$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft File: GI72_1fx9ftPqwqu2qktYE8nVTA.mft (raw, json) Hash identifier: QTHFHwNe+MwnaNhrgxLogziY/bguLtVhCLU6aNopkuc= Subject key identifier: 9A:F5:A3:FC:43:51:B9:D4:0D:6A:9A:1C:C4:3B:5E:5F:AC:58:B2:40 Authority key identifier: 18:8E:F6:FF:57:F1:F5:FB:4F:AB:0A:AE:DA:A9:2D:60:4F:27:55:30 Certificate issuer: /CN=A91FEC1E/serialNumber=188EF6FF57F1F5FB4FAB0AAEDAA92D604F275530 Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft Manifest number: 55 Signing time: Mon 03 Nov 2025 07:11:10 +0000 Manifest this update: Mon 03 Nov 2025 07:11:09 +0000 Manifest next update: Mon 10 Nov 2025 07:11:09 +0000 Files and hashes: 1: GI72_1fx9ftPqwqu2qktYE8nVTA.crl (hash: OpvAhmd+XplW1/bvyYcsFketSNaFY2phdFgngSge3Ng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.crl rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:11:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEC1E, serialNumber=188EF6FF57F1F5FB4FAB0AAEDAA92D604F275530 Validity Not Before: Nov 3 07:11:09 2025 GMT Not After : Nov 10 07:11:09 2025 GMT Subject: CN=6908558d-d49a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:34:8a:6a:a3:c6:5e:74:2e:68:76:42:f6:2c: 65:b2:d1:8a:fb:cf:92:a2:fe:49:a1:d3:eb:22:b8: f9:14:11:b8:39:b8:66:84:28:3c:e8:fd:7e:20:b7: e2:1f:fc:a2:57:5a:c8:00:3a:ef:77:f9:4f:b9:ee: a7:56:80:c7:04:63:91:eb:b6:88:7b:7a:1e:e2:33: 35:90:54:0f:66:7b:33:fd:43:a2:36:94:c9:c2:b9: e7:43:27:d1:e4:10:2a:e3:81:08:86:08:2e:f6:1e: a2:13:ad:ae:c0:d4:69:46:e3:16:b3:aa:85:5d:2b: fd:14:ad:bd:b7:1e:45:88:cf:17:d5:fc:ae:78:ee: 1e:aa:c1:bd:3c:43:e9:50:8c:d4:ab:44:44:26:62: f2:f0:91:d7:cd:af:23:4d:23:8a:86:f9:b7:99:3e: 68:9f:8f:74:fd:b4:30:e7:25:43:f7:03:d2:f1:b1: db:d1:c8:2d:89:d5:eb:3b:ed:01:8a:74:fc:00:e5: b6:5c:38:59:19:53:ed:e8:34:33:a3:61:65:43:bc: f5:2f:47:6d:fa:48:05:83:0d:ac:2e:97:8b:88:05: f5:07:c9:f0:55:98:ae:79:0f:5a:f5:3e:0d:0c:33: 11:6d:65:5a:a9:10:ce:15:1c:cc:c1:86:7d:19:5c: 58:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F5:A3:FC:43:51:B9:D4:0D:6A:9A:1C:C4:3B:5E:5F:AC:58:B2:40 X509v3 Authority Key Identifier: keyid:18:8E:F6:FF:57:F1:F5:FB:4F:AB:0A:AE:DA:A9:2D:60:4F:27:55:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GI72_1fx9ftPqwqu2qktYE8nVTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEC1E/E725024E353A11F08C95C067C4F9AE02/GI72_1fx9ftPqwqu2qktYE8nVTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:c0:14:eb:ad:aa:56:af:95:ab:f5:0e:ec:14:f2:c1:2c:9b: 