$ rpki-client -vvf rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft File: 1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft (raw, json) Hash identifier: 9Q5ghBbqYt9g5uY6HXTcFTLd8SFe1mchju+ZvNcNgYQ= Subject key identifier: CB:46:B0:11:FA:6E:3E:46:41:CC:D4:CB:83:95:B4:98:BF:84:84:CD Authority key identifier: D4:B1:DD:3E:B1:A0:6F:A2:62:AB:6C:5E:BF:4A:F5:36:71:AC:D2:F4 Certificate issuer: /CN=A91311BC/serialNumber=D4B1DD3EB1A06FA262AB6C5EBF4AF53671ACD2F4 Certificate serial: 011C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft Manifest number: 0118 Signing time: Mon 03 Nov 2025 04:50:32 +0000 Manifest this update: Mon 03 Nov 2025 04:50:31 +0000 Manifest next update: Mon 10 Nov 2025 04:50:31 +0000 Files and hashes: 1: 1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl (hash: N9NG/2jUfvJc7hGJxLPk/Uk28tVG14++jwP+bR/DE4c=) 2: 4B0C31680FA511EFA3249B35C4F9AE02.roa (hash: xyAm+OptmLWgEZqD9AH33MZxMqQhEFXVgaoDCMDjmoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91311BC, serialNumber=D4B1DD3EB1A06FA262AB6C5EBF4AF53671ACD2F4 Validity Not Before: Nov 3 04:50:31 2025 GMT Not After : Nov 10 04:50:31 2025 GMT Subject: CN=69083498-7178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:cc:65:9b:00:e0:f0:c2:98:8b:b9:e6:6b:62: f6:0a:be:65:5f:62:5b:f1:df:ef:86:03:7a:30:ce: ad:33:e8:1d:09:29:86:d4:93:0c:f3:a7:38:15:74: 86:c1:83:4f:4f:97:63:a7:d7:27:24:b4:16:fe:be: b8:f4:01:c9:08:2e:c9:ce:5d:e4:3f:b5:de:65:11: 2e:18:af:09:36:83:5b:d1:e4:07:26:8f:30:41:a1: e9:03:1f:16:e4:a3:e9:5b:ab:e3:c8:d8:31:12:22: 46:96:a3:74:a3:7e:c0:0b:95:6e:e9:71:e7:3a:53: 26:26:2c:8b:d2:59:fd:54:b0:a3:62:07:ec:e7:46: 4b:8a:49:d4:9b:70:c3:cb:c0:a4:d4:f3:93:fb:3d: 13:b7:13:78:af:27:e8:95:3c:2e:4a:06:4b:75:61: 44:59:d1:07:53:b6:0f:80:e6:ff:36:dd:0a:ac:e6: 18:d5:1c:29:92:62:70:65:5a:61:80:63:a3:7e:c7: 7c:ff:a1:a7:f6:b4:34:46:ec:b0:a2:b4:4c:5c:df: fc:16:2e:82:58:1e:c9:e2:3d:d9:cf:85:57:c2:8a: 3f:c4:e8:a8:71:79:17:79:68:e1:03:1a:b9:c0:d2: 97:44:6f:a8:d7:07:6f:10:28:26:7d:e1:7b:b3:d8: 30:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:46:B0:11:FA:6E:3E:46:41:CC:D4:CB:83:95:B4:98:BF:84:84:CD X509v3 Authority Key Identifier: keyid:D4:B1:DD:3E:B1:A0:6F:A2:62:AB:6C:5E:BF:4A:F5:36:71:AC:D2:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:e6:a0:32:bd:c7:dd:98:c3:24:92:43:56:4f:63:e5:a7:a3: