$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft File: GI72_1fx9ftPqwqu2qktYE8nVTA.mft (raw, json) Hash identifier: JQOsJIuAOK4O2dXeBAukG53bNfSwBpYQHtEB9qGnnpo= Subject key identifier: 6A:A9:CA:3E:A7:F3:26:2C:07:CB:7A:F3:FA:6F:62:47:6E:2F:3E:00 Authority key identifier: 18:8E:F6:FF:57:F1:F5:FB:4F:AB:0A:AE:DA:A9:2D:60:4F:27:55:30 Certificate issuer: /CN=A91FEC1E/serialNumber=188EF6FF57F1F5FB4FAB0AAEDAA92D604F275530 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft Manifest number: 4E Signing time: Sun 19 Oct 2025 10:41:17 +0000 Manifest this update: Sun 19 Oct 2025 10:41:16 +0000 Manifest next update: Sun 26 Oct 2025 10:41:16 +0000 Files and hashes: 1: GI72_1fx9ftPqwqu2qktYE8nVTA.crl (hash: 0k6bpf99L5IexFS1ybwryKVKXmigKi0BdJoz5UwsHaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.crl rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEC1E, serialNumber=188EF6FF57F1F5FB4FAB0AAEDAA92D604F275530 Validity Not Before: Oct 19 10:41:16 2025 GMT Not After : Oct 26 10:41:16 2025 GMT Subject: CN=68f4c04d-c6b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:62:3d:a6:c3:fb:ef:65:b7:f7:33:a9:55:1e: 23:b9:9d:e1:56:5d:ad:0f:f0:ea:57:5a:bd:60:fe: d7:cd:75:1b:46:75:57:be:73:0c:f2:ca:d4:68:11: 4e:41:96:53:b2:98:ec:6b:88:1f:de:6a:34:02:88: 04:99:90:95:e4:9f:d5:93:6a:72:53:86:f8:64:3b: 3e:d1:bf:b3:c3:9b:49:8b:28:f8:06:6f:07:b9:39: 62:4e:fe:dd:58:0e:3e:a1:7a:c6:3d:a6:29:32:2f: d0:01:3e:c9:2e:17:1b:96:30:87:71:ff:79:3e:2e: a4:bd:e5:ee:ef:0f:6c:5d:d4:65:ba:a5:e7:8a:10: 9c:5d:c1:f4:19:cb:8b:2b:7a:38:6e:7e:72:2d:b2: 89:43:3c:09:ca:6f:ad:34:2b:f4:eb:36:3c:78:2d: 3b:8c:0a:00:40:4b:00:47:f1:05:56:5d:4b:73:0f: 4b:88:4f:9e:1d:80:34:eb:5e:41:98:75:c6:4f:50: 9f:13:c1:be:bc:89:a6:9f:2e:d2:f9:41:74:86:46: 31:d5:cf:f0:79:ca:dd:ea:02:0a:6c:7a:18:93:1b: ab:e4:fc:fd:2f:a6:cd:7a:04:1a:36:58:d8:f8:33: 19:58:cf:c8:4e:02:cf:39:2b:07:ae:f9:ef:6a:64: 2b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A9:CA:3E:A7:F3:26:2C:07:CB:7A:F3:FA:6F:62:47:6E:2F:3E:00 X509v3 Authority Key Identifier: keyid:18:8E:F6:FF:57:F1:F5:FB:4F:AB:0A:AE:DA:A9:2D:60:4F:27:55:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:a3:a2:d2:6c:35:9f:38:4d:7e:0d:62:5b:b8:93:8e:f7:98: 98:91:a0:11:a0:df:ac:6f:83:db:a1:17:87:c4:d0:d2:b3:c9: 