$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft File: 1M9fCWc28k6iQQeSpgPNut2Cfc0.mft (raw, json) Hash identifier: sZHWBKHrKJxFP1tha/p8G6dzbVfVaZRPZwEsm3jcLNk= Subject key identifier: 54:29:C0:20:44:4A:66:64:19:6A:7E:6C:43:B1:0C:A1:16:CD:9B:05 Authority key identifier: D4:CF:5F:09:67:36:F2:4E:A2:41:07:92:A6:03:CD:BA:DD:82:7D:CD Certificate issuer: /CN=A91D50FB/serialNumber=D4CF5F096736F24EA2410792A603CDBADD827DCD Certificate serial: 0C95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft Manifest number: 0C8C Signing time: Sun 02 Nov 2025 18:23:59 +0000 Manifest this update: Sun 02 Nov 2025 18:23:58 +0000 Manifest next update: Sun 09 Nov 2025 18:23:58 +0000 Files and hashes: 1: 1M9fCWc28k6iQQeSpgPNut2Cfc0.crl (hash: ZwDJP2NwTiIn+8Kzk9L5XxKZ2T6C+1BFigH1Xq17ZAo=) 2: 97BB54A2070E11EA80718B7BC4F9AE02.roa (hash: fzV6mKN4RsRKk9FHAZNWKpTQRTVNAoWs1ftj78Q3KMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.crl rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:23:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3221 (0xc95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D50FB, serialNumber=D4CF5F096736F24EA2410792A603CDBADD827DCD Validity Not Before: Nov 2 18:23:58 2025 GMT Not After : Nov 9 18:23:58 2025 GMT Subject: CN=6907a1bf-4f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:53:3b:04:a0:c2:fd:ad:ee:c3:ec:de:46:89: f7:17:48:d7:10:f0:5c:2f:ec:9e:4d:d5:ed:b8:1d: 5a:2d:a0:a0:f3:de:0e:b2:7d:64:8d:d8:00:d1:47: 05:94:ad:cd:a5:b8:8f:18:fd:01:90:59:10:0b:e5: c1:18:74:00:bc:8f:36:8c:c2:01:3f:a5:08:e3:bc: f0:ae:eb:a1:57:f8:04:48:2e:01:ac:9e:da:be:79: 36:a5:0c:42:9b:38:47:d9:fe:89:66:3a:8f:bb:12: 99:3e:be:87:6e:cb:e1:d8:9f:11:73:97:d8:2c:b9: 7c:86:9a:81:af:b5:68:36:ab:01:7f:5e:07:23:a0: df:69:75:c4:01:0f:2f:ec:40:6f:f1:2d:65:fa:4f: fb:77:00:67:25:07:8c:d6:7d:0c:63:02:66:92:bf: 3b:3f:1d:83:aa:2d:d3:dd:48:44:7f:d0:cd:5d:aa: b2:84:ce:0e:a2:e7:a8:88:8b:be:91:9e:4d:0a:b2: 83:48:42:d8:45:e6:28:21:48:d0:9d:8c:d8:bf:8d: ee:fe:a1:8e:c1:b4:70:6d:d3:38:d7:e1:9f:7f:d8: b8:e4:8d:40:44:4f:be:ed:44:21:e5:8d:10:16:34: 36:5f:be:13:77:c5:26:32:62:ec:ed:92:79:4e:cb: be:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:29:C0:20:44:4A:66:64:19:6A:7E:6C:43:B1:0C:A1:16:CD:9B:05 X509v3 Authority Key Identifier: keyid:D4:CF:5F:09:67:36:F2:4E:A2:41:07:92:A6:03:CD:BA:DD:82:7D:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:26:8d:16:e4:24:1d:aa:43:72:48:b8:23:b6:64:fb:b5:e4: 