$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft File: GRFX6ZVM7IiQxhjMBybwB06RDio.mft (raw, json) Hash identifier: p3P+rUs7S/iaIi3u0GX/k+Zzor7KBCtl/nY4CzKM4+8= Subject key identifier: D3:41:BE:0D:FB:51:58:4D:80:64:CB:57:49:FC:3D:6A:A4:B3:E5:18 Authority key identifier: 19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A Certificate issuer: /CN=A916FA49/serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A Certificate serial: 1511 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft Manifest number: 1508 Signing time: Tue 04 Nov 2025 16:55:03 +0000 Manifest this update: Tue 04 Nov 2025 16:55:02 +0000 Manifest next update: Tue 11 Nov 2025 16:55:02 +0000 Files and hashes: 1: GRFX6ZVM7IiQxhjMBybwB06RDio.crl (hash: ALKiSuA4P/Iy+TTmOVrjof9IGbFE5d9e/B0gtCq6NTc=) 2: 0448C04E5CC211E8AC07E63AC4F9AE02.roa (hash: tnpA0IzI8bTdekuBPMUSd6+4zG46jfK32mHeai6hCkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5393 (0x1511) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FA49, serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A Validity Not Before: Nov 4 16:55:02 2025 GMT Not After : Nov 11 16:55:02 2025 GMT Subject: CN=690a2fe7-4760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0d:e2:e8:1c:88:66:04:72:84:9b:dd:2a:3c: 6e:e2:ed:8b:5d:fc:22:4b:9c:e7:92:2e:0b:44:6a: 95:d4:7c:ff:4d:7c:2b:60:eb:aa:87:7e:40:1d:79: 4a:14:b1:d2:dc:74:9a:b0:6f:5c:59:9d:d0:19:40: d9:b5:b1:cc:2c:b6:51:cc:32:55:46:e0:7f:50:21: 79:c8:fc:f8:6f:6c:39:44:aa:b1:09:42:6c:0f:50: e6:2a:98:63:96:ee:5e:94:53:f2:6d:ae:a5:0d:27: 0e:09:69:d1:ab:4d:f8:de:b5:9f:67:dc:9f:f6:2f: 9c:3b:31:4d:5c:a1:bb:54:8a:30:f1:b1:38:55:40: f1:6e:d8:da:2c:e6:cf:a7:e1:f9:16:e6:78:35:22: 10:d8:b0:2f:70:cc:52:ac:9c:38:25:d9:1e:8a:79: 7a:b6:9b:09:36:86:90:4b:53:ee:90:b8:a5:9c:a6: 42:8f:5b:18:63:a0:81:f1:47:17:e9:28:21:c1:f5: 5f:3d:fb:48:d1:c4:a0:ab:8d:99:1d:d7:9b:96:0d: c5:9e:fe:a1:7e:c2:d4:de:0f:97:7c:f7:88:49:c4: 4f:44:29:f9:91:06:78:a0:d7:6f:b0:6d:97:99:b5: e4:94:f8:60:33:37:5d:0b:d3:c6:d1:30:2f:77:be: 4c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:41:BE:0D:FB:51:58:4D:80:64:CB:57:49:FC:3D:6A:A4:B3:E5:18 X509v3 Authority Key Identifier: keyid:19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:ac:ed:e0:27:06:51:5d:c8:b7:55:4c:76:9c:2a:44:7c:ba: 28:64:ba:14:66:79:5f:ef:97:d1:de:0d:20:7e:67:1d:fb:d1: 38:4c:ea:a0:ee:9f:15:38:16:31:62:37:ac:52:43:a1:4f:9e: 0b:de:b2:1d:45:8d:37:55:08:e1:b8:82:1e:02:18:91:d2:ac: 04:0f:db:7d:02:2b:c1:27:8e:42:08:ad:ad:99:57:c5:57:07: 36:df:65:95:61:ce:3b:b0:93:1d:45:80:d3:b5:0d:07:18:ee: 94:57:d8:c1:3e:bd:93:8a:5f:18:ac:4b:27:96:c1:ed:e9:c1: 6d:0a:09:d2:f7:46:2e:2d:3c:46:40:3b:be:3d:98:29:e6:a9: 52:cc:38:bd:03:2c:0d:95:a0:15:ea:03:fd:d8:2b:61:56:ed: 8e:5a:d5:2e:a8:7e:b6:12:e2:7f:88:99:db:0d:91:96:26:37: fb:0c:95:cc:c2:f7:38:ba:fb:bf:d0:fd:49:79:a2:fd:ab:9e: ec:b2:be:9a:3a:37:ff:18:ed:99:3f:5d:16:a4:0a:54:d8:08: b5:b4:fd:90:6a:5f:e1:43:60:59:40:dd:15:f6:7a:9d:53:cc: fe:e1:57:88:d1:63:da:1a:b1:c9:bf:61:0a:c5:2d:7a:b6:53: 99:9e:7b:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZBNDkxMTAvBgNVBAUTKDE5MTE1N0U5OTU0Q0VDODg5MEM2MThDQzA3MjZGMDA3 NEU5MTBFMkEwHhcNMjUxMTA0MTY1NTAyWhcNMjUxMTExMTY1NTAyWjAYMRYwFAYD VQQDEw02OTBhMmZlNy00NzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Q3i6ByIZgRyhJvdKjxu4u2LXfwiS5znki4LRGqV1Hz/TXwrYOuqh35AHXlK FLHS3HSasG9cWZ3QGUDZtbHMLLZRzDJVRuB/UCF5yPz4b2w5RKqxCUJsD1DmKphj lu5elFPyba6lDScOCWnRq0343rWfZ9yf9i+cOzFNXKG7VIow8bE4VUDxbtjaLObP p+H5FuZ4NSIQ2LAvcMxSrJw4Jdkeinl6tpsJNoaQS1PukLilnKZCj1sYY6CB8UcX 6SghwfVfPftI0cSgq42ZHdeblg3Fnv6hfsLU3g+XfPeIScRPRCn5kQZ4oNdvsG2X mbXklPhgMzddC9PG0TAvd75MLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNBvg37 UVhNgGTLV0n8PWqks+UYMB8GA1UdIwQYMBaAFBkRV+mVTOyIkMYYzAcm8AdOkQ4q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkE0OS83MDJEODEyNDVD QzExMUU4OUEzNkI4MzdDNEY5QUUwMi9HUkZYNlpWTTdJaVF4aGpNQnlid0IwNlJE aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dSRlg2WlZNN0lpUXhoak1CeWJ3QjA2UkRpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkE0OS83MDJEODEyNDVDQzExMUU4OUEzNkI4MzdDNEY5QUUwMi9HUkZYNlpWTTdJ aVF4aGpNQnlid0IwNlJEaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzrO3gJwZRXci3VUx2nCpEfLooZLoUZnlf75fR3g0gfmcd+9E4TOqg 7p8VOBYxYjesUkOhT54L3rIdRY03VQjhuIIeAhiR0qwED9t9AivBJ45CCK2tmVfF Vwc232WVYc47sJMdRYDTtQ0HGO6UV9jBPr2Til8YrEsnlsHt6cFtCgnS90YuLTxG QDu+PZgp5qlSzDi9AywNlaAV6gP92CthVu2OWtUuqH62EuJ/iJnbDZGWJjf7DJXM wvc4uvu/0P1JeaL9q57ssr6aOjf/GO2ZP10WpApU2Ai1tP2Qal/hQ2BZQN0V9nqd U8z+4VeI0WPaGrHJv2EKxS16tlOZnntq -----END CERTIFICATE-----Generated at Tue Nov 4 21:36:33 2025 by rpki-client