$ rpki-client -vvf rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft File: 1xRtqd4o9btePeL_AMWfyFyZONo.mft (raw, json) Hash identifier: 04pgtKxcpY1SBIQWvPmDN8+2xDlQ6YgY9JZinctl5Es= Subject key identifier: 7F:C4:DC:E1:90:2E:10:9C:A1:0C:B1:CF:D1:FF:D2:6F:BF:77:3F:4D Authority key identifier: D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA Certificate issuer: /CN=A91D560D/serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA Certificate serial: 08F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft Manifest number: 1437 Signing time: Sun 02 Nov 2025 19:07:23 +0000 Manifest this update: Sun 02 Nov 2025 19:07:23 +0000 Manifest next update: Sun 09 Nov 2025 19:07:23 +0000 Files and hashes: 1: 1xRtqd4o9btePeL_AMWfyFyZONo.crl (hash: LbVOrs2opAlq1iB/xD8QG3+SqeUuK7Y67Invfx4X4is=) 2: 48BC2840B0CC11F08FB0892CC4F9AE02.roa (hash: XHcO89/MPgzwW4rGQ9ytEtMm5vtuH3reQ/AQuvNxnSo=) 3: 5A0EECF4B0CC11F08F8E932CC4F9AE02.roa (hash: TR2sbaJKnc/SEaXKQ1o7lEeyXHgsYm5mtCELfAe/UxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2297 (0x8f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D560D, serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA Validity Not Before: Nov 2 19:07:23 2025 GMT Not After : Nov 9 19:07:23 2025 GMT Subject: CN=6907abeb-9aef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:20:a1:39:60:04:79:ad:1e:33:ac:b7:ae:e3: 3f:51:0e:e7:c2:ce:85:e3:63:bb:f7:db:12:09:79: 3a:66:66:c1:6d:92:1a:17:49:1e:62:80:f4:33:63: 57:0b:4b:f7:59:75:c5:21:4f:05:aa:ff:f6:9c:2b: ed:0a:1c:fd:e8:fe:4a:7f:56:20:27:81:50:f5:c4: 5a:1b:03:34:00:a4:7d:46:4f:9e:28:bd:93:b0:db: 63:58:c5:7f:71:d5:3f:a0:b8:c3:5f:77:fa:57:b2: 42:19:0f:f3:18:e3:c4:25:a9:b5:bc:02:07:14:ea: 18:c7:12:fc:1c:15:af:e0:7a:e8:18:b7:0b:3c:7d: 45:03:75:7e:56:a2:24:30:38:59:49:01:ee:63:19: f3:de:6b:73:77:02:42:0b:6a:90:29:6d:8c:b5:dc: a5:09:88:b2:9e:2b:16:b2:69:1d:57:3b:dc:0d:f3: ec:3f:a7:51:f8:83:1f:62:89:a9:04:a2:ad:b5:58: 99:e1:5f:60:1a:13:ba:98:9d:21:8e:a1:24:95:05: 2d:92:36:17:d5:e2:77:28:1b:1a:e0:b4:5c:be:36: d4:2a:11:5b:cf:b8:bf:87:67:0c:6f:f6:f5:19:77: 79:27:a5:d6:e7:a4:e6:b3:fa:ce:3b:f8:99:d6:59: e1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C4:DC:E1:90:2E:10:9C:A1:0C:B1:CF:D1:FF:D2:6F:BF:77:3F:4D X509v3 Authority Key Identifier: keyid:D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:8f:30:ac:53:ce:cd:70:99:cc:ea:5e:00:80:09:e5:7f:76: c7:ff:09:76:39:bd:23:d1:bb:5e:e3:7e:81:93:dc:7d:5b:a1: ab:9a:69:cb:2e:d2:52:03:d5:f1:ff:5d:16:1d:7c:d7:01:b5: b6:aa:00:0e:fd:da:6c:be:18:97:b4:d7:31:d3:ed:8b:ec:a1: f4:41:ef:a2:a7:08:bf:5e:a0:cf:d1:2c:d3:82:a5:77:6d:80: 8b:90:b2:04:63:54:46:0c:1e:4d:5f:41:c8:72:e6:42:f2:34: fb:d2:a1:00:67:10:28:97:02:09:86:2a:da:29:32:6a:c6:7b: d4:6e:af:ea:07:ef:9b:e6:dd:f3:a2:a7:64:4b:19:fc:17:72: 96:a1:87:43:c0:81:a4:c1:ea:2c:d6:cf:3d:d8:bd:b7:b0:9d: fa:91:81:11:aa:bf:a2:a5:6b:7a:fe:1b:9c:fe:8c:89:bd:4e: 18:8c:06:3a:c6:c4:f0:8e:19:0e:0c:57:09:8e:dd:83:9c:74: ba:a1:59:0f:aa:2c:29:02:ae:a4:cd:76:36:45:91:14:e7:9f: 8d:9b:93:14:6c:7a:82:d4:87:e7:49:af:25:b5:8c:62:b3:ce: 50:f4:21:49:2f:92:03:bb:09:78:95:d9:d8:22:67:bb:b8:9b: 63:19:21:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU2MEQxMTAvBgNVBAUTKEQ3MTQ2REE5REUyOEY1QkI1RTNERTJGRjAwQzU5RkM4 NUM5OTM4REEwHhcNMjUxMTAyMTkwNzIzWhcNMjUxMTA5MTkwNzIzWjAYMRYwFAYD VQQDEw02OTA3YWJlYi05YWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtSChOWAEea0eM6y3ruM/UQ7nws6F42O799sSCXk6ZmbBbZIaF0keYoD0M2NX C0v3WXXFIU8Fqv/2nCvtChz96P5Kf1YgJ4FQ9cRaGwM0AKR9Rk+eKL2TsNtjWMV/ cdU/oLjDX3f6V7JCGQ/zGOPEJam1vAIHFOoYxxL8HBWv4HroGLcLPH1FA3V+VqIk MDhZSQHuYxnz3mtzdwJCC2qQKW2MtdylCYiynisWsmkdVzvcDfPsP6dR+IMfYomp BKKttViZ4V9gGhO6mJ0hjqEklQUtkjYX1eJ3KBsa4LRcvjbUKhFbz7i/h2cMb/b1 GXd5J6XW56Tms/rOO/iZ1lnhowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/E3OGQ LhCcoQyxz9H/0m+/dz9NMB8GA1UdIwQYMBaAFNcUbaneKPW7Xj3i/wDFn8hcmTja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTYwRC82OEMzRjQ5QTQx RUUxMUVBOUNFQTFGNzVDNEY5QUUwMi8xeFJ0cWQ0bzlidGVQZUxfQU1XZnlGeVpP Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4UnRxZDRvOWJ0ZVBlTF9BTVdmeUZ5Wk9Oby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTYwRC82OEMzRjQ5QTQxRUUxMUVBOUNFQTFGNzVDNEY5QUUwMi8xeFJ0cWQ0bzli dGVQZUxfQU1XZnlGeVpPTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHjzCsU87NcJnM6l4AgAnlf3bH/wl2Ob0j0bte436Bk9x9W6GrmmnL LtJSA9Xx/10WHXzXAbW2qgAO/dpsvhiXtNcx0+2L7KH0Qe+ipwi/XqDP0SzTgqV3 bYCLkLIEY1RGDB5NX0HIcuZC8jT70qEAZxAolwIJhiraKTJqxnvUbq/qB++b5t3z oqdkSxn8F3KWoYdDwIGkweos1s892L23sJ36kYERqr+ipWt6/huc/oyJvU4YjAY6 xsTwjhkODFcJjt2DnHS6oVkPqiwpAq6kzXY2RZEU55+Nm5MUbHqC1IfnSa8ltYxi s85Q9CFJL5IDuwl4ldnYIme7uJtjGSHU -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:15 2025 by rpki-client