b9:cd:86:de: ab:98:e2:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEyQjExMTAvBgNVBAUTKDFBNDUyNDdCM0ExQjAyNjkyNzFENzQ2QzVBNUZBQzAx NDVGRjMzMjIwHhcNMjUxMDE5MDczNjA1WhcNMjUxMDI2MDczNjA1WjAYMRYwFAYD VQQDEw02OGY0OTRlNS1kYmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8t1yrwnuA5NUM9taCIUnnrpq+p5DM/8QcaAy+YbmnVXIzMc/5eRbR4I7+nSO zWeFrGuf4voM3cc7WrdQ1pVz+FE/3Yap5XSILoQNxZGLc6MR9rDeTrAp4m2I6Iwk n9joO3bp+RmkVfO6yUZUQJXLNsTbothz3luqptasqygKcUHvh8BP0Xb168eXg2Y8 leEBkTY+MIDCcWmRTEvlQzRdZq7KDaGzAaUReYNzq0YkYRsYLYjoQVoP6pxnJo1N nIyHW/6knNSNkVRDkEKK8zYDEeFHEYxR7z7DP6eKkRqmqHUGlwxT8eblqHpA+7dJ /D9Zw+1dk2qu2p4UhLDZ+qtG/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP8wORfo OptUX1bVyP1juZohWtELMB8GA1UdIwQYMBaAFBpFJHs6GwJpJx10bFpfrAFF/zMi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTJCMS8xOUE4MkY2NkYz QjUxMUVFQjFFMjIzMEVDNEY5QUUwMi9Ha1VrZXpvYkFta25IWFJzV2wtc0FVWF9N eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0drVWtlem9iQW1rbkhYUnNXbC1zQVVYX015SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTJCMS8xOUE4MkY2NkYzQjUxMUVFQjFFMjIzMEVDNEY5QUUwMi9Ha1VrZXpvYkFt a25IWFJzV2wtc0FVWF9NeUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6zoh1T5PojJ61BwAT2cVPQyeaKZhjUQ6sPNvCUJDGiQwihNo67wbH OdOOeeAVhBFljE9L2XAEUkLCFChs1SK5EBJN0TToNYbGgP/E3rNoLPkA3YBVRyxL yIEEoYkqRxyCy+4i1N6OHewaJ2fkDZ8AS1qkvga6m6HsnHRrdyl84ZVk0SAqKtO+ RyHzn47X81opVlgBWeaFeZ3KHmSZnybmcvRVLjfagd7eLkD3jlDmZu/6MCsddZ05 LtRn6F+/6SJb8uBuQPbiHje8y05MTvJlNcsXQMy3BxRqBeaSmmTPEmIwt78YIyKo wsKaAbr7s4ZJ1UNFW/w3KbnNht6rmOLD -----END CERTIFICATE-----Generated at Mon Oct 20 04:45:30 2025 by rpki-client