$ rpki-client -vvf rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft File: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft (raw, json) Hash identifier: 7nv+zYkcfXccUm+WwwHLTJmYc5xbbnJTAIBUHufV6yQ= Subject key identifier: 81:41:9C:D1:E3:E5:32:6F:FC:64:3D:9A:BB:48:D8:FC:83:09:75:88 Authority key identifier: D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21 Certificate issuer: /CN=A91F495C/serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421 Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft Manifest number: F7 Signing time: Wed 05 Nov 2025 05:22:23 +0000 Manifest this update: Wed 05 Nov 2025 05:22:22 +0000 Manifest next update: Wed 12 Nov 2025 05:22:22 +0000 Files and hashes: 1: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl (hash: yLPlF3EZCvDu8lYs3K9MfISs5bA8/gp5gAbxuCE/KiI=) 2: 084D41C6407111EFB0944C40C4F9AE02.roa (hash: Jb/5el+254tvWTwmxgE5e2fworHZ6IC6eYTkaaOmWbo=) 3: 08FDDCFC407111EFB0944C40C4F9AE02.roa (hash: 5j1mJUsKsqLJqbWxCLNYcCoMJnOjUallWOckNeSTW7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F495C, serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421 Validity Not Before: Nov 5 05:22:22 2025 GMT Not After : Nov 12 05:22:22 2025 GMT Subject: CN=690adf0f-5637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d1:62:21:56:6b:df:15:65:7a:4a:2a:d0:c9: ea:5d:20:e1:75:14:5c:ee:5d:5f:3f:49:fa:d2:32: 51:dc:59:8d:52:26:8b:0d:37:32:41:0b:01:dc:97: 60:1d:d5:cb:ad:f8:1e:51:b2:e3:e3:42:14:f5:39: 3c:54:f3:6a:3c:70:5c:90:af:89:f6:eb:fc:63:f1: d5:c2:ba:32:f9:b7:03:c5:e8:de:c2:41:b0:4c:e1: f1:7c:fb:9b:d5:10:f1:4f:fb:9b:27:36:da:86:48: ab:d3:ed:a9:46:4b:ee:55:ac:7b:8e:5a:0b:e5:dc: 0d:95:6c:f7:0e:c9:3f:22:c7:de:f8:ec:8e:e9:68: 69:18:28:71:24:46:11:62:54:89:74:d7:3d:1e:85: 3c:27:72:0d:14:61:96:6c:4a:66:52:d3:bf:d2:6c: 6d:01:93:22:f2:85:1e:86:18:e1:49:76:60:9a:5d: fd:39:26:a3:36:b3:36:4d:ed:34:86:b6:40:c3:98: b8:2e:59:3e:8d:85:a3:7f:a0:6e:c6:60:bd:c9:33: 78:9a:7c:cb:2e:e4:21:04:d3:35:8f:44:96:8f:a0: 86:f6:dd:a6:62:b8:1e:2d:4d:44:ba:cb:43:0b:af: c8:6e:d7:c3:39:0b:34:65:d6:d9:0f:4e:d4:38:f8: 65:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:41:9C:D1:E3:E5:32:6F:FC:64:3D:9A:BB:48:D8:FC:83:09:75:88 X509v3 Authority Key Identifier: keyid:D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:b0:dd:ee:a9:39:40:e5:28:5d:4d:dd:2d:09:b2:7b:b6:ae: 45:6d:63:41:79:9c:09:bd:a0:4e:38:06:e4:0d:d7:e7:bc:16: 4a:58:64:98:52:14:86:97:2e:50:14:18:40:a2:34:f4:64:a8: ec:2e:10:63:1f:dd:c1:55:97:c3:01:d3:97:52:b2:cb:39:cc: 16:80:f6:8a:55:a4:7c:ad:f2:ce:e8:f8:cd:d4:ad:ed:49:61: 84:50:8e:a5:65:38:93:25:5a:1d:f5:52:cb:08:b3:06:27:87: e9:8d:ac:96:b8:10:75:55:63:a8:ea:cd:eb:40:a9:32:61:62: 0e:87:e4:d7:51:ed:44:89:fb:27:f8:75:f2:23:48:1a:f8:86: e9:03:9f:85:04:76:87:10:81:26:b0:d4:24:51:19:e6:b4:3a: 32:ce:51:a9:84:e0:16:ca:20:67:93:ea:a6:31:53:01:f8:fd: 3c:0e:36:29:df:89:24:e2:36:3d:20:28:96:81:f3:f6:ff:98: 02:f9:97:f0:e6:78:52:6e:63:f0:eb:be:b1:82:88:e0:00:a4: 1b:a7:5c:0f:31:16:48:e5:38:da:47:7d:af:aa:79:53:b5:f2: 04:f5:09:0a:d6:85:21:15:21:d2:5d:3f:4a:8f:cb:b1:bc:b9: d3:8b:72:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ5NUMxMTAvBgNVBAUTKEQ2QzgwQzVEMzhBQTNGMTBEMUVCMEUxMzlCOUU0OTRF QkY2QzY0MjEwHhcNMjUxMTA1MDUyMjIyWhcNMjUxMTEyMDUyMjIyWjAYMRYwFAYD VQQDEw02OTBhZGYwZi01NjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAotFiIVZr3xVlekoq0MnqXSDhdRRc7l1fP0n60jJR3FmNUiaLDTcyQQsB3Jdg HdXLrfgeUbLj40IU9Tk8VPNqPHBckK+J9uv8Y/HVwroy+bcDxejewkGwTOHxfPub 1RDxT/ubJzbahkir0+2pRkvuVax7jloL5dwNlWz3Dsk/Isfe+OyO6WhpGChxJEYR YlSJdNc9HoU8J3INFGGWbEpmUtO/0mxtAZMi8oUehhjhSXZgml39OSajNrM2Te00 hrZAw5i4Llk+jYWjf6BuxmC9yTN4mnzLLuQhBNM1j0SWj6CG9t2mYrgeLU1EustD C6/IbtfDOQs0ZdbZD07UOPhllwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIFBnNHj 5TJv/GQ9mrtI2PyDCXWIMB8GA1UdIwQYMBaAFNbIDF04qj8Q0esOE5ueSU6/bGQh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDk1Qy81QkM2M0VGNDQw NjUxMUVGODU2QzlFMjlDNEY5QUUwMi8xc2dNWFRpcVB4RFI2dzRUbTU1SlRyOXNa Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFzZ01YVGlxUHhEUjZ3NFRtNTVKVHI5c1pDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDk1Qy81QkM2M0VGNDQwNjUxMUVGODU2QzlFMjlDNEY5QUUwMi8xc2dNWFRpcVB4 RFI2dzRUbTU1SlRyOXNaQ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwsN3uqTlA5ShdTd0tCbJ7tq5FbWNBeZwJvaBOOAbkDdfnvBZKWGSY UhSGly5QFBhAojT0ZKjsLhBjH93BVZfDAdOXUrLLOcwWgPaKVaR8rfLO6PjN1K3t SWGEUI6lZTiTJVod9VLLCLMGJ4fpjayWuBB1VWOo6s3rQKkyYWIOh+TXUe1Eifsn +HXyI0ga+IbpA5+FBHaHEIEmsNQkURnmtDoyzlGphOAWyiBnk+qmMVMB+P08DjYp 34kk4jY9ICiWgfP2/5gC+Zfw5nhSbmPw676xgojgAKQbp1wPMRZI5TjaR32vqnlT tfIE9QkK1oUhFSHSXT9Kj8uxvLnTi3In -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:27 2025 by rpki-client