59:83:79:f4:ef:f5:c0:8c:d4:9e:d6:0a:01:e9:97:7c:c5:e6: b9:11:56:9e:6f:fc:9d:eb:0e:73:00:7f:55:20:63:65:63:99: ae:18:a0:43:9e:d6:fb:1b:d0:5b:9d:d4:b7:ab:c2:41:bf:9f: a5:9f:1d:b1:b0:a1:ee:98:14:3f:57:69:d3:77:12:d4:f9:ee: 71:27:5c:b7:d2:d2:01:01:1d:af:1c:8a:7d:56:fa:e7:9b:ba: a8:06:d6:e9:5f:d2:a8:6d:98:bc:92:90:6f:70:31:c8:be:a5: a5:d5:0e:31:d4:51:4c:ed:fa:06:93:e8:5a:f0:2c:81:be:01: 2d:0e:26:86:65:e3:77:42:b0:a3:69:79:47:db:04:91:39:26: 8d:6d:de:a4:38:cc:7e:8f:68:25:2a:66:d3:2a:5d:95:3d:5f: 4e:5c:ef:52:92:6e:71:f9:a2:33:ae:5d:8a:d0:50:6d:91:2d: 9d:de:a8:69:17:bb:f0:3f:ec:78:ec:a7:6b:69:04:72:27:35: 7d:5f:95:4b:37:b4:c3:44:22:c0:ed:f8:07:bb:52:31:e8:cf: 31:c9:07:52:30:cd:b3:00:06:76:ec:06:9d:04:59:73:cf:48: 5f:77:67:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUwRkIxMTAvBgNVBAUTKEQ0Q0Y1RjA5NjczNkYyNEVBMjQxMDc5MkE2MDNDREJB REQ4MjdEQ0QwHhcNMjUxMTAyMTgyMzU4WhcNMjUxMTA5MTgyMzU4WjAYMRYwFAYD VQQDEw02OTA3YTFiZi00Zjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlM7BKDC/a3uw+zeRon3F0jXEPBcL+yeTdXtuB1aLaCg894Osn1kjdgA0UcF lK3NpbiPGP0BkFkQC+XBGHQAvI82jMIBP6UI47zwruuhV/gESC4BrJ7avnk2pQxC mzhH2f6JZjqPuxKZPr6Hbsvh2J8Rc5fYLLl8hpqBr7VoNqsBf14HI6DfaXXEAQ8v 7EBv8S1l+k/7dwBnJQeM1n0MYwJmkr87Px2Dqi3T3UhEf9DNXaqyhM4OoueoiIu+ kZ5NCrKDSELYReYoIUjQnYzYv43u/qGOwbRwbdM41+Gff9i45I1ARE++7UQh5Y0Q FjQ2X74Td8UmMmLs7ZJ5Tsu+dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQpwCBE SmZkGWp+bEOxDKEWzZsFMB8GA1UdIwQYMBaAFNTPXwlnNvJOokEHkqYDzbrdgn3N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTBGQi8yNTdCQjJDNDA3 MEUxMUVBQTYxMzcyN0JDNEY5QUUwMi8xTTlmQ1djMjhrNmlRUWVTcGdQTnV0MkNm YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFNOWZDV2MyOGs2aVFRZVNwZ1BOdXQyQ2ZjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTBGQi8yNTdCQjJDNDA3MEUxMUVBQTYxMzcyN0JDNEY5QUUwMi8xTTlmQ1djMjhr NmlRUWVTcGdQTnV0MkNmYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZJo0W5CQdqkNySLgjtmT7teRZg3n07/XAjNSe1goB6Zd8xea5EVae b/yd6w5zAH9VIGNlY5muGKBDntb7G9BbndS3q8JBv5+lnx2xsKHumBQ/V2nTdxLU +e5xJ1y30tIBAR2vHIp9Vvrnm7qoBtbpX9KobZi8kpBvcDHIvqWl1Q4x1FFM7foG k+ha8CyBvgEtDiaGZeN3QrCjaXlH2wSROSaNbd6kOMx+j2glKmbTKl2VPV9OXO9S km5x+aIzrl2K0FBtkS2d3qhpF7vwP+x47KdraQRyJzV9X5VLN7TDRCLA7fgHu1Ix 6M8xyQdSMM2zAAZ27AadBFlzz0hfd2dr -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:15 2025 by rpki-client