$ rpki-client -vvf rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft File: GkUkezobAmknHXRsWl-sAUX_MyI.mft (raw, json) Hash identifier: qEAnN2NyIP2Q8a18ZUAifE9xAYM+p4KIB7PCab+yIVg= Subject key identifier: 07:8C:C1:13:D2:25:58:37:2A:46:DF:2E:B6:74:D9:8D:14:40:D6:8E Authority key identifier: 1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22 Certificate issuer: /CN=A911A2B1/serialNumber=1A45247B3A1B0269271D746C5A5FAC0145FF3322 Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft Manifest number: 012B Signing time: Wed 05 Nov 2025 04:48:34 +0000 Manifest this update: Wed 05 Nov 2025 04:48:34 +0000 Manifest next update: Wed 12 Nov 2025 04:48:34 +0000 Files and hashes: 1: GkUkezobAmknHXRsWl-sAUX_MyI.crl (hash: ouqnzPOx0BRDqebc0x3pVROBmpfo4NvYk3J0pT/auu0=) 2: F44E8EBCF3B511EE8451152DC4F9AE02.roa (hash: +JGbQRGke2HupIxlNl9DhNlER0ydSKi+ap3XfaIlCYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.crl rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:48:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A2B1, serialNumber=1A45247B3A1B0269271D746C5A5FAC0145FF3322 Validity Not Before: Nov 5 04:48:34 2025 GMT Not After : Nov 12 04:48:34 2025 GMT Subject: CN=690ad722-6686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:83:03:3d:cd:bb:d5:2c:52:cd:91:e1:73:99: 49:9f:0d:7b:2a:14:25:28:95:aa:f4:07:bd:8c:1d: 72:d6:ef:94:bc:ec:5b:67:3c:c2:77:68:f8:5c:c1: 75:39:65:d6:f8:da:7d:d6:d0:e2:61:1b:ba:ac:d5: 4d:7e:51:7e:db:f2:be:5d:83:46:fc:9e:c8:2c:1b: 2c:cf:eb:9c:6b:f9:f1:49:e3:16:d9:cf:1f:b1:bf: a3:7f:15:db:a7:c6:fc:32:78:06:ee:fa:60:d6:19: 78:f0:cd:39:fb:7c:36:c4:75:3d:ef:c3:fc:db:c0: 4a:f5:1c:2e:5f:0d:17:cb:0f:67:89:4c:08:98:84: a3:ed:17:00:de:02:9e:cd:57:2b:c8:d1:67:2a:df: 13:72:6e:e6:0e:b7:27:f2:78:8a:80:9d:12:6f:34: 6e:8c:64:e4:ca:0d:c9:08:18:8b:40:99:fe:d0:d3: 74:1e:36:28:fb:a2:62:00:74:c7:d2:3d:7e:ad:89: 43:75:81:18:3d:07:48:ca:5f:89:9d:c1:5f:40:02: 8e:e9:b5:5e:a4:48:a5:1a:0d:8c:67:4a:d0:69:29: c3:b6:41:88:79:42:70:80:d7:3a:b9:e2:69:56:df: 21:25:c8:c7:1b:73:3a:e8:29:bd:f0:18:39:0d:4c: c9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:8C:C1:13:D2:25:58:37:2A:46:DF:2E:B6:74:D9:8D:14:40:D6:8E X509v3 Authority Key Identifier: keyid:1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:d1:56:42:d4:bb:83:f5:08:4c:23:f0:e5:c4:35:59:70:26: 