$ rpki-client -vvf rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft File: GFGeK8SmT3vVic2WPfB0saMwXfU.mft (raw, json) Hash identifier: tQ+K7VLqQ83Zv5BLwPmB70VlIEAVa4k1XgjuYP3tEZk= Subject key identifier: 47:10:22:E4:2B:41:BA:C1:F2:A3:80:23:23:6B:81:E7:B2:3A:BF:86 Authority key identifier: 18:51:9E:2B:C4:A6:4F:7B:D5:89:CD:96:3D:F0:74:B1:A3:30:5D:F5 Certificate issuer: /CN=A9158635/serialNumber=18519E2BC4A64F7BD589CD963DF074B1A3305DF5 Certificate serial: 0883 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft Manifest number: 087C Signing time: Sat 18 Oct 2025 21:45:10 +0000 Manifest this update: Sat 18 Oct 2025 21:45:10 +0000 Manifest next update: Sat 25 Oct 2025 21:45:10 +0000 Files and hashes: 1: GFGeK8SmT3vVic2WPfB0saMwXfU.crl (hash: OsgWRenhqoMGyE7W4mRm8wgxCS7ZpWGiVfgEdTOgOWY=) 2: EB96EEB2CFB111EA8E6F7029C4F9AE02.roa (hash: Mx6TdeWb7xQYRiw4RSx4+mjl75r/TBUYOnLqpN3UBjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.crl rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:45:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2179 (0x883) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158635, serialNumber=18519E2BC4A64F7BD589CD963DF074B1A3305DF5 Validity Not Before: Oct 18 21:45:10 2025 GMT Not After : Oct 25 21:45:10 2025 GMT Subject: CN=68f40a66-ac75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f8:4c:f7:51:82:33:3a:a5:19:99:58:ef:bf: 73:20:a2:6c:6b:5f:64:93:5d:88:e0:4f:82:d9:b3: d1:92:06:c5:ed:93:4a:39:1c:e5:4e:e5:5e:5f:f2: ac:78:fa:d6:49:1c:99:ae:37:4b:09:28:0d:2d:3b: d7:b8:aa:8c:2b:68:19:80:45:3c:6e:84:83:d1:8a: b0:22:4f:55:ee:6e:c6:86:9d:8e:20:84:cc:c9:c2: 2a:34:2a:6e:19:7d:f0:36:3f:ba:2c:55:ed:f6:6f: 00:23:81:e4:9f:7c:89:f2:ef:b1:91:ae:a0:d0:47: 2e:87:0c:22:2c:95:19:70:f5:e8:ed:f0:0c:53:56: ca:36:ed:db:f7:84:0e:e6:20:ed:8d:8d:fd:c7:6a: 17:c4:5d:8a:d5:ec:6b:e7:fc:a3:b7:ac:f2:b3:bf: 5a:26:02:b7:e7:3b:f6:07:4d:d3:e1:d0:0d:61:56: 17:59:04:8d:a6:14:37:0e:5d:da:2e:bd:5a:38:84: 9f:02:3d:a6:f4:7c:5b:3d:ca:3a:fb:6b:80:94:6c: 0d:2f:63:be:c6:c1:8f:66:95:7c:ed:39:69:90:16: 07:10:22:69:25:65:44:0d:59:2d:6f:e5:4f:36:0c: eb:01:0c:29:ae:71:ae:a8:82:fe:1f:bc:54:fb:1d: 0f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:10:22:E4:2B:41:BA:C1:F2:A3:80:23:23:6B:81:E7:B2:3A:BF:86 X509v3 Authority Key Identifier: keyid:18:51:9E:2B:C4:A6:4F:7B:D5:89:CD:96:3D:F0:74:B1:A3:30:5D:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:19:76:60:df:dc:fa:22:bb:26:6b:89:51:20:f1:e3:95:e9: 