$ rpki-client -vvf rpki.apnic.net/member_repository/A91612FE/491D694CA25511EFB2CA782AC4F9AE02/1H75KB4xQx3ljjR8aX45vydCkRk.mft File: 1H75KB4xQx3ljjR8aX45vydCkRk.mft (raw, json) Hash identifier: 5BQWaQbJj9Sdwp7/2hQwaMUXgpuRcaAc0HXbFt/gRvU= Subject key identifier: 7D:AC:D6:61:4B:0E:B6:7A:2E:2A:BD:E5:35:82:43:EE:18:13:D2:A5 Authority key identifier: D4:7E:F9:28:1E:31:43:1D:E5:8E:34:7C:69:7E:39:BF:27:42:91:19 Certificate issuer: /CN=A91612FE/serialNumber=D47EF9281E31431DE58E347C697E39BF27429119 Certificate serial: B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1H75KB4xQx3ljjR8aX45vydCkRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91612FE/491D694CA25511EFB2CA782AC4F9AE02/1H75KB4xQx3ljjR8aX45vydCkRk.mft Manifest number: B5 Signing time: Mon 03 Nov 2025 06:01:50 +0000 Manifest this update: Mon 03 Nov 2025 06:01:49 +0000 Manifest next update: Mon 10 Nov 2025 06:01:49 +0000 Files and hashes: 1: 1H75KB4xQx3ljjR8aX45vydCkRk.crl (hash: 8EoE0ncMFFpH+dCYCwAXKQm0KceMQDgFIcOPz1wMKsY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91612FE/491D694CA25511EFB2CA782AC4F9AE02/1H75KB4xQx3ljjR8aX45vydCkRk.crl rsync://rpki.apnic.net/member_repository/A91612FE/491D694CA25511EFB2CA782AC4F9AE02/1H75KB4xQx3ljjR8aX45vydCkRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1H75KB4xQx3ljjR8aX45vydCkRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91612FE, serialNumber=D47EF9281E31431DE58E347C697E39BF27429119 Validity Not Before: Nov 3 06:01:49 2025 GMT Not After : Nov 10 06:01:49 2025 GMT Subject: CN=6908454d-e24f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5b:3a:c8:da:0e:e6:74:97:47:2b:af:17:68: b0:cc:94:d7:f2:75:71:af:82:5c:87:e6:54:3f:84: e7:70:0e:46:36:bb:ee:5f:83:9f:ed:f6:79:58:9b: 37:a6:4a:84:b9:0b:fd:bc:f8:90:05:4f:f3:36:a0: 11:51:27:86:1a:17:03:2d:06:99:70:07:ea:a3:a6: 70:04:bf:39:82:fb:8a:ce:39:e8:f6:47:0e:bf:3a: cc:9c:81:ab:d1:ac:11:0f:17:96:29:1d:52:da:b7: 35:aa:cb:0c:e0:9f:e9:31:0e:b9:7a:89:0d:f3:10: 49:20:d4:31:88:93:41:bb:72:17:10:1d:e4:6f:ed: d6:9a:60:39:0a:ed:5a:0e:52:3f:be:f7:b4:2e:22: 4f:5d:c9:77:20:ba:f2:92:a8:02:05:c4:e1:a9:09: c7:f1:1c:b0:4b:55:8b:8e:11:bb:f1:e6:92:42:b1: c6:c8:9f:36:48:e5:ae:85:9a:b4:0b:fc:06:0a:96: 8a:f6:b2:59:34:f6:fd:ab:c8:2c:82:8d:c2:3f:1a: 0c:2a:fb:6b:a8:f8:2d:61:b1:6e:85:91:f8:27:bd: 2f:45:81:34:13:51:38:4e:21:37:c2:d4:f3:6d:f4: 81:7e:0d:d9:3e:0a:ec:b6:87:2e:d5:cd:32:1c:0a: a3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:AC:D6:61:4B:0E:B6:7A:2E:2A:BD:E5:35:82:43:EE:18:13:D2:A5 X509v3 Authority Key Identifier: keyid:D4:7E:F9:28:1E:31:43:1D:E5:8E:34:7C:69:7E:39:BF:27:42:91:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91612FE/491D694CA25511EFB2CA782AC4F9AE02/1H75KB4xQx3ljjR8aX45vydCkRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1H75KB4xQx3ljjR8aX45vydCkRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91612FE/491D694CA25511EFB2CA782AC4F9AE02/1H75KB4xQx3ljjR8aX45vydCkRk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:27:82:63:86:fd:61:a4:6d:26:45:ec:ac:5d:55:07:af:68: 97:0b:f3:05:68:86:30:ec:57:64:91:4a:5a:9a:5d:01:e0:0d: e7:b2:96:6a:de:7e:ee:84:a8:62:e5:af:f7:f8:04:e3:fd:01: 6a:11:fb:ac:67:7c:61:2a:c6:0a:86:9d:9c:69:39:57:0a:e3: 9f:76:04:0a:f5:bf:69:48:04:88:fc:05:6f:f5:8a:56:29:e8: 72:1f:77:54:15:e7:76:b2:6f:3d:08:7d:a4:23:ab:48:51:4f: f4:97:f2:e5:60:f5:2c:f3:b3:c4:85:c6:48:a0:8c:33:51:f8: 9c:41:99:7f:9a:4b:60:b4:78:a6:f2:65:1c:76:3e:83:50:9e: d6:ba:e4:05:3f:ea:73:3f:71:ff:a7:b5:07:4a:92:a1:e0:56: 2a:26:32:09:e5:60:6f:33:d3:f2:1b:87:98:13:f1:f6:10:13: 5a:29:0f:e8:f7:c5:45:a1:5c:41:fd:b9:ff:aa:1b:0a:58:98: 50:5a:4f:8b:10:73:99:11:db:ba:1c:a6:9e:07:a0:16:2d:09: 04:4d:7b:ae:2d:11:4f:2d:28:04:c3:03:e3:7e:4c:78:62:d8: 5c:56:8f:58:26:c4:50:8f:11:99:ab:4c:bb:1c:80:e4:df:75: 84:00:30:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEyRkUxMTAvBgNVBAUTKEQ0N0VGOTI4MUUzMTQzMURFNThFMzQ3QzY5N0UzOUJG Mjc0MjkxMTkwHhcNMjUxMTAzMDYwMTQ5WhcNMjUxMTEwMDYwMTQ5WjAYMRYwFAYD VQQDEw02OTA4NDU0ZC1lMjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1s6yNoO5nSXRyuvF2iwzJTX8nVxr4Jch+ZUP4TncA5GNrvuX4Of7fZ5WJs3 pkqEuQv9vPiQBU/zNqARUSeGGhcDLQaZcAfqo6ZwBL85gvuKzjno9kcOvzrMnIGr 0awRDxeWKR1S2rc1qssM4J/pMQ65eokN8xBJINQxiJNBu3IXEB3kb+3WmmA5Cu1a DlI/vve0LiJPXcl3ILrykqgCBcThqQnH8RywS1WLjhG78eaSQrHGyJ82SOWuhZq0 C/wGCpaK9rJZNPb9q8gsgo3CPxoMKvtrqPgtYbFuhZH4J70vRYE0E1E4TiE3wtTz bfSBfg3ZPgrstocu1c0yHAqjLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2s1mFL DrZ6Liq95TWCQ+4YE9KlMB8GA1UdIwQYMBaAFNR++SgeMUMd5Y40fGl+Ob8nQpEZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTJGRS80OTFENjk0Q0Ey NTUxMUVGQjJDQTc4MkFDNEY5QUUwMi8xSDc1S0I0eFF4M2xqalI4YVg0NXZ5ZENr UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFINzVLQjR4UXgzbGpqUjhhWDQ1dnlkQ2tSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTJGRS80OTFENjk0Q0EyNTUxMUVGQjJDQTc4MkFDNEY5QUUwMi8xSDc1S0I0eFF4 M2xqalI4YVg0NXZ5ZENrUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPJ4Jjhv1hpG0mReysXVUHr2iXC/MFaIYw7FdkkUpaml0B4A3nspZq 3n7uhKhi5a/3+ATj/QFqEfusZ3xhKsYKhp2caTlXCuOfdgQK9b9pSASI/AVv9YpW KehyH3dUFed2sm89CH2kI6tIUU/0l/LlYPUs87PEhcZIoIwzUficQZl/mktgtHim 8mUcdj6DUJ7WuuQFP+pzP3H/p7UHSpKh4FYqJjIJ5WBvM9PyG4eYE/H2EBNaKQ/o 98VFoVxB/bn/qhsKWJhQWk+LEHOZEdu6HKaeB6AWLQkETXuuLRFPLSgEwwPjfkx4 YthcVo9YJsRQjxGZq0y7HIDk33WEADAt -----END CERTIFICATE-----Generated at Tue Nov 4 01:11:53 2025 by rpki-client