$ rpki-client -vvf rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft File: GF_2ZH4elndQE3e1UVR5uelGEGc.mft (raw, json) Hash identifier: Vq+srnpeK82k5I/0b13MH5jL7Sy3uWQen/8r3aeK2AM= Subject key identifier: 1C:4C:5F:13:BC:CE:2A:60:B6:73:FA:70:C0:F6:36:57:D1:7D:BE:17 Authority key identifier: 18:5F:F6:64:7E:1E:96:77:50:13:77:B5:51:54:79:B9:E9:46:10:67 Certificate issuer: /CN=A9193C85/serialNumber=185FF6647E1E9677501377B5515479B9E9461067 Certificate serial: 11E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft Manifest number: 11D7 Signing time: Tue 04 Nov 2025 17:16:24 +0000 Manifest this update: Tue 04 Nov 2025 17:16:23 +0000 Manifest next update: Tue 11 Nov 2025 17:16:23 +0000 Files and hashes: 1: GF_2ZH4elndQE3e1UVR5uelGEGc.crl (hash: F440+dXhL+HMQVcI6vn9TnQ/2/ad2GIEKdTAmmViS/4=) 2: A1E87910832A11ECA409521EC4F9AE02.roa (hash: pWwzKrBi4ex9pqtRPtIPRabSwqTwDTnYV8iW2v8i1Fg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.crl rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:16:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4578 (0x11e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193C85, serialNumber=185FF6647E1E9677501377B5515479B9E9461067 Validity Not Before: Nov 4 17:16:23 2025 GMT Not After : Nov 11 17:16:23 2025 GMT Subject: CN=690a34e7-8f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:22:11:3c:09:c8:6a:23:4d:5b:03:ab:33:17: 2f:eb:d6:26:8c:40:c7:68:74:b4:a0:c1:50:3f:d5: 92:c8:08:fc:a0:66:33:a1:95:d6:91:e6:8c:8f:38: 3b:4a:da:af:dd:9c:5e:1b:08:b8:28:6b:0d:7a:65: 16:37:39:7c:38:9c:fc:b3:54:24:4b:12:ba:80:2b: 23:99:a5:0b:a4:56:cd:9a:71:17:94:e1:9f:a0:c8: 56:d2:f2:0c:bb:3e:56:69:0b:fc:a5:1e:09:76:40: c9:bd:a0:d5:51:35:a4:0a:7e:65:50:dc:a4:36:35: 44:ab:1e:68:c7:e7:66:fc:90:87:ca:69:6d:b4:f0: 15:b0:58:88:ad:5f:de:82:71:fe:57:51:6f:9b:09: ac:f8:c4:4c:c1:ac:a6:23:c6:28:44:1c:22:19:ea: 95:56:4a:c3:20:7c:c1:ce:1a:9a:9c:d1:dc:9a:bc: 48:36:cf:65:2c:bc:85:03:7a:3f:bc:6b:08:f3:c5: a0:64:dc:ee:48:30:04:ea:c5:a7:0c:2e:6f:22:bb: 6a:ab:ad:86:84:02:47:a2:0a:f6:2e:17:89:63:59: 02:fb:9f:57:7b:5b:4d:81:f6:45:cc:ab:be:7b:f0: c4:b8:fd:23:49:97:a9:26:65:40:cd:13:ad:31:74: 5c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:4C:5F:13:BC:CE:2A:60:B6:73:FA:70:C0:F6:36:57:D1:7D:BE:17 X509v3 Authority Key Identifier: keyid:18:5F:F6:64:7E:1E:96:77:50:13:77:B5:51:54:79:B9:E9:46:10:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:f1:8d:17:a0:74:53:a6:92:c0:e2:71:6d:98:cd:b3:8e:70: 