96:5e:f1:ec:35:8c:45:ed:6f:14:cf:fd:13:05:a4:6d:29:e9: 38:8e:a2:88:1b:dd:8e:f6:3a:1d:c6:49:b9:3d:5e:d8:9a:9f: a0:a5:af:53:09:9d:5b:82:df:d1:d5:42:44:64:2c:c7:eb:37: ed:86:08:e2:ef:3f:f1:64:bd:9e:64:41:e6:af:10:33:cd:70: 63:1e:6e:83:15:a1:7f:7d:bc:89:38:8a:62:99:8b:56:6a:8a: a7:d7:ec:a3:70:3d:d4:54:2b:72:30:6c:ec:8a:75:d6:07:bc: 54:be:4b:16:c7:c1:1d:65:98:58:14:df:3b:c3:95:a2:13:f9: 80:31:3a:5c:fa:a8:0d:c2:5c:2d:ee:f9:e2:7b:5a:c5:47:fb: c7:3c:5f:9d:0a:f1:74:a1:9e:33:79:d0:cd:01:c8:db:0a:78: c9:9c:88:b8:c5:f3:f3:8c:8d:ac:bc:df:07:b7:f3:5d:e8:28: ec:5d:fc:c8:4b:03:f1:df:e5:fb:c9:43:c4:a4:ee:b1:e3:b6: 07:2c:54:e5:56:5a:45:4b:8b:78:23:0b:2a:c6:9e:0c:62:4a: 76:51:89:90:1b:72:77:33:3c:7b:52:5d:a1:1f:b4:dc:45:88: 25:19:94:4b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RUMxRTExMC8GA1UEBRMoMTg4RUY2RkY1N0YxRjVGQjRGQUIwQUFFREFBOTJENjA0 RjI3NTUzMDAeFw0yNTExMDMwNzExMDlaFw0yNTExMTAwNzExMDlaMBgxFjAUBgNV BAMTDTY5MDg1NThkLWQ0OWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChNIpqo8ZedC5odkL2LGWy0Yr7z5Ki/kmh0+siuPkUEbg5uGaEKDzo/X4gt+If /KJXWsgAOu93+U+57qdWgMcEY5Hrtoh7eh7iMzWQVA9mezP9Q6I2lMnCuedDJ9Hk ECrjgQiGCC72HqITra7A1GlG4xazqoVdK/0Urb23HkWIzxfV/K547h6qwb08Q+lQ jNSrREQmYvLwkdfNryNNI4qG+beZPmifj3T9tDDnJUP3A9LxsdvRyC2J1es77QGK dPwA5bZcOFkZU+3oNDOjYWVDvPUvR236SAWDDawul4uIBfUHyfBVmK55D1r1Pg0M MxFtZVqpEM4VHMzBhn0ZXFiBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmvWj/ENR udQNapocxDteX6xYskAwHwYDVR0jBBgwFoAUGI72/1fx9ftPqwqu2qktYE8nVTAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFQzFFL0U3MjUwMjRFMzUz QTExRjA4Qzk1QzA2N0M0RjlBRTAyL0dJNzJfMWZ4OWZ0UHF3cXUycWt0WUU4blZU QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0k3Ml8xZng5ZnRQcXdxdTJxa3RZRThuVlRBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF QzFFL0U3MjUwMjRFMzUzQTExRjA4Qzk1QzA2N0M0RjlBRTAyL0dJNzJfMWZ4OWZ0 UHF3cXUycWt0WUU4blZUQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABjAFOutqlavlav1DuwU8sEsm5Ze8ew1jEXtbxTP/RMFpG0p6TiOoogb 3Y72Oh3GSbk9Xtian6Clr1MJnVuC39HVQkRkLMfrN+2GCOLvP/FkvZ5kQeavEDPN cGMeboMVoX99vIk4imKZi1ZqiqfX7KNwPdRUK3IwbOyKddYHvFS+SxbHwR1lmFgU 3zvDlaIT+YAxOlz6qA3CXC3u+eJ7WsVH+8c8X50K8XShnjN50M0ByNsKeMmciLjF 8/OMjay83we3813oKOxd/MhLA/Hf5fvJQ8Sk7rHjtgcsVOVWWkVLi3gjCyrGngxi SnZRiZAbcnczPHtSXaEftNxFiCUZlEs= -----END CERTIFICATE-----Generated at Wed Nov 5 07:58:44 2025 by rpki-client