$ rpki-client -vvf rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft File: 1r894WRB7X2HUG3gnk3V1jjgumk.mft (raw, json) Hash identifier: jxUGlxVCqmuxDRJ+vV8HbzrO1RL0j1Yh3S93JlK6zis= Subject key identifier: 76:5C:86:14:F3:9F:55:00:DA:D0:37:81:FA:A6:0D:01:C8:99:C8:77 Authority key identifier: D6:BF:3D:E1:64:41:ED:7D:87:50:6D:E0:9E:4D:D5:D6:38:E0:BA:69 Certificate issuer: /CN=A912F190/serialNumber=D6BF3DE16441ED7D87506DE09E4DD5D638E0BA69 Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft Manifest number: 0117 Signing time: Mon 03 Nov 2025 05:09:27 +0000 Manifest this update: Mon 03 Nov 2025 05:09:26 +0000 Manifest next update: Mon 10 Nov 2025 05:09:26 +0000 Files and hashes: 1: 1r894WRB7X2HUG3gnk3V1jjgumk.crl (hash: nOS/k2TaCfY5jf/kKG614mvMIBEKpdcPqipH1x0d1zk=) 2: 23CFDCD244BE11EF8FA8A37FC4F9AE02.roa (hash: vUDH2ZK5OJcy3mBbkdGoudlGrWh6Xv2GZJY44SeKbcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.crl rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:09:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F190, serialNumber=D6BF3DE16441ED7D87506DE09E4DD5D638E0BA69 Validity Not Before: Nov 3 05:09:26 2025 GMT Not After : Nov 10 05:09:26 2025 GMT Subject: CN=69083906-a4fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:96:22:bd:43:b0:78:f6:d8:87:c1:91:f5:8d: 72:d0:53:a4:d3:91:7a:cc:78:e7:21:48:4a:68:72: 67:b3:45:6a:1d:cd:67:c3:48:bd:5e:74:11:7c:1a: a0:73:c8:5c:7c:d4:3e:be:1f:12:1c:dd:68:c8:24: 66:29:55:b1:19:d1:36:f2:a9:4c:6e:78:e1:8d:4c: 74:63:ef:dc:80:9f:6a:11:b5:18:fa:92:1b:42:3e: 23:32:b2:e1:ac:16:8b:b3:5a:7d:56:f6:57:44:c3: 97:f9:d0:36:91:24:80:49:0c:5d:54:b1:27:bf:d6: 08:23:46:6a:2b:7a:f7:82:c8:28:b0:c0:27:fe:75: b1:93:96:ba:92:fe:0c:10:2a:01:af:b2:b2:8b:76: 68:11:b7:7e:d0:61:80:1f:db:66:57:78:90:7f:c0: a6:53:6d:ae:05:1b:c3:64:d9:dc:6c:06:8b:2a:37: bf:92:98:50:ed:ae:0e:ab:aa:db:03:b0:1e:15:0d: 87:77:be:e2:16:46:d3:fb:f6:17:2b:6f:ad:f6:3c: 56:3e:d6:de:a9:c4:4b:38:d3:fb:88:1c:4f:21:93: d9:9d:26:1f:7c:a9:30:97:f7:a7:c5:59:12:12:5b: 19:da:12:d6:99:5b:f8:de:48:e4:1a:61:d2:85:4b: 69:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:5C:86:14:F3:9F:55:00:DA:D0:37:81:FA:A6:0D:01:C8:99:C8:77 X509v3 Authority Key Identifier: keyid:D6:BF:3D:E1:64:41:ED:7D:87:50:6D:E0:9E:4D:D5:D6:38:E0:BA:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:81:a7:1a:38:b7:c6:5b:da:49:16:e8:c9:8b:f9:6b:90:f8: 