$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft File: 1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft (raw, json) Hash identifier: Vks9JACytpAWisJSY8ZeyRL9bEawI0xxixv05ZxQiBs= Subject key identifier: 67:17:B5:89:32:18:FC:EC:7A:3F:A7:2B:3A:9A:92:43:EF:74:96:2F Authority key identifier: D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32 Certificate issuer: /CN=A91B7BDC/serialNumber=D43B44D5F937F65E8BAB9B7F987A3DC9D2104A32 Certificate serial: 04B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft Manifest number: 04A2 Signing time: Sun 19 Oct 2025 01:53:34 +0000 Manifest this update: Sun 19 Oct 2025 01:53:33 +0000 Manifest next update: Sun 26 Oct 2025 01:53:33 +0000 Files and hashes: 1: 1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl (hash: V7vHH6oMADIihKUbhtOAn91yhXby73kQMmuV+6e+vSE=) 2: D76AC8AC2EAB11EF9B369566C4F9AE02.roa (hash: naYHhlwgJToIdxwYRVcDTwuzPaQ2WtmkFGMwkiEal6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:53:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1202 (0x4b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7BDC, serialNumber=D43B44D5F937F65E8BAB9B7F987A3DC9D2104A32 Validity Not Before: Oct 19 01:53:33 2025 GMT Not After : Oct 26 01:53:33 2025 GMT Subject: CN=68f4449e-5b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d2:34:fd:cd:74:19:18:b8:c7:bd:13:36:8e: 14:1f:69:2f:a7:02:7a:cd:9b:aa:44:e2:b0:7c:1d: 64:fb:30:b1:fc:40:ae:72:90:6d:bd:9a:3a:eb:d1: bd:d0:26:3d:71:30:f2:fb:1a:e1:c3:1c:87:61:1e: 55:cb:a3:c8:d6:8a:e5:63:36:34:39:c8:d4:a9:73: c0:8d:95:da:89:38:8d:c8:c4:32:84:61:33:3d:55: 3b:5d:95:f0:d0:ce:f3:75:6a:e7:16:a7:b6:59:99: 33:54:3a:e6:9a:c4:7b:9e:72:a6:0e:66:94:33:31: e1:cf:1a:36:1a:23:3a:2f:fa:fa:48:31:0a:8e:09: af:d1:af:37:a0:da:70:44:70:f1:fb:64:95:0a:c8: 18:ee:dc:74:22:ae:01:51:2f:35:0b:f4:43:7c:30: 5a:f3:55:c3:bb:fe:87:cb:47:20:f9:d8:05:f7:8b: 1a:2f:3a:8e:84:a8:f7:62:c1:83:f7:ba:b6:d9:d2: a4:87:37:37:01:2c:40:0c:1b:ef:90:d3:c3:b2:e9: 36:14:3c:53:be:4f:36:06:b8:2e:0f:5f:60:6b:4a: 8f:0d:39:3a:10:a2:e5:b6:f3:9f:3f:21:4c:de:6d: 72:2c:ce:9c:64:66:87:08:21:56:4a:07:0f:74:7f: f7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:17:B5:89:32:18:FC:EC:7A:3F:A7:2B:3A:9A:92:43:EF:74:96:2F X509v3 Authority Key Identifier: keyid:D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:21:74:09:1c:02:d1:c2:98:89:b5:81:52:81:48:b7:62:20: 