$ rpki-client -vvf rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft File: 1fF0__36EIu7L4fnPG6d1RCNOp8.mft (raw, json) Hash identifier: DlAkfwxAh/7UeN3wwgZbX7e6J8JwXJv4qKMaWFF+8sk= Subject key identifier: 44:9C:F7:F0:95:4B:1F:44:B7:34:65:E8:E2:98:06:3E:5F:01:D7:BE Authority key identifier: D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F Certificate issuer: /CN=A913A5BD/serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F Certificate serial: 02A4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft Manifest number: 02A0 Signing time: Mon 03 Nov 2025 01:29:42 +0000 Manifest this update: Mon 03 Nov 2025 01:29:42 +0000 Manifest next update: Mon 10 Nov 2025 01:29:42 +0000 Files and hashes: 1: 1fF0__36EIu7L4fnPG6d1RCNOp8.crl (hash: sf6dGl8s0qGyiNebPsFM2zi+CP4gkV29VcPY4/3D+mI=) 2: C605A7A01CF911EDBAE62F45C4F9AE02.roa (hash: nUMhsxhIRqeHeQEDGBtbEEh0D5JOlIzRcfpKkf1PF5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 676 (0x2a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A5BD, serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F Validity Not Before: Nov 3 01:29:42 2025 GMT Not After : Nov 10 01:29:42 2025 GMT Subject: CN=69080586-f4b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bf:63:0b:aa:e7:7c:32:3c:17:72:00:9c:79: ef:68:f0:05:d7:36:e1:18:fc:a1:6f:f0:44:1d:9c: 85:4e:4a:5a:75:ee:1c:d0:b9:f5:e2:fa:12:73:7b: d3:fb:a2:a8:cd:cd:f0:03:6a:c1:a6:08:3f:14:fb: 9e:39:ba:fd:a0:12:f2:5f:01:09:2b:1b:ec:23:5c: b4:28:7e:b7:5c:93:dc:cc:42:39:9b:ed:b1:a9:42: d7:6e:0c:0e:15:b7:eb:3e:cd:50:22:5c:6e:98:93: e7:66:5d:30:6c:6c:f1:58:e3:2f:21:eb:73:17:dd: 45:16:5b:aa:c0:dd:d6:4b:3b:00:2c:ee:08:80:79: 5c:76:6d:09:74:a3:d0:63:04:45:02:c4:96:92:b4: ee:37:8b:01:84:b9:0c:c9:04:e9:84:11:a3:dd:c5: 03:de:08:50:0f:4d:e0:2b:49:c4:f8:0c:d9:36:5b: 89:ce:08:fd:91:29:e7:7e:ee:8d:fa:65:92:18:6f: ce:f6:eb:fb:9b:c7:e3:c4:13:db:20:6a:2d:42:d9: 13:87:cf:1a:55:d6:84:06:db:9f:9d:ce:91:25:a0: 65:51:68:1b:ac:a6:b2:09:7e:88:4b:02:cf:a0:97: 47:1d:a1:02:a0:32:36:d6:51:8b:bb:9f:37:81:3e: 14:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:9C:F7:F0:95:4B:1F:44:B7:34:65:E8:E2:98:06:3E:5F:01:D7:BE X509v3 Authority Key Identifier: keyid:D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:07:d8:52:c9:b1:99:9b:80:57:15:20:89:b4:66:86:b9:a1: ae:3d:03:35:e9:db:f2:e0:a1:ee:60:a3:51:24:5c:a9:73:c2: c0:cc:3f:87:3f:59:1c:bc:cb:08:09:97:fb:f4:8a:9d:ad:1b: 65:e1:82:ec:36:62:54:1b:28:05:6a:06:cc:b2:29:8e:e2:8a: f5:2c:41:a3:76:a2:a2:71:79:22:40:47:b1:a0:74:3f:38:dc: d9:4a:fc:61:7e:00:a5:de:66:c8:47:0a:e4:ba:75:39:49:fa: b8:82:88:f4:2a:6f:4c:ce:96:fd:85:51:1e:fa:49:ab:96:ff: f7:e7:52:2a:e5:f0:a9:7f:a0:cc:c6:03:d3:16:12:83:1d:3b: fc:97:6f:72:5d:2c:37:d5:d4:39:73:db:3d:61:35:35:25:a0: 72:e3:2d:0f:a2:41:e6:5f:45:f8:0c:0b:ac:ad:5f:cc:fb:fd: b8:ec:1a:bd:d0:3a:62:d7:05:ee:bb:fd:7c:bf:49:d6:08:73: f1:f8:c2:36:96:e5:57:8d:40:8a:e5:a6:2f:47:c6:6b:b4:37: a8:50:3b:87:5c:80:51:ec:a1:99:e1:28:96:f4:19:60:d6:80: 2e:cb:7e:87:f4:05:95:04:22:51:fc:e8:e8:bf:0b:3b:0b:36: 91:51:01:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E1QkQxMTAvBgNVBAUTKEQ1RjE3NEZGRkRGQTEwOEJCQjJGODdFNzNDNkU5REQ1 MTA4RDNBOUYwHhcNMjUxMTAzMDEyOTQyWhcNMjUxMTEwMDEyOTQyWjAYMRYwFAYD VQQDEw02OTA4MDU4Ni1mNGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx79jC6rnfDI8F3IAnHnvaPAF1zbhGPyhb/BEHZyFTkpade4c0Ln14voSc3vT +6Kozc3wA2rBpgg/FPueObr9oBLyXwEJKxvsI1y0KH63XJPczEI5m+2xqULXbgwO FbfrPs1QIlxumJPnZl0wbGzxWOMvIetzF91FFluqwN3WSzsALO4IgHlcdm0JdKPQ YwRFAsSWkrTuN4sBhLkMyQTphBGj3cUD3ghQD03gK0nE+AzZNluJzgj9kSnnfu6N +mWSGG/O9uv7m8fjxBPbIGotQtkTh88aVdaEBtufnc6RJaBlUWgbrKayCX6ISwLP oJdHHaECoDI21lGLu583gT4UDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFESc9/CV Sx9EtzRl6OKYBj5fAde+MB8GA1UdIwQYMBaAFNXxdP/9+hCLuy+H5zxundUQjTqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTVCRC80QjJCMzkzRTFD RjcxMUVEQTAwRkQzNDNDNEY5QUUwMi8xZkYwX18zNkVJdTdMNGZuUEc2ZDFSQ05P cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFmRjBfXzM2RUl1N0w0Zm5QRzZkMVJDTk9wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTVCRC80QjJCMzkzRTFDRjcxMUVEQTAwRkQzNDNDNEY5QUUwMi8xZkYwX18zNkVJ dTdMNGZuUEc2ZDFSQ05PcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaB9hSybGZm4BXFSCJtGaGuaGuPQM16dvy4KHuYKNRJFypc8LAzD+H P1kcvMsICZf79IqdrRtl4YLsNmJUGygFagbMsimO4or1LEGjdqKicXkiQEexoHQ/ ONzZSvxhfgCl3mbIRwrkunU5Sfq4goj0Km9Mzpb9hVEe+kmrlv/351Iq5fCpf6DM xgPTFhKDHTv8l29yXSw31dQ5c9s9YTU1JaBy4y0PokHmX0X4DAusrV/M+/247Bq9 0Dpi1wXuu/18v0nWCHPx+MI2luVXjUCK5aYvR8ZrtDeoUDuHXIBR7KGZ4SiW9Blg 1oAuy36H9AWVBCJR/Ojovws7CzaRUQFc -----END CERTIFICATE-----Generated at Tue Nov 4 21:36:29 2025 by rpki-client