$ rpki-client -vvf rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft File: 1gA1BzfqQktAGySBBT0rwpFsutE.mft (raw, json) Hash identifier: f2JHOTGUASWX0W1lqLh4nBJzw4v5wsHsCjb9lJy3ZQ0= Subject key identifier: 39:E8:E0:8C:CF:10:8C:7B:02:B7:5D:B9:3E:E7:15:D9:2A:C6:AA:43 Authority key identifier: D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1 Certificate issuer: /CN=A9154973/serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1 Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft Manifest number: E7 Signing time: Mon 03 Nov 2025 05:28:59 +0000 Manifest this update: Mon 03 Nov 2025 05:28:58 +0000 Manifest next update: Mon 10 Nov 2025 05:28:58 +0000 Files and hashes: 1: 1gA1BzfqQktAGySBBT0rwpFsutE.crl (hash: xzbvKbVpiAPgNHbfd34PlJykkVeObPZ6EBwHl6FD5ow=) 2: FD557922606A11EF8B9F6820C4F9AE02.roa (hash: ewsNS72wnAdnQiFMusstfvI/PZNeUDtev9nr2+xdPsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154973, serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1 Validity Not Before: Nov 3 05:28:58 2025 GMT Not After : Nov 10 05:28:58 2025 GMT Subject: CN=69083d9a-4e87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:59:7a:1d:af:c1:e6:32:55:b1:69:cc:44:90: 5e:78:ff:15:0a:32:b8:c8:df:5c:28:a2:5d:2c:7a: f8:6a:30:5d:42:02:db:4b:19:af:a9:b6:9d:d8:a8: 4a:03:ca:8d:8d:3e:d2:38:31:1b:ef:28:c4:c9:6e: 08:28:ff:2d:ac:81:de:7d:db:f5:1c:c6:79:75:29: ae:b6:f5:56:b7:6a:66:9e:05:12:d1:ee:bc:b4:69: f5:a3:0e:ed:82:bb:67:f1:fa:e9:91:4b:46:1b:e9: 99:63:fe:8b:f2:92:4a:4b:3e:ba:ad:75:96:c2:6f: f3:aa:14:ed:47:8b:68:95:91:4d:6e:aa:3c:41:51: f1:a0:e3:1a:9e:90:80:20:66:69:e3:2d:e9:1c:60: 88:ee:6e:d9:61:a0:ae:6d:70:c3:9c:48:be:68:58: 84:36:c3:a3:fc:5d:6b:1c:57:1d:10:69:26:58:d1: 95:e5:94:a3:3d:b5:93:6c:72:3d:57:52:75:bc:4e: 41:4a:03:20:e5:ed:ad:af:f7:97:5f:a3:f3:9d:7c: e0:59:ef:1b:c9:2f:ef:9d:a8:5b:e6:52:7b:b4:8d: d2:96:5a:8c:3c:18:6c:2b:5b:eb:be:fe:0e:cf:61: 75:5e:5e:a3:a9:52:22:f5:73:c9:f1:f3:2a:72:cd: 70:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E8:E0:8C:CF:10:8C:7B:02:B7:5D:B9:3E:E7:15:D9:2A:C6:AA:43 X509v3 Authority Key Identifier: keyid:D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:3b:b1:80:9b:cf:07:f3:65:13:fe:cd:d2:8b:89:2c:7a:f7: 23:53:ac:41:ee:d9:c8:41:5c:70:76:3f:dd:ae:d9:6d:dd:c0: 3d:53:a2:60:f5:bd:a1:67:56:b8:df:53:98:06:f8:73:d3:9a: 6f:24:94:42:a6:23:ea:09:40:c7:99:ea:13:99:c7:13:4a:f7: e0:ba:8d:55:cf:dd:bc:f9:7a:6d:07:b4:38:5b:d5:2d:d1:c5: 14:3a:52:bf:25:b0:16:f0:f4:d1:d1:26:d4:bc:e7:26:a0:43: d9:ac:87:5f:ef:26:ec:04:5d:dd:1d:7a:be:bc:01:b0:c9:ed: b5:1e:22:d5:51:1f:78:15:d9:72:51:a5:e2:fd:6b:41:36:f0: 2b:f4:b8:ee:e1:ef:d0:4f:5c:2c:95:80:d1:ad:dc:5e:fe:6f: ef:86:87:7d:05:fc:67:67:70:c1:90:a5:2b:e7:57:f0:c1:3b: 2a:fd:e2:14:88:fe:a9:5e:d6:5f:9c:a1:c4:a3:46:97:89:fd: 9e:72:f5:58:65:a8:e8:ec:88:15:fd:4f:13:ff:06:80:2a:7a: 9f:81:fe:bb:c9:eb:6a:b7:bc:f8:09:c6:a9:1f:94:7f:3f:f9: 9d:e2:a0:b4:1b:cf:14:32:d7:cc:b4:50:8b:9a:2f:24:f8:14: ed:db:eb:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ5NzMxMTAvBgNVBAUTKEQ2MDAzNTA3MzdFQTQyNEI0MDFCMjQ4MTA1M0QyQkMy OTE2Q0JBRDEwHhcNMjUxMTAzMDUyODU4WhcNMjUxMTEwMDUyODU4WjAYMRYwFAYD VQQDEw02OTA4M2Q5YS00ZTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Fl6Ha/B5jJVsWnMRJBeeP8VCjK4yN9cKKJdLHr4ajBdQgLbSxmvqbad2KhK A8qNjT7SODEb7yjEyW4IKP8trIHefdv1HMZ5dSmutvVWt2pmngUS0e68tGn1ow7t grtn8frpkUtGG+mZY/6L8pJKSz66rXWWwm/zqhTtR4tolZFNbqo8QVHxoOManpCA IGZp4y3pHGCI7m7ZYaCubXDDnEi+aFiENsOj/F1rHFcdEGkmWNGV5ZSjPbWTbHI9 V1J1vE5BSgMg5e2tr/eXX6PznXzgWe8byS/vnahb5lJ7tI3SllqMPBhsK1vrvv4O z2F1Xl6jqVIi9XPJ8fMqcs1wCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDno4IzP EIx7ArdduT7nFdkqxqpDMB8GA1UdIwQYMBaAFNYANQc36kJLQBskgQU9K8KRbLrR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDk3My9BNjVCQzYyNjYw NkExMUVGODk4RURCMUZDNEY5QUUwMi8xZ0ExQnpmcVFrdEFHeVNCQlQwcndwRnN1 dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFnQTFCemZxUWt0QUd5U0JCVDByd3BGc3V0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDk3My9BNjVCQzYyNjYwNkExMUVGODk4RURCMUZDNEY5QUUwMi8xZ0ExQnpmcVFr dEFHeVNCQlQwcndwRnN1dEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUO7GAm88H82UT/s3Si4ksevcjU6xB7tnIQVxwdj/drtlt3cA9U6Jg 9b2hZ1a431OYBvhz05pvJJRCpiPqCUDHmeoTmccTSvfguo1Vz928+XptB7Q4W9Ut 0cUUOlK/JbAW8PTR0SbUvOcmoEPZrIdf7ybsBF3dHXq+vAGwye21HiLVUR94Fdly UaXi/WtBNvAr9Lju4e/QT1wslYDRrdxe/m/vhod9BfxnZ3DBkKUr51fwwTsq/eIU iP6pXtZfnKHEo0aXif2ecvVYZajo7IgV/U8T/waAKnqfgf67yetqt7z4CcapH5R/ P/md4qC0G88UMtfMtFCLmi8k+BTt2+v8 -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:52 2025 by rpki-client