$ rpki-client -vvf rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft File: R1MAyW65ok4zHQs5AHDEWinJXmk.mft (raw, json) Hash identifier: WgvoRcwaoGNRqe2lNsy9n2PK0KaFOdSdT2hN2Rk72Ic= Subject key identifier: 97:DE:DF:BE:6F:A2:AB:89:DB:74:74:77:4B:C0:05:BF:63:38:31:B9 Authority key identifier: 47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69 Certificate issuer: /CN=A917C36A/serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69 Certificate serial: 01F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft Manifest number: 01F2 Signing time: Mon 03 Nov 2025 02:32:59 +0000 Manifest this update: Mon 03 Nov 2025 02:32:58 +0000 Manifest next update: Mon 10 Nov 2025 02:32:58 +0000 Files and hashes: 1: R1MAyW65ok4zHQs5AHDEWinJXmk.crl (hash: UlFKrji4XJEADfuvJ9t5pjnOdmCerDhXNr8WpQZB204=) 2: 9CB879ECC7B511ED9411183FC4F9AE02.roa (hash: vTjIWL+7U0681ZWCBVmHMtqcTBbPy9kNb1m5t3OENUI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.crl rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 504 (0x1f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C36A, serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69 Validity Not Before: Nov 3 02:32:58 2025 GMT Not After : Nov 10 02:32:58 2025 GMT Subject: CN=6908145a-e662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:56:f5:d6:6d:cd:a0:b3:ca:79:72:17:53:86: 4a:b8:6d:af:23:21:d5:8a:3a:86:72:65:cb:fb:94: 16:80:5b:1c:64:71:03:6d:20:5a:1b:18:ea:10:4f: b4:6b:f5:a3:f1:00:df:74:87:f1:ee:ee:c6:62:6c: 23:77:02:22:f2:5f:d5:39:89:01:93:72:7f:f7:b2: 41:93:7f:f7:0d:c2:98:1a:59:19:ee:00:3e:63:24: 5e:ac:1a:92:42:5d:99:44:56:24:d5:aa:31:a2:48: f8:67:a9:6d:d8:84:78:2f:2d:0b:e9:9d:46:b8:08: 5f:bf:50:82:fd:23:a7:76:32:99:57:06:5a:97:85: 37:9e:e0:de:49:9c:11:11:0f:d8:a5:19:fb:19:9d: ce:f1:67:54:2c:d0:9e:43:c5:bc:95:8a:c2:75:d4: cb:37:dc:a4:6a:2b:4e:e2:99:f4:11:bb:f6:c4:04: 14:59:3b:fb:cf:b5:3f:8d:fe:fd:b2:5f:3f:3f:6b: 4d:3e:5a:dc:8f:cf:b8:b6:d6:0f:b4:f2:8c:f2:31: e2:0b:1a:75:23:69:ee:b6:fc:56:be:01:e4:97:1b: 66:5d:99:12:01:24:a3:26:8b:7e:15:96:cb:4b:3d: 37:44:f3:ac:03:9e:4a:0c:33:c0:b5:e4:00:da:ca: 77:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:DE:DF:BE:6F:A2:AB:89:DB:74:74:77:4B:C0:05:BF:63:38:31:B9 X509v3 Authority Key Identifier: keyid:47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:73:2a:ee:6c:c5:47:0c:d9:04:da:59:a3:a7:4c:01:06:d2: e3:68:74:cd:7f:53:8f:f6:a8:56:6c:11:46:76:ce:7d:7e:2f: ab:cf:cd:7a:03:9d:60:c0:63:04:9f:10:de:ee:54:ae:fc:c5: 4a:c7:89:43:e0:29:b6:6c:a5:e8:ae:36:6d:e3:c2:5f:85:7e: 3d:c0:1b:c5:f1:9b:4f:ad:5d:a3:c3:57:99:44:bf:0e:f5:a4: d7:64:c9:62:29:26:77:33:88:56:43:ef:28:1b:45:d8:00:97: 55:7e:ac:0b:d6:32:9f:45:69:64:fa:83:eb:d4:37:64:55:24: c0:ef:04:84:45:6c:58:a1:ff:b8:ba:cd:bb:c7:8f:e5:dd:e8: 2b:1d:ae:c5:35:39:3b:28:ce:43:42:67:01:94:b1:89:bb:99: eb:77:ce:06:e8:d2:59:e6:0e:61:bf:74:1f:ae:53:b0:3b:ff: 45:a8:62:32:4e:b9:1b:40:ab:e0:76:1f:b8:3e:fb:ff:97:b6: 35:48:a3:2a:83:4a:18:5d:63:f6:11:08:4c:26:f7:2e:d5:08: e4:b3:0c:56:2f:6a:44:c5:6a:6b:a8:35:ea:93:48:7f:39:2f: 2f:9f:f4:83:ed:fd:03:6c:4d:5b:60:1d:36:c1:da:9e:33:85: 1f:06:c2:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzNkExMTAvBgNVBAUTKDQ3NTMwMEM5NkVCOUEyNEUzMzFEMEIzOTAwNzBDNDVB MjlDOTVFNjkwHhcNMjUxMTAzMDIzMjU4WhcNMjUxMTEwMDIzMjU4WjAYMRYwFAYD VQQDEw02OTA4MTQ1YS1lNjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1b11m3NoLPKeXIXU4ZKuG2vIyHVijqGcmXL+5QWgFscZHEDbSBaGxjqEE+0 a/Wj8QDfdIfx7u7GYmwjdwIi8l/VOYkBk3J/97JBk3/3DcKYGlkZ7gA+YyRerBqS Ql2ZRFYk1aoxokj4Z6lt2IR4Ly0L6Z1GuAhfv1CC/SOndjKZVwZal4U3nuDeSZwR EQ/YpRn7GZ3O8WdULNCeQ8W8lYrCddTLN9ykaitO4pn0Ebv2xAQUWTv7z7U/jf79 sl8/P2tNPlrcj8+4ttYPtPKM8jHiCxp1I2nutvxWvgHklxtmXZkSASSjJot+FZbL Sz03RPOsA55KDDPAteQA2sp3NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfe375v oquJ23R0d0vABb9jODG5MB8GA1UdIwQYMBaAFEdTAMluuaJOMx0LOQBwxFopyV5p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzM2QS80MDkzNDI4MEM3 QjIxMUVEOTM1N0EyM0NDNEY5QUUwMi9SMU1BeVc2NW9rNHpIUXM1QUhERVdpbkpY bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IxTUF5VzY1b2s0ekhRczVBSERFV2luSlhtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzM2QS80MDkzNDI4MEM3QjIxMUVEOTM1N0EyM0NDNEY5QUUwMi9SMU1BeVc2NW9r NHpIUXM1QUhERVdpbkpYbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCucyrubMVHDNkE2lmjp0wBBtLjaHTNf1OP9qhWbBFGds59fi+rz816 A51gwGMEnxDe7lSu/MVKx4lD4Cm2bKXorjZt48JfhX49wBvF8ZtPrV2jw1eZRL8O 9aTXZMliKSZ3M4hWQ+8oG0XYAJdVfqwL1jKfRWlk+oPr1DdkVSTA7wSERWxYof+4 us27x4/l3egrHa7FNTk7KM5DQmcBlLGJu5nrd84G6NJZ5g5hv3QfrlOwO/9FqGIy TrkbQKvgdh+4Pvv/l7Y1SKMqg0oYXWP2EQhMJvcu1QjkswxWL2pExWprqDXqk0h/ OS8vn/SD7f0DbE1bYB02wdqeM4UfBsL3 -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:17 2025 by rpki-client