96:97:1f:82:63:49:19:00:24:8e:6d:b2:d7:25:b1:cd:15:32: c5:4f:56:86:e2:ce:85:09:1c:46:5a:92:fe:99:24:ab:24:5f: e7:52:5c:ca:b3:4f:52:27:6f:65:fa:8d:fb:3c:6c:dd:47:46: eb:f1:f0:92:3f:17:ba:a7:85:f3:01:e2:b4:45:df:a9:0b:c4: 6f:7e:0c:b1:41:90:b8:45:85:79:0a:11:14:fb:98:88:6f:3d: 54:ab:54:c3:d7:ae:6e:cf:9a:74:16:19:c2:6b:e9:f0:83:d9: 1d:20:a8:e6:df:2a:2c:2f:b7:d1:2e:6d:c3:4a:95:87:b7:7a: a3:19:e5:6c:95:6e:24:f1:8a:61:f8:da:ba:6f:b8:0f:c1:a6: 38:50:7e:fe:83:f1:2d:64:f3:e8:2e:32:18:a8:9f:25:7a:72: 1a:22:4f:10:f0:51:24:13:55:6f:33:10:c5:a3:bb:ff:73:09: 8e:0b:7a:37:47:98:15:6c:a9:50:d0:4c:c1:01:d6:2a:29:96: 5b:40:f8:95:bc:a0:2e:f8:85:b0:71:c0:f0:f2:4f:4d:0a:04: 42:8d:b7:be:a0:38:62:cc:7b:46:9e:b7:19:bc:34:03:a7:e6: 68:2f:29:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCREMxMTAvBgNVBAUTKEQ0M0I0NEQ1RjkzN0Y2NUU4QkFCOUI3Rjk4N0EzREM5 RDIxMDRBMzIwHhcNMjUxMDE5MDE1MzMzWhcNMjUxMDI2MDE1MzMzWjAYMRYwFAYD VQQDEw02OGY0NDQ5ZS01YjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAptI0/c10GRi4x70TNo4UH2kvpwJ6zZuqROKwfB1k+zCx/ECucpBtvZo669G9 0CY9cTDy+xrhwxyHYR5Vy6PI1orlYzY0OcjUqXPAjZXaiTiNyMQyhGEzPVU7XZXw 0M7zdWrnFqe2WZkzVDrmmsR7nnKmDmaUMzHhzxo2GiM6L/r6SDEKjgmv0a83oNpw RHDx+2SVCsgY7tx0Iq4BUS81C/RDfDBa81XDu/6Hy0cg+dgF94saLzqOhKj3YsGD 97q22dKkhzc3ASxADBvvkNPDsuk2FDxTvk82BrguD19ga0qPDTk6EKLltvOfPyFM 3m1yLM6cZGaHCCFWSgcPdH/3cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGcXtYky GPzsej+nKzqakkPvdJYvMB8GA1UdIwQYMBaAFNQ7RNX5N/Zei6ubf5h6PcnSEEoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0JEQy82ODFDOEY0NjU4 QkUxMUVDOEFFRDVGMkNDNEY5QUUwMi8xRHRFMWZrMzlsNkxxNXRfbUhvOXlkSVFT akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFEdEUxZmszOWw2THE1dF9tSG85eWRJUVNqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0JEQy82ODFDOEY0NjU4QkUxMUVDOEFFRDVGMkNDNEY5QUUwMi8xRHRFMWZrMzls NkxxNXRfbUhvOXlkSVFTakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTIXQJHALRwpiJtYFSgUi3YiCWlx+CY0kZACSObbLXJbHNFTLFT1aG 4s6FCRxGWpL+mSSrJF/nUlzKs09SJ29l+o37PGzdR0br8fCSPxe6p4XzAeK0Rd+p C8RvfgyxQZC4RYV5ChEU+5iIbz1Uq1TD165uz5p0FhnCa+nwg9kdIKjm3yosL7fR Lm3DSpWHt3qjGeVslW4k8Yph+Nq6b7gPwaY4UH7+g/EtZPPoLjIYqJ8lenIaIk8Q 8FEkE1VvMxDFo7v/cwmOC3o3R5gVbKlQ0EzBAdYqKZZbQPiVvKAu+IWwccDw8k9N CgRCjbe+oDhizHtGnrcZvDQDp+ZoLymU -----END CERTIFICATE-----Generated at Sun Oct 19 19:07:06 2025 by rpki-client