$ rpki-client -vvf rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft File: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft (raw, json) Hash identifier: lhq2IUYm8AYs98vKPDB67kCQ+j/McNXFBxsxqSi3kpI= Subject key identifier: 24:3D:29:CD:1F:80:A7:45:09:4A:82:0B:C0:04:5F:71:24:E6:84:64 Authority key identifier: D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52 Certificate issuer: /CN=A911C2E1/serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52 Certificate serial: 019D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft Manifest number: 019A Signing time: Wed 05 Nov 2025 03:30:11 +0000 Manifest this update: Wed 05 Nov 2025 03:30:11 +0000 Manifest next update: Wed 12 Nov 2025 03:30:11 +0000 Files and hashes: 1: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl (hash: dTLCHK3ZLXOYms9Q52Qx5Bi94lP4w6gwn4Mb5YsYIn8=) 2: 3FE30722468C11EE9462EC3AC4F9AE02.roa (hash: 5pLKoX5v/Omt/7dfktvLKHUBbKLWsrZdltrbS963Wno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:30:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C2E1, serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52 Validity Not Before: Nov 5 03:30:11 2025 GMT Not After : Nov 12 03:30:11 2025 GMT Subject: CN=690ac4c3-eace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:82:ea:1c:fa:70:e6:75:01:20:93:68:27:64: 72:b8:59:9e:2f:c3:46:aa:69:54:bf:4c:53:15:20: 70:80:1f:74:2e:d3:a9:d9:0e:65:dc:85:d7:9a:44: 95:f8:30:ce:3a:a4:f1:e3:10:c8:0b:d6:2b:c7:3a: af:d3:77:68:60:e3:63:03:a7:26:34:6d:52:38:39: 80:cc:99:15:a4:45:d4:2b:7d:1a:c4:86:ad:b9:b5: d4:a8:c2:9d:01:4f:bd:0e:cb:da:ad:b5:16:d5:5a: b1:78:4a:70:73:61:c9:f6:9c:99:2b:41:78:c8:b8: ae:9d:3c:5d:23:a6:d3:73:9b:02:77:91:50:ba:99: 04:67:9d:75:e5:22:64:5d:8a:72:88:3d:93:48:56: 5e:b6:f4:9a:ab:41:3e:97:70:cb:85:8c:e4:3f:1c: ec:2e:3b:46:8b:32:e1:74:74:45:94:99:93:e1:60: e4:5c:e7:a8:41:e6:1d:04:7c:b6:c7:55:a9:ed:14: d3:ce:ad:fd:12:7b:3f:df:fc:69:a6:6a:ec:f2:63: 5f:50:ce:9e:b5:7e:ae:c2:ca:f1:99:74:4c:fe:a2: f5:60:c8:37:93:9a:89:be:ae:24:5a:f2:1f:0f:34: 65:81:92:f1:db:51:73:52:18:f7:43:df:0b:3e:71: 78:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:3D:29:CD:1F:80:A7:45:09:4A:82:0B:C0:04:5F:71:24:E6:84:64 X509v3 Authority Key Identifier: keyid:D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:40:ec:80:07:00:e1:47:a8:4a:d8:5f:7e:d7:2b:67:99:cd: 5a:be:11:ae:68:c5:26:52:13:8c:bc:dc:34:bc:31:6d:02:93: 9e:3b:47:ed:62:de:76:28:bd:f6:1b:fa:ad:0b:11:94:b0:9e: d6:f7:50:b7:0b:86:86:35:1d:41:b4:7a:54:60:5e:68:39:35: fd:81:7b:b5:9b:2d:84:b1:e9:9a:32:29:b5:f7:96:2f:e0:4f: 9a:2d:3a:ae:4c:84:6e:da:6c:8d:05:5a:66:f0:6d:46:70:b6: 0d:a9:c8:ea:1f:e1:14:39:fd:39:12:68:d6:a5:81:bc:c9:c9: eb:8f:69:71:ba:fd:ad:71:78:72:5f:ae:e2:48:99:b4:81:c0: 4d:7f:34:9a:43:4c:58:46:71:af:43:07:e8:46:3c:2e:3e:a9: 4b:d1:d8:c1:7e:cc:9f:6f:7a:29:87:89:55:be:76:a1:fb:5e: 5f:bc:1c:70:e2:11:8e:77:85:f6:f5:75:41:66:81:99:05:26: 90:c0:35:6a:0e:ef:cf:de:cd:b2:de:f4:81:e0:b9:44:e8:d1: fd:86:b5:18:e0:0a:f1:ba:2f:73:ba:03:05:07:ca:11:23:76: 7a:1d:77:9e:17:86:97:a5:40:09:f2:79:c2:6b:1d:75:78:b6: 1a:56:bc:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyRTExMTAvBgNVBAUTKEQ0QkM3OUE0QjE1MzdGRUIwQUQ5MkVCM0YwQTdDQUYz NDUzQThGNTIwHhcNMjUxMTA1MDMzMDExWhcNMjUxMTEyMDMzMDExWjAYMRYwFAYD VQQDEw02OTBhYzRjMy1lYWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4YLqHPpw5nUBIJNoJ2RyuFmeL8NGqmlUv0xTFSBwgB90LtOp2Q5l3IXXmkSV +DDOOqTx4xDIC9Yrxzqv03doYONjA6cmNG1SODmAzJkVpEXUK30axIatubXUqMKd AU+9DsvarbUW1VqxeEpwc2HJ9pyZK0F4yLiunTxdI6bTc5sCd5FQupkEZ5115SJk XYpyiD2TSFZetvSaq0E+l3DLhYzkPxzsLjtGizLhdHRFlJmT4WDkXOeoQeYdBHy2 x1Wp7RTTzq39Ens/3/xppmrs8mNfUM6etX6uwsrxmXRM/qL1YMg3k5qJvq4kWvIf DzRlgZLx21FzUhj3Q98LPnF4twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCQ9Kc0f gKdFCUqCC8AEX3Ek5oRkMB8GA1UdIwQYMBaAFNS8eaSxU3/rCtkus/CnyvNFOo9S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzJFMS85MDQ3RUYwNDQ2 OEExMUVFODc5RUI1MzVDNEY5QUUwMi8xTHg1cExGVGYtc0syUzZ6OEtmSzgwVTZq MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFMeDVwTEZUZi1zSzJTNno4S2ZLODBVNmoxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzJFMS85MDQ3RUYwNDQ2OEExMUVFODc5RUI1MzVDNEY5QUUwMi8xTHg1cExGVGYt c0syUzZ6OEtmSzgwVTZqMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4QOyABwDhR6hK2F9+1ytnmc1avhGuaMUmUhOMvNw0vDFtApOeO0ft Yt52KL32G/qtCxGUsJ7W91C3C4aGNR1BtHpUYF5oOTX9gXu1my2EsemaMim195Yv 4E+aLTquTIRu2myNBVpm8G1GcLYNqcjqH+EUOf05EmjWpYG8ycnrj2lxuv2tcXhy X67iSJm0gcBNfzSaQ0xYRnGvQwfoRjwuPqlL0djBfsyfb3oph4lVvnah+15fvBxw 4hGOd4X29XVBZoGZBSaQwDVqDu/P3s2y3vSB4LlE6NH9hrUY4Arxui9zugMFB8oR I3Z6HXeeF4aXpUAJ8nnCax11eLYaVry2 -----END CERTIFICATE-----Generated at Wed Nov 5 12:28:18 2025 by rpki-client