$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft File: 1IztGPaMoiaYP5-ZmhQGNidbalU.mft (raw, json) Hash identifier: 0u55dASlJGGPznAlQrkqRwcuj3EI4kD4jBd9nF4O3WU= Subject key identifier: 59:A3:2C:FD:BE:2C:C5:11:C7:F6:B7:0F:23:15:3D:13:BE:6C:55:9C Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 Certificate issuer: /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Certificate serial: 0169 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft Manifest number: 0154 Signing time: Sat 25 Oct 2025 07:50:26 +0000 Manifest this update: Sat 25 Oct 2025 07:50:26 +0000 Manifest next update: Sat 01 Nov 2025 07:50:26 +0000 Files and hashes: 1: 1IztGPaMoiaYP5-ZmhQGNidbalU.crl (hash: b2ij5IfMcgYF8tE6mQzh+BInjxVZ65wEnPr4QAUKYKI=) 2: A3048576EC3911EEA6178B13C4F9AE02.roa (hash: VTp2ABLnUqS/Ob5XrNRvfYj53nTFMS/ZxCFHhPG4kpU=) 3: 1328B7DCBA6711EE9A63996FC4F9AE02.roa (hash: 5dFzBEhRX2qpf3v3P5WZEcaB5fBRXl7gbbBm5x4xFTk=) 4: D8BFCB26BA6611EE81A92E6FC4F9AE02.roa (hash: xLYaayOa6ljsfyz0Fl5EAR812aBmAL1bIciZu3m45qA=) 5: A17C3508168911EFBF38F580C4F9AE02.roa (hash: VX+Jv3bPS3HePtNKEWgfIHtlmIu9qG2L38hEMCHNp/A=) 6: EB3C8154EC3911EE98E62214C4F9AE02.roa (hash: QWiwvzdCs9QlEtO4vjDbxuVVXBGO2+18x2vf8VSunOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 07:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 361 (0x169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F535, serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Validity Not Before: Oct 25 07:50:26 2025 GMT Not After : Nov 1 07:50:26 2025 GMT Subject: CN=68fc8142-a2ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3a:26:24:bf:22:2c:5a:18:68:9b:0d:49:5f: 04:f9:38:5f:1a:9e:39:2b:a1:14:a8:dc:dc:6e:ae: b0:47:0d:9b:b1:05:86:5f:c1:1b:c2:96:06:25:ec: 03:06:0b:f2:a9:57:1f:ef:d2:92:19:04:60:27:a3: 34:a5:e5:fe:95:f6:1d:7c:90:40:76:80:a8:05:ed: ca:06:0f:5f:24:7d:3b:a2:c5:ac:8b:4d:41:f2:6a: e1:e5:8a:e7:d3:2d:1a:96:d6:c2:a0:b4:2b:3e:d7: a0:d4:3e:b9:83:6a:c3:54:81:24:5b:39:20:53:5c: 68:f4:28:e9:04:03:f9:e0:42:bb:0f:24:22:ef:b8: 59:57:24:b4:c0:99:e1:d8:76:5a:e4:75:84:8f:07: 04:2c:05:3f:bc:ef:64:50:b2:56:c0:3a:c3:44:66: 49:5e:61:4a:ca:69:b8:89:ef:a0:76:a3:04:9a:99: e5:26:93:77:61:58:a8:be:f5:45:d1:50:ba:b3:5c: 07:e4:cc:94:2f:b9:c7:80:8e:a6:01:cd:75:08:b8: a0:8c:64:29:4a:94:cd:08:55:de:9f:e7:d5:ca:5f: ec:5c:59:d0:18:c6:9c:57:33:f3:bf:c4:e2:48:97: d6:68:f9:d3:b6:cf:3b:85:1d:33:b4:78:bf:6d:a9: b4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A3:2C:FD:BE:2C:C5:11:C7:F6:B7:0F:23:15:3D:13:BE:6C:55:9C