$ rpki-client -vvf rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft File: 1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft (raw, json) Hash identifier: DDT4qE70m6wOUfGh4C1MnQXCoQvjyZYcOvPxEl29ulg= Subject key identifier: 2A:3E:BE:84:5C:61:68:DB:7A:77:66:61:F2:55:2B:A9:39:B3:C4:07 Authority key identifier: D4:69:64:F9:F3:73:1F:2F:63:E6:70:08:C9:1E:59:C7:DC:C7:85:57 Certificate issuer: /CN=A9170F11/serialNumber=D46964F9F3731F2F63E67008C91E59C7DCC78557 Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft Manifest number: BD Signing time: Wed 05 Nov 2025 06:07:41 +0000 Manifest this update: Wed 05 Nov 2025 06:07:40 +0000 Manifest next update: Wed 12 Nov 2025 06:07:40 +0000 Files and hashes: 1: 1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl (hash: YgZF8Uo/p2A96QhYQdiLdtQClDmibJdAapGWgqXPoD8=) 2: EB2858349B4B11EF86A11C85C4F9AE02.roa (hash: BH8r4wcRvODYc1YiRCd6qM+1RNm98aDQL1IFKl5rQ2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:07:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170F11, serialNumber=D46964F9F3731F2F63E67008C91E59C7DCC78557 Validity Not Before: Nov 5 06:07:40 2025 GMT Not After : Nov 12 06:07:40 2025 GMT Subject: CN=690ae9ad-c898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:40:74:1b:33:ab:e7:cb:14:a1:08:03:95:fb: d6:d0:86:3e:61:d8:c6:c6:a2:a7:f5:b0:91:93:e5: 46:17:37:37:2e:33:35:b4:98:e6:67:64:a5:f9:25: 64:9c:5a:77:ad:04:a3:9c:c6:e1:ad:c9:ff:db:05: a6:4d:bd:0b:3d:80:c9:e8:2f:ea:b6:d4:1a:3c:1a: 7c:36:94:1d:3f:3e:da:f8:0c:8f:f3:b5:1d:7b:20: 2e:b4:7c:be:70:cb:fb:46:21:5f:af:77:83:0c:2e: 4b:5a:91:3f:9e:4b:8d:4c:9f:5f:b2:e0:5e:f8:41: f6:0b:04:c3:c6:d3:98:30:17:c7:13:22:df:b7:91: 62:4e:89:09:31:4e:86:8b:df:a6:93:58:ba:35:36: de:36:10:e6:4c:dd:f0:05:4f:17:98:02:53:04:92: 87:29:23:c3:5d:77:f3:2d:cd:f2:a0:80:7a:77:93: 3b:20:c6:91:e7:0f:79:80:e4:4c:cc:03:ce:35:f3: 53:3b:36:af:21:0f:9f:29:f6:73:f5:03:05:82:f1: a5:e5:ec:b7:84:d1:13:79:82:f1:63:da:dc:cf:09: 99:93:e6:01:dc:e3:43:e2:1f:13:28:84:7c:f1:aa: 44:6a:a6:a8:5a:0d:d2:02:66:46:45:fb:0d:e1:3c: 91:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3E:BE:84:5C:61:68:DB:7A:77:66:61:F2:55:2B:A9:39:B3:C4:07 X509v3 Authority Key Identifier: keyid:D4:69:64:F9:F3:73:1F:2F:63:E6:70:08:C9:1E:59:C7:DC:C7:85:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:d2:33:e0:f5:65:39:75:bd:ea:52:91:6a:12:fd:fd:9e:04: