$ rpki-client -vvf rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft File: u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft (raw, json) Hash identifier: 7JQKogC/URSmkRYs+KWCeJK+l4ZuI5iN8MFkga+gLJ4= Subject key identifier: 4C:0C:D6:34:41:2E:BA:52:C2:29:08:52:6A:2C:A4:45:4C:E3:68:2E Authority key identifier: BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34 Certificate issuer: /CN=A91836DB/serialNumber=BB505DFF32ECD492BF1EFF7FE394F12890AA6734 Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft Manifest number: 86 Signing time: Mon 27 Oct 2025 08:57:16 +0000 Manifest this update: Mon 27 Oct 2025 08:57:16 +0000 Manifest next update: Mon 03 Nov 2025 08:57:16 +0000 Files and hashes: 1: u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl (hash: pFqovRACcYsXYmFDocG44zpdC6wtp4WTlgiDtNYyRCY=) 2: C7001B70E45E11EFA2243E47C4F9AE02.roa (hash: wGQDHFlAfYrGUZehEya3kdO0mpkCJUDStwU2YZOiDKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 08:57:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91836DB, serialNumber=BB505DFF32ECD492BF1EFF7FE394F12890AA6734 Validity Not Before: Oct 27 08:57:16 2025 GMT Not After : Nov 3 08:57:16 2025 GMT Subject: CN=68ff33ec-2678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1f:af:66:fd:a0:14:ee:0a:3f:3f:1e:3e:87: 90:e7:35:b8:aa:a0:9e:3a:57:16:77:8c:a4:c6:70: 7a:13:35:6c:e6:65:7c:2f:38:21:02:ab:e3:6e:4a: 5b:a9:a9:18:18:b2:1d:5f:3d:69:77:31:a6:e5:b5: 6f:f0:d2:52:b1:f9:a9:5f:f8:06:4c:4a:bb:a9:89: 0d:58:11:9f:23:0e:6f:ce:72:81:04:14:c0:5c:0a: 17:88:e7:2f:bb:37:c7:08:f8:29:7c:93:91:a3:f8: 34:2b:89:1b:a4:96:32:72:a4:40:44:f9:e0:3d:01: fc:83:83:33:e7:f1:d2:15:f2:53:bb:16:c1:45:d5: 88:27:f0:d6:b4:f9:7f:75:1a:64:f1:55:fd:53:ee: 7d:74:fc:43:95:2f:34:bd:a5:d0:85:63:08:e1:b4: e7:ac:69:ab:64:e6:4f:bd:38:1b:50:cc:bf:4e:21: ea:c7:2e:18:53:8f:cf:bc:64:63:0c:8a:00:e8:0e: 7c:ba:a4:7e:97:9a:47:c7:1e:b0:bf:30:00:94:ef: b9:8f:97:6d:da:46:2b:a7:23:8c:96:f2:12:53:3b: d2:97:88:a3:82:53:b9:48:ab:e7:e3:f2:25:05:09: 6f:d2:00:a7:d0:c8:77:00:f2:ff:f7:aa:c0:ae:c3: 53:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:0C:D6:34:41:2E:BA:52:C2:29:08:52:6A:2C:A4:45:4C:E3:68:2E X509v3 Authority Key Identifier: keyid:BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:e2:44:4c:af:0b:95:32:c7:9f:7e:5b:79:20:3e:c1:34:df: e6:c9:94:d3:60:24:1a:37:f8:5b:d5:d6:64:a0:a2:57:50:87: 6e:27:67:ed:ea:41:f2:9d:8f:25:5c:b5:6a:8b:84:17:85:0e: 34:e2:dd:cb:18:61:b1:7a:89:92:b6:ba:30:18:5e:5c:70:7f: 96:4c:dc:97:15:75:8f:f6:85:76:a2:81:e0:45:d4:83:07:61: e3:7c:64:50:74:0a:91:cf:e0:fb:4b:7f:44:b0:e4:d5:10:4e: 8b:e9:4f:4b:a2:0b:be:cf:ac:6e:85:dc:dd:d8:e7:74:50:63: f0:68:02:6d:af:9b:ac:b1:ab:a2:09:e8:aa:93:6e:80:93:19: b2:82:06:14:f4:27:82:92:48:98:61:a4:0b:d0:5e:db:f7:61: 7c:c5:ea:32:6d:9c:2e:0a:c3:f1:5e:5d:79:3f:54:6c:3f:50: a5:20:36:95:b3:19:01:a3:1b:d7:db:52:c4:61:10:4c:9d:06: fc:a5:76:50:aa:23:2b:d7:98:10:e6:69:78:5a:bc:c4:37:ba: a6:d3:42:eb:56:e3:a7:8d:f0:78:c2:32:d4:55:3e:61:96:4e: 31:84:9d:a7:d4:ca:b5:db:7f:f8:70:9f:f9:da:30:3f:1b:a0: 0b:f4:c1:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM2REIxMTAvBgNVBAUTKEJCNTA1REZGMzJFQ0Q0OTJCRjFFRkY3RkUzOTRGMTI4 OTBBQTY3MzQwHhcNMjUxMDI3MDg1NzE2WhcNMjUxMTAzMDg1NzE2WjAYMRYwFAYD VQQDEw02OGZmMzNlYy0yNjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzB+vZv2gFO4KPz8ePoeQ5zW4qqCeOlcWd4ykxnB6EzVs5mV8LzghAqvjbkpb qakYGLIdXz1pdzGm5bVv8NJSsfmpX/gGTEq7qYkNWBGfIw5vznKBBBTAXAoXiOcv uzfHCPgpfJORo/g0K4kbpJYycqRARPngPQH8g4Mz5/HSFfJTuxbBRdWIJ/DWtPl/ dRpk8VX9U+59dPxDlS80vaXQhWMI4bTnrGmrZOZPvTgbUMy/TiHqxy4YU4/PvGRj DIoA6A58uqR+l5pHxx6wvzAAlO+5j5dt2kYrpyOMlvISUzvSl4ijglO5SKvn4/Il BQlv0gCn0Mh3APL/96rArsNTUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEwM1jRB LrpSwikIUmospEVM42guMB8GA1UdIwQYMBaAFLtQXf8y7NSSvx7/f+OU8SiQqmc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzZEQi81MUJFMDEyNEU0 NUUxMUVGQTE1NjI4NDZDNEY5QUUwMi91MUJkX3pMczFKS19IdjlfNDVUeEtKQ3Fa elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3UxQmRfekxzMUpLX0h2OV80NVR4S0pDcVp6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzZEQi81MUJFMDEyNEU0NUUxMUVGQTE1NjI4NDZDNEY5QUUwMi91MUJkX3pMczFK S19IdjlfNDVUeEtKQ3FaelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB4kRMrwuVMsefflt5ID7BNN/myZTTYCQaN/hb1dZkoKJXUIduJ2ft 6kHynY8lXLVqi4QXhQ404t3LGGGxeomStrowGF5ccH+WTNyXFXWP9oV2ooHgRdSD B2HjfGRQdAqRz+D7S39EsOTVEE6L6U9Logu+z6xuhdzd2Od0UGPwaAJtr5ussaui Ceiqk26AkxmyggYU9CeCkkiYYaQL0F7b92F8xeoybZwuCsPxXl15P1RsP1ClIDaV sxkBoxvX21LEYRBMnQb8pXZQqiMr15gQ5ml4WrzEN7qm00LrVuOnjfB4wjLUVT5h lk4xhJ2n1Mq123/4cJ/52jA/G6AL9MFZ -----END CERTIFICATE-----Generated at Tue Oct 28 08:08:08 2025 by rpki-client