$ rpki-client -vvf rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft File: gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft (raw, json) Hash identifier: lGk1EcqeGzV4qJvmpTvtQtMwWCjkc5Bhs+Tz2FfwYvo= Subject key identifier: FB:84:36:70:1A:54:98:6E:A2:00:5E:CD:85:95:2C:9B:0B:76:01:35 Authority key identifier: 81:FF:85:EC:AE:CC:53:DB:74:53:08:60:71:45:59:B7:E5:18:45:41 Certificate issuer: /CN=A9110724/serialNumber=81FF85ECAECC53DB74530860714559B7E5184541 Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf-F7K7MU9t0UwhgcUVZt-UYRUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft Manifest number: 01A7 Signing time: Mon 03 Nov 2025 03:47:38 +0000 Manifest this update: Mon 03 Nov 2025 03:47:38 +0000 Manifest next update: Mon 10 Nov 2025 03:47:38 +0000 Files and hashes: 1: gf-F7K7MU9t0UwhgcUVZt-UYRUE.crl (hash: o8uiR2OKB6ePBtNnwue+7sxQrbxrByCeR2MPLWBnQ6Y=) 2: A1861B9A998E11EEBD3C815CC4F9AE02.roa (hash: K0qtdo0hpDX5ps6ojVYG1P+YcafUfmw59mLzdfl3i+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.crl rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf-F7K7MU9t0UwhgcUVZt-UYRUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110724, serialNumber=81FF85ECAECC53DB74530860714559B7E5184541 Validity Not Before: Nov 3 03:47:38 2025 GMT Not After : Nov 10 03:47:38 2025 GMT Subject: CN=690825da-e05a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cb:35:94:bb:39:9c:d3:50:ed:04:75:33:05: 9c:cd:ef:f1:38:79:11:d5:b0:8c:5b:bf:c0:63:41: 30:a1:62:df:b7:b0:af:b8:95:5f:92:45:b8:d1:7f: 00:e9:90:23:21:d7:39:28:dd:5d:db:f4:9c:d4:55: 88:99:df:68:4b:90:ae:0c:e9:f2:ac:7e:5e:bf:45: 8e:81:38:66:22:0f:56:81:6f:60:57:c3:df:5a:d2: cf:9a:e0:45:e7:ee:39:80:21:a2:ca:b5:26:61:d9: eb:8b:5f:1b:5b:40:56:c2:b4:0c:79:58:9e:88:80: c5:61:4c:ed:ef:48:93:d7:b8:7d:41:74:d8:7c:b1: d7:84:a3:24:b8:cd:89:03:7a:e3:f4:d8:95:08:14: a8:c0:f0:5b:79:59:ed:79:fd:82:f1:1e:9d:15:87: cf:38:ba:c7:5e:40:9d:fc:38:95:57:22:73:c3:d2: e2:31:37:30:82:21:bb:29:09:e0:ee:a0:b0:52:33: 2d:35:41:74:83:d8:b1:66:01:5a:0a:3e:4c:ae:74: aa:84:cd:4c:d1:fc:8c:f0:65:ef:0a:a3:41:dd:62: ff:26:9e:95:81:cb:dd:da:c8:00:d6:9b:e0:c5:44: 67:75:8c:92:1c:24:19:d2:82:55:fb:48:56:cf:f7: 3e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:84:36:70:1A:54:98:6E:A2:00:5E:CD:85:95:2C:9B:0B:76:01:35 X509v3 Authority Key Identifier: keyid:81:FF:85:EC:AE:CC:53:DB:74:53:08:60:71:45:59:B7:E5:18:45:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf-F7K7MU9t0UwhgcUVZt-UYRUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:9c:7b:2b:05:ee:92:64:f1:8e:0c:82:4c:18:0b:12:87:24: 6b:f1:25:f4:b5:d2:37:94:bb:02:2c:c4:d4:ee:66:ed:ee:04: 52:db:23:d4:71:7c:79:07:e9:2e:9b:cb:48:e5:0a:d0:a7:bf: 28:c0:68:57:d8:56:b6:73:4e:46:a3:a0:35:cf:9d:cc:82:a5: d4:ab:43:a0:03:35:c0:ba:c3:64:30:3e:08:20:38:eb:e8:f5: 57:6e:b7:75:93:df:6d:8c:5a:f9:32:d8:43:6b:92:1a:b8:db: 35:26:44:b5:19:e1:39:94:4f:91:bc:a8:d5:bd:66:e6:c9:f7: 5d:de:3a:1e:62:7d:e0:b9:7d:19:02:54:75:3c:a1:18:9e:b0: 94:a7:6c:8e:88:74:75:0e:d0:59:0f:8e:fc:27:b7:54:b2:5b: ff:cc:2e:ae:7c:46:74:b6:2f:bc:04:53:a8:4b:68:70:26:c2: 78:5a:b1:da:a6:6a:24:f2:f4:b3:e4:0d:63:a9:9e:1d:43:1c: 93:a6:48:f1:86:33:4d:3c:1b:cd:22:e5:92:a7:bf:4f:c5:ce: 5c:10:59:d9:a5:ba:66:d0:7a:cd:0d:02:03:b5:73:72:bb:e7: bc:a3:15:0a:ac:84:f1:d5:40:f9:4a:c1:c2:9f:b2:6b:ee:28: 6b:8d:75:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA3MjQxMTAvBgNVBAUTKDgxRkY4NUVDQUVDQzUzREI3NDUzMDg2MDcxNDU1OUI3 RTUxODQ1NDEwHhcNMjUxMTAzMDM0NzM4WhcNMjUxMTEwMDM0NzM4WjAYMRYwFAYD VQQDEw02OTA4MjVkYS1lMDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ss1lLs5nNNQ7QR1MwWcze/xOHkR1bCMW7/AY0EwoWLft7CvuJVfkkW40X8A 6ZAjIdc5KN1d2/Sc1FWImd9oS5CuDOnyrH5ev0WOgThmIg9WgW9gV8PfWtLPmuBF 5+45gCGiyrUmYdnri18bW0BWwrQMeVieiIDFYUzt70iT17h9QXTYfLHXhKMkuM2J A3rj9NiVCBSowPBbeVntef2C8R6dFYfPOLrHXkCd/DiVVyJzw9LiMTcwgiG7KQng 7qCwUjMtNUF0g9ixZgFaCj5MrnSqhM1M0fyM8GXvCqNB3WL/Jp6Vgcvd2sgA1pvg xURndYySHCQZ0oJV+0hWz/c+2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPuENnAa VJhuogBezYWVLJsLdgE1MB8GA1UdIwQYMBaAFIH/heyuzFPbdFMIYHFFWbflGEVB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDcyNC84QUQxREI1ODQw OTkxMUVFOUJEN0U0NDJDNEY5QUUwMi9nZi1GN0s3TVU5dDBVd2hnY1VWWnQtVVlS VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dmLUY3SzdNVTl0MFV3aGdjVVZadC1VWVJVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDcyNC84QUQxREI1ODQwOTkxMUVFOUJEN0U0NDJDNEY5QUUwMi9nZi1GN0s3TVU5 dDBVd2hnY1VWWnQtVVlSVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbnHsrBe6SZPGODIJMGAsShyRr8SX0tdI3lLsCLMTU7mbt7gRS2yPU cXx5B+kum8tI5QrQp78owGhX2Fa2c05Go6A1z53MgqXUq0OgAzXAusNkMD4IIDjr 6PVXbrd1k99tjFr5MthDa5IauNs1JkS1GeE5lE+RvKjVvWbmyfdd3joeYn3guX0Z AlR1PKEYnrCUp2yOiHR1DtBZD478J7dUslv/zC6ufEZ0ti+8BFOoS2hwJsJ4WrHa pmok8vSz5A1jqZ4dQxyTpkjxhjNNPBvNIuWSp79Pxc5cEFnZpbpm0HrNDQIDtXNy u+e8oxUKrITx1UD5SsHCn7Jr7ihrjXWE -----END CERTIFICATE-----Generated at Tue Nov 4 18:34:52 2025 by rpki-client