$ rpki-client -vvf rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft File: G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft (raw, json) Hash identifier: zamiexdukPTYdTW4TuCefdw5noMygsZLUP/EGkhUA/Q= Subject key identifier: 3B:31:88:A9:5B:FD:77:2F:48:92:05:42:67:EB:2B:A9:E7:27:68:7E Authority key identifier: 1B:82:12:DB:F1:55:3C:3B:76:1F:19:9E:5E:05:A2:D1:09:8D:CD:47 Certificate issuer: /CN=A9117FA3/serialNumber=1B8212DBF1553C3B761F199E5E05A2D1098DCD47 Certificate serial: 0C24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4IS2_FVPDt2HxmeXgWi0QmNzUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft Manifest number: 0C1B Signing time: Tue 04 Nov 2025 18:52:21 +0000 Manifest this update: Tue 04 Nov 2025 18:52:20 +0000 Manifest next update: Tue 11 Nov 2025 18:52:20 +0000 Files and hashes: 1: G4IS2_FVPDt2HxmeXgWi0QmNzUc.crl (hash: D2E0UeFCJGhg5tJ7JQY5tK38dhYm9FbBdSDpo+NaJ6g=) 2: 53409F861D9C11EAA3FD402FC4F9AE02.roa (hash: j4q/tAbU5GnUtv3RJxFUk0GDbMAP6oPzZx57GUeGw58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.crl rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4IS2_FVPDt2HxmeXgWi0QmNzUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:52:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3108 (0xc24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117FA3, serialNumber=1B8212DBF1553C3B761F199E5E05A2D1098DCD47 Validity Not Before: Nov 4 18:52:20 2025 GMT Not After : Nov 11 18:52:20 2025 GMT Subject: CN=690a4b64-d6a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:30:f1:75:a4:76:48:49:79:a9:92:25:84:8e: ec:b7:d8:a6:b3:75:c2:a0:b3:53:c5:1a:2f:48:35: b0:b1:7d:64:75:7c:a6:2f:ea:a7:24:82:6d:cf:4e: 93:de:c7:21:2e:d4:c2:47:7f:de:cb:16:c0:3e:48: 4f:2a:86:fc:00:35:b7:ce:d1:a6:bf:41:55:69:9e: 9f:7d:1a:8d:f9:26:41:56:7e:68:7f:02:94:e9:77: 58:11:9b:6d:41:11:8c:f5:7e:c4:a6:40:2e:06:1b: 0b:e2:af:71:92:09:dc:06:03:3a:d4:3b:fb:da:d0: 9b:a7:93:25:3f:45:26:76:e9:bf:4f:30:50:79:9d: 94:ba:66:27:eb:56:ae:76:4e:f1:c4:5f:f8:d6:7c: bf:2b:39:28:30:49:97:00:9d:70:b5:bb:9a:48:34: 32:ee:c5:94:f2:4e:ab:33:42:b8:0e:7d:c5:f2:f7: 7e:8b:f2:8b:09:b0:10:1a:ec:4b:5c:f9:92:93:85: 54:5f:c9:1d:59:7a:6b:02:7e:df:b6:4b:d3:29:8a: 80:f7:e5:d4:b4:ce:cb:12:bf:1e:49:da:df:db:58: fe:ab:fd:b7:83:d1:8a:53:d8:07:13:de:c9:b6:3b: 19:f4:9e:b5:07:5c:6a:b6:e1:8d:ed:f1:18:ff:f1: 0d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:31:88:A9:5B:FD:77:2F:48:92:05:42:67:EB:2B:A9:E7:27:68:7E X509v3 Authority Key Identifier: keyid:1B:82:12:DB:F1:55:3C:3B:76:1F:19:9E:5E:05:A2:D1:09:8D:CD:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4IS2_FVPDt2HxmeXgWi0QmNzUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:12:c7:76:25:25:42:79:16:d3:28:52:15:57:a8:27:be:64: ba:de:84:8b:01:5c:c4:38:7e:ed:74:ca:0f:0a:af:59:a6:49: 17:95:98:dd:8a:42:05:8a:25:f4:e0:b5:f1:65:b0:3a:31:a3: 97:77:93:6b:31:97:e5:67:64:db:27:30:39:d9:e8:8d:79:a1: b4:a4:cc:70:99:af:81:2d:b7:77:7c:3f:35:fb:bc:f9:af:f7: 87:4f:fb:6e:1c:0e:e7:a4:78:50:43:bb:7d:42:85:31:38:1f: fd:f2:80:b5:57:c6:42:ca:e5:01:03:27:46:4a:fd:dd:03:3d: 90:72:50:53:f3:6c:be:a9:e0:67:e3:b5:e8:ca:d0:f0:66:dc: 5a:37:f1:e0:72:9f:d5:78:73:93:db:27:8c:4c:85:2e:3d:08: 3e:6a:8d:d2:dc:85:5e:28:d8:4b:b3:61:29:cf:2b:52:ed:6b: 8b:1b:8c:b9:c5:ae:5c:fd:0c:89:4c:62:6f:b1:f9:ad:b9:49: da:47:9a:8d:1d:17:9f:f8:8a:fa:d9:cd:07:cb:dc:c9:f3:05: 27:f5:09:96:65:b7:a0:34:4d:fe:a9:9c:91:88:37:0a:67:26: 6e:cd:a3:78:ad:43:96:23:6a:bf:ea:75:c4:6a:4c:3c:79:89: 0c:4a:d4:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdGQTMxMTAvBgNVBAUTKDFCODIxMkRCRjE1NTNDM0I3NjFGMTk5RTVFMDVBMkQx MDk4RENENDcwHhcNMjUxMTA0MTg1MjIwWhcNMjUxMTExMTg1MjIwWjAYMRYwFAYD VQQDEw02OTBhNGI2NC1kNmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3jDxdaR2SEl5qZIlhI7st9ims3XCoLNTxRovSDWwsX1kdXymL+qnJIJtz06T 3schLtTCR3/eyxbAPkhPKob8ADW3ztGmv0FVaZ6ffRqN+SZBVn5ofwKU6XdYEZtt QRGM9X7EpkAuBhsL4q9xkgncBgM61Dv72tCbp5MlP0Umdum/TzBQeZ2UumYn61au dk7xxF/41ny/KzkoMEmXAJ1wtbuaSDQy7sWU8k6rM0K4Dn3F8vd+i/KLCbAQGuxL XPmSk4VUX8kdWXprAn7ftkvTKYqA9+XUtM7LEr8eSdrf21j+q/23g9GKU9gHE97J tjsZ9J61B1xqtuGN7fEY//EN+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDsxiKlb /XcvSJIFQmfrK6nnJ2h+MB8GA1UdIwQYMBaAFBuCEtvxVTw7dh8Znl4FotEJjc1H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0ZBMy81OTMwNzMzNjFE OUIxMUVBODYwRUNCMkRDNEY5QUUwMi9HNElTMl9GVlBEdDJIeG1lWGdXaTBRbU56 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0SVMyX0ZWUER0Mkh4bWVYZ1dpMFFtTnpVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0ZBMy81OTMwNzMzNjFEOUIxMUVBODYwRUNCMkRDNEY5QUUwMi9HNElTMl9GVlBE dDJIeG1lWGdXaTBRbU56VWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChEsd2JSVCeRbTKFIVV6gnvmS63oSLAVzEOH7tdMoPCq9ZpkkXlZjd ikIFiiX04LXxZbA6MaOXd5NrMZflZ2TbJzA52eiNeaG0pMxwma+BLbd3fD81+7z5 r/eHT/tuHA7npHhQQ7t9QoUxOB/98oC1V8ZCyuUBAydGSv3dAz2QclBT82y+qeBn 47XoytDwZtxaN/Hgcp/VeHOT2yeMTIUuPQg+ao3S3IVeKNhLs2EpzytS7WuLG4y5 xa5c/QyJTGJvsfmtuUnaR5qNHRef+Ir62c0Hy9zJ8wUn9QmWZbegNE3+qZyRiDcK ZyZuzaN4rUOWI2q/6nXEakw8eYkMStSQ -----END CERTIFICATE-----Generated at Wed Nov 5 15:04:55 2025 by rpki-client