b3:57:d2:eb:8d:b8:f4:b2:6a:e4:9f:38:8d:06:b0:aa:35:10: 61:ae:39:b3:0e:b3:a4:a5:7f:b5:a2:42:64:a9:ae:a7:19:c2: b3:49:c5:4a:49:f2:1f:49:c7:89:12:b1:f9:b3:9c:23:33:7e: f2:42:52:79:e6:99:35:ef:5d:ba:13:cd:ed:5a:2d:da:99:ac: 27:e0:a1:68:b6:27:6f:54:b4:3e:53:d2:b6:1e:00:6f:50:3f: 5c:0e:a1:42:36:a7:15:f6:94:22:fd:84:c9:ff:fb:25:8e:06: 10:55:67:80:3c:bc:11:6c:b2:f1:d3:19:8a:75:a4:7a:c1:9a: cd:bd:e6:97:32:72:b2:6e:6f:2b:34:ba:9f:5c:1c:eb:be:85: 34:cc:cb:a8:8c:8e:73:21:5e:66:a6:4f:50:95:19:0f:e3:ff: 95:49:e5:0e:60:79:6f:64:ae:13:e2:5f:9b:fa:f6:b6:08:44: 96:47:86:70:91:9b:3f:24:5b:c1:c5:ce:0c:ea:3d:bc:e9:6f: f5:67:9e:03:97:4a:2c:40:02:35:5f:4c:1c:be:8c:c2:f5:49: 3a:f5:ca:de:8e:1e:f9:2a:cd:a6:a8:93:a2:4e:b7:37:ec:6d: fc:88:a2:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzExQkMxMTAvBgNVBAUTKEQ0QjFERDNFQjFBMDZGQTI2MkFCNkM1RUJGNEFGNTM2 NzFBQ0QyRjQwHhcNMjUxMTAzMDQ1MDMxWhcNMjUxMTEwMDQ1MDMxWjAYMRYwFAYD VQQDEw02OTA4MzQ5OC03MTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4MxlmwDg8MKYi7nma2L2Cr5lX2Jb8d/vhgN6MM6tM+gdCSmG1JMM86c4FXSG wYNPT5djp9cnJLQW/r649AHJCC7Jzl3kP7XeZREuGK8JNoNb0eQHJo8wQaHpAx8W 5KPpW6vjyNgxEiJGlqN0o37AC5Vu6XHnOlMmJiyL0ln9VLCjYgfs50ZLiknUm3DD y8Ck1POT+z0TtxN4ryfolTwuSgZLdWFEWdEHU7YPgOb/Nt0KrOYY1RwpkmJwZVph gGOjfsd8/6Gn9rQ0RuyworRMXN/8Fi6CWB7J4j3Zz4VXwoo/xOiocXkXeWjhAxq5 wNKXRG+o1wdvECgmfeF7s9gwQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMtGsBH6 bj5GQczUy4OVtJi/hITNMB8GA1UdIwQYMBaAFNSx3T6xoG+iYqtsXr9K9TZxrNL0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTFCQy8wNUVFQUJGQzBG QTQxMUVGQTNBQThEMzNDNEY5QUUwMi8xTEhkUHJHZ2I2SmlxMnhldjByMU5uR3Mw dlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFMSGRQckdnYjZKaXEyeGV2MHIxTm5HczB2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTFCQy8wNUVFQUJGQzBGQTQxMUVGQTNBQThEMzNDNEY5QUUwMi8xTEhkUHJHZ2I2 SmlxMnhldjByMU5uR3MwdlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBN5qAyvcfdmMMkkkNWT2Plp6OzV9Lrjbj0smrknziNBrCqNRBhrjmz DrOkpX+1okJkqa6nGcKzScVKSfIfSceJErH5s5wjM37yQlJ55pk17126E83tWi3a mawn4KFotidvVLQ+U9K2HgBvUD9cDqFCNqcV9pQi/YTJ//sljgYQVWeAPLwRbLLx 0xmKdaR6wZrNveaXMnKybm8rNLqfXBzrvoU0zMuojI5zIV5mpk9QlRkP4/+VSeUO YHlvZK4T4l+b+va2CESWR4ZwkZs/JFvBxc4M6j286W/1Z54Dl0osQAI1X0wcvozC 9Uk69crejh75Ks2mqJOiTrc37G38iKLU -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:48 2025 by rpki-client