05:29:34:7a:4f:d8:f4:7c:02:b2:3e:06:04:ee:7f:05:38:e3: 8f:20:85:ab:f8:ce:3d:96:61:64:ad:63:7b:fa:ee:fa:48:f3: ca:f5:f8:e5:e9:75:d2:ae:63:e5:05:a6:b6:19:42:29:5f:21: f8:ce:88:75:fd:42:1e:db:bb:78:da:b0:f1:b6:9f:a1:97:e0: 48:2b:4a:f5:05:b4:bf:e9:40:a4:5e:d3:b3:ac:14:fc:ed:94: be:8f:6a:fa:7a:44:7f:30:98:8d:0f:c2:db:24:b5:9b:99:4e: 2f:b1:a5:7b:b2:40:12:60:6e:b0:79:7e:05:f6:54:82:4f:93: a8:a0:f7:71:48:0e:5d:d1:f6:fc:a2:ee:f2:3c:2b:e9:97:30: aa:60:35:6a:f1:69:5f:59:81:19:7c:f1:93:d0:4a:48:ba:d2: a3:73:ed:cd:3c:46:8e:c6:1a:0c:c3:d0:63:78:78:41:21:e7: 43:a0:82:bc:89:43:c7:17:f2:b3:02:af:75:12:87:cd:60:ba: 1b:3d:e8:96:06:f7:99:dc:05:35:bf:84:8d:d1:79:85:2a:93: 83:41:de:7a:22:53:96:f8:e0:42:f6:22:65:ad:b8:d6:ef:dc: 64:78:d9:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNDODUxMTAvBgNVBAUTKDE4NUZGNjY0N0UxRTk2Nzc1MDEzNzdCNTUxNTQ3OUI5 RTk0NjEwNjcwHhcNMjUxMTA0MTcxNjIzWhcNMjUxMTExMTcxNjIzWjAYMRYwFAYD VQQDEw02OTBhMzRlNy04ZjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyIRPAnIaiNNWwOrMxcv69YmjEDHaHS0oMFQP9WSyAj8oGYzoZXWkeaMjzg7 Stqv3ZxeGwi4KGsNemUWNzl8OJz8s1QkSxK6gCsjmaULpFbNmnEXlOGfoMhW0vIM uz5WaQv8pR4JdkDJvaDVUTWkCn5lUNykNjVEqx5ox+dm/JCHymlttPAVsFiIrV/e gnH+V1Fvmwms+MRMwaymI8YoRBwiGeqVVkrDIHzBzhqanNHcmrxINs9lLLyFA3o/ vGsI88WgZNzuSDAE6sWnDC5vIrtqq62GhAJHogr2LheJY1kC+59Xe1tNgfZFzKu+ e/DEuP0jSZepJmVAzROtMXRcOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxMXxO8 zipgtnP6cMD2NlfRfb4XMB8GA1UdIwQYMBaAFBhf9mR+HpZ3UBN3tVFUebnpRhBn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0M4NS80RkY0Q0I3MkZE RTAxMUU4OEVERTQ1MTNDNEY5QUUwMi9HRl8yWkg0ZWxuZFFFM2UxVVZSNXVlbEdF R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dGXzJaSDRlbG5kUUUzZTFVVlI1dWVsR0VHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0M4NS80RkY0Q0I3MkZERTAxMUU4OEVERTQ1MTNDNEY5QUUwMi9HRl8yWkg0ZWxu ZFFFM2UxVVZSNXVlbEdFR2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA8Y0XoHRTppLA4nFtmM2zjnAFKTR6T9j0fAKyPgYE7n8FOOOPIIWr +M49lmFkrWN7+u76SPPK9fjl6XXSrmPlBaa2GUIpXyH4zoh1/UIe27t42rDxtp+h l+BIK0r1BbS/6UCkXtOzrBT87ZS+j2r6ekR/MJiND8LbJLWbmU4vsaV7skASYG6w eX4F9lSCT5OooPdxSA5d0fb8ou7yPCvplzCqYDVq8WlfWYEZfPGT0EpIutKjc+3N PEaOxhoMw9BjeHhBIedDoIK8iUPHF/KzAq91EofNYLobPeiWBveZ3AU1v4SN0XmF KpODQd56IlOW+OBC9iJlrbjW79xkeNnd -----END CERTIFICATE-----Generated at Thu Nov 6 01:12:25 2025 by rpki-client