$ rpki-client -vvf rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft File: 1cNfp3myIZlgnD6gpTHFoNMyrQE.mft (raw, json) Hash identifier: nMdNGQkJ13Xn0bzihWIN3vlgYPFGMauzH1xCb9GHxew= Subject key identifier: 7A:2F:49:BB:3F:16:E2:F2:61:D1:7B:E6:7E:B5:0C:38:76:BF:18:3D Authority key identifier: D5:C3:5F:A7:79:B2:21:99:60:9C:3E:A0:A5:31:C5:A0:D3:32:AD:01 Certificate issuer: /CN=A912A8BC/serialNumber=D5C35FA779B22199609C3EA0A531C5A0D332AD01 Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft Manifest number: 01D8 Signing time: Mon 03 Nov 2025 02:44:08 +0000 Manifest this update: Mon 03 Nov 2025 02:44:07 +0000 Manifest next update: Mon 10 Nov 2025 02:44:07 +0000 Files and hashes: 1: 1cNfp3myIZlgnD6gpTHFoNMyrQE.crl (hash: n9KSbRl3XjiN7FCZqPtfrfY+5p00Ureedx0LpSQq2g4=) 2: 4D962E8AE65111ED90E5833EC4F9AE02.roa (hash: 3SQV1F9slNIO5M7UqEAQZkXcxMO9bvgWNAs/r+smThc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.crl rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:44:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A8BC, serialNumber=D5C35FA779B22199609C3EA0A531C5A0D332AD01 Validity Not Before: Nov 3 02:44:07 2025 GMT Not After : Nov 10 02:44:07 2025 GMT Subject: CN=690816f8-5dd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bd:64:c0:e1:d1:0b:ab:11:1d:b6:01:74:03: 1e:22:55:2f:9f:e4:0e:49:88:f5:2f:56:95:e3:7d: b6:87:3f:43:b5:b4:92:4b:7b:10:14:15:f2:d9:02: f1:e5:af:f6:3f:46:27:24:38:8f:6d:50:c3:78:2a: ca:b9:ee:87:09:21:43:72:6b:a1:e3:20:08:03:87: 4e:54:9c:50:53:8a:07:cc:bb:51:d3:41:9d:bb:ad: 59:ab:b4:b4:41:79:34:eb:f1:3c:6b:20:1e:5b:b5: 2d:02:09:5a:42:8e:d9:1d:41:a5:0d:c6:1d:2f:82: ce:aa:0f:09:c2:d8:f9:8c:75:c9:37:bb:c3:08:64: 33:d8:44:ce:33:22:a8:70:bb:4f:59:f3:b0:09:b7: 35:91:fc:95:85:79:44:91:be:b1:a3:c0:48:1a:a0: 6d:0c:cf:61:a9:cf:bf:2e:d9:98:4b:b7:ac:da:d7: fa:1e:b8:c5:6d:9b:07:e3:0a:26:92:fa:e1:b3:8b: b1:e6:7f:b2:a7:c3:2a:11:1a:ce:33:e9:b8:f9:b0: b6:68:5a:f6:1f:3e:4d:e5:14:c3:75:44:b5:e6:8a: e8:1c:68:cb:9c:4d:75:5f:82:e6:46:7b:00:d7:68: aa:80:f8:d9:b3:79:e4:03:ed:9b:87:5d:e3:5d:6a: 00:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:2F:49:BB:3F:16:E2:F2:61:D1:7B:E6:7E:B5:0C:38:76:BF:18:3D X509v3 Authority Key Identifier: keyid:D5:C3:5F:A7:79:B2:21:99:60:9C:3E:A0:A5:31:C5:A0:D3:32:AD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:e1:92:2c:58:82:a4:47:10:47:dd:dc:2b:f1:32:a0:c9:ba: e4:73:9f:a1:8f:1f:3b:0e:f7:b6:27:11:48:be:e3:b4:08:e8: fa:05:df:f8:88:5e:c2:00:df:1a:64:4e:53:c7:41:8b:57:f9: ff:66:72:7c:c3:82:c1:95:3a:55:db:a1:33:66:da:b4:6b:7a: 1d:31:69:ae:48:75:97:33:4d:41:14:ac:23:43:b7:74:ee:bc: 2e:1e:6f:a4:e1:f9:ac:8b:98:47:62:cb:df:88:af:df:e4:b3: 48:68:72:67:e9:e6:ed:6b:01:9b:4e:fe:f8:91:1c:8b:3d:9e: 3c:49:40:f9:a1:1b:e9:57:72:02:10:fd:ce:c1:cf:19:b3:b3: 66:d8:f1:43:42:ed:44:fd:8a:f9:98:62:5b:cd:80:f5:ae:4e: 48:e2:60:04:90:24:19:26:f9:48:18:ee:23:0b:3c:25:09:e9: d9:6e:7b:81:1d:05:8d:96:f1:17:9e:1b:34:e1:1a:6b:b4:31: 0a:9d:5a:c9:19:ae:97:94:1f:1c:8b:ad:63:c3:4c:52:a5:08: c5:23:5e:f0:33:11:bc:16:7a:72:a3:05:62:42:26:bd:b8:80: 48:7c:64:75:7a:a5:04:06:03:bc:d0:a2:b4:a1:3c:d6:6b:1e: a1:f6:49:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE4QkMxMTAvBgNVBAUTKEQ1QzM1RkE3NzlCMjIxOTk2MDlDM0VBMEE1MzFDNUEw RDMzMkFEMDEwHhcNMjUxMTAzMDI0NDA3WhcNMjUxMTEwMDI0NDA3WjAYMRYwFAYD VQQDEw02OTA4MTZmOC01ZGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsL1kwOHRC6sRHbYBdAMeIlUvn+QOSYj1L1aV4322hz9DtbSSS3sQFBXy2QLx 5a/2P0YnJDiPbVDDeCrKue6HCSFDcmuh4yAIA4dOVJxQU4oHzLtR00Gdu61Zq7S0 QXk06/E8ayAeW7UtAglaQo7ZHUGlDcYdL4LOqg8Jwtj5jHXJN7vDCGQz2ETOMyKo cLtPWfOwCbc1kfyVhXlEkb6xo8BIGqBtDM9hqc+/LtmYS7es2tf6HrjFbZsH4wom kvrhs4ux5n+yp8MqERrOM+m4+bC2aFr2Hz5N5RTDdUS15oroHGjLnE11X4LmRnsA 12iqgPjZs3nkA+2bh13jXWoA4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHovSbs/ FuLyYdF75n61DDh2vxg9MB8GA1UdIwQYMBaAFNXDX6d5siGZYJw+oKUxxaDTMq0B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQThCQy8wNTRBNEM1MEU2 NEQxMUVEQjNGODE3MzdDNEY5QUUwMi8xY05mcDNteUlabGduRDZncFRIRm9OTXly UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjTmZwM215SVpsZ25ENmdwVEhGb05NeXJRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QThCQy8wNTRBNEM1MEU2NEQxMUVEQjNGODE3MzdDNEY5QUUwMi8xY05mcDNteUla bGduRDZncFRIRm9OTXlyUUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCY4ZIsWIKkRxBH3dwr8TKgybrkc5+hjx87Dve2JxFIvuO0COj6Bd/4 iF7CAN8aZE5Tx0GLV/n/ZnJ8w4LBlTpV26EzZtq0a3odMWmuSHWXM01BFKwjQ7d0 7rwuHm+k4fmsi5hHYsvfiK/f5LNIaHJn6ebtawGbTv74kRyLPZ48SUD5oRvpV3IC EP3Owc8Zs7Nm2PFDQu1E/Yr5mGJbzYD1rk5I4mAEkCQZJvlIGO4jCzwlCenZbnuB HQWNlvEXnhs04RprtDEKnVrJGa6XlB8ci61jw0xSpQjFI17wMxG8FnpyowViQia9 uIBIfGR1eqUEBgO80KK0oTzWax6h9kmg -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:37 2025 by rpki-client