$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft File: 1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft (raw, json) Hash identifier: Hor26zhWZFGtvQ2/AIeuq3WNxo4EyeRIXbQjip8lh9A= Subject key identifier: C3:EB:E2:3E:2A:67:01:41:5B:EE:93:BA:22:D6:2B:79:DD:9A:3E:81 Authority key identifier: D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95 Certificate issuer: /CN=A91AA897/serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095 Certificate serial: 0696 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft Manifest number: 0686 Signing time: Sat 25 Oct 2025 00:01:15 +0000 Manifest this update: Sat 25 Oct 2025 00:01:15 +0000 Manifest next update: Sat 01 Nov 2025 00:01:15 +0000 Files and hashes: 1: 1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl (hash: ue1mF6Ho2/pPq3LxzqXUz1W+sF0vn1q0h3DL5b40D84=) 2: 91F7C78A7F1711F089227832C4F9AE02.roa (hash: FY5Gy5Y1iXEZUxEVUrYPbqyjzId5K+fC2igE4uNXrvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 00:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1686 (0x696) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA897, serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095 Validity Not Before: Oct 25 00:01:15 2025 GMT Not After : Nov 1 00:01:15 2025 GMT Subject: CN=68fc134b-5b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:46:9b:c5:31:3e:d1:66:17:76:99:48:47:4b: 57:20:0a:48:36:6f:23:36:24:9e:1a:d9:4a:6f:e6: da:79:c4:1a:5f:16:b7:f2:22:e0:96:9b:1a:94:2e: 72:13:8b:08:3e:3e:6b:f3:4e:2b:ee:c0:60:37:3e: b8:6d:5c:6e:a3:a3:f7:34:af:2d:51:65:d0:23:19: 4a:04:be:5e:fe:f1:4e:b7:6a:8d:f0:44:a5:20:64: 1e:b4:b2:ba:57:0d:96:1f:4a:5e:77:8c:f2:a8:c1: e0:9a:ae:4f:68:6a:ea:d0:ff:25:af:f3:c0:b2:15: 0d:d1:2d:c7:c4:35:c4:f3:48:38:25:01:66:20:7b: 2c:61:52:0d:96:a9:d6:f5:f9:fd:de:95:a4:a4:28: d5:24:74:95:a1:05:b7:ae:87:61:4b:56:5c:65:a3: 3d:23:ac:8b:38:68:94:7e:6b:36:4a:38:88:2e:e2: cc:61:c9:d7:84:d5:03:3b:8b:08:b7:f9:8d:34:4c: f8:91:20:51:9e:f7:29:92:0f:66:ce:47:f8:a7:7b: 38:73:64:28:2b:34:32:b9:f0:63:12:de:f5:db:d3: b0:c4:e7:d1:f6:a3:a3:89:d0:8e:f8:14:45:a0:4f: 0d:e1:d7:52:7a:96:d3:55:73:d9:9c:66:0f:44:0e: 4e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:EB:E2:3E:2A:67:01:41:5B:EE:93:BA:22:D6:2B:79:DD:9A:3E:81 X509v3 Authority Key Identifier: keyid:D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:11:1f:df:e1:fc:86:89:48:a4:cd:e4:82:19:3f:42:fa:bb: 33:8f:35:e7:cd:8f:12:8b:8d:06:4c:80:0b:b1:0d:39:49:57: c7:ee:ff:f6:ad:ca:e7:e2:1e:d3:90:53:76:d5:56:1c:59:34: 09:8a:72:3b:78:ac:0d:69:97:51:74:0e:43:1e:72:88:06:8d: 61:2e:42:52:b2:c8:16:69:1a:13:ff:66:1c:32:10:81:60:34: 80:45:56:20:c5:1e:31:ea:55:c1:6d:46:bb:88:cb:e9:58:1d: a3:81:fa:6a:a9:aa:0e:dd:4e:e8:23:fa:98:70:19:a3:3f:9e: a0:fe:cc:69:79:8b:27:c3:1d:8a:61:0d:c5:c2:1a:ba:c8:09: 7c:5f:33:ae:8f:46:7c:73:c3:ef:87:6b:92:43:63:97:fe:19: a9:ac:8f:ba:5a:80:a6:16:25:73:73:8e:6a:02:8c:2e:93:0d: 6a:ea:07:8e:5b:64:14:12:01:ee:42:13:c3:9d:7a:ca:87:e5: 7e:21:f0:cd:38:d3:50:a9:06:a6:cd:a2:c2:8e:02:8d:f2:95: 27:5f:7e:26:72:89:16:22:db:5e:8b:b5:4b:3c:cf:95:16:9e: 0f:8f:e5:b1:8f:af:f9:9a:f0:28:3d:66:e3:8e:49:85:f2:d6: 05:fb:72:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE4OTcxMTAvBgNVBAUTKEQ2OEQ0MTFBRDAzRTczMTRGMTQ5MkQwNjJEQjBEOTE5 NEU5RjUwOTUwHhcNMjUxMDI1MDAwMTE1WhcNMjUxMTAxMDAwMTE1WjAYMRYwFAYD VQQDEw02OGZjMTM0Yi01YjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUabxTE+0WYXdplIR0tXIApINm8jNiSeGtlKb+baecQaXxa38iLglpsalC5y E4sIPj5r804r7sBgNz64bVxuo6P3NK8tUWXQIxlKBL5e/vFOt2qN8ESlIGQetLK6 Vw2WH0ped4zyqMHgmq5PaGrq0P8lr/PAshUN0S3HxDXE80g4JQFmIHssYVINlqnW 9fn93pWkpCjVJHSVoQW3rodhS1ZcZaM9I6yLOGiUfms2SjiILuLMYcnXhNUDO4sI t/mNNEz4kSBRnvcpkg9mzkf4p3s4c2QoKzQyufBjEt7129OwxOfR9qOjidCO+BRF oE8N4ddSepbTVXPZnGYPRA5OvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPr4j4q ZwFBW+6TuiLWK3ndmj6BMB8GA1UdIwQYMBaAFNaNQRrQPnMU8UktBi2w2RlOn1CV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTg5Ny9FMUQxMTc3MDk1 QkExMUVCQjI4MTIzNzFDNEY5QUUwMi8xbzFCR3RBLWN4VHhTUzBHTGJEWkdVNmZV SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFvMUJHdEEtY3hUeFNTMEdMYkRaR1U2ZlVKVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTg5Ny9FMUQxMTc3MDk1QkExMUVCQjI4MTIzNzFDNEY5QUUwMi8xbzFCR3RBLWN4 VHhTUzBHTGJEWkdVNmZVSlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGER/f4fyGiUikzeSCGT9C+rszjzXnzY8Si40GTIALsQ05SVfH7v/2 rcrn4h7TkFN21VYcWTQJinI7eKwNaZdRdA5DHnKIBo1hLkJSssgWaRoT/2YcMhCB YDSARVYgxR4x6lXBbUa7iMvpWB2jgfpqqaoO3U7oI/qYcBmjP56g/sxpeYsnwx2K YQ3Fwhq6yAl8XzOuj0Z8c8Pvh2uSQ2OX/hmprI+6WoCmFiVzc45qAowukw1q6geO W2QUEgHuQhPDnXrKh+V+IfDNONNQqQamzaLCjgKN8pUnX34mcokWIttei7VLPM+V Fp4Pj+Wxj6/5mvAoPWbjjkmF8tYF+3J+ -----END CERTIFICATE-----Generated at Sat Oct 25 11:28:30 2025 by rpki-client