$ rpki-client -vvf rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft File: GKIzbZyhDwibn8urmxszkqIdId4.mft (raw, json) Hash identifier: RD1XXeUrxLeL72un58zVjDVfR/Z++BLV05UBQlR+Y8Q= Subject key identifier: 8A:DB:5F:E8:54:15:50:54:7E:3A:26:C9:E3:93:2D:F4:11:D1:14:7D Authority key identifier: 18:A2:33:6D:9C:A1:0F:08:9B:9F:CB:AB:9B:1B:33:92:A2:1D:21:DE Certificate issuer: /CN=A9199885/serialNumber=18A2336D9CA10F089B9FCBAB9B1B3392A21D21DE Certificate serial: 34CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft Manifest number: 55CB Signing time: Tue 04 Nov 2025 14:56:58 +0000 Manifest this update: Tue 04 Nov 2025 14:56:57 +0000 Manifest next update: Tue 11 Nov 2025 14:56:57 +0000 Files and hashes: 1: GKIzbZyhDwibn8urmxszkqIdId4.crl (hash: tInWGf2s0j2m5SUKN4vROYiycL+DepBehArfOfe2W7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.crl rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13519 (0x34cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199885, serialNumber=18A2336D9CA10F089B9FCBAB9B1B3392A21D21DE Validity Not Before: Nov 4 14:56:57 2025 GMT Not After : Nov 11 14:56:57 2025 GMT Subject: CN=690a1439-0780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0c:55:a7:f9:af:5a:fb:d9:3f:86:85:57:b1: e2:b1:c5:a0:15:05:6e:7e:26:a0:09:29:8a:92:d3: 2b:e4:9b:15:01:9a:c1:82:31:a8:35:c9:6d:98:37: b8:8a:96:7e:84:ac:4c:8b:fd:a0:64:fd:1e:73:ed: 11:50:73:41:27:7b:1f:65:ff:51:d8:fe:ee:2a:44: 54:3b:e4:78:17:e0:b4:0e:47:45:22:80:d6:45:c8: 0d:3c:4f:0f:80:61:fe:2f:70:b6:5e:d2:ff:c2:05: 0a:f2:8e:e0:ff:b2:79:19:83:35:57:a2:52:18:a0: 9d:65:d6:68:d6:9a:63:dd:ae:7c:dc:d6:5e:49:41: b4:a0:de:6a:36:93:94:ee:10:77:46:0a:4a:36:dc: d4:6d:8f:fa:be:a9:9d:75:ab:66:d8:2c:90:77:74: 7d:7f:ab:80:b0:13:a3:f8:09:4b:17:87:2b:9c:4e: d9:c2:3e:e7:5c:e9:94:c8:7b:9d:83:36:85:e8:dd: 75:b1:0b:bc:70:53:5d:18:9a:5f:e9:77:f0:7c:6f: c5:cd:73:3b:20:3c:09:e2:24:e6:29:a4:f7:97:d7: 73:ce:68:69:44:b6:6d:02:18:eb:3a:65:26:06:fd: 61:0d:f2:8a:31:3b:80:36:1a:5b:2f:ec:cd:4b:fe: 76:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:DB:5F:E8:54:15:50:54:7E:3A:26:C9:E3:93:2D:F4:11:D1:14:7D X509v3 Authority Key Identifier: keyid:18:A2:33:6D:9C:A1:0F:08:9B:9F:CB:AB:9B:1B:33:92:A2:1D:21:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:26:67:8d:e9:08:2d:2c:01:80:45:5f:7b:ec:1d:38:33:c0: 