af:87:cc:98:e3:b5:9c:58:e1:18:b4:39:de:ea:47:bc:38:41: 12:7c:ed:0c:ca:91:6c:5e:18:69:24:40:3b:01:e5:a3:a1:89: ec:84:62:2e:06:ee:05:d6:19:fc:f4:63:d0:91:b0:c8:31:d3: 68:75:5f:e5:68:7d:73:db:18:f3:1f:70:a1:46:b3:df:af:43: c0:cc:92:38:5b:8a:ac:ae:33:21:50:71:8e:97:d5:cd:8c:17: 04:ef:c8:89:9b:4f:7a:fb:b8:01:24:c4:6b:c5:e0:39:f5:b3: 1d:de:e6:6e:cd:70:eb:90:4e:e2:35:de:21:d3:3a:2b:a6:58: ab:37:b2:1b:af:2e:6c:7f:1e:4c:10:4a:bc:0c:29:ab:70:bc: 07:6b:25:0a:c0:da:2b:fe:fb:0c:9b:6d:98:82:a2:87:c4:31: e6:6c:00:45:46:12:48:a7:f3:0c:25:dc:dd:1b:ff:25:ec:38: 7b:49:17:b2:ed:cf:b9:bf:68:9e:3e:c7:d0:88:00:23:af:1c: d1:cf:f4:61:cc:cb:97:94:d8:11:81:b1:fb:72:12:77:f4:74: 80:f7:46:2f:00:f5:d8:3f:ab:d8:0d:99:c9:47:e9:3c:bd:f1: 88:a1:d3:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBGMTExMTAvBgNVBAUTKEQ0Njk2NEY5RjM3MzFGMkY2M0U2NzAwOEM5MUU1OUM3 RENDNzg1NTcwHhcNMjUxMTA1MDYwNzQwWhcNMjUxMTEyMDYwNzQwWjAYMRYwFAYD VQQDEw02OTBhZTlhZC1jODk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3kB0GzOr58sUoQgDlfvW0IY+YdjGxqKn9bCRk+VGFzc3LjM1tJjmZ2Sl+SVk nFp3rQSjnMbhrcn/2wWmTb0LPYDJ6C/qttQaPBp8NpQdPz7a+AyP87UdeyAutHy+ cMv7RiFfr3eDDC5LWpE/nkuNTJ9fsuBe+EH2CwTDxtOYMBfHEyLft5FiTokJMU6G i9+mk1i6NTbeNhDmTN3wBU8XmAJTBJKHKSPDXXfzLc3yoIB6d5M7IMaR5w95gORM zAPONfNTOzavIQ+fKfZz9QMFgvGl5ey3hNETeYLxY9rczwmZk+YB3OND4h8TKIR8 8apEaqaoWg3SAmZGRfsN4TyREQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCo+voRc YWjbendmYfJVK6k5s8QHMB8GA1UdIwQYMBaAFNRpZPnzcx8vY+ZwCMkeWcfcx4VX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEYxMS9FOTI2RTkxMjlB N0MxMUVGODQ5NTBEMzNDNEY5QUUwMi8xR2xrLWZOekh5OWo1bkFJeVI1Wng5ekho VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFHbGstZk56SHk5ajVuQUl5UjVaeDl6SGhWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEYxMS9FOTI2RTkxMjlBN0MxMUVGODQ5NTBEMzNDNEY5QUUwMi8xR2xrLWZOekh5 OWo1bkFJeVI1Wng5ekhoVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCT0jPg9WU5db3qUpFqEv39ngSvh8yY47WcWOEYtDne6ke8OEESfO0M ypFsXhhpJEA7AeWjoYnshGIuBu4F1hn89GPQkbDIMdNodV/laH1z2xjzH3ChRrPf r0PAzJI4W4qsrjMhUHGOl9XNjBcE78iJm096+7gBJMRrxeA59bMd3uZuzXDrkE7i Nd4h0zorplirN7Ibry5sfx5MEEq8DCmrcLwHayUKwNor/vsMm22YgqKHxDHmbABF RhJIp/MMJdzdG/8l7Dh7SRey7c+5v2iePsfQiAAjrxzRz/RhzMuXlNgRgbH7chJ3 9HSA90YvAPXYP6vYDZnJR+k8vfGIodM+ -----END CERTIFICATE-----Generated at Wed Nov 5 08:10:13 2025 by rpki-client