$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5183/A4AF2CB08E8F11F0B07D9E0FC4F9AE02/1vZclkuOj1C0u4fpTxStruksJyw.mft File: 1vZclkuOj1C0u4fpTxStruksJyw.mft (raw, json) Hash identifier: gHfSyr9ZwuWINxkF/kEkXql8djEzhwwVTIgVpOpEILk= Subject key identifier: 1A:A4:EF:E9:BF:F9:9E:69:69:7B:D4:3D:C1:17:48:D2:5F:AF:23:75 Authority key identifier: D6:F6:5C:96:4B:8E:8F:50:B4:BB:87:E9:4F:14:AD:AE:E9:2C:27:2C Certificate issuer: /CN=A91F5183/serialNumber=D6F65C964B8E8F50B4BB87E94F14ADAEE92C272C Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vZclkuOj1C0u4fpTxStruksJyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5183/A4AF2CB08E8F11F0B07D9E0FC4F9AE02/1vZclkuOj1C0u4fpTxStruksJyw.mft Manifest number: 1B Signing time: Mon 03 Nov 2025 07:48:04 +0000 Manifest this update: Mon 03 Nov 2025 07:48:04 +0000 Manifest next update: Mon 10 Nov 2025 07:48:04 +0000 Files and hashes: 1: 1vZclkuOj1C0u4fpTxStruksJyw.crl (hash: vlSIxbomXm8sxl128cf9IwFmpqhZSpDocNe0pBib4bc=) 2: 1DE4BA468E9011F08491DD13C4F9AE02.roa (hash: CkfmKzz9bLpPVsLhJYxDdkf3dPl9E+JbBOW2D8bZ1LY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5183/A4AF2CB08E8F11F0B07D9E0FC4F9AE02/1vZclkuOj1C0u4fpTxStruksJyw.crl rsync://rpki.apnic.net/member_repository/A91F5183/A4AF2CB08E8F11F0B07D9E0FC4F9AE02/1vZclkuOj1C0u4fpTxStruksJyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vZclkuOj1C0u4fpTxStruksJyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5183, serialNumber=D6F65C964B8E8F50B4BB87E94F14ADAEE92C272C Validity Not Before: Nov 3 07:48:04 2025 GMT Not After : Nov 10 07:48:04 2025 GMT Subject: CN=69085e34-ea43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d3:7f:c8:ee:8e:b5:64:bd:83:a4:88:0a:3f: 3d:35:5e:71:16:53:4f:a4:ed:ff:25:50:67:56:17: 4d:7e:51:d4:79:0e:d0:5a:d5:da:67:26:56:3f:5c: d9:51:da:8c:0c:93:46:91:c9:72:ea:4e:7a:e9:0a: a2:bd:18:b1:28:c3:c9:ed:a0:8b:56:99:ed:00:80: d1:1c:5d:52:68:ed:03:ce:33:e8:ab:bd:fa:77:d3: 5f:c7:21:4b:47:fe:89:4e:ed:39:0a:4a:43:c3:68: 39:ea:6a:b6:6c:29:4b:b0:ff:ce:0d:a5:e9:d3:02: 93:c3:7b:c9:d6:93:85:70:9b:8a:7b:44:41:30:4f: a7:d8:4a:37:be:9d:73:d7:d2:4a:76:f7:a8:cd:32: ff:89:5e:f9:ea:56:86:16:65:ea:9b:e2:97:9a:b9: 6f:0e:07:10:14:57:48:1c:22:79:94:31:3e:93:0f: b8:38:51:76:70:6c:dc:41:bc:0c:92:a1:ad:8b:bb: a0:22:d6:8c:6b:97:4e:e9:05:c3:b2:ce:52:21:f7: d7:b2:74:8f:99:da:c6:5c:de:95:fd:5f:55:12:88: 84:46:ae:54:2b:e9:a3:bc:72:34:14:f8:69:36:1e: 72:ec:6c:59:6c:f3:05:91:ad:b1:25:01:20:bc:d1: e7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A4:EF:E9:BF:F9:9E:69:69:7B:D4:3D:C1:17:48:D2:5F:AF:23:75 X509v3 Authority Key Identifier: keyid:D6:F6:5C:96:4B:8E:8F:50:B4:BB:87:E9:4F:14:AD:AE:E9:2C:27:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5183/A4AF2CB08E8F11F0B07D9E0FC4F9AE02/1vZclkuOj1C0u4fpTxStruksJyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vZclkuOj1C0u4fpTxStruksJyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5183/A4AF2CB08E8F11F0B07D9E0FC4F9AE02/1vZclkuOj1C0u4fpTxStruksJyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:25:0a:1b:d8:96:46:df:6b:7c:db:dd:1d:6c:78:6e:ed:d7: fe:6d:e7:ff:7c:c2:a9:92:00:d7:ff:5e:1c:05:0a:62:ca:d6: 6a:e0:4a:f8:0b:ee:8d:16:06:5d:c1:83:bc:aa:f2:94:4e:e9: 63:3b:1e:81:cd:1a:93:ed:b3:36:e1:f8:fd:0d:3e:bf:09:d5: 3f:e2:47:f8:e9:ee:d6:a7:0e:2c:49:e1:de:26:3c:27:42:16: b3:76:82:2b:ed:12:fa:c8:8b:00:21:09:27:e6:a5:f8:8f:e8: 9b:17:e8:3f:09:2e:56:27:79:c8:5e:2e:56:62:9c:42:34:7f: fd:2a:ec:eb:ef:6b:57:96:73:ab:8a:38:95:59:de:18:e3:b1: c3:cf:22:4b:0d:f7:2c:94:b8:ad:4f:2b:4e:e1:ad:62:9a:ef: d2:01:e8:18:36:e9:48:38:fc:ef:50:e6:28:fc:b7:3e:d0:8d: 30:0e:b8:54:74:ea:7c:71:69:36:52:dd:f1:0c:f7:d7:8d:27: f0:64:3d:20:86:b0:38:b6:10:50:e8:b3:43:08:1a:62:6e:13: 1c:c2:aa:4b:ce:4c:14:1b:41:45:b5:a6:5e:eb:4c:8c:e6:29: 3b:3e:b2:ef:f0:3d:19:73:74:cd:72:54:03:ac:8b:b9:c9:77: c7:13:0d:9a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NTE4MzExMC8GA1UEBRMoRDZGNjVDOTY0QjhFOEY1MEI0QkI4N0U5NEYxNEFEQUVF OTJDMjcyQzAeFw0yNTExMDMwNzQ4MDRaFw0yNTExMTAwNzQ4MDRaMBgxFjAUBgNV BAMTDTY5MDg1ZTM0LWVhNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDi03/I7o61ZL2DpIgKPz01XnEWU0+k7f8lUGdWF01+UdR5DtBa1dpnJlY/XNlR 2owMk0aRyXLqTnrpCqK9GLEow8ntoItWme0AgNEcXVJo7QPOM+irvfp301/HIUtH /olO7TkKSkPDaDnqarZsKUuw/84NpenTApPDe8nWk4Vwm4p7REEwT6fYSje+nXPX 0kp296jNMv+JXvnqVoYWZeqb4peauW8OBxAUV0gcInmUMT6TD7g4UXZwbNxBvAyS oa2Lu6Ai1oxrl07pBcOyzlIh99eydI+Z2sZc3pX9X1USiIRGrlQr6aO8cjQU+Gk2 HnLsbFls8wWRrbElASC80efPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGqTv6b/5 nmlpe9Q9wRdI0l+vI3UwHwYDVR0jBBgwFoAU1vZclkuOj1C0u4fpTxStruksJyww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1MTgzL0E0QUYyQ0IwOEU4 RjExRjBCMDdEOUUwRkM0RjlBRTAyLzF2WmNsa3VPajFDMHU0ZnBUeFN0cnVrc0p5 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMXZaY2xrdU9qMUMwdTRmcFR4U3RydWtzSnl3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 MTgzL0E0QUYyQ0IwOEU4RjExRjBCMDdEOUUwRkM0RjlBRTAyLzF2WmNsa3VPajFD MHU0ZnBUeFN0cnVrc0p5dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEYlChvYlkbfa3zb3R1seG7t1/5t5/98wqmSANf/XhwFCmLK1mrgSvgL 7o0WBl3Bg7yq8pRO6WM7HoHNGpPtszbh+P0NPr8J1T/iR/jp7tanDixJ4d4mPCdC FrN2givtEvrIiwAhCSfmpfiP6JsX6D8JLlYnecheLlZinEI0f/0q7Ovva1eWc6uK OJVZ3hjjscPPIksN9yyUuK1PK07hrWKa79IB6Bg26Ug4/O9Q5ij8tz7QjTAOuFR0 6nxxaTZS3fEM99eNJ/BkPSCGsDi2EFDos0MIGmJuExzCqkvOTBQbQUW1pl7rTIzm KTs+su/wPRlzdM1yVAOsi7nJd8cTDZo= -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:55 2025 by rpki-client