80:20:ab:a1:9e:36:5d:3a:f4:95:8e:e4:a9:8e:26:98:fd:f8: 16:d2:cc:b2:d0:7f:2d:24:50:1a:19:36:e1:3b:ba:6b:ca:f5: 12:c0:88:fa:d2:a3:5e:5e:8f:9b:b2:73:61:bd:c7:3c:c4:a0: 7d:39:20:87:cf:9a:40:5c:b7:a8:05:28:7d:6b:88:c7:dd:2b: b4:e9:c8:05:e7:b3:fa:9c:7c:35:0a:65:2c:b4:9f:44:64:9e: 12:5a:3e:39:bc:92:de:99:97:4c:b5:61:20:e0:84:84:d6:dd: 09:c6:c8:f1:4b:0b:3c:0a:cb:b4:5e:41:d0:e6:8f:86:80:5b: 7e:55:71:fa:8d:e7:ec:90:14:90:44:35:63:5e:13:9a:f7:24: a4:29:1c:32:dc:e4:df:70:2e:7c:d8:79:70:5c:5a:db:bc:40: 3f:87:76:f8:d3:5c:c7:00:52:f6:c0:af:58:8f:0e:97:6c:31: 46:06:3d:95:bb:f6:25:d1:57:57:bb:95:77:54:e0:e1:22:61: 5b:9b:53:37:53:87:db:dc:41:3c:29:d8:73:7e:9d:b8:7a:ff: 89:fa:fa:97:2a:cf:b3:28:b7:5b:78:0e:67:a2:0c:86:6a:b2: 7c:07:ed:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4ODUxMTAvBgNVBAUTKDE4QTIzMzZEOUNBMTBGMDg5QjlGQ0JBQjlCMUIzMzky QTIxRDIxREUwHhcNMjUxMTA0MTQ1NjU3WhcNMjUxMTExMTQ1NjU3WjAYMRYwFAYD VQQDEw02OTBhMTQzOS0wNzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1QxVp/mvWvvZP4aFV7HiscWgFQVufiagCSmKktMr5JsVAZrBgjGoNcltmDe4 ipZ+hKxMi/2gZP0ec+0RUHNBJ3sfZf9R2P7uKkRUO+R4F+C0DkdFIoDWRcgNPE8P gGH+L3C2XtL/wgUK8o7g/7J5GYM1V6JSGKCdZdZo1ppj3a583NZeSUG0oN5qNpOU 7hB3RgpKNtzUbY/6vqmddatm2CyQd3R9f6uAsBOj+AlLF4crnE7Zwj7nXOmUyHud gzaF6N11sQu8cFNdGJpf6XfwfG/FzXM7IDwJ4iTmKaT3l9dzzmhpRLZtAhjrOmUm Bv1hDfKKMTuANhpbL+zNS/52DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrbX+hU FVBUfjomyeOTLfQR0RR9MB8GA1UdIwQYMBaAFBiiM22coQ8Im5/Lq5sbM5KiHSHe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg4NS9EMDUwNjg1QTFE OTgxMUUyQUU2QjFGODMwOEIwMkNEMi9HS0l6Ylp5aER3aWJuOHVybXhzemtxSWRJ ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dLSXpiWnloRHdpYm44dXJteHN6a3FJZElkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg4NS9EMDUwNjg1QTFEOTgxMUUyQUU2QjFGODMwOEIwMkNEMi9HS0l6Ylp5aER3 aWJuOHVybXhzemtxSWRJZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4JmeN6QgtLAGARV977B04M8CAIKuhnjZdOvSVjuSpjiaY/fgW0syy 0H8tJFAaGTbhO7pryvUSwIj60qNeXo+bsnNhvcc8xKB9OSCHz5pAXLeoBSh9a4jH 3Su06cgF57P6nHw1CmUstJ9EZJ4SWj45vJLemZdMtWEg4ISE1t0JxsjxSws8Csu0 XkHQ5o+GgFt+VXH6jefskBSQRDVjXhOa9ySkKRwy3OTfcC582HlwXFrbvEA/h3b4 01zHAFL2wK9Yjw6XbDFGBj2Vu/Yl0VdXu5V3VODhImFbm1M3U4fb3EE8Kdhzfp24 ev+J+vqXKs+zKLdbeA5nogyGarJ8B+13 -----END CERTIFICATE-----Generated at Wed Nov 5 10:29:17 2025 by rpki-client