$ rpki-client -vvf rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft File: 1pYa2ozVd8wz1xqaLcgbDBklrJg.mft (raw, json) Hash identifier: qd1ztt+xVfU6A6oRBUmTIS9UUbzqfeQ4YGMQWXDx+sg= Subject key identifier: 7F:42:CA:8D:75:06:D3:EE:22:51:A0:4B:72:95:E8:3E:5B:73:E1:28 Authority key identifier: D6:96:1A:DA:8C:D5:77:CC:33:D7:1A:9A:2D:C8:1B:0C:19:25:AC:98 Certificate issuer: /CN=A9179CA8/serialNumber=D6961ADA8CD577CC33D71A9A2DC81B0C1925AC98 Certificate serial: 01E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft Manifest number: 01E4 Signing time: Mon 03 Nov 2025 02:39:20 +0000 Manifest this update: Mon 03 Nov 2025 02:39:20 +0000 Manifest next update: Mon 10 Nov 2025 02:39:20 +0000 Files and hashes: 1: 1pYa2ozVd8wz1xqaLcgbDBklrJg.crl (hash: aYaOdUvx+BttdqGQacuMNYNmKljtEMj8bPg6iirPvuI=) 2: B94E87EAD44911ED88A2367FC4F9AE02.roa (hash: QVZDCd1ya5oxlLiJqZP/4xPWOb/nFUonfRIHAss0Ydc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.crl rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:39:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 488 (0x1e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179CA8, serialNumber=D6961ADA8CD577CC33D71A9A2DC81B0C1925AC98 Validity Not Before: Nov 3 02:39:20 2025 GMT Not After : Nov 10 02:39:20 2025 GMT Subject: CN=690815d8-eb30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:70:14:b2:6b:04:e5:4f:a9:4c:43:60:61:ec: 95:a7:41:86:59:89:28:16:27:cf:4f:43:6c:58:a4: eb:50:c1:35:0f:e4:e0:26:b5:6b:c8:d8:1d:4e:b0: e4:aa:00:85:20:42:d4:df:0d:98:b3:90:43:05:3c: 98:e0:3a:c9:d3:da:d2:67:65:78:ce:3a:b1:4e:55: e2:88:b5:89:90:82:cd:e2:3a:4d:97:18:5a:18:ad: 44:1e:2a:dd:0c:9c:b3:3c:ff:cb:cb:a0:14:2c:37: 2f:e9:a9:2b:c8:a4:89:9d:74:56:46:9f:3c:75:9e: f5:6f:7d:28:ad:28:6c:e0:9e:d3:60:72:f3:55:23: bf:22:73:5e:6c:e4:bd:fe:e8:e2:a4:2c:18:0e:5b: f7:ef:cc:0e:7b:9e:79:a0:a6:47:8f:18:08:4e:72: 57:e4:ad:56:b0:7d:7e:38:8d:ba:8b:8e:27:1e:4a: d0:41:11:81:73:94:d3:1d:7c:3a:43:25:4c:d8:69: 43:bd:f9:42:2d:63:7b:21:1b:2a:7a:4b:a6:68:52: da:e7:1d:e4:9e:72:85:1a:ea:08:8c:2d:93:3f:72: 4d:95:9f:57:24:ea:8c:10:3b:46:9a:a0:de:53:a3: c5:3b:1f:a0:ae:95:45:24:e6:80:cf:70:3b:dd:e4: b6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:42:CA:8D:75:06:D3:EE:22:51:A0:4B:72:95:E8:3E:5B:73:E1:28 X509v3 Authority Key Identifier: keyid:D6:96:1A:DA:8C:D5:77:CC:33:D7:1A:9A:2D:C8:1B:0C:19:25:AC:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:a5:60:8f:5c:a2:e2:b6:24:99:8b:9f:95:cc:35:b8:6d:ee: 71:7d:41:85:17:8c:24:94:d9:14:bb:16:91:7d:db:da:6a:59: b7:bc:81:ae:dc:21:0e:1e:2e:a0:93:2e:f0:60:bf:08:38:53: 63:c3:ab:54:d4:4b:b2:a6:98:00:16:17:f8:35:99:d1:9c:76: c2:38:d0:8c:a0:e4:9f:58:a7:cb:21:50:bf:80:ee:c4:e7:87: 74:28:a0:99:fe:ca:6f:10:b3:13:07:e9:6f:f2:62:26:ff:0d: 2e:dd:c9:64:59:18:bd:92:d7:37:19:dd:e3:37:9a:68:58:36: df:e7:9a:50:ac:4d:49:bf:aa:eb:78:70:4b:50:b8:24:58:74: 79:a9:8b:26:9d:38:aa:e4:22:6b:7c:20:9c:34:65:84:7a:69: 8d:29:24:70:7b:4e:ab:ef:72:22:5b:45:9f:3d:17:81:bb:16: 29:be:03:4a:7d:da:ee:15:1e:7f:16:26:46:52:e5:69:65:49: 67:10:ca:6f:63:05:53:65:aa:74:2b:43:3c:30:7e:34:f9:e3: f2:8e:4b:5b:da:6a:b4:96:4f:cb:a7:2e:05:0a:99:96:19:01: c0:22:b6:1c:9e:62:a6:05:3f:ff:44:7c:7a:94:62:7a:3f:b8: ca:04:6d:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlDQTgxMTAvBgNVBAUTKEQ2OTYxQURBOENENTc3Q0MzM0Q3MUE5QTJEQzgxQjBD MTkyNUFDOTgwHhcNMjUxMTAzMDIzOTIwWhcNMjUxMTEwMDIzOTIwWjAYMRYwFAYD VQQDEw02OTA4MTVkOC1lYjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA23AUsmsE5U+pTENgYeyVp0GGWYkoFifPT0NsWKTrUME1D+TgJrVryNgdTrDk qgCFIELU3w2Ys5BDBTyY4DrJ09rSZ2V4zjqxTlXiiLWJkILN4jpNlxhaGK1EHird DJyzPP/Ly6AULDcv6akryKSJnXRWRp88dZ71b30orShs4J7TYHLzVSO/InNebOS9 /ujipCwYDlv378wOe555oKZHjxgITnJX5K1WsH1+OI26i44nHkrQQRGBc5TTHXw6 QyVM2GlDvflCLWN7IRsqekumaFLa5x3knnKFGuoIjC2TP3JNlZ9XJOqMEDtGmqDe U6PFOx+grpVFJOaAz3A73eS2qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9Cyo11 BtPuIlGgS3KV6D5bc+EoMB8GA1UdIwQYMBaAFNaWGtqM1XfMM9cami3IGwwZJayY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUNBOC8wNTY2MDkyNkQ0 NDcxMUVEQUE0MUJGN0VDNEY5QUUwMi8xcFlhMm96VmQ4d3oxeHFhTGNnYkRCa2xy SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFwWWEyb3pWZDh3ejF4cWFMY2diREJrbHJKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUNBOC8wNTY2MDkyNkQ0NDcxMUVEQUE0MUJGN0VDNEY5QUUwMi8xcFlhMm96VmQ4 d3oxeHFhTGNnYkRCa2xySmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdpWCPXKLitiSZi5+VzDW4be5xfUGFF4wklNkUuxaRfdvaalm3vIGu 3CEOHi6gky7wYL8IOFNjw6tU1EuyppgAFhf4NZnRnHbCONCMoOSfWKfLIVC/gO7E 54d0KKCZ/spvELMTB+lv8mIm/w0u3clkWRi9ktc3Gd3jN5poWDbf55pQrE1Jv6rr eHBLULgkWHR5qYsmnTiq5CJrfCCcNGWEemmNKSRwe06r73IiW0WfPReBuxYpvgNK fdruFR5/FiZGUuVpZUlnEMpvYwVTZap0K0M8MH40+ePyjktb2mq0lk/Lpy4FCpmW GQHAIrYcnmKmBT//RHx6lGJ6P7jKBG3c -