$ rpki-client -vvf rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft File: 1rdRTL8L4gRsE8oNf10iNS_aWO4.mft (raw, json) Hash identifier: 0XxpvecxXWO+lTcr55d0EUzr3fcD8+wPwOYRN+87wvI= Subject key identifier: E5:5A:71:29:76:1B:C0:E1:16:9B:51:FA:1F:7F:A6:E8:D4:A4:AA:13 Authority key identifier: D6:B7:51:4C:BF:0B:E2:04:6C:13:CA:0D:7F:5D:22:35:2F:DA:58:EE Certificate issuer: /CN=A9134B2D/serialNumber=D6B7514CBF0BE2046C13CA0D7F5D22352FDA58EE Certificate serial: 021D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1rdRTL8L4gRsE8oNf10iNS_aWO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft Manifest number: 0219 Signing time: Mon 03 Nov 2025 02:09:46 +0000 Manifest this update: Mon 03 Nov 2025 02:09:46 +0000 Manifest next update: Mon 10 Nov 2025 02:09:46 +0000 Files and hashes: 1: 1rdRTL8L4gRsE8oNf10iNS_aWO4.crl (hash: uruHuGN6oIfd+8Z2O6h2qyv/y4gaeLjUtTPmHwZf6SY=) 2: 8E3128B4837D11EDB082012FC4F9AE02.roa (hash: pbCZups9CHpt8yF1jqE6eaTv1T+fEJy3uGbRYPbMwLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.crl rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1rdRTL8L4gRsE8oNf10iNS_aWO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:09:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 541 (0x21d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134B2D, serialNumber=D6B7514CBF0BE2046C13CA0D7F5D22352FDA58EE Validity Not Before: Nov 3 02:09:46 2025 GMT Not After : Nov 10 02:09:46 2025 GMT Subject: CN=69080eea-ad11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d4:ee:9c:62:9b:59:59:cd:93:06:f9:4b:8e: cb:4e:4c:8d:3e:a9:26:32:40:55:12:45:fd:ba:70: d1:6f:57:c4:ee:e5:8b:5a:3f:e6:c5:8a:70:37:b8: bb:c5:13:55:4b:5e:ce:cf:9f:60:9e:9d:a3:21:8c: 96:cf:b1:23:9d:fc:0c:70:f4:5c:b2:0e:37:b1:0a: e5:7f:61:90:c5:0a:b0:a4:d6:fe:f7:75:0d:9f:3e: c8:45:c7:4c:cd:ac:1d:b9:25:00:9a:96:5c:39:e0: 30:d4:81:68:bc:e0:6d:7e:f6:59:d7:3e:ea:61:15: 8e:31:87:fe:1e:e1:fa:5c:90:4f:43:3e:4f:c6:49: b7:33:bd:78:36:b6:48:ed:e5:bd:80:be:ff:f8:5b: 13:d4:f0:e9:f8:5b:cb:32:84:fa:6e:11:0c:30:c5: bc:3a:0a:b2:1f:93:4b:97:b1:fa:42:03:ea:6b:a0: 45:cf:95:7b:36:6a:d5:39:9a:9a:9a:a9:c2:a5:6a: d1:c1:5a:6b:ac:1c:f9:01:f3:15:a6:a5:9d:b0:4c: 59:c9:21:4c:e5:b0:05:1b:54:3b:7d:8c:e1:57:67: 75:75:6a:55:5f:01:c9:2c:99:b4:9e:38:30:d5:7e: f4:07:d9:8c:58:53:90:2c:8a:35:05:13:48:df:eb: 87:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:5A:71:29:76:1B:C0:E1:16:9B:51:FA:1F:7F:A6:E8:D4:A4:AA:13 X509v3 Authority Key Identifier: