$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft File: l1u5QYJWgUoFLa9U9woa3FNv35s.mft (raw, json) Hash identifier: YWFzHIS2bfAA3R5uaZCsIBB6qpJhqi+jq8WkR9kWUzI= Subject key identifier: 0F:9E:CB:C0:60:50:16:03:9E:7B:A2:F2:65:30:8A:8F:D5:BD:11:6F Authority key identifier: 97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B Certificate issuer: /CN=A91A7842/serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B Certificate serial: 040F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft Manifest number: 0408 Signing time: Thu 23 Oct 2025 01:41:32 +0000 Manifest this update: Thu 23 Oct 2025 01:41:31 +0000 Manifest next update: Thu 30 Oct 2025 01:41:31 +0000 Files and hashes: 1: l1u5QYJWgUoFLa9U9woa3FNv35s.crl (hash: pTVXrqWbpxxwR6QHG403dAYpt+9RKSVXvswg086IubM=) 2: 615BA1B8D91411EF9940471AC4F9AE02.roa (hash: 41dvwuGONsbAf2NNxcw97I3G8Q6DNf+rajP9T/KIeiw=) 3: 622B3AEAD91411EF9940471AC4F9AE02.roa (hash: q51gHdBYG+mFAHDh24P09p42ENPRR4e2b1fq2dGY3KM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 01:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1039 (0x40f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7842, serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B Validity Not Before: Oct 23 01:41:31 2025 GMT Not After : Oct 30 01:41:31 2025 GMT Subject: CN=68f987cb-a498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fc:69:b7:92:e5:83:a7:3c:79:c2:28:13:45: 89:5b:c1:4f:6b:70:2c:3f:29:5f:39:3d:02:c7:cc: c4:a1:24:8e:9a:c2:f6:3b:63:1e:4a:62:f1:a4:9d: 8f:c7:ec:73:77:24:73:19:bc:36:dd:40:dc:3a:c2: 69:99:8c:5d:ca:f2:a5:70:1e:61:f3:97:c9:5a:22: 32:5e:60:b5:e9:63:3f:1f:4a:62:39:53:fc:01:c1: f4:21:d7:44:63:44:27:40:e2:c6:89:c6:c4:46:ba: 79:a4:65:5d:ca:0f:27:d6:8a:2f:63:b0:e8:b9:d4: 09:25:69:e9:a5:9b:85:38:aa:2f:51:da:aa:b6:ae: d6:7b:31:a7:02:cf:70:34:43:ce:1f:e1:f2:03:1f: 8b:f3:b2:9e:d9:2b:67:e6:5a:e9:9a:6e:e6:a9:a6: 54:84:66:11:b2:9e:72:bc:ee:61:bf:23:37:c3:29: 1f:50:90:b2:e0:99:3a:f2:9c:e5:81:a2:16:3d:09: b7:8d:d3:01:c4:8a:46:ff:6f:07:28:a8:b5:37:72: 4c:5e:42:72:a6:2a:73:e7:c2:96:a4:f3:e6:d7:ff: 87:48:7e:c3:8f:e4:b5:4b:ff:25:46:54:d4:5d:55: 22:f9:11:8c:c2:77:4d:ed:f5:38:92:93:27:6a:55: bb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:9E:CB:C0:60:50:16:03:9E:7B:A2:F2:65:30:8A:8F:D5:BD:11:6F X509v3 Authority Key Identifier: keyid:97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:46:32:05:82:1b:2f:f1:a5:90:3c:82:4f:f9:71:62:ce:2c: 74:ce:b5:8f:59:13:73:67:5a:d5:3d:ea:30:47:f5:9c:c0:73: 96:0e:67:36:ac:1d:32:cf:5e:87:bd:25:98:90:b8:bb:8e:a3: 86:b2:fb:85:0c:85:ff:2c:de:40:46:66:4e:fc:b1:69:60:14: 42:6f:da:09:9b:59:c4:e3:05:28:46:e4:4d:f0:66:04:cc:cd: c3:2d:92:de:8b:24:cc:33:33:d3:ae:d6:a2:de:27:5e:bd:39: 8b:52:a6:fa:72:8c:a7:18:f2:62:c8:fc:fa:b1:5a:78:aa:85: 0c:d9:30:ed:74:2c:d1:b0:2e:6b:5c:60:29:fe:02:1a:38:54: a1:06:0a:f3:2d:ee:14:bc:39:41:61:f9:01:1d:a2:70:82:23: 3a:3e:c5:20:0c:1d:e1:9c:af:a8:68:4a:61:76:eb:53:5c:e1: cd:9a:13:b6:6e:a0:11:9d:72:72:6c:af:27:25:5b:ec:66:b4: 0d:f0:d3:84:25:d6:c0:c7:87:83:29:b4:21:0d:39:27:83:73: f2:4b:29:6f:d0:55:39:6b:7c:6d:8a:40:aa:b2:08:24:6d:79: c0:7d:11:9d:7d:b8:70:d3:81:3a:87:a8:e6:4f:d4:1a:db:e4: c4:00:fd:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4NDIxMTAvBgNVBAUTKDk3NUJCOTQxODI1NjgxNEEwNTJEQUY1NEY3MEExQURD NTM2RkRGOUIwHhcNMjUxMDIzMDE0MTMxWhcNMjUxMDMwMDE0MTMxWjAYMRYwFAYD VQQDEw02OGY5ODdjYi1hNDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfxpt5Llg6c8ecIoE0WJW8FPa3AsPylfOT0Cx8zEoSSOmsL2O2MeSmLxpJ2P x+xzdyRzGbw23UDcOsJpmYxdyvKlcB5h85fJWiIyXmC16WM/H0piOVP8AcH0IddE Y0QnQOLGicbERrp5pGVdyg8n1oovY7DoudQJJWnppZuFOKovUdqqtq7WezGnAs9w NEPOH+HyAx+L87Ke2Stn5lrpmm7mqaZUhGYRsp5yvO5hvyM3wykfUJCy4Jk68pzl gaIWPQm3jdMBxIpG/28HKKi1N3JMXkJypipz58KWpPPm1/+HSH7Dj+S1S/8lRlTU XVUi+RGMwndN7fU4kpMnalW7YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA+ey8Bg UBYDnnui8mUwio/VvRFvMB8GA1UdIwQYMBaAFJdbuUGCVoFKBS2vVPcKGtxTb9+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzg0Mi83NkE4QzZCQThF NjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dVb0ZMYTlVOXdvYTNGTnYz NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxdTVRWUpXZ1VvRkxhOVU5d29hM0ZOdjM1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzg0Mi83NkE4QzZCQThFNjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dV b0ZMYTlVOXdvYTNGTnYzNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDORjIFghsv8aWQPIJP+XFizix0zrWPWRNzZ1rVPeowR/WcwHOWDmc2 rB0yz16HvSWYkLi7jqOGsvuFDIX/LN5ARmZO/LFpYBRCb9oJm1nE4wUoRuRN8GYE zM3DLZLeiyTMMzPTrtai3idevTmLUqb6coynGPJiyPz6sVp4qoUM2TDtdCzRsC5r XGAp/gIaOFShBgrzLe4UvDlBYfkBHaJwgiM6PsUgDB3hnK+oaEphdutTXOHNmhO2 bqARnXJybK8nJVvsZrQN8NOEJdbAx4eDKbQhDTkng3PySylv0FU5a3xtikCqsggk bXnAfRGdfbhw04E6h6jmT9Qa2+TEAP3+ -----END CERTIFICATE-----Generated at Fri Oct 24 08:30:28 2025 by rpki-client