$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft File: GRFX6ZVM7IiQxhjMBybwB06RDio.mft (raw, json) Hash identifier: k4R7aiI9PuZX/N96TR/HlPc60utK7Jra+5NFwPwvTeY= Subject key identifier: 3F:37:8E:61:76:8A:3C:AA:A7:BD:E9:47:94:C5:05:0F:98:00:C3:47 Authority key identifier: 19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A Certificate issuer: /CN=A916FA49/serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A Certificate serial: 1509 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft Manifest number: 1500 Signing time: Mon 20 Oct 2025 17:12:40 +0000 Manifest this update: Mon 20 Oct 2025 17:12:39 +0000 Manifest next update: Mon 27 Oct 2025 17:12:39 +0000 Files and hashes: 1: GRFX6ZVM7IiQxhjMBybwB06RDio.crl (hash: Q47hDEnrmeQn4KbbSoEHhrjFQsJACRBL9HF98MTfER0=) 2: 0448C04E5CC211E8AC07E63AC4F9AE02.roa (hash: tnpA0IzI8bTdekuBPMUSd6+4zG46jfK32mHeai6hCkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:12:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5385 (0x1509) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FA49, serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A Validity Not Before: Oct 20 17:12:39 2025 GMT Not After : Oct 27 17:12:39 2025 GMT Subject: CN=68f66d88-9594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ab:5a:12:90:18:9b:d2:b4:19:9a:d5:ad:c3: ab:ab:b9:9a:15:26:90:4e:d6:73:5b:81:ec:e8:ae: 37:4f:f4:0f:49:2a:20:03:08:5f:aa:5a:23:2d:39: 62:19:3c:5d:c5:b8:f7:bc:60:02:ad:8b:5c:f4:58: 29:2a:b9:eb:06:9d:a7:8e:34:54:c9:b0:22:f2:62: 01:fa:98:ec:5a:86:de:b4:1d:13:b5:26:34:96:fb: 08:e3:3f:1b:4a:3b:6e:b4:67:4f:b0:88:b5:97:59: 2c:cb:fe:81:f1:e2:af:9d:43:17:dc:bb:35:21:e0: 72:ea:16:4c:f8:04:c3:a8:5f:6f:25:4e:5c:5b:15: fe:18:69:2f:09:65:3c:38:4c:83:e3:34:28:45:27: 79:bb:9c:92:fe:78:a3:3f:c4:06:ab:c5:af:f8:57: 9a:ee:f1:87:07:ff:ee:9d:2d:a7:7d:e6:df:60:51: f3:e1:fe:33:cb:e8:1d:07:f4:d6:97:09:df:ea:28: 43:a0:34:47:20:05:0e:94:e6:f7:2b:ab:62:b1:f3: 01:6a:d2:07:07:96:77:fa:8a:88:4e:6b:b8:7b:b7: 88:ff:ab:a3:d6:dd:6a:22:66:e6:76:6b:da:c8:3a: f4:93:b4:a2:b5:99:29:bb:45:8d:c8:cd:e2:a6:7b: 2b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:37:8E:61:76:8A:3C:AA:A7:BD:E9:47:94:C5:05:0F:98:00:C3:47 X509v3 Authority Key Identifier: keyid:19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:9d:59:22:27:25:19:10:a5:60:01:20:7f:cf:48:f0:5f:c2: 9c:59:58:56:47:2a:fe:ab:5b:10:2b:c3:b6:e2:4c:20:49:d2: bb:95:ec:a2:41:09:e7:ad:6b:0f:10:27:67:6d:b9:5e:a8:ff: 36:ab:a7:1d:04:d1:7e:a3:93:26:0d:c4:b8:bf:29:50:be:59: eb:c2:35:01:60:da:66:b3:01:74:c3:b0:e6:e9:ce:81:13:3d: 90:76:91:1a:32:65:86:94:6f:0d:7c:12:3a:dd:fc:c6:79:5b: 3e:42:aa:82:a1:ae:93:3a:d2:db:99:15:56:b5:e0:7a:f5:53: 4c:10:bd:b3:41:ab:d5:00:41:a0:52:03:fd:e5:9b:3c:64:92: 44:36:34:03:66:1c:9c:de:b4:ed:f4:9c:56:3e:17:73:c2:c0: 90:9b:6c:0c:38:a7:72:1b:2b:fe:da:0b:94:99:2e:be:e3:ca: fc:ab:b5:54:17:6f:d5:a5:4c:95:f2:07:b1:4e:03:4e:16:2e: 4f:1f:29:e4:ec:7b:9c:68:21:58:4d:98:8f:40:50:87:77:b2: a8:e7:6f:52:9f:d3:c4:98:1d:e7:82:f1:2c:ed:88:33:02:16: 9d:82:ad:5c:53:5c:30:df:52:c4:36:d2:48:de:c0:70:40:a7: 09:cf:c3:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZBNDkxMTAvBgNVBAUTKDE5MTE1N0U5OTU0Q0VDODg5MEM2MThDQzA3MjZGMDA3 NEU5MTBFMkEwHhcNMjUxMDIwMTcxMjM5WhcNMjUxMDI3MTcxMjM5WjAYMRYwFAYD VQQDEw02OGY2NmQ4OC05NTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoqtaEpAYm9K0GZrVrcOrq7maFSaQTtZzW4Hs6K43T/QPSSogAwhfqlojLTli GTxdxbj3vGACrYtc9FgpKrnrBp2njjRUybAi8mIB+pjsWobetB0TtSY0lvsI4z8b SjtutGdPsIi1l1ksy/6B8eKvnUMX3Ls1IeBy6hZM+ATDqF9vJU5cWxX+GGkvCWU8 OEyD4zQoRSd5u5yS/nijP8QGq8Wv+Fea7vGHB//unS2nfebfYFHz4f4zy+gdB/TW lwnf6ihDoDRHIAUOlOb3K6tisfMBatIHB5Z3+oqITmu4e7eI/6uj1t1qImbmdmva yDr0k7SitZkpu0WNyM3ipnsrkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD83jmF2 ijyqp73pR5TFBQ+YAMNHMB8GA1UdIwQYMBaAFBkRV+mVTOyIkMYYzAcm8AdOkQ4q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkE0OS83MDJEODEyNDVD QzExMUU4OUEzNkI4MzdDNEY5QUUwMi9HUkZYNlpWTTdJaVF4aGpNQnlid0IwNlJE aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dSRlg2WlZNN0lpUXhoak1CeWJ3QjA2UkRpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkE0OS83MDJEODEyNDVDQzExMUU4OUEzNkI4MzdDNEY5QUUwMi9HUkZYNlpWTTdJ aVF4aGpNQnlid0IwNlJEaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDnVkiJyUZEKVgASB/z0jwX8KcWVhWRyr+q1sQK8O24kwgSdK7leyi QQnnrWsPECdnbbleqP82q6cdBNF+o5MmDcS4vylQvlnrwjUBYNpmswF0w7Dm6c6B Ez2QdpEaMmWGlG8NfBI63fzGeVs+QqqCoa6TOtLbmRVWteB69VNMEL2zQavVAEGg UgP95Zs8ZJJENjQDZhyc3rTt9JxWPhdzwsCQm2wMOKdyGyv+2guUmS6+48r8q7VU F2/VpUyV8gexTgNOFi5PHynk7HucaCFYTZiPQFCHd7Ko529Sn9PEmB3ngvEs7Ygz Ahadgq1cU1ww31LENtJI3sBwQKcJz8PW -----END CERTIFICATE-----Generated at Mon Oct 20 21:55:33 2025 by rpki-client