60:61:8b:57:f1:2b:1a:95:18:7a:0d:1f:34:d0:98:dc:80:ed: c1:4d:da:3f:48:9d:39:e6:7e:23:5c:68:56:1c:4d:09:6f:c4: 9f:56:4c:8b:50:0c:cb:27:2d:4b:32:9e:b1:a4:ff:74:62:68: 10:60:33:8d:fe:ff:41:ce:8c:8f:58:6f:b1:7b:70:1a:d8:d5: 4a:e9:4a:de:16:04:05:4d:34:82:05:03:6d:4a:e2:bc:9b:04: 07:03:bc:2b:c8:06:b9:78:27:bc:31:31:85:00:7b:6b:77:95: 7e:03:43:ba:11:a3:f0:a9:1d:31:58:23:64:d6:e8:67:4a:fb: 0b:cb:de:d3:1d:d3:bf:92:c3:11:72:4f:f1:4e:f7:46:48:ac: 4c:8f:11:6c:b5:3a:4b:2c:f0:6d:dc:07:fd:99:68:ef:16:f6: 33:3d:a4:56:e6:86:09:46:bb:1a:f3:87:a9:f9:a5:6f:25:6c: 6f:8b:7e:b0:91:c8:b3:52:fd:d7:71:70:28:52:e7:dc:02:c1: 79:0c:81:4e:a2:95:0f:27:c3:dd:dc:26:29:52:be:40:63:9d: f3:cf:67:e1:d1:6f:b3:92:78:9c:3d:19:b5:0a:3d:b1:98:64: c4:9d:c4:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEyQjExMTAvBgNVBAUTKDFBNDUyNDdCM0ExQjAyNjkyNzFENzQ2QzVBNUZBQzAx NDVGRjMzMjIwHhcNMjUxMTA1MDQ0ODM0WhcNMjUxMTEyMDQ0ODM0WjAYMRYwFAYD VQQDEw02OTBhZDcyMi02Njg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4oMDPc271SxSzZHhc5lJnw17KhQlKJWq9Ae9jB1y1u+UvOxbZzzCd2j4XMF1 OWXW+Np91tDiYRu6rNVNflF+2/K+XYNG/J7ILBssz+uca/nxSeMW2c8fsb+jfxXb p8b8MngG7vpg1hl48M05+3w2xHU978P828BK9RwuXw0Xyw9niUwImISj7RcA3gKe zVcryNFnKt8Tcm7mDrcn8niKgJ0SbzRujGTkyg3JCBiLQJn+0NN0HjYo+6JiAHTH 0j1+rYlDdYEYPQdIyl+JncFfQAKO6bVepEilGg2MZ0rQaSnDtkGIeUJwgNc6ueJp Vt8hJcjHG3M66Cm98Bg5DUzJCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAeMwRPS JVg3KkbfLrZ02Y0UQNaOMB8GA1UdIwQYMBaAFBpFJHs6GwJpJx10bFpfrAFF/zMi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTJCMS8xOUE4MkY2NkYz QjUxMUVFQjFFMjIzMEVDNEY5QUUwMi9Ha1VrZXpvYkFta25IWFJzV2wtc0FVWF9N eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0drVWtlem9iQW1rbkhYUnNXbC1zQVVYX015SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTJCMS8xOUE4MkY2NkYzQjUxMUVFQjFFMjIzMEVDNEY5QUUwMi9Ha1VrZXpvYkFt a25IWFJzV2wtc0FVWF9NeUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ0VZC1LuD9QhMI/DlxDVZcCZgYYtX8SsalRh6DR800JjcgO3BTdo/ SJ055n4jXGhWHE0Jb8SfVkyLUAzLJy1LMp6xpP90YmgQYDON/v9BzoyPWG+xe3Aa 2NVK6UreFgQFTTSCBQNtSuK8mwQHA7wryAa5eCe8MTGFAHtrd5V+A0O6EaPwqR0x WCNk1uhnSvsLy97THdO/ksMRck/xTvdGSKxMjxFstTpLLPBt3Af9mWjvFvYzPaRW 5oYJRrsa84ep+aVvJWxvi36wkcizUv3XcXAoUufcAsF5DIFOopUPJ8Pd3CYpUr5A Y53zz2fh0W+zknicPRm1Cj2xmGTEncRx -----END CERTIFICATE-----Generated at Wed Nov 5 17:02:19 2025 by rpki-client