$ rpki-client -vvf rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft File: 1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft (raw, json) Hash identifier: xyeHdKACSzxL7WH/4M2TmaGvgtblyvw6+TYjNhxLzDc= Subject key identifier: 6A:86:BF:A0:E1:9E:11:7F:B5:94:F8:EC:38:C9:EB:04:12:21:8A:EF Authority key identifier: D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D Certificate issuer: /CN=A91174ED/serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft Manifest number: 3F Signing time: Mon 03 Nov 2025 07:28:14 +0000 Manifest this update: Mon 03 Nov 2025 07:28:13 +0000 Manifest next update: Mon 10 Nov 2025 07:28:13 +0000 Files and hashes: 1: 1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl (hash: eTzhf7aXrw6CROte4ee/Mmmvg4fNqbfkyIAmKa+7RZg=) 2: FE892768620711F0BE75F534C4F9AE02.roa (hash: lIvntJbQ3iLGqhEBLcowTkqSPPrJfP4D0bbkG1Wfg+g=) 3: E7BD97EE5D9311F0AFF08443C4F9AE02.roa (hash: 945+Vkteqw/NwLcrpePu74zLw2XjOxBSUFg1u4xLkkU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:28:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91174ED, serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D Validity Not Before: Nov 3 07:28:13 2025 GMT Not After : Nov 10 07:28:13 2025 GMT Subject: CN=6908598e-e30a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:46:6f:37:64:92:0c:f1:58:83:82:69:95:f0: 25:8c:af:7a:c0:62:63:75:99:a9:d6:20:c2:03:97: 31:ba:fd:34:01:00:21:d6:27:fc:ed:6c:c9:06:4b: 2d:d5:91:1a:a4:40:93:1a:25:74:ad:38:60:15:6f: fd:e5:2e:58:5b:0f:d4:bb:9f:b4:c1:69:2a:88:24: d2:84:15:12:9d:e2:bb:19:8f:55:80:37:ec:1f:ad: 7b:e5:af:a6:99:fc:7e:9c:a4:60:39:a4:87:4a:f5: 45:34:e0:d7:ac:03:3e:9a:12:11:be:20:24:2a:ad: 75:7f:f5:f6:13:57:d2:3f:97:40:37:ba:ed:db:dc: 90:79:83:cf:f1:07:63:6b:bd:24:7b:e4:03:02:83: c5:fa:2a:98:eb:a0:6d:0c:e9:22:19:5c:43:d3:7d: 1e:47:8c:b5:fe:91:7f:05:a9:3d:ae:ef:a8:f7:a6: ba:29:80:89:28:f8:cb:44:29:22:49:a8:60:26:6e: 27:fb:93:a3:67:5d:c9:a8:ea:db:75:0a:29:3a:2d: db:8f:9c:64:a1:50:f8:cf:30:59:1f:71:6e:43:2b: 1c:f7:bb:36:f2:82:61:54:04:5e:2b:8f:45:7a:98: 9e:9c:31:24:43:5c:cd:3f:71:7c:7b:5f:1a:b3:6f: 27:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:86:BF:A0:E1:9E:11:7F:B5:94:F8:EC:38:C9:EB:04:12:21:8A:EF X509v3 Authority Key Identifier: keyid:D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:aa:e1:28:fd:af:57:05:91:87:6d:6c:60:c4:6b:b1:8f:03: 