$ rpki-client -vvf rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft File: d1_lofYadAjf7tR_FEfjRk2lCyo.mft (raw, json) Hash identifier: VlUXQa7WdHk/nX49oWOkmH7d19g8RpsIbHr/FK2iZLo= Subject key identifier: F4:80:E6:CF:F9:40:3A:AC:BD:9A:32:BA:ED:D4:0F:83:3A:22:00:F8 Authority key identifier: 77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A Certificate issuer: /CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A Certificate serial: 0474 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft Manifest number: 0459 Signing time: Mon 03 Nov 2025 00:09:41 +0000 Manifest this update: Mon 03 Nov 2025 00:09:40 +0000 Manifest next update: Mon 10 Nov 2025 00:09:40 +0000 Files and hashes: 1: d1_lofYadAjf7tR_FEfjRk2lCyo.crl (hash: nQ0jR0cFxP3wgna9TEqxJWpKhDUFBD0doc22lUvVdmc=) 2: 5B17230CDE9B11EC9AE23269C4F9AE02.roa (hash: iXt8wY4xDmSntkF4mr4ren6r7L4k9/tTpksHGcZedNM=) 3: 57B53F64DE9B11EC9AE23269C4F9AE02.roa (hash: OtRC1FOzJ2VnQ1iDT/pgw77NVRkDqW1cgJOs0qquLx8=) 4: 59D82E00DE9B11EC9AE23269C4F9AE02.roa (hash: z9il2KLvmM35CEJ33D6dQT01IjqffT1KfUHR8PJEmYw=) 5: DEE5E3C49F0511EC9DA80B77C4F9AE02.roa (hash: rDIkGkc5RWLLbbHLbXvxxPcvgv9UCQJUW3VRbKAdmkE=) 6: 5879949ADE9B11EC9AE23269C4F9AE02.roa (hash: vJqrrt0bxSwZaP1IHOgSaljOyb8CxyRpUsYkTfCzlUg=) 7: 59230714DE9B11EC9AE23269C4F9AE02.roa (hash: D86sbiTviOSy/5MbuHJAROiiKuXxKjWRrOsJTtvytBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:09:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1140 (0x474) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91398A3, serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A Validity Not Before: Nov 3 00:09:40 2025 GMT Not After : Nov 10 00:09:40 2025 GMT Subject: CN=6907f2c5-6dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:86:81:61:7e:f8:16:ad:06:35:4b:12:80:34: a1:f8:49:9b:f2:19:c7:6e:bc:29:39:25:65:46:25: b4:5f:83:21:af:8c:ac:7c:ec:02:c4:fd:d4:f2:3f: 13:46:ca:3e:8b:9d:d7:36:8c:be:de:25:5b:2e:98: f2:88:87:c2:bc:b3:40:62:ac:8b:98:e8:e7:69:10: f9:55:95:4a:16:47:8a:17:82:82:26:58:8c:db:fd: b1:88:c6:19:1d:92:9d:12:b2:79:d1:d7:71:a6:0a: 36:91:f4:a6:fe:f8:3c:ce:bd:82:bf:1f:21:b7:5d: cb:42:b9:db:ec:1d:63:c8:c9:cf:2d:06:22:47:54: 9f:5a:98:c9:04:62:9a:86:97:f2:58:49:00:9f:89: 51:c1:1e:10:18:b3:0a:65:6e:1f:3b:54:27:15:20: 5e:88:3b:e5:1b:ee:7d:4c:ab:76:0d:b4:2a:4b:3e: 5b:63:71:f6:c6:29:65:a8:aa:35:2b:7a:17:5c:93: 58:a2:a7:4c:86:51:5d:84:13:f3:b2:72:39:69:ae: d0:90:4e:1d:d1:93:1e:f5:d4:e6:94:69:a7:c0:b8: 37:d1:28:6d:b3:1c:38:ff:14:eb:8d:de:ad:9c:01: eb:ac:ca:c0:3b:6c:b7:5d:7d:01:3e:fd:58:dc:d6: 