0f:ae:6c:4d:cd:0f:cd:b3:e1:47:11:3e:d8:7d:87:f1:db:fa: 23:cf:0c:16:24:20:1f:65:88:7d:ae:3f:7a:9b:b5:e2:2c:b9: 00:51:6f:f8:70:d3:db:69:6d:4f:04:a5:31:a7:57:9c:12:ee: c0:12:cb:2b:f3:8c:2e:46:2b:ab:fc:d8:88:f2:97:83:40:71: 7c:50:77:81:cc:26:af:e2:e1:4b:4c:52:37:5b:c0:a5:f9:3f: ee:35:29:4b:27:e6:c8:f3:88:b2:88:64:27:27:77:c7:86:e0: 9f:b0:0c:f8:3c:b9:ef:af:e6:50:8a:8c:b4:5c:74:53:7b:10: 50:c0:0e:a0:81:da:37:de:be:81:00:99:87:99:79:e4:60:91: f2:0c:fc:77:d4:a7:ef:02:f4:59:b4:b6:e8:88:ba:f7:5c:d1: c2:82:bb:9f:4a:df:45:fe:a0:27:a0:d1:66:6d:56:aa:f1:97: 87:cc:dc:8e:f7:22:d8:7e:5d:fb:12:d3:58:7b:08:a5:2e:62: 07:21:45:36:be:f8:09:95:39:4f:8a:72:15:f1:cf:b5:64:de: b4:43:b6:ab:6b:f2:31:a1:c7:54:a4:89:53:25:f5:2d:42:d9: 08:f8:f3:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg2MzUxMTAvBgNVBAUTKDE4NTE5RTJCQzRBNjRGN0JENTg5Q0Q5NjNERjA3NEIx QTMzMDVERjUwHhcNMjUxMDE4MjE0NTEwWhcNMjUxMDI1MjE0NTEwWjAYMRYwFAYD VQQDEw02OGY0MGE2Ni1hYzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5fhM91GCMzqlGZlY779zIKJsa19kk12I4E+C2bPRkgbF7ZNKORzlTuVeX/Ks ePrWSRyZrjdLCSgNLTvXuKqMK2gZgEU8boSD0YqwIk9V7m7Ghp2OIITMycIqNCpu GX3wNj+6LFXt9m8AI4Hkn3yJ8u+xka6g0EcuhwwiLJUZcPXo7fAMU1bKNu3b94QO 5iDtjY39x2oXxF2K1exr5/yjt6zys79aJgK35zv2B03T4dANYVYXWQSNphQ3Dl3a Lr1aOISfAj2m9HxbPco6+2uAlGwNL2O+xsGPZpV87TlpkBYHECJpJWVEDVktb+VP NgzrAQwprnGuqIL+H7xU+x0PpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcQIuQr QbrB8qOAIyNrgeeyOr+GMB8GA1UdIwQYMBaAFBhRnivEpk971YnNlj3wdLGjMF31 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODYzNS9BOTk3Nzk1NkNG QjAxMUVBQTg2QkVDMjdDNEY5QUUwMi9HRkdlSzhTbVQzdlZpYzJXUGZCMHNhTXdY ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dGR2VLOFNtVDN2VmljMldQZkIwc2FNd1hmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODYzNS9BOTk3Nzk1NkNGQjAxMUVBQTg2QkVDMjdDNEY5QUUwMi9HRkdlSzhTbVQz dlZpYzJXUGZCMHNhTXdYZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZGXZg39z6Irsma4lRIPHjlekPrmxNzQ/Ns+FHET7YfYfx2/ojzwwW JCAfZYh9rj96m7XiLLkAUW/4cNPbaW1PBKUxp1ecEu7AEssr84wuRiur/NiI8peD QHF8UHeBzCav4uFLTFI3W8Cl+T/uNSlLJ+bI84iyiGQnJ3fHhuCfsAz4PLnvr+ZQ ioy0XHRTexBQwA6ggdo33r6BAJmHmXnkYJHyDPx31KfvAvRZtLboiLr3XNHCgruf St9F/qAnoNFmbVaq8ZeHzNyO9yLYfl37EtNYewilLmIHIUU2vvgJlTlPinIV8c+1 ZN60Q7ara/IxocdUpIlTJfUtQtkI+PN7 -----END CERTIFICATE-----Generated at Mon Oct 20 10:48:05 2025 by rpki-client