32:2b:26:a5:b9:c2:8d:2f:a1:3d:88:b4:7a:e1:3f:64:7b:14: 38:93:3f:ba:6f:37:4d:75:da:78:44:7d:03:df:5e:e2:aa:9e: ab:69:2b:97:26:c8:81:f0:e5:40:bd:61:b9:66:80:01:db:a2: 82:23:c7:79:4f:35:41:4f:fb:5d:a1:86:d4:40:1f:93:3a:19: 83:f4:57:f2:df:6e:a9:89:c9:2d:39:cb:ec:57:e5:d1:54:95: 5b:f7:10:e0:76:69:11:db:b7:f4:8d:8f:60:6e:cb:a0:b5:83: 23:6f:fd:d9:84:8c:29:f5:ce:1e:05:05:b6:c1:bd:c4:3e:f4: b1:48:ac:67:29:cf:e6:26:f4:3a:ae:14:a4:c3:97:f2:a2:e0: bb:c7:67:c5:40:11:83:de:de:5c:11:8b:bc:f0:d0:92:13:71: 7c:ad:38:4b:f7:d5:ce:86:39:5f:ac:cd:e1:c4:28:99:ce:e0: 42:2b:3f:85:9d:73:fb:82:6b:bd:b0:d2:c9:ce:af:9d:e9:c3: d2:1c:8d:dc:ad:f6:0d:2b:48:d0:f6:7c:bd:36:cf:33:6e:21: a7:4d:f9:7f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RUMxRTExMC8GA1UEBRMoMTg4RUY2RkY1N0YxRjVGQjRGQUIwQUFFREFBOTJENjA0 RjI3NTUzMDAeFw0yNTEwMTkxMDQxMTZaFw0yNTEwMjYxMDQxMTZaMBgxFjAUBgNV BAMTDTY4ZjRjMDRkLWM2YjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEYj2mw/vvZbf3M6lVHiO5neFWXa0P8OpXWr1g/tfNdRtGdVe+cwzyytRoEU5B llOymOxriB/eajQCiASZkJXkn9WTanJThvhkOz7Rv7PDm0mLKPgGbwe5OWJO/t1Y Dj6hesY9pikyL9ABPskuFxuWMIdx/3k+LqS95e7vD2xd1GW6peeKEJxdwfQZy4sr ejhufnItsolDPAnKb600K/TrNjx4LTuMCgBASwBH8QVWXUtzD0uIT54dgDTrXkGY dcZPUJ8Twb68iaafLtL5QXSGRjHVz/B5yt3qAgpsehiTG6vk/P0vps16BBo2WNj4 MxlYz8hOAs85Kweu+e9qZCuHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaqnKPqfz JiwHy3rz+m9iR24vPgAwHwYDVR0jBBgwFoAUGI72/1fx9ftPqwqu2qktYE8nVTAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFQzFFL0U3MjUwMjRFMzUz QTExRjA4Qzk1QzA2N0M0RjlBRTAyL0dJNzJfMWZ4OWZ0UHF3cXUycWt0WUU4blZU QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0k3Ml8xZng5ZnRQcXdxdTJxa3RZRThuVlRBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF QzFFL0U3MjUwMjRFMzUzQTExRjA4Qzk1QzA2N0M0RjlBRTAyL0dJNzJfMWZ4OWZ0 UHF3cXUycWt0WUU4blZUQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJGjotJsNZ84TX4NYlu4k473mJiRoBGg36xvg9uhF4fE0NKzyTIrJqW5 wo0voT2ItHrhP2R7FDiTP7pvN0112nhEfQPfXuKqnqtpK5cmyIHw5UC9YblmgAHb ooIjx3lPNUFP+12hhtRAH5M6GYP0V/LfbqmJyS05y+xX5dFUlVv3EOB2aRHbt/SN j2Buy6C1gyNv/dmEjCn1zh4FBbbBvcQ+9LFIrGcpz+Ym9DquFKTDl/Ki4LvHZ8VA EYPe3lwRi7zw0JITcXytOEv31c6GOV+szeHEKJnO4EIrP4Wdc/uCa72w0snOr53p w9Icjdyt9g0rSND2fL02zzNuIadN+X8= -----END CERTIFICATE-----Generated at Mon Oct 20 02:03:28 2025 by rpki-client