$ rpki-client -vvf rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft File: 1cBKCsLVKt_nBVZHjcsOHYHtENo.mft (raw, json) Hash identifier: 9Jq+mAmloJ2e0etk31W6K0bF1XtnBK1aRQxP42x13z0= Subject key identifier: D3:6D:72:3E:F7:D3:E6:78:C0:C1:3D:77:5E:AC:E6:C9:E6:C2:1D:65 Authority key identifier: D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA Certificate issuer: /CN=A91284EC/serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA Certificate serial: 04C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft Manifest number: 04C2 Signing time: Sun 02 Nov 2025 23:50:56 +0000 Manifest this update: Sun 02 Nov 2025 23:50:55 +0000 Manifest next update: Sun 09 Nov 2025 23:50:55 +0000 Files and hashes: 1: 1cBKCsLVKt_nBVZHjcsOHYHtENo.crl (hash: iF7HP8Re+kdX2M2FLaSyDFTCc+bxgGxtTfMWDaZmDqI=) 2: F11B4C14E40111ECBD78E571C4F9AE02.roa (hash: viYY8r9Z3djQTP7Mtv5p3ALckTBTe0eKvVy/mChOa9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:50:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1225 (0x4c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91284EC, serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA Validity Not Before: Nov 2 23:50:55 2025 GMT Not After : Nov 9 23:50:55 2025 GMT Subject: CN=6907ee5f-310c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:75:cb:82:98:c2:5c:40:ab:80:15:1d:3f:1d: c8:cc:fc:34:13:01:a8:d8:36:2e:c3:d9:bb:9a:bb: 6a:d0:8a:8b:ac:df:00:8f:0d:0e:98:3b:b7:d8:99: 15:bc:75:94:ce:4e:e6:b6:de:80:a9:8c:da:58:41: 05:df:a0:44:17:41:37:cf:af:fb:f3:dc:05:db:d2: 32:aa:da:ed:96:47:b5:78:a2:9c:47:e7:24:d1:ad: 79:45:ea:8c:3d:24:67:36:81:b4:88:45:0a:21:b3: 28:db:86:0d:2e:a5:eb:f1:68:7e:5f:3d:0c:45:f1: fe:63:3a:f3:a0:06:e5:56:39:e8:19:e3:7b:e4:a0: f3:54:61:4d:b9:9d:f4:f1:1a:a7:59:e4:ab:ab:98: 76:33:96:d5:a1:4f:33:36:df:e3:8d:3a:f4:c6:c2: 0a:e8:e5:72:29:13:22:07:cc:92:81:69:0e:b8:23: 85:28:1a:4c:80:6a:60:e7:69:67:88:cd:e8:01:ba: 6f:2c:c9:37:f5:98:e4:a5:c1:93:e8:0b:65:4a:9e: f1:63:f9:00:03:62:4d:83:7a:3f:04:6b:01:ca:a5: 6b:bb:76:66:cb:af:0d:e4:f5:f0:24:be:65:36:fe: 9b:8d:c0:b7:fc:4b:81:de:97:f2:73:ff:39:82:0f: 7a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6D:72:3E:F7:D3:E6:78:C0:C1:3D:77:5E:AC:E6:C9:E6:C2:1D:65 X509v3 Authority Key Identifier: keyid:D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:82:33:6a:f9:0a:83:48:65:13:cb:4d:22:a2:e5:b9:07:5e: ff:8d:ea:ea:8f:71:27:e7:99:76:71:88:04:57:df:be:de:6e: d4:32:13:0f:4c:ed:87:6f:96:5c:78:01:0d:4a:46:ae:1d:fb: 31:32:f7:53:49:6c:97:5b:da:3f:06:23:6f:7f:88:7f:0c:c7: 69:50:00:e8:1c:16:36:b0:7a:88:82:09:7d:3b:af:33:f1:d2: 9c:6f:fe:d6:d2:6c:cb:64:59:8c:2a:27:11:48:07:71:ba:bd: 4e:51:19:67:78:7a:90:58:a7:98:f0:17:ce:59:45:c3:10:61: 07:d8:6a:c7:68:bd:af:26:4b:fb:c1:ed:bd:27:f3:d9:12:0a: 34:2a:3c:05:8a:d6:00:79:46:8d:bb:a8:b7:ce:f1:b9:fe:0c: 85:5f:3f:b9:bf:59:37:8a:bf:c1:41:cf:1b:2b:f7:f4:1c:0b: fc:53:49:a2:0f:eb:00:47:72:c8:0b:c8:15:7b:96:17:ff:cd: 38:3b:d8:09:cf:96:60:3e:3a:81:ad:5f:17:89:25:c1:66:91: 04:7b:8a:3c:63:74:a2:04:f9:db:d1:ff:8c:5e:64:12:ed:00: a1:3d:88:12:42:be:af:2f:fc:9e:b6:47:ae:59:c5:90:dc:8b: 7e:37:46:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg0RUMxMTAvBgNVBAUTKEQ1QzA0QTBBQzJENTJBREZFNzA1NTY0NzhEQ0IwRTFE ODFFRDEwREEwHhcNMjUxMTAyMjM1MDU1WhcNMjUxMTA5MjM1MDU1WjAYMRYwFAYD VQQDEw02OTA3ZWU1Zi0zMTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4XXLgpjCXECrgBUdPx3IzPw0EwGo2DYuw9m7mrtq0IqLrN8Ajw0OmDu32JkV vHWUzk7mtt6AqYzaWEEF36BEF0E3z6/789wF29Iyqtrtlke1eKKcR+ck0a15ReqM PSRnNoG0iEUKIbMo24YNLqXr8Wh+Xz0MRfH+YzrzoAblVjnoGeN75KDzVGFNuZ30 8RqnWeSrq5h2M5bVoU8zNt/jjTr0xsIK6OVyKRMiB8ySgWkOuCOFKBpMgGpg52ln iM3oAbpvLMk39ZjkpcGT6AtlSp7xY/kAA2JNg3o/BGsByqVru3Zmy68N5PXwJL5l Nv6bjcC3/EuB3pfyc/85gg96dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNtcj73 0+Z4wME9d16s5snmwh1lMB8GA1UdIwQYMBaAFNXASgrC1Srf5wVWR43LDh2B7RDa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODRFQy9FQkY2MDFGQzQ4 Q0YxMUVDQTY2NkIwM0VDNEY5QUUwMi8xY0JLQ3NMVkt0X25CVlpIamNzT0hZSHRF Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjQktDc0xWS3RfbkJWWkhqY3NPSFlIdEVOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODRFQy9FQkY2MDFGQzQ4Q0YxMUVDQTY2NkIwM0VDNEY5QUUwMi8xY0JLQ3NMVkt0 X25CVlpIamNzT0hZSHRFTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfgjNq+QqDSGUTy00iouW5B17/jerqj3En55l2cYgEV9++3m7UMhMP TO2Hb5ZceAENSkauHfsxMvdTSWyXW9o/BiNvf4h/DMdpUADoHBY2sHqIggl9O68z 8dKcb/7W0mzLZFmMKicRSAdxur1OURlneHqQWKeY8BfOWUXDEGEH2GrHaL2vJkv7 we29J/PZEgo0KjwFitYAeUaNu6i3zvG5/gyFXz+5v1k3ir/BQc8bK/f0HAv8U0mi D+sAR3LIC8gVe5YX/804O9gJz5ZgPjqBrV8XiSXBZpEEe4o8Y3SiBPnb0f+MXmQS 7QChPYgSQr6vL/yetkeuWcWQ3It+N0bX -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:22 2025 by rpki-client