7f:cc:db:8f:53:48:b0:15:32:30:31:68:b2:51:f6:18:d4:6b: c9:92:df:53:73:25:e6:9e:d8:01:db:dd:00:41:b5:82:6a:4a: 87:97:3b:e2:3b:67:ed:d3:4b:73:9f:f9:a8:00:c7:ed:ee:a9: 57:ec:26:e2:78:be:36:fc:92:0a:39:d2:5f:e1:94:84:fe:01: b2:14:9a:cd:33:69:8b:9f:38:eb:88:cf:a3:33:aa:1f:22:3e: ac:f0:e4:7b:87:78:44:d2:33:3d:b6:dd:87:40:53:5c:b5:d4: f0:57:03:f8:fa:77:0e:0f:a9:51:99:6d:02:cb:99:10:36:b5: 94:42:b7:d3:9e:c3:2a:55:5f:d7:b8:92:57:b3:f0:83:c5:b7: 1b:1f:42:98:36:d6:9c:30:ab:e5:d0:7a:df:67:59:a0:c1:72: f4:2e:40:70:34:b9:f7:d4:24:d3:64:db:61:87:75:81:00:f6: 93:34:10:4a:1c:7a:35:24:c9:d1:66:86:45:70:63:1b:55:07: 58:72:36:9d:7b:c8:81:89:d8:3e:3a:44:29:d2:e6:78:2f:0b: fe:16:c8:7f:20:d2:31:bb:a4:d6:49:82:42:79:f9:ea:c2:7b: df:0b:0e:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxOTAxMTAvBgNVBAUTKEQ2QkYzREUxNjQ0MUVEN0Q4NzUwNkRFMDlFNERENUQ2 MzhFMEJBNjkwHhcNMjUxMTAzMDUwOTI2WhcNMjUxMTEwMDUwOTI2WjAYMRYwFAYD VQQDEw02OTA4MzkwNi1hNGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZYivUOwePbYh8GR9Y1y0FOk05F6zHjnIUhKaHJns0VqHc1nw0i9XnQRfBqg c8hcfNQ+vh8SHN1oyCRmKVWxGdE28qlMbnjhjUx0Y+/cgJ9qEbUY+pIbQj4jMrLh rBaLs1p9VvZXRMOX+dA2kSSASQxdVLEnv9YII0ZqK3r3gsgosMAn/nWxk5a6kv4M ECoBr7Kyi3ZoEbd+0GGAH9tmV3iQf8CmU22uBRvDZNncbAaLKje/kphQ7a4Oq6rb A7AeFQ2Hd77iFkbT+/YXK2+t9jxWPtbeqcRLONP7iBxPIZPZnSYffKkwl/enxVkS ElsZ2hLWmVv43kjkGmHShUtp7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZchhTz n1UA2tA3gfqmDQHImch3MB8GA1UdIwQYMBaAFNa/PeFkQe19h1Bt4J5N1dY44Lpp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjE5MC81N0I0MDU5NDNB ODQxMUVGQTU3MzE1ODRDNEY5QUUwMi8xcjg5NFdSQjdYMkhVRzNnbmszVjFqamd1 bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFyODk0V1JCN1gySFVHM2duazNWMWpqZ3Vtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjE5MC81N0I0MDU5NDNBODQxMUVGQTU3MzE1ODRDNEY5QUUwMi8xcjg5NFdSQjdY MkhVRzNnbmszVjFqamd1bWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOgacaOLfGW9pJFujJi/lrkPh/zNuPU0iwFTIwMWiyUfYY1GvJkt9T cyXmntgB290AQbWCakqHlzviO2ft00tzn/moAMft7qlX7CbieL42/JIKOdJf4ZSE /gGyFJrNM2mLnzjriM+jM6ofIj6s8OR7h3hE0jM9tt2HQFNctdTwVwP4+ncOD6lR mW0Cy5kQNrWUQrfTnsMqVV/XuJJXs/CDxbcbH0KYNtacMKvl0HrfZ1mgwXL0LkBw NLn31CTTZNthh3WBAPaTNBBKHHo1JMnRZoZFcGMbVQdYcjade8iBidg+OkQp0uZ4 Lwv+Fsh/INIxu6TWSYJCefnqwnvfCw6h -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:32 2025 by rpki-client