$ rpki-client -vvf rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft File: 1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft (raw, json) Hash identifier: Pj/QNuTtaY4I+Ul7jL2FvdRfV7QsEz0MQMWwsrCynQs= Subject key identifier: 1F:0E:E4:5A:FF:0C:86:CD:E3:E3:F1:DC:26:22:5D:25:24:14:52:49 Authority key identifier: D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59 Certificate issuer: /CN=A91233F8/serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759 Certificate serial: 0214 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft Manifest number: 0741 Signing time: Tue 04 Nov 2025 23:35:13 +0000 Manifest this update: Tue 04 Nov 2025 23:35:12 +0000 Manifest next update: Tue 11 Nov 2025 23:35:12 +0000 Files and hashes: 1: 1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl (hash: yyVPqg06PBfy2vu19LJfwYYLp/AbSz3GFlCL1JLONrM=) 2: 1B4BA08497A711EDA815F80AC4F9AE02.roa (hash: o2FmDJmIhF0oyjFFLSyKzWs4i2UgC9gZtaokgU+Glvo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:35:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91233F8, serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759 Validity Not Before: Nov 4 23:35:12 2025 GMT Not After : Nov 11 23:35:12 2025 GMT Subject: CN=690a8db0-1bf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:40:63:85:90:c5:3a:e5:ce:b3:c5:4d:fc:21: c0:56:c1:5d:d4:0b:4b:a4:57:a7:5b:ca:c4:0b:c5: 40:1f:33:06:3a:40:5d:4f:81:72:6d:46:4b:eb:c6: 21:95:52:84:29:a2:f0:77:f1:2b:6a:ac:5e:e9:64: f3:90:6a:07:7d:43:0e:78:7c:0e:8e:de:f0:61:55: 34:f5:fc:d0:08:64:23:ca:04:7c:1e:40:33:4f:29: a1:3d:b7:fd:88:8c:26:0b:67:89:29:8d:9d:a8:ce: 12:7c:e6:6d:2a:2d:71:f1:fd:27:23:28:97:2a:3d: f2:39:be:62:af:a2:c2:1e:b5:c4:3f:ae:96:8f:9d: ef:ad:05:b6:59:10:52:c2:74:80:ba:b0:81:21:24: f8:01:89:81:af:95:c3:74:de:af:d7:28:c1:a0:c4: e5:fb:b1:66:86:c2:0e:3a:11:78:96:ea:17:61:b9: f5:08:ab:c4:7c:04:70:50:ca:45:3a:e7:38:75:fc: 85:4c:dd:d2:e9:4c:df:de:5c:95:2a:72:b9:3e:3a: a9:3c:3a:aa:fb:4a:bf:6b:60:85:39:51:e7:0f:06: cb:c5:5a:bd:ea:7a:06:d9:ad:fa:2a:98:65:87:d9: 4c:1e:19:f4:99:1f:40:aa:da:f0:aa:61:f7:27:63: 61:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:0E:E4:5A:FF:0C:86:CD:E3:E3:F1:DC:26:22:5D:25:24:14:52:49 X509v3 Authority Key Identifier: keyid:D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:44:0e:08:22:ed:02:86:a5:85:a4:1a:48:57:92:95:1a:55: c4:cd:b6:e4:eb:db:e5:47:2a:63:14:bb:74:38:c1:af:fd:0a: b6:56:27:40:0e:44:df:fe:e6:72:81:84:8f:5b:ab:1d:ff:eb: 1a:32:5b:6f:2c:ba:ba:b7:1b:16:06:b1:d2:f3:39:ce:08:71: 87:91:94:47:2e:76:bf:71:7d:1d:63:01:07:d6:d2:1a:9b:e8: 31:e1:30:41:85:fd:6f:d1:07:65:be:02:89:e2:55:4d:9f:c9: 1a:81:1d:c0:95:2a:3b:fd:bb:a5:1c:ac:55:02:8a:de:24:07: 12:e7:f1:b1:49:a8:f0:66:89:0b:09:c8:13:cf:e3:10:f5:45: 4f:2d:d8:d5:9b:ee:cc:26:03:1c:ca:28:85:43:e4:9b:4f:bd: 50:42:29:f3:f0:7c:ce:f4:86:e2:e9:a7:c3:f7:c4:6d:51:bc: d2:8a:b1:16:8c:a4:dd:ea:56:11:63:c8:7c:e0:4f:fc:c6:eb: 92:3b:34:24:ff:14:0c:8f:62:10:27:70:44:17:8f:c8:8e:98: a5:63:c1:2c:06:ae:03:70:a5:d2:3c:e5:ff:29:27:21:e2:5d: 31:d6:2c:bc:67:fe:6c:43:97:7f:c8:ac:5b:42:12:be:b7:30: 22:6e:30:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMzRjgxMTAvBgNVBAUTKEQ0MzRFNTlFOThFNDUwOEVFQUE0MERGOTYwREE0RjMz NDI0MTY3NTkwHhcNMjUxMTA0MjMzNTEyWhcNMjUxMTExMjMzNTEyWjAYMRYwFAYD VQQDEw02OTBhOGRiMC0xYmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4UBjhZDFOuXOs8VN/CHAVsFd1AtLpFenW8rEC8VAHzMGOkBdT4FybUZL68Yh lVKEKaLwd/Eraqxe6WTzkGoHfUMOeHwOjt7wYVU09fzQCGQjygR8HkAzTymhPbf9 iIwmC2eJKY2dqM4SfOZtKi1x8f0nIyiXKj3yOb5ir6LCHrXEP66Wj53vrQW2WRBS wnSAurCBIST4AYmBr5XDdN6v1yjBoMTl+7FmhsIOOhF4luoXYbn1CKvEfARwUMpF Ouc4dfyFTN3S6Uzf3lyVKnK5PjqpPDqq+0q/a2CFOVHnDwbLxVq96noG2a36Kphl h9lMHhn0mR9AqtrwqmH3J2NhgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8O5Fr/ DIbN4+Px3CYiXSUkFFJJMB8GA1UdIwQYMBaAFNQ05Z6Y5FCO6qQN+WDaTzNCQWdZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzNGOC9GMDkwMTlENjFC QjcxMUVDOTAzRDhBNENDNEY5QUUwMi8xRFRsbnBqa1VJN3FwQTM1WU5wUE0wSkJa MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFEVGxucGprVUk3cXBBMzVZTnBQTTBKQloxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzNGOC9GMDkwMTlENjFCQjcxMUVDOTAzRDhBNENDNEY5QUUwMi8xRFRsbnBqa1VJ N3FwQTM1WU5wUE0wSkJaMWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSRA4IIu0ChqWFpBpIV5KVGlXEzbbk69vlRypjFLt0OMGv/Qq2VidA DkTf/uZygYSPW6sd/+saMltvLLq6txsWBrHS8znOCHGHkZRHLna/cX0dYwEH1tIa m+gx4TBBhf1v0QdlvgKJ4lVNn8kagR3AlSo7/bulHKxVAoreJAcS5/GxSajwZokL CcgTz+MQ9UVPLdjVm+7MJgMcyiiFQ+SbT71QQinz8HzO9Ibi6afD98RtUbzSirEW jKTd6lYRY8h84E/8xuuSOzQk/xQMj2IQJ3BEF4/IjpilY8EsBq4DcKXSPOX/KSch 4l0x1iy8Z/5sQ5d/yKxbQhK+tzAibjB8 -----END CERTIFICATE-----Generated at Wed Nov 5 10:30:53 2025 by rpki-client