$ rpki-client -vvf rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft File: GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft (raw, json) Hash identifier: /GZJ1MEnqiFALYevYVUaStMAc3s9RBP116MNgUeBRC4= Subject key identifier: 4A:AD:9E:F0:E4:74:13:61:EE:EE:D6:F6:1B:EA:2A:6B:6A:AC:B2:8A Authority key identifier: 18:81:5B:34:C8:69:28:4B:43:23:C9:16:99:36:77:0F:DD:0B:42:36 Certificate issuer: /CN=A91DACA7/serialNumber=18815B34C869284B4323C9169936770FDD0B4236 Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft Manifest number: F1 Signing time: Mon 03 Nov 2025 05:15:11 +0000 Manifest this update: Mon 03 Nov 2025 05:15:10 +0000 Manifest next update: Mon 10 Nov 2025 05:15:10 +0000 Files and hashes: 1: GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl (hash: yOl8Uv/Ch99WgFophipKtppYcZq0YZAtGvsNyqCX4K4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DACA7, serialNumber=18815B34C869284B4323C9169936770FDD0B4236 Validity Not Before: Nov 3 05:15:10 2025 GMT Not After : Nov 10 05:15:10 2025 GMT Subject: CN=69083a5f-ce33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5b:78:d7:82:f1:83:ff:5c:4c:5f:7b:24:1b: b9:8f:b3:1d:34:73:cd:bd:61:9b:63:03:a2:85:5d: df:bf:fb:7a:07:47:5e:3f:d7:f3:c6:23:55:6b:28: 3c:ed:06:ef:91:23:fa:19:a0:f4:d4:85:2e:1c:7e: 0e:1b:26:d0:b4:3c:e2:c3:f2:d3:a6:7f:ea:39:af: 72:ba:5f:8c:5c:2e:14:d1:e2:2d:9a:d8:f3:a6:90: cf:10:d2:06:35:fc:bc:1d:dd:d7:1a:7e:4b:e5:10: 73:05:98:60:0d:cf:b8:ae:c2:6b:4a:02:63:2c:60: 2e:f8:e4:98:7d:f6:ad:85:8e:4f:37:a1:67:fd:9f: 7a:97:6f:12:69:ae:88:36:e0:d3:bd:81:2f:08:0c: 75:7b:93:a2:e8:df:74:ac:90:94:72:61:98:63:8c: f4:54:bc:fd:89:7d:b8:54:60:af:dd:fc:bc:4f:c1: 0a:f3:aa:76:7f:c3:3e:0c:2e:84:c2:92:8b:aa:7c: 49:f6:50:2e:58:db:40:75:36:43:da:b6:a3:fb:d6: 8f:ba:77:dd:30:d0:59:df:a5:32:98:27:f1:f5:34: 0d:e1:1d:32:5f:6d:fd:2d:68:df:67:2d:96:bf:77: a5:eb:6a:9f:46:01:87:df:b0:5d:23:99:db:37:89: 4e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:AD:9E:F0:E4:74:13:61:EE:EE:D6:F6:1B:EA:2A:6B:6A:AC:B2:8A X509v3 Authority Key Identifier: keyid:18:81:5B:34:C8:69:28:4B:43:23:C9:16:99:36:77:0F:DD:0B:42:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:cc:1f:11:20:a5:a8:5b:9a:55:2f:12:42:68:ec:a1:1d:fa: ca:d3:2c:2b:ca:92:06:49:7c:f5:af:35:46:b3:ae:fc:49:24: 72:df:ef:13:f0:c3:b6:37:13:00:57:5a:46:3d:f5:3f:e4:50: 40:a2:2c:92:4e:a9:66:39:c6:4e:61:dc:da:f1:62:b5:98:52: 4c:47:2c:89:b1:2d:e9:08:68:a3:63:a7:17:94:fb:c8:d3:2f: 0b:99:eb:f6:a6:2c:60:89:06:d6:3e:36:dc:ca:87:0a:de:4a: 00:90:93:46:27:fd:18:33:4f:12:fa:49:8f:6f:8a:a1:77:a1: 88:11:59:63:c2:8f:6e:d6:1b:1e:38:cd:45:49:f7:bb:47:b7: 95:be:fa:41:22:7f:a2:22:a6:c5:21:c7:e3:42:5c:03:ad:1a: 54:d3:a8:ce:58:4a:eb:a6:18:51:64:1d:bb:30:7f:80:ae:a9: 59:c2:84:60:56:f7:3a:e1:7d:de:b1:ea:d6:df:bd:99:e0:95: 96:18:81:fc:00:0e:e5:06:d9:df:42:e1:53:73:26:e2:36:4a: bf:ab:c9:11:32:d5:5a:55:28:49:29:50:63:fb:77:37:f7:d1: c4:32:9e:80:27:f1:18:83:5d:d3:de:ab:af:55:3b:e3:66:00: 67:a7:63:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REFDQTcxMTAvBgNVBAUTKDE4ODE1QjM0Qzg2OTI4NEI0MzIzQzkxNjk5MzY3NzBG REQwQjQyMzYwHhcNMjUxMTAzMDUxNTEwWhcNMjUxMTEwMDUxNTEwWjAYMRYwFAYD VQQDEw02OTA4M2E1Zi1jZTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0lt414Lxg/9cTF97JBu5j7MdNHPNvWGbYwOihV3fv/t6B0deP9fzxiNVayg8 7QbvkSP6GaD01IUuHH4OGybQtDziw/LTpn/qOa9yul+MXC4U0eItmtjzppDPENIG Nfy8Hd3XGn5L5RBzBZhgDc+4rsJrSgJjLGAu+OSYffathY5PN6Fn/Z96l28Saa6I NuDTvYEvCAx1e5Oi6N90rJCUcmGYY4z0VLz9iX24VGCv3fy8T8EK86p2f8M+DC6E wpKLqnxJ9lAuWNtAdTZD2raj+9aPunfdMNBZ36UymCfx9TQN4R0yX239LWjfZy2W v3el62qfRgGH37BdI5nbN4lOIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqtnvDk dBNh7u7W9hvqKmtqrLKKMB8GA1UdIwQYMBaAFBiBWzTIaShLQyPJFpk2dw/dC0I2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUNBNy81OUI5NDE4NjQ1 QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9HSUZiTk1ocEtFdERJOGtXbVRaM0Q5MExR alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dJRmJOTWhwS0V0REk4a1dtVFozRDkwTFFqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QUNBNy81OUI5NDE4NjQ1QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9HSUZiTk1ocEtF dERJOGtXbVRaM0Q5MExRalkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASzB8RIKWoW5pVLxJCaOyhHfrK0ywrypIGSXz1rzVGs678SSRy3+8T 8MO2NxMAV1pGPfU/5FBAoiySTqlmOcZOYdza8WK1mFJMRyyJsS3pCGijY6cXlPvI 0y8Lmev2pixgiQbWPjbcyocK3koAkJNGJ/0YM08S+kmPb4qhd6GIEVljwo9u1hse OM1FSfe7R7eVvvpBIn+iIqbFIcfjQlwDrRpU06jOWErrphhRZB27MH+ArqlZwoRg Vvc64X3eserW372Z4JWWGIH8AA7lBtnfQuFTcybiNkq/q8kRMtVaVShJKVBj+3c3 99HEMp6AJ/EYg13T3quvVTvjZgBnp2Nl -----END CERTIFICATE-----Generated at Tue Nov 4 13:18:07 2025 by rpki-client