$ rpki-client -vvf rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft File: 1gA1BzfqQktAGySBBT0rwpFsutE.mft (raw, json) Hash identifier: onWSCxT7pTAGJQovZYI62ejSpyxECQVQw2H80wIaEhQ= Subject key identifier: 3D:1F:7C:99:BC:B8:E4:B0:44:ED:36:69:48:02:B1:E2:00:A0:A7:77 Authority key identifier: D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1 Certificate issuer: /CN=A9154973/serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1 Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft Manifest number: E8 Signing time: Wed 05 Nov 2025 05:39:10 +0000 Manifest this update: Wed 05 Nov 2025 05:39:10 +0000 Manifest next update: Wed 12 Nov 2025 05:39:10 +0000 Files and hashes: 1: 1gA1BzfqQktAGySBBT0rwpFsutE.crl (hash: D73iMYarO3YYmlVUQhhviFdLgim8KNpi3iWmzlLmA4I=) 2: FD557922606A11EF8B9F6820C4F9AE02.roa (hash: ewsNS72wnAdnQiFMusstfvI/PZNeUDtev9nr2+xdPsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:39:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154973, serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1 Validity Not Before: Nov 5 05:39:10 2025 GMT Not After : Nov 12 05:39:10 2025 GMT Subject: CN=690ae2fe-f2d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:79:b1:67:f4:c5:03:3b:da:7a:d8:5b:dc:b5: 1d:97:c2:a8:d7:67:b2:d1:8a:41:94:b4:85:18:38: c9:ea:fb:f1:9b:b1:4a:75:70:b1:36:6f:a2:3b:6b: f9:8a:92:eb:3f:4b:0f:da:84:e9:86:c9:6f:38:0a: 59:44:02:05:36:8f:40:dc:59:0b:26:47:c7:7e:19: d9:be:c3:90:5b:1a:b4:97:94:66:b2:e8:b2:51:63: 69:9f:c0:03:79:47:5c:e1:f3:82:ba:0c:0b:d0:ef: 79:28:18:b3:79:21:6a:42:35:c0:8f:0a:b2:f7:1d: 7b:a0:14:00:dd:ad:c9:cf:50:8d:4f:06:9b:5b:e3: 2c:77:48:b5:93:93:d5:ce:ba:8d:58:86:8f:2c:05: 1e:95:4e:3d:54:74:1f:7a:cc:03:17:ea:31:f2:c2: 31:e2:13:a3:76:bf:90:c8:83:ce:a2:68:59:39:86: f8:83:12:a0:4e:31:65:92:d5:63:a2:95:cc:e9:84: 35:91:23:bb:5a:7f:96:f1:54:31:b3:12:89:e9:ee: a2:42:f3:cd:4b:25:09:ed:eb:de:f8:09:fb:54:15: 53:66:1c:91:6f:9b:fe:4b:1d:09:95:c8:2c:73:c5: a9:bb:e7:41:a4:d1:bc:25:e8:65:a8:26:12:e8:a4: c1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:1F:7C:99:BC:B8:E4:B0:44:ED:36:69:48:02:B1:E2:00:A0:A7:77 X509v3 Authority Key Identifier: keyid:D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:35:91:71:67:5c:0c:24:de:51:72:c1:84:a3:cf:e4:b2:0b: e8:56:6d:79:79:88:3c:a5:80:0e:fe:88:fd:02:b4:20:fa:bf: 2d:81:f4:b0:d6:0e:e8:41:0d:79:16:8d:6c:49:91:3e:30:63: 6d:e7:bb:27:6d:f8:0b:5a:fc:35:a5:d5:3f:80:4d:31:09:c3: 2f:cb:bb:f4:47:f6:a5:0c:2e:0b:3a:2d:e9:a0:c5:ae:69:f6: c4:22:b4:b3:16:7c:7d:93:58:99:1d:db:09:d3:6d:a7:a2:c1: 01:8a:fc:ee:62:ee:b3:a3:ad:0c:72:db:43:39:a9:58:0d:63: b3:bd:83:46:b1:da:9c:bc:37:c6:04:e6:e4:fb:72:8a:5d:7f: 2e:97:68:5c:ef:ea:b5:3e:89:12:c5:2b:57:53:6c:c6:52:30: e9:05:68:ef:b9:21:8d:28:b4:77:fc:52:7b:1f:7f:8b:34:d4: ac:97:0d:ff:7c:26:ca:99:ff:04:34:c8:58:9f:65:5d:a5:db: 37:c4:92:04:f7:9e:f2:b6:aa:e9:6f:ea:c7:03:2a:9a:82:fc: db:26:7c:ad:71:35:2c:22:c1:b9:c9:79:da:fd:38:df:fa:e5: a9:d6:a4:17:e6:51:7e:ac:38:4c:07:a3:74:80:94:20:f3:73: af:40:8f:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ5NzMxMTAvBgNVBAUTKEQ2MDAzNTA3MzdFQTQyNEI0MDFCMjQ4MTA1M0QyQkMy OTE2Q0JBRDEwHhcNMjUxMTA1MDUzOTEwWhcNMjUxMTEyMDUzOTEwWjAYMRYwFAYD VQQDEw02OTBhZTJmZS1mMmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3mxZ/TFAzvaethb3LUdl8Ko12ey0YpBlLSFGDjJ6vvxm7FKdXCxNm+iO2v5 ipLrP0sP2oTphslvOApZRAIFNo9A3FkLJkfHfhnZvsOQWxq0l5RmsuiyUWNpn8AD eUdc4fOCugwL0O95KBizeSFqQjXAjwqy9x17oBQA3a3Jz1CNTwabW+Msd0i1k5PV zrqNWIaPLAUelU49VHQfeswDF+ox8sIx4hOjdr+QyIPOomhZOYb4gxKgTjFlktVj opXM6YQ1kSO7Wn+W8VQxsxKJ6e6iQvPNSyUJ7eve+An7VBVTZhyRb5v+Sx0Jlcgs c8Wpu+dBpNG8JehlqCYS6KTBxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0ffJm8 uOSwRO02aUgCseIAoKd3MB8GA1UdIwQYMBaAFNYANQc36kJLQBskgQU9K8KRbLrR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDk3My9BNjVCQzYyNjYw NkExMUVGODk4RURCMUZDNEY5QUUwMi8xZ0ExQnpmcVFrdEFHeVNCQlQwcndwRnN1 dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFnQTFCemZxUWt0QUd5U0JCVDByd3BGc3V0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDk3My9BNjVCQzYyNjYwNkExMUVGODk4RURCMUZDNEY5QUUwMi8xZ0ExQnpmcVFr dEFHeVNCQlQwcndwRnN1dEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8NZFxZ1wMJN5RcsGEo8/ksgvoVm15eYg8pYAO/oj9ArQg+r8tgfSw 1g7oQQ15Fo1sSZE+MGNt57snbfgLWvw1pdU/gE0xCcMvy7v0R/alDC4LOi3poMWu afbEIrSzFnx9k1iZHdsJ022nosEBivzuYu6zo60McttDOalYDWOzvYNGsdqcvDfG BObk+3KKXX8ul2hc7+q1PokSxStXU2zGUjDpBWjvuSGNKLR3/FJ7H3+LNNSslw3/ fCbKmf8ENMhYn2Vdpds3xJIE957ytqrpb+rHAyqagvzbJnytcTUsIsG5yXna/Tjf +uWp1qQX5lF+rDhMB6N0gJQg83OvQI9X -----END CERTIFICATE-----Generated at Wed Nov 5 21:16:01 2025 by rpki-client