keyid:D6:B7:51:4C:BF:0B:E2:04:6C:13:CA:0D:7F:5D:22:35:2F:DA:58:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1rdRTL8L4gRsE8oNf10iNS_aWO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:52:02:8e:9c:92:79:a5:f6:d2:f7:11:53:e4:fa:9a:53:68: f7:24:d2:1a:ff:f8:75:48:b8:6f:44:d8:d0:b3:e5:f1:7b:f3: ae:18:74:16:b5:29:d5:1e:9b:3a:61:8d:ca:56:7d:66:5d:6b: 33:ee:11:b5:4b:24:6b:5b:b5:fe:eb:da:fb:63:91:7d:3d:6c: ae:e4:74:ea:b6:96:4b:24:cb:d7:23:cc:ee:ad:c0:dd:9f:d9: 3c:58:1a:b8:26:73:08:66:ff:ff:a7:19:e1:65:df:58:4f:a3: 61:b0:04:d4:4d:6d:2c:58:fc:46:02:b9:68:43:83:75:81:a4: d5:57:bd:7a:f2:e8:d5:34:49:58:0c:29:e9:85:89:7b:5f:3a: c6:41:05:d4:a0:87:98:a5:ba:15:40:16:d7:5b:d4:4e:9d:a6: 56:72:de:c2:b1:9b:a9:b9:8f:0e:f7:c9:15:71:39:ec:4e:ba: bb:42:14:0c:94:22:38:c1:b3:82:33:08:ba:72:d5:42:34:83: 54:35:ba:69:c8:f7:f8:77:43:90:ca:3c:8f:34:d7:eb:93:b6: 3a:d4:6c:15:89:df:2c:0e:9e:ac:71:2d:03:64:08:8b:3c:d6: ab:f6:fd:62:e2:4f:f9:ef:c1:ad:0f:de:b6:e3:09:b9:cc:61: c4:c5:5a:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRCMkQxMTAvBgNVBAUTKEQ2Qjc1MTRDQkYwQkUyMDQ2QzEzQ0EwRDdGNUQyMjM1 MkZEQTU4RUUwHhcNMjUxMTAzMDIwOTQ2WhcNMjUxMTEwMDIwOTQ2WjAYMRYwFAYD VQQDEw02OTA4MGVlYS1hZDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdTunGKbWVnNkwb5S47LTkyNPqkmMkBVEkX9unDRb1fE7uWLWj/mxYpwN7i7 xRNVS17Oz59gnp2jIYyWz7EjnfwMcPRcsg43sQrlf2GQxQqwpNb+93UNnz7IRcdM zawduSUAmpZcOeAw1IFovOBtfvZZ1z7qYRWOMYf+HuH6XJBPQz5Pxkm3M714NrZI 7eW9gL7/+FsT1PDp+FvLMoT6bhEMMMW8OgqyH5NLl7H6QgPqa6BFz5V7NmrVOZqa mqnCpWrRwVprrBz5AfMVpqWdsExZySFM5bAFG1Q7fYzhV2d1dWpVXwHJLJm0njgw 1X70B9mMWFOQLIo1BRNI3+uH+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVacSl2 G8DhFptR+h9/pujUpKoTMB8GA1UdIwQYMBaAFNa3UUy/C+IEbBPKDX9dIjUv2lju MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEIyRC8wMzFGNDUxRTgz N0IxMUVEODA1RDQwMkVDNEY5QUUwMi8xcmRSVEw4TDRnUnNFOG9OZjEwaU5TX2FX TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFyZFJUTDhMNGdSc0U4b05mMTBpTlNfYVdPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEIyRC8wMzFGNDUxRTgzN0IxMUVEODA1RDQwMkVDNEY5QUUwMi8xcmRSVEw4TDRn UnNFOG9OZjEwaU5TX2FXTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVUgKOnJJ5pfbS9xFT5PqaU2j3JNIa//h1SLhvRNjQs+Xxe/OuGHQW tSnVHps6YY3KVn1mXWsz7hG1SyRrW7X+69r7Y5F9PWyu5HTqtpZLJMvXI8zurcDd n9k8WBq4JnMIZv//pxnhZd9YT6NhsATUTW0sWPxGArloQ4N1gaTVV7168ujVNElY DCnphYl7XzrGQQXUoIeYpboVQBbXW9ROnaZWct7CsZupuY8O98kVcTnsTrq7QhQM lCI4wbOCMwi6ctVCNINUNbppyPf4d0OQyjyPNNfrk7Y61GwVid8sDp6scS0DZAiL PNar9v1i4k/578GtD9624wm5zGHExVoA -----END CERTIFICATE-----Generated at Wed Nov 5 02:18:15 2025 by rpki-client