4d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:80:E6:CF:F9:40:3A:AC:BD:9A:32:BA:ED:D4:0F:83:3A:22:00:F8 X509v3 Authority Key Identifier: keyid:77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:a4:b5:00:0b:f2:e2:e2:77:10:aa:e0:59:4d:2c:25:8b:13: 34:b9:eb:a4:dc:f4:49:df:8d:34:4d:72:59:87:cf:aa:50:62: ec:05:52:45:4a:19:2c:47:5a:b5:83:cf:89:4e:75:ed:4d:d4: 14:30:24:9d:15:cc:ff:ba:bc:57:8d:b0:3a:ec:a5:d8:5f:44: 88:b8:3c:62:e1:d7:18:74:1f:93:69:1d:07:6d:35:fe:ba:3f: 99:a1:b4:82:0f:71:28:a9:70:74:3b:ff:e7:97:0a:e1:9f:f8: 27:76:0f:ce:ff:65:ae:94:5c:35:a6:2f:03:9b:23:03:4a:e2: 2b:19:3b:e4:96:23:0e:90:23:44:41:b1:c0:45:98:02:73:f2: 7a:17:1d:16:35:88:fb:ff:d0:42:0f:b1:61:cc:04:0a:dd:03: 0b:61:cf:42:0c:ae:af:8a:c2:d6:5b:c9:42:76:33:51:14:24: 65:87:2c:03:4f:71:3a:25:ed:b3:60:d3:e5:de:ae:e4:b9:1e: 8c:7a:55:11:d1:fa:64:85:b6:bb:83:42:a8:43:6e:81:8e:a9: cd:59:8f:94:97:ab:2c:b0:03:6d:85:d2:b8:40:8e:22:23:79: bb:52:48:e7:a4:6b:64:dd:da:28:04:81:b0:d1:15:15:6c:37: 06:18:a6:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk4QTMxMTAvBgNVBAUTKDc3NUZFNUExRjYxQTc0MDhERkVFRDQ3RjE0NDdFMzQ2 NERBNTBCMkEwHhcNMjUxMTAzMDAwOTQwWhcNMjUxMTEwMDAwOTQwWjAYMRYwFAYD VQQDEw02OTA3ZjJjNS02ZGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8YaBYX74Fq0GNUsSgDSh+Emb8hnHbrwpOSVlRiW0X4Mhr4ysfOwCxP3U8j8T Rso+i53XNoy+3iVbLpjyiIfCvLNAYqyLmOjnaRD5VZVKFkeKF4KCJliM2/2xiMYZ HZKdErJ50ddxpgo2kfSm/vg8zr2Cvx8ht13LQrnb7B1jyMnPLQYiR1SfWpjJBGKa hpfyWEkAn4lRwR4QGLMKZW4fO1QnFSBeiDvlG+59TKt2DbQqSz5bY3H2xillqKo1 K3oXXJNYoqdMhlFdhBPzsnI5aa7QkE4d0ZMe9dTmlGmnwLg30Shtsxw4/xTrjd6t nAHrrMrAO2y3XX0BPv1Y3NZNNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPSA5s/5 QDqsvZoyuu3UD4M6IgD4MB8GA1UdIwQYMBaAFHdf5aH2GnQI3+7UfxRH40ZNpQsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOThBMy9FMjE5QjYxQzcx MTMxMUVDQkMzMDg5MTlDNEY5QUUwMi9kMV9sb2ZZYWRBamY3dFJfRkVmalJrMmxD eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QxX2xvZllhZEFqZjd0Ul9GRWZqUmsybEN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OThBMy9FMjE5QjYxQzcxMTMxMUVDQkMzMDg5MTlDNEY5QUUwMi9kMV9sb2ZZYWRB amY3dFJfRkVmalJrMmxDeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIpLUAC/Li4ncQquBZTSwlixM0ueuk3PRJ3400TXJZh8+qUGLsBVJF ShksR1q1g8+JTnXtTdQUMCSdFcz/urxXjbA67KXYX0SIuDxi4dcYdB+TaR0HbTX+ uj+ZobSCD3EoqXB0O//nlwrhn/gndg/O/2WulFw1pi8DmyMDSuIrGTvkliMOkCNE QbHARZgCc/J6Fx0WNYj7/9BCD7FhzAQK3QMLYc9CDK6visLWW8lCdjNRFCRlhywD T3E6Je2zYNPl3q7kuR6MelUR0fpkhba7g0KoQ26BjqnNWY+Ul6sssANthdK4QI4i I3m7UkjnpGtk3dooBIGw0RUVbDcGGKZu -----END CERTIFICATE-----Generated at Tue Nov 4 16:13:24 2025 by rpki-client