$ rpki-client -vvf rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft File: GHkad7eTMW9ffev2Atp8TmnIvGs.mft (raw, json) Hash identifier: XqT5LtvnXtmvKbQzH4bKYEzFl9DffhaNAj9mApjWYsk= Subject key identifier: EE:33:7A:27:89:0B:BA:CE:3A:96:79:EE:6F:9C:4A:9F:90:97:14:DD Authority key identifier: 18:79:1A:77:B7:93:31:6F:5F:7D:EB:F6:02:DA:7C:4E:69:C8:BC:6B Certificate issuer: /CN=A9185259/serialNumber=18791A77B793316F5F7DEBF602DA7C4E69C8BC6B Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHkad7eTMW9ffev2Atp8TmnIvGs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft Manifest number: 13 Signing time: Mon 03 Nov 2025 07:54:14 +0000 Manifest this update: Mon 03 Nov 2025 07:54:14 +0000 Manifest next update: Mon 10 Nov 2025 07:54:14 +0000 Files and hashes: 1: GHkad7eTMW9ffev2Atp8TmnIvGs.crl (hash: Ag3G++InxWR5DBa+W0xI9jtVnoqe6eAIrtdd7L9Sq7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.crl rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHkad7eTMW9ffev2Atp8TmnIvGs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185259, serialNumber=18791A77B793316F5F7DEBF602DA7C4E69C8BC6B Validity Not Before: Nov 3 07:54:14 2025 GMT Not After : Nov 10 07:54:14 2025 GMT Subject: CN=69085fa6-31c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0d:86:9b:60:20:e1:c5:05:f2:6b:81:9f:26: 24:10:d6:ec:ad:d2:25:72:90:a5:1e:cc:0e:ee:52: d4:ca:3d:4c:25:67:ce:c9:8b:12:ca:a2:02:8e:38: 66:e3:9f:e2:97:12:9c:ea:73:2e:7e:ce:a8:d5:a6: e0:46:5a:e9:bf:df:33:76:fc:a4:fa:f7:38:85:db: c8:32:af:4a:a6:7b:70:7e:f3:0c:1b:b4:87:0d:b2: 9e:f6:36:5c:3c:04:81:43:39:7d:88:64:6a:22:a9: a6:e4:d8:8d:25:d8:54:09:8b:b3:ee:eb:12:8b:82: 24:81:48:99:b7:22:b1:05:4b:f1:2b:c1:a6:64:2e: 12:4a:3e:9d:41:3c:f2:03:29:7b:df:01:d2:63:b2: ca:e8:f5:ac:d3:7a:1a:d1:31:17:b3:d1:68:77:9a: e8:e5:a2:d7:98:99:3a:8e:06:2f:bf:97:c5:7f:34: 6d:e8:b1:95:1a:bf:99:82:0a:05:ce:03:2f:2e:4e: 52:8b:e1:ba:33:b1:fc:ee:4c:47:bd:8a:d1:70:2a: 18:32:37:7e:9f:b3:45:27:21:10:5c:0a:21:5d:c0: eb:2e:0d:e5:61:5b:51:f4:5f:aa:e0:4c:cf:69:81: c5:a1:48:e9:89:fb:fc:39:79:6d:22:e1:b3:60:18: 7f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:33:7A:27:89:0B:BA:CE:3A:96:79:EE:6F:9C:4A:9F:90:97:14:DD X509v3 Authority Key Identifier: keyid:18:79:1A:77:B7:93:31:6F:5F:7D:EB:F6:02:DA:7C:4E:69:C8:BC:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHkad7eTMW9ffev2Atp8TmnIvGs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:e2:ef:22:a7:7a:5a:0f:8c:e8:6c:a1:90:12:b8:41:49:53: 