$ rpki-client -vvf rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft File: GXlPPKo3VSe6D9M0SAx-Azjnnio.mft (raw, json) Hash identifier: f//t5CoR3dZLV47UgeOezqr9ykRFU1WSVwQ1BJ1PHOA= Subject key identifier: 72:C8:A7:CC:11:23:AC:1B:48:5E:57:14:BD:3D:0B:34:48:5B:05:DC Authority key identifier: 19:79:4F:3C:AA:37:55:27:BA:0F:D3:34:48:0C:7E:03:38:E7:9E:2A Certificate issuer: /CN=A914FA48/serialNumber=19794F3CAA375527BA0FD334480C7E0338E79E2A Certificate serial: 0122 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft Manifest number: 0120 Signing time: Mon 03 Nov 2025 04:44:19 +0000 Manifest this update: Mon 03 Nov 2025 04:44:19 +0000 Manifest next update: Mon 10 Nov 2025 04:44:19 +0000 Files and hashes: 1: GXlPPKo3VSe6D9M0SAx-Azjnnio.crl (hash: Ug7fxMOmM6fneiufGBHsh1XejmfPxOD7RTLQjtguUYQ=) 2: AB05727AFE8C11EE81FDAB6FC4F9AE02.roa (hash: kL+8sBegJ1XGnndePATDLqR1ij+F7xDhoLyLkaA0qyw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.crl rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:44:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FA48, serialNumber=19794F3CAA375527BA0FD334480C7E0338E79E2A Validity Not Before: Nov 3 04:44:19 2025 GMT Not After : Nov 10 04:44:19 2025 GMT Subject: CN=69083323-74e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:77:4d:51:9c:b3:2c:c8:22:85:ba:71:b1:39: 2f:46:5f:e8:f8:48:52:08:95:64:5d:55:a6:cb:c4: b0:b4:c8:49:58:35:bc:9c:64:2f:e8:7f:b0:bf:df: 7b:ee:cd:4d:54:3f:81:d2:1c:fb:f5:f9:b9:f6:f5: 1e:1b:35:fa:0c:38:f5:64:8e:e6:00:c1:17:89:ab: 76:3c:cd:ae:21:58:05:3c:af:e9:02:e9:85:21:59: a0:27:83:b4:8e:30:5d:e5:ec:68:26:21:d8:b0:0b: c3:21:96:29:90:d5:76:a3:fc:33:d5:e8:7e:82:4a: ff:30:23:a1:9a:a0:06:89:b1:c4:ea:ca:00:58:5e: b0:e2:87:a5:f2:2d:ac:2e:35:d0:ca:ce:61:ad:bd: 56:cb:76:09:5b:23:eb:e2:b6:89:04:66:4b:d1:cc: 5f:91:8f:57:0a:80:7a:dc:ff:5e:de:b9:40:fb:7c: 88:86:1e:45:fe:d7:3c:db:68:0d:2c:8e:d7:4d:90: a5:b7:50:69:e4:68:e0:d8:59:79:7a:4f:b2:bd:4c: a0:7f:5a:aa:cf:05:6b:06:d2:18:93:35:cb:cc:55: da:2a:4c:4e:ec:9b:2f:d3:04:ef:a3:94:72:d7:27: 99:34:4f:c3:6b:74:fe:86:51:e0:26:a1:aa:32:e9: 44:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C8:A7:CC:11:23:AC:1B:48:5E:57:14:BD:3D:0B:34:48:5B:05:DC X509v3 Authority Key Identifier: keyid:19:79:4F:3C:AA:37:55:27:BA:0F:D3:34:48:0C:7E:03:38:E7:9E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:91:95:53:c0:22:fa:40:11:24:9c:aa:bb:56:a2:cb:62:d8: ba:d9:6a:e9:3d:98:30:ce:22:78:1f:dd:e4:d4:e1:9a:01:24: 3d:d9:99:3a:58:31:e6:91:d3:f9:ef:a7:f5:d2:34:e4:c3:92: 18:06:67:42:2b:5c:77:1f:29:a5:a2:de:8f:d6:fe:72:5c:e1: a2:eb:b3:2e:5f:56:53:d7:e5:17:91:ef:17:00:55:3e:eb:e1: 4a:87:5b:d5:1b:f2:a9:e3:a0:a9:0d:c4:63:7a:f6:08:ac:2b: 39:9d:a2:07:85:10:66:53:77:6a:c2:10:e1:3b:70:2f:86:1e: 7e:0b:4a:ab:0d:64:51:da:93:ac:04:39:7a:00:af:ae:9a:a3: 7d:ea:14:cf:5f:3c:b6:01:45:a7:c2:49:4e:21:d1:d4:44:18: 5b:38:f7:f8:73:b5:1a:25:a3:ee:aa:54:42:40:00:59:00:9b: 2e:66:03:2b:69:f5:4c:e2:9c:6f:f4:cc:f6:b4:35:32:b3:c3: 3f:c8:a2:92:70:a3:41:ae:ef:b5:e2:38:09:a0:21:ac:3b:5b: 7f:b4:7a:d3:e6:e8:d1:17:53:19:e4:78:4a:65:fb:9c:22:d6: 9b:0c:fb:6d:34:0a:cb:0e:f2:48:78:7b:9b:4e:3e:b8:5f:0b: a8:33:f6:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZBNDgxMTAvBgNVBAUTKDE5Nzk0RjNDQUEzNzU1MjdCQTBGRDMzNDQ4MEM3RTAz MzhFNzlFMkEwHhcNMjUxMTAzMDQ0NDE5WhcNMjUxMTEwMDQ0NDE5WjAYMRYwFAYD VQQDEw02OTA4MzMyMy03NGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7HdNUZyzLMgihbpxsTkvRl/o+EhSCJVkXVWmy8SwtMhJWDW8nGQv6H+wv997 7s1NVD+B0hz79fm59vUeGzX6DDj1ZI7mAMEXiat2PM2uIVgFPK/pAumFIVmgJ4O0 jjBd5exoJiHYsAvDIZYpkNV2o/wz1eh+gkr/MCOhmqAGibHE6soAWF6w4oel8i2s LjXQys5hrb1Wy3YJWyPr4raJBGZL0cxfkY9XCoB63P9e3rlA+3yIhh5F/tc822gN LI7XTZClt1Bp5Gjg2Fl5ek+yvUygf1qqzwVrBtIYkzXLzFXaKkxO7Jsv0wTvo5Ry 1yeZNE/Da3T+hlHgJqGqMulExwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHLIp8wR I6wbSF5XFL09CzRIWwXcMB8GA1UdIwQYMBaAFBl5TzyqN1Unug/TNEgMfgM4554q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkE0OC9COUUyQUNBMEZF NTQxMUVFOTYxOUEzMTRDNEY5QUUwMi9HWGxQUEtvM1ZTZTZEOU0wU0F4LUF6am5u aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dYbFBQS28zVlNlNkQ5TTBTQXgtQXpqbm5pby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkE0OC9COUUyQUNBMEZFNTQxMUVFOTYxOUEzMTRDNEY5QUUwMi9HWGxQUEtvM1ZT ZTZEOU0wU0F4LUF6am5uaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7kZVTwCL6QBEknKq7VqLLYti62WrpPZgwziJ4H93k1OGaASQ92Zk6 WDHmkdP576f10jTkw5IYBmdCK1x3Hymlot6P1v5yXOGi67MuX1ZT1+UXke8XAFU+ 6+FKh1vVG/Kp46CpDcRjevYIrCs5naIHhRBmU3dqwhDhO3Avhh5+C0qrDWRR2pOs BDl6AK+umqN96hTPXzy2AUWnwklOIdHURBhbOPf4c7UaJaPuqlRCQABZAJsuZgMr afVM4pxv9Mz2tDUys8M/yKKScKNBru+14jgJoCGsO1t/tHrT5ujRF1MZ5HhKZfuc ItabDPttNArLDvJIeHubTj64XwuoM/a3 -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:19 2025 by rpki-client