X509v3 Authority Key Identifier: keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:7f:22:23:28:a6:2b:5c:7f:a0:52:73:6e:0d:29:ea:dc:72: 63:c8:a0:f1:73:5c:f9:99:41:4e:b2:7d:54:cf:6d:43:71:0d: b7:bf:14:79:7a:29:55:2f:58:dc:9b:f6:bf:2d:1f:60:da:2d: 43:6a:25:e4:46:2b:ba:79:92:35:0f:30:3f:62:4b:bd:f9:d8: 7f:41:b6:6a:30:6b:e1:e9:e7:05:01:78:20:b1:e2:40:5d:90: 43:26:8c:3d:f6:1b:f6:c0:c2:49:44:a6:83:5a:59:60:ed:c3: d2:e7:02:96:7c:f5:ef:4d:7d:b2:2c:d7:ff:1b:70:e1:59:12: af:e0:77:83:41:eb:18:3a:0e:a4:e2:8d:48:eb:57:8a:60:8a: 41:77:73:da:f8:0c:07:4b:67:52:76:8a:50:2c:a2:34:5a:b8: 97:8b:31:95:31:69:cf:dd:e8:c9:11:27:fc:4a:21:00:fb:fe: 6c:53:90:e0:f9:fa:3a:22:f5:cb:6a:68:7c:64:00:af:d7:70: a8:b9:9f:2d:be:a4:fe:9d:39:fb:65:5e:44:c8:1d:83:57:b2: eb:21:1a:5d:00:22:8f:00:fb:ce:59:50:b1:b0:9a:a3:1f:66: 02:8e:1a:36:0b:02:0b:5d:11:78:be:e9:ca:f0:ee:82:29:84: d4:ed:3b:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY1MzUxMTAvBgNVBAUTKEQ0OENFRDE4RjY4Q0EyMjY5ODNGOUY5OTlBMTQwNjM2 Mjc1QjZBNTUwHhcNMjUxMDI1MDc1MDI2WhcNMjUxMTAxMDc1MDI2WjAYMRYwFAYD VQQDEw02OGZjODE0Mi1hMmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0DomJL8iLFoYaJsNSV8E+ThfGp45K6EUqNzcbq6wRw2bsQWGX8EbwpYGJewD BgvyqVcf79KSGQRgJ6M0peX+lfYdfJBAdoCoBe3KBg9fJH07osWsi01B8mrh5Yrn 0y0altbCoLQrPteg1D65g2rDVIEkWzkgU1xo9CjpBAP54EK7DyQi77hZVyS0wJnh 2HZa5HWEjwcELAU/vO9kULJWwDrDRGZJXmFKymm4ie+gdqMEmpnlJpN3YViovvVF 0VC6s1wH5MyUL7nHgI6mAc11CLigjGQpSpTNCFXen+fVyl/sXFnQGMacVzPzv8Ti SJfWaPnTts87hR0ztHi/bam0uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFmjLP2+ LMURx/a3DyMVPRO+bFWcMB8GA1UdIwQYMBaAFNSM7Rj2jKImmD+fmZoUBjYnW2pV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjUzNS82OUE1ODA3OEJB NjYxMUVFQkMzOTYyNkVDNEY5QUUwMi8xSXp0R1BhTW9pYVlQNS1abWhRR05pZGJh bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFJenRHUGFNb2lhWVA1LVptaFFHTmlkYmFsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjUzNS82OUE1ODA3OEJBNjYxMUVFQkMzOTYyNkVDNEY5QUUwMi8xSXp0R1BhTW9p YVlQNS1abWhRR05pZGJhbFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+fyIjKKYrXH+gUnNuDSnq3HJjyKDxc1z5mUFOsn1Uz21DcQ23vxR5 eilVL1jcm/a/LR9g2i1DaiXkRiu6eZI1DzA/Yku9+dh/QbZqMGvh6ecFAXggseJA XZBDJow99hv2wMJJRKaDWllg7cPS5wKWfPXvTX2yLNf/G3DhWRKv4HeDQesYOg6k 4o1I61eKYIpBd3Pa+AwHS2dSdopQLKI0WriXizGVMWnP3ejJESf8SiEA+/5sU5Dg +fo6IvXLamh8ZACv13CouZ8tvqT+nTn7ZV5EyB2DV7LrIRpdACKPAPvOWVCxsJqj H2YCjho2CwILXRF4vunK8O6CKYTU7TvN -----END CERTIFICATE-----Generated at Mon Oct 27 07:12:48 2025 by rpki-client