$ rpki-client -vvf rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft File: GkUkezobAmknHXRsWl-sAUX_MyI.mft (raw, json) Hash identifier: 52yOIlpql0bBjBIFTNqjUzm8AkFvU4QZl+otRMkM7T0= Subject key identifier: 3C:8E:C0:5B:E0:65:21:0C:05:4A:05:E8:D7:E0:34:90:48:63:BC:10 Authority key identifier: 1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22 Certificate issuer: /CN=A911A2B1/serialNumber=1A45247B3A1B0269271D746C5A5FAC0145FF3322 Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft Manifest number: 0114 Signing time: Fri 19 Sep 2025 05:31:22 +0000 Manifest this update: Fri 19 Sep 2025 05:31:21 +0000 Manifest next update: Fri 26 Sep 2025 05:31:21 +0000 Files and hashes: 1: GkUkezobAmknHXRsWl-sAUX_MyI.crl (hash: IRmxTdKlNFRQVhpYniRVDQjbbO8xZLRAYEGiNIiM38w=) 2: F44E8EBCF3B511EE8451152DC4F9AE02.roa (hash: +JGbQRGke2HupIxlNl9DhNlER0ydSKi+ap3XfaIlCYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.crl rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 04:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A2B1, serialNumber=1A45247B3A1B0269271D746C5A5FAC0145FF3322 Validity Not Before: Sep 19 05:31:21 2025 GMT Not After : Sep 26 05:31:21 2025 GMT Subject: CN=68cceaa9-4984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:84:0d:7e:68:ee:3d:25:80:64:7e:c2:f0:a7: 6d:3f:e6:99:d4:14:b7:dd:37:6b:8f:3e:fa:6b:87: 58:3f:e3:7f:0e:36:2c:b5:d2:4f:d7:c1:45:d1:0e: fb:96:f2:ba:d4:2e:02:f0:da:7b:ca:de:64:72:02: 0c:8d:31:1d:ce:19:dc:af:71:96:9b:46:b7:83:6f: d3:2f:61:2e:59:0c:31:76:16:6c:80:92:81:87:d6: 7c:07:53:8a:c0:d1:47:87:0c:14:eb:91:98:73:9d: 39:3c:15:42:79:7d:c5:78:cd:99:ec:ef:ce:4b:dc: 8f:fa:43:ff:4c:e7:28:d0:1d:41:14:61:f7:e1:97: 41:53:7e:cc:44:c3:a0:76:e3:72:1c:d8:cd:ab:25: 69:3d:03:f3:bd:7c:90:49:66:dc:25:80:4a:87:32: e5:31:3a:cc:c8:af:36:47:dd:4f:7a:c8:30:86:e1: e2:a8:09:81:c6:6e:ec:32:64:44:1c:9d:76:e9:37: 54:fd:75:09:5d:94:a1:33:90:1a:9b:e6:2b:7f:ea: 7e:7c:79:b1:ed:7f:ba:c3:1f:6d:85:8d:62:52:10: bc:6b:65:c8:d2:5e:24:10:44:2e:c8:fa:9a:46:b9: 37:9c:af:8a:f2:21:e5:09:1c:24:c5:e8:ab:31:5b: da:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:8E:C0:5B:E0:65:21:0C:05:4A:05:E8:D7:E0:34:90:48:63:BC:10 X509v3 Authority Key Identifier: keyid:1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:6c:b8:5a:57:c4:32:02:8e:fb:3d:6d:50:3d:52:d3:bd:47: 