46:b1:01:60:8d:0e:6d:9b:d5:91:37:e5:7b:13:2c:63:96:44: 0c:27:12:51:4b:eb:ea:c1:6b:0a:f6:c8:73:20:f6:dc:a4:b3: 36:66:e4:47:65:70:7b:94:cc:eb:23:dc:30:7e:f8:d2:bc:c0: 5b:bb:84:22:0d:76:11:d9:1b:b9:29:24:c2:3e:f0:f2:3b:04: ce:46:5a:6a:2d:a7:bc:8c:53:9a:bf:a1:5c:3a:33:b7:48:f9: 4a:19:5c:87:5d:87:02:71:62:f8:82:12:99:7c:9c:9d:57:68: 6b:67:fa:a1:15:51:cc:cd:3a:96:13:81:62:52:fb:9a:70:b1: 12:fd:c1:03:e8:7d:24:d8:e2:d1:dd:b5:b3:9b:48:03:cc:86: e5:0f:71:06:9d:a2:96:c3:3d:16:1e:e6:22:49:d0:25:ae:88: 31:35:f1:9a:d9:f5:34:8d:0e:84:48:3c:e0:12:9f:fe:b6:23: 7e:08:31:1a:40:4e:bc:92:4b:53:04:3b:65:47:d2:e5:47:a8: c0:db:22:c7:7f:e0:a5:2e:0f:cc:bf:53:51:9d:f6:a9:90:35: 93:44:fe:22:96:f1:b6:02:b8:d2:7d:61:5d:fe:40:68:c0:94: 61:b7:a0:32 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NTI1OTExMC8GA1UEBRMoMTg3OTFBNzdCNzkzMzE2RjVGN0RFQkY2MDJEQTdDNEU2 OUM4QkM2QjAeFw0yNTExMDMwNzU0MTRaFw0yNTExMTAwNzU0MTRaMBgxFjAUBgNV BAMTDTY5MDg1ZmE2LTMxYzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbDYabYCDhxQXya4GfJiQQ1uyt0iVykKUezA7uUtTKPUwlZ87JixLKogKOOGbj n+KXEpzqcy5+zqjVpuBGWum/3zN2/KT69ziF28gyr0qme3B+8wwbtIcNsp72Nlw8 BIFDOX2IZGoiqabk2I0l2FQJi7Pu6xKLgiSBSJm3IrEFS/ErwaZkLhJKPp1BPPID KXvfAdJjssro9azTehrRMRez0Wh3mujloteYmTqOBi+/l8V/NG3osZUav5mCCgXO Ay8uTlKL4bozsfzuTEe9itFwKhgyN36fs0UnIRBcCiFdwOsuDeVhW1H0X6rgTM9p gcWhSOmJ+/w5eW0i4bNgGH8BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7jN6J4kL us46lnnub5xKn5CXFN0wHwYDVR0jBBgwFoAUGHkad7eTMW9ffev2Atp8TmnIvGsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1MjU5LzA4NEY5MjU2OUNG OTExRjA4ODEyREUxRUM0RjlBRTAyL0dIa2FkN2VUTVc5ZmZldjJBdHA4VG1uSXZH cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0hrYWQ3ZVRNVzlmZmV2MkF0cDhUbW5JdkdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1 MjU5LzA4NEY5MjU2OUNGOTExRjA4ODEyREUxRUM0RjlBRTAyL0dIa2FkN2VUTVc5 ZmZldjJBdHA4VG1uSXZHcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFXi7yKneloPjOhsoZASuEFJU0axAWCNDm2b1ZE35XsTLGOWRAwnElFL 6+rBawr2yHMg9tykszZm5EdlcHuUzOsj3DB++NK8wFu7hCINdhHZG7kpJMI+8PI7 BM5GWmotp7yMU5q/oVw6M7dI+UoZXIddhwJxYviCEpl8nJ1XaGtn+qEVUczNOpYT gWJS+5pwsRL9wQPofSTY4tHdtbObSAPMhuUPcQadopbDPRYe5iJJ0CWuiDE18ZrZ 9TSNDoRIPOASn/62I34IMRpATrySS1MEO2VH0uVHqMDbIsd/4KUuD8y/U1Gd9qmQ NZNE/iKW8bYCuNJ9YV3+QGjAlGG3oDI= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:55 2025 by rpki-client