6e:bb:b5:25:9d:10:5a:27:63:59:7f:66:fb:60:f6:59:53:44: fe:a2:46:a3:30:c9:c3:9f:94:9e:95:e7:dd:6c:99:ab:a9:3a: f7:f0:44:53:69:fd:4f:eb:78:e6:8e:68:15:33:55:d4:94:32: 75:a2:f2:e7:18:27:78:30:6e:5d:a4:7b:fe:e1:2c:81:4c:53: 7f:8d:cf:7d:b6:f7:ee:bb:2c:b9:5d:48:99:dc:a6:f6:a6:a8: 2a:d5:9c:0d:f7:3b:03:09:3f:f4:fc:2a:ab:56:e9:1b:5e:16: 14:4f:64:34:df:63:f8:e6:7c:fd:98:f8:ec:33:ff:73:4b:ec: 2d:30:4c:92:7e:db:30:4a:2b:e9:5b:e0:39:8d:46:88:86:0b: 8f:78:e6:c5:0a:89:97:7d:0c:64:64:95:e1:b3:1a:45:b8:40: 5e:1c:ef:2b:d8:a1:b4:db:8d:3f:ec:a5:71:f8:39:49:38:fb: 2e:54:77:eb:df:12:2d:45:af:53:4f:3d:bb:02:fa:43:79:04: da:a0:77:8a:e7:48:e4:97:86:ae:91:98:b7:fe:f3:59:f0:ae: d0:70:f2:7f:ae:22:72:17:f4:2c:75:5a:6a:f4:b2:2a:49:de: 4e:57:04:2b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NzRFRDExMC8GA1UEBRMoRDVCQzc5MEFCMDM3Qjg3RERGNjM5M0Q3NDEzNkJGMDc3 QTFEMjk5RDAeFw0yNTExMDMwNzI4MTNaFw0yNTExMTAwNzI4MTNaMBgxFjAUBgNV BAMTDTY5MDg1OThlLWUzMGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRRm83ZJIM8ViDgmmV8CWMr3rAYmN1manWIMIDlzG6/TQBACHWJ/ztbMkGSy3V kRqkQJMaJXStOGAVb/3lLlhbD9S7n7TBaSqIJNKEFRKd4rsZj1WAN+wfrXvlr6aZ /H6cpGA5pIdK9UU04NesAz6aEhG+ICQqrXV/9fYTV9I/l0A3uu3b3JB5g8/xB2Nr vSR75AMCg8X6KpjroG0M6SIZXEPTfR5HjLX+kX8FqT2u76j3propgIko+MtEKSJJ qGAmbif7k6NnXcmo6tt1Cik6LduPnGShUPjPMFkfcW5DKxz3uzbygmFUBF4rj0V6 mJ6cMSRDXM0/cXx7Xxqzbye7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaoa/oOGe EX+1lPjsOMnrBBIhiu8wHwYDVR0jBBgwFoAU1bx5CrA3uH3fY5PXQTa/B3odKZ0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3NEVELzE0MzU4MTYyNUQ5 MjExRjA5MERGMzgzNkM0RjlBRTAyLzFieDVDckEzdUgzZlk1UFhRVGFfQjNvZEta MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMWJ4NUNyQTN1SDNmWTVQWFFUYV9CM29kS1owLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 NEVELzE0MzU4MTYyNUQ5MjExRjA5MERGMzgzNkM0RjlBRTAyLzFieDVDckEzdUgz Zlk1UFhRVGFfQjNvZEtaMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKGq4Sj9r1cFkYdtbGDEa7GPA267tSWdEFonY1l/Zvtg9llTRP6iRqMw ycOflJ6V591smaupOvfwRFNp/U/reOaOaBUzVdSUMnWi8ucYJ3gwbl2ke/7hLIFM U3+Nz3229+67LLldSJncpvamqCrVnA33OwMJP/T8KqtW6RteFhRPZDTfY/jmfP2Y +Owz/3NL7C0wTJJ+2zBKK+lb4DmNRoiGC4945sUKiZd9DGRkleGzGkW4QF4c7yvY obTbjT/spXH4OUk4+y5Ud+vfEi1Fr1NPPbsC+kN5BNqgd4rnSOSXhq6RmLf+81nw rtBw8n+uInIX9Cx1Wmr0sipJ3k5XBCs= -----END CERTIFICATE-----Generated at Tue Nov 4 16:04:35 2025 by rpki-client