03:a8:34:f5:3b:a5:7c:9c:cb:64:74:fa:a1:89:e4:50:92:cb: 88:f8:8c:d9:c0:19:6b:40:93:5d:11:a0:c3:3c:31:fa:1d:4b: ff:c8:0d:75:15:18:ab:3f:ce:0f:08:69:eb:0f:a5:25:a3:93: f6:5e:e1:d7:61:a0:ce:19:e8:ce:4e:a5:fa:23:69:30:08:6f: 49:8d:a9:48:67:89:d8:11:33:3d:50:39:f7:ff:ee:9f:8f:f2: 14:7f:37:b1:47:b0:ec:3f:53:45:60:b0:57:ba:1f:2d:3a:60: 7f:13:21:65:34:22:c5:31:1a:0a:18:6b:9f:4c:2e:63:fe:5c: 18:56:b9:93:eb:ef:92:d7:4b:ff:f8:40:33:49:dc:61:8e:9d: b3:f8:43:6c:c2:67:39:1a:0c:54:16:28:ce:af:e1:9a:86:56: 0b:6d:04:5e:c0:2b:c6:88:ee:c0:b9:8f:05:29:1e:5a:d1:c6: 84:34:82:2c:d4:1b:e3:0b:59:9d:f5:68:da:f2:93:1e:4a:90: b9:46:ba:da:7c:09:fb:22:ec:ef:da:66:81:de:25:99:be:9f: 8d:a3:9a:c9:66:a8:8a:46:e4:26:c0:46:5d:49:d2:3e:1c:59: 20:d9:da:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEyQjExMTAvBgNVBAUTKDFBNDUyNDdCM0ExQjAyNjkyNzFENzQ2QzVBNUZBQzAx NDVGRjMzMjIwHhcNMjUwOTE5MDUzMTIxWhcNMjUwOTI2MDUzMTIxWjAYMRYwFAYD VQQDEw02OGNjZWFhOS00OTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqIQNfmjuPSWAZH7C8KdtP+aZ1BS33Tdrjz76a4dYP+N/DjYstdJP18FF0Q77 lvK61C4C8Np7yt5kcgIMjTEdzhncr3GWm0a3g2/TL2EuWQwxdhZsgJKBh9Z8B1OK wNFHhwwU65GYc505PBVCeX3FeM2Z7O/OS9yP+kP/TOco0B1BFGH34ZdBU37MRMOg duNyHNjNqyVpPQPzvXyQSWbcJYBKhzLlMTrMyK82R91PesgwhuHiqAmBxm7sMmRE HJ126TdU/XUJXZShM5Aam+Yrf+p+fHmx7X+6wx9thY1iUhC8a2XI0l4kEEQuyPqa Rrk3nK+K8iHlCRwkxeirMVva1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDyOwFvg ZSEMBUoF6NfgNJBIY7wQMB8GA1UdIwQYMBaAFBpFJHs6GwJpJx10bFpfrAFF/zMi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTJCMS8xOUE4MkY2NkYz QjUxMUVFQjFFMjIzMEVDNEY5QUUwMi9Ha1VrZXpvYkFta25IWFJzV2wtc0FVWF9N eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0drVWtlem9iQW1rbkhYUnNXbC1zQVVYX015SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTJCMS8xOUE4MkY2NkYzQjUxMUVFQjFFMjIzMEVDNEY5QUUwMi9Ha1VrZXpvYkFt a25IWFJzV2wtc0FVWF9NeUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2bLhaV8QyAo77PW1QPVLTvUcDqDT1O6V8nMtkdPqhieRQksuI+IzZ wBlrQJNdEaDDPDH6HUv/yA11FRirP84PCGnrD6Ulo5P2XuHXYaDOGejOTqX6I2kw CG9JjalIZ4nYETM9UDn3/+6fj/IUfzexR7DsP1NFYLBXuh8tOmB/EyFlNCLFMRoK GGufTC5j/lwYVrmT6++S10v/+EAzSdxhjp2z+ENswmc5GgxUFijOr+GahlYLbQRe wCvGiO7AuY8FKR5a0caENIIs1BvjC1md9Wja8pMeSpC5RrrafAn7Iuzv2maB3iWZ vp+No5rJZqiKRuQmwEZdSdI+HFkg2dqc -----END CERTIFICATE-----Generated at Fri Sep 19 06:57:08 2025 by rpki-client