$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft File: 1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft (raw, json) Hash identifier: ADnZGW/Sgl488VpKSal+zNJTNM7ExOET1XG0yvSPB6Q= Subject key identifier: 13:2E:33:51:F1:26:7A:5D:52:53:0D:D9:72:A9:FA:A2:8D:8B:F1:C3 Authority key identifier: D7:15:18:FC:6E:56:C7:C4:EC:A9:EA:18:B1:B5:41:D8:B0:C2:CA:22 Certificate issuer: /CN=A9172D65/serialNumber=D71518FC6E56C7C4ECA9EA18B1B541D8B0C2CA22 Certificate serial: 04EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft Manifest number: 04E4 Signing time: Sun 02 Nov 2025 23:44:20 +0000 Manifest this update: Sun 02 Nov 2025 23:44:19 +0000 Manifest next update: Sun 09 Nov 2025 23:44:19 +0000 Files and hashes: 1: 1xUY_G5Wx8TsqeoYsbVB2LDCyiI.crl (hash: gxM3ty9S4Qm5JRHlDpyEOqiK2kYyAVHX7pXGqvg3c+Y=) 2: 56530120D47E11EFB2639C53C4F9AE02.roa (hash: P53OZfOgjzKWRl/N07BBbaXeKGlafyTyi7q63CLwsiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.crl rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:44:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1258 (0x4ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172D65, serialNumber=D71518FC6E56C7C4ECA9EA18B1B541D8B0C2CA22 Validity Not Before: Nov 2 23:44:19 2025 GMT Not After : Nov 9 23:44:19 2025 GMT Subject: CN=6907ecd3-f86f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:60:a0:1d:68:c6:d2:1e:78:27:ac:8e:2b:dc: ec:8b:c7:8b:db:5a:14:08:04:b3:e2:d3:cb:e6:23: 9a:1d:c0:a7:ce:9d:e2:7a:dd:4a:aa:49:45:94:31: 69:88:53:9c:7f:24:a2:38:57:b7:af:ed:8f:fe:f4: 4a:2b:35:07:62:61:0b:7a:2a:59:2c:be:c1:5a:32: 2d:20:58:d6:46:72:da:47:8b:df:a4:ac:dd:b6:56: b3:b0:23:fa:4f:f3:26:e8:99:d8:1e:98:29:d7:de: 4f:52:fc:96:d8:69:39:4b:6e:29:e6:cf:e5:08:06: 8d:29:ca:50:0d:d4:cb:16:38:f2:a8:bf:0c:ca:77: cd:a4:be:a7:84:72:d3:ac:22:74:81:60:99:d3:b0: 10:1a:e9:47:4c:55:98:8a:6b:6c:74:b4:e4:15:92: 4b:f3:30:3e:e3:86:bf:b3:92:54:c3:90:01:c4:15: 7c:ce:34:f0:94:b1:09:f0:4f:78:d1:19:36:89:f3: 00:d8:e7:de:db:75:d3:31:2b:51:67:d2:4c:db:0c: 34:0c:3b:c0:dd:9b:ed:7a:3a:5f:e1:74:59:62:11: 50:14:e0:5c:b0:18:cb:6a:e6:92:38:67:4e:aa:7c: e6:71:46:8b:38:d9:a9:63:a4:0d:a6:11:84:6d:b9: be:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:2E:33:51:F1:26:7A:5D:52:53:0D:D9:72:A9:FA:A2:8D:8B:F1:C3 X509v3 Authority Key Identifier: keyid:D7:15:18:FC:6E:56:C7:C4:EC:A9:EA:18:B1:B5:41:D8:B0:C2:CA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:5e:a6:bc:0e:30:b9:66:5d:b8:0d:81:7f:41:24:8d:0f:8b: ce:76:1d:4d:59:57:6b:18:2c:bc:db:4d:06:67:b0:74:7b:8b: 37:6f:91:91:14:20:9e:da:11:cc:6f:e4:79:80:79:02:1a:02: f9:b2:58:a1:4d:30:60:3f:04:bd:f3:11:e5:11:ef:0f:29:14: ae:8b:83:75:1d:ea:d9:4a:21:fb:a5:f8:fc:3e:05:1c:4d:9a: 74:66:60:29:f1:87:de:78:e7:d1:0c:c1:f0:e0:88:88:55:01: e8:e1:ca:07:73:19:03:48:ef:99:78:39:d6:3b:0c:ae:0a:21: 92:66:14:ca:bc:24:09:32:8e:50:56:a2:a8:31:6b:4e:3f:3c: 85:79:da:36:72:39:7d:74:c2:44:96:71:39:cc:42:03:44:62: be:92:e8:0e:80:9c:c9:02:26:5f:37:db:4c:34:93:56:a0:57: ac:04:ad:4a:f6:fe:f6:ed:9f:82:0f:b8:0c:28:d7:65:b8:b0: b9:de:50:39:c7:13:3f:55:ea:db:1c:31:6f:ec:92:ef:cb:9c: 55:17:5c:2e:98:bc:70:64:e6:30:16:88:c9:28:04:14:59:ce: 69:f9:62:82:9d:41:0b:b6:4b:f2:c6:73:6b:f9:8f:ac:16:e5: 34:da:55:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJENjUxMTAvBgNVBAUTKEQ3MTUxOEZDNkU1NkM3QzRFQ0E5RUExOEIxQjU0MUQ4 QjBDMkNBMjIwHhcNMjUxMTAyMjM0NDE5WhcNMjUxMTA5MjM0NDE5WjAYMRYwFAYD VQQDEw02OTA3ZWNkMy1mODZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApWCgHWjG0h54J6yOK9zsi8eL21oUCASz4tPL5iOaHcCnzp3iet1KqklFlDFp iFOcfySiOFe3r+2P/vRKKzUHYmELeipZLL7BWjItIFjWRnLaR4vfpKzdtlazsCP6 T/Mm6JnYHpgp195PUvyW2Gk5S24p5s/lCAaNKcpQDdTLFjjyqL8MynfNpL6nhHLT rCJ0gWCZ07AQGulHTFWYimtsdLTkFZJL8zA+44a/s5JUw5ABxBV8zjTwlLEJ8E94 0Rk2ifMA2Ofe23XTMStRZ9JM2ww0DDvA3Zvtejpf4XRZYhFQFOBcsBjLauaSOGdO qnzmcUaLONmpY6QNphGEbbm+hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBMuM1Hx JnpdUlMN2XKp+qKNi/HDMB8GA1UdIwQYMBaAFNcVGPxuVsfE7KnqGLG1Qdiwwsoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkQ2NS80RjQyMUY1MjNC MEIxMUVDQUEyNUUzM0FDNEY5QUUwMi8xeFVZX0c1V3g4VHNxZW9Zc2JWQjJMREN5 aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4VVlfRzVXeDhUc3Flb1lzYlZCMkxEQ3lpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkQ2NS80RjQyMUY1MjNCMEIxMUVDQUEyNUUzM0FDNEY5QUUwMi8xeFVZX0c1V3g4 VHNxZW9Zc2JWQjJMREN5aUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdXqa8DjC5Zl24DYF/QSSND4vOdh1NWVdrGCy8200GZ7B0e4s3b5GR FCCe2hHMb+R5gHkCGgL5slihTTBgPwS98xHlEe8PKRSui4N1HerZSiH7pfj8PgUc TZp0ZmAp8YfeeOfRDMHw4IiIVQHo4coHcxkDSO+ZeDnWOwyuCiGSZhTKvCQJMo5Q VqKoMWtOPzyFedo2cjl9dMJElnE5zEIDRGK+kugOgJzJAiZfN9tMNJNWoFesBK1K 9v727Z+CD7gMKNdluLC53lA5xxM/VerbHDFv7JLvy5xVF1wumLxwZOYwFojJKAQU Wc5p+WKCnUELtkvyxnNr+Y+sFuU02lVk -----END CERTIFICATE-----Generated at Tue Nov 4 16:03:52 2025 by rpki-client