$ rpki-client -vvf rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft File: 1c9c-LTYDyITBPNliOOVYERH93o.mft (raw, json) Hash identifier: LHlSwjctx7w5tVhLr6iXJh0KswUS0AGd+u7KKdatP4I= Subject key identifier: 8C:67:39:F6:01:54:D0:F0:0E:83:54:23:30:04:3A:72:A0:8E:39:63 Authority key identifier: D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A Certificate issuer: /CN=A914A5BB/serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A Certificate serial: 0241 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft Manifest number: 023D Signing time: Wed 05 Nov 2025 01:53:26 +0000 Manifest this update: Wed 05 Nov 2025 01:53:26 +0000 Manifest next update: Wed 12 Nov 2025 01:53:26 +0000 Files and hashes: 1: 1c9c-LTYDyITBPNliOOVYERH93o.crl (hash: LW3iN22C2f1C5ada14d7c4YAoIRzGKGwudgugd4CaDE=) 2: A83E51EC45F611EDBA9D6062C4F9AE02.roa (hash: jD51iPrbzJDYVHI7eRj6WEF8ux+0Y9e0GCmn/E2/uJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:53:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 577 (0x241) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A5BB, serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A Validity Not Before: Nov 5 01:53:26 2025 GMT Not After : Nov 12 01:53:26 2025 GMT Subject: CN=690aae16-30f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:32:1c:8e:e7:e2:87:01:a1:99:4d:0a:f1:85: ac:52:d6:16:3e:d6:b5:a1:37:47:da:23:e1:92:39: 6b:f6:5b:92:f1:ea:cf:cc:f0:9d:b0:6b:b5:04:7c: bd:74:0e:82:3d:6e:96:78:de:41:e1:ac:50:5b:e6: 9a:f8:20:7a:7d:9f:bc:16:9d:38:5a:35:75:ac:d5: c4:6d:cb:92:ad:e5:cc:fe:9a:ed:fc:fa:46:99:7d: 60:bf:9f:ad:88:42:5f:fb:a7:e9:ad:45:9d:cf:24: 17:85:ee:25:c2:15:76:ff:26:ef:f5:5f:58:d5:e7: 73:8b:64:00:aa:56:1b:d5:97:b9:d5:94:ef:b0:e7: 92:84:2e:fb:b8:ba:0a:2e:f8:55:95:08:0d:bf:dd: 67:22:3d:75:07:9d:cc:4f:80:c7:f6:d6:f2:f5:f9: 0a:5a:36:5d:eb:55:5b:dc:85:9b:f7:0a:87:b4:76: 4e:2f:de:23:4f:05:ee:aa:cb:62:56:36:86:4f:1d: 67:15:0a:a8:46:52:38:9c:ad:18:27:f4:cc:7c:66: 8a:36:8c:ae:bc:e6:51:ca:6e:2d:b2:eb:f9:c1:6b: 19:33:3e:6f:76:28:0e:db:b9:e3:63:9d:ef:6b:42: 18:b4:f5:1f:f8:f7:e9:e1:65:e1:fe:54:48:81:53: 46:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:67:39:F6:01:54:D0:F0:0E:83:54:23:30:04:3A:72:A0:8E:39:63 X509v3 Authority Key Identifier: keyid:D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:31:81:54:a5:e6:d5:81:29:fd:47:db:48:87:00:c6:10:35: 3c:31:9c:15:64:04:af:6f:58:35:01:8b:c2:40:f2:ea:7e:03: d7:df:81:63:91:02:31:f3:d7:75:98:8c:47:7e:67:7e:ed:b2: 9a:f0:42:60:3b:ac:d8:eb:ca:1b:85:55:6d:c1:93:08:a8:64: 09:d7:d1:7e:64:ff:cf:e6:56:c1:ac:27:42:75:48:02:b8:e3: 72:ed:33:71:64:32:1e:37:8d:71:c4:d8:b6:35:a5:0d:02:92: 51:6f:a2:fb:c2:d6:a4:b6:58:1e:65:75:40:56:77:f0:5a:1e: da:fb:71:4c:1d:ad:65:22:37:49:50:c4:ea:0d:de:78:ef:de: 54:00:36:4c:31:c7:df:1a:c1:ea:dd:4d:27:d5:09:e7:71:10: 7e:19:49:49:be:b4:7f:54:16:0f:c2:4e:af:93:a9:4f:cd:3c: 15:f4:af:23:de:9c:f6:b8:ab:6d:8d:5e:a8:ff:cc:d2:83:51: f7:62:bc:50:a0:c6:5e:97:74:20:27:df:d4:45:71:b0:36:b2: 86:2d:78:19:01:be:1c:52:61:39:56:22:5c:4b:f4:72:38:ed: 10:6c:02:1b:be:29:27:4a:7f:e7:1a:2a:c2:5b:4d:38:5f:ea: 0b:3b:b2:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE1QkIxMTAvBgNVBAUTKEQ1Q0Y1Q0Y4QjREODBGMjIxMzA0RjM2NTg4RTM5NTYw NDQ0N0Y3N0EwHhcNMjUxMTA1MDE1MzI2WhcNMjUxMTEyMDE1MzI2WjAYMRYwFAYD VQQDEw02OTBhYWUxNi0zMGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3TIcjufihwGhmU0K8YWsUtYWPta1oTdH2iPhkjlr9luS8erPzPCdsGu1BHy9 dA6CPW6WeN5B4axQW+aa+CB6fZ+8Fp04WjV1rNXEbcuSreXM/prt/PpGmX1gv5+t iEJf+6fprUWdzyQXhe4lwhV2/ybv9V9Y1edzi2QAqlYb1Ze51ZTvsOeShC77uLoK LvhVlQgNv91nIj11B53MT4DH9tby9fkKWjZd61Vb3IWb9wqHtHZOL94jTwXuqsti VjaGTx1nFQqoRlI4nK0YJ/TMfGaKNoyuvOZRym4tsuv5wWsZMz5vdigO27njY53v a0IYtPUf+Pfp4WXh/lRIgVNGTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIxnOfYB VNDwDoNUIzAEOnKgjjljMB8GA1UdIwQYMBaAFNXPXPi02A8iEwTzZYjjlWBER/d6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTVCQi83MjNDRDlBQTQ1 RjIxMUVEOTY0QjRDNUFDNEY5QUUwMi8xYzljLUxUWUR5SVRCUE5saU9PVllFUkg5 M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjOWMtTFRZRHlJVEJQTmxpT09WWUVSSDkzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTVCQi83MjNDRDlBQTQ1RjIxMUVEOTY0QjRDNUFDNEY5QUUwMi8xYzljLUxUWUR5 SVRCUE5saU9PVllFUkg5M28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGMYFUpebVgSn9R9tIhwDGEDU8MZwVZASvb1g1AYvCQPLqfgPX34Fj kQIx89d1mIxHfmd+7bKa8EJgO6zY68obhVVtwZMIqGQJ19F+ZP/P5lbBrCdCdUgC uONy7TNxZDIeN41xxNi2NaUNApJRb6L7wtaktlgeZXVAVnfwWh7a+3FMHa1lIjdJ UMTqDd54795UADZMMcffGsHq3U0n1QnncRB+GUlJvrR/VBYPwk6vk6lPzTwV9K8j 3pz2uKttjV6o/8zSg1H3YrxQoMZel3QgJ9/URXGwNrKGLXgZAb4cUmE5ViJcS/Ry OO0QbAIbviknSn/nGirCW004X+oLO7L9 -----END CERTIFICATE-----Generated at Wed Nov 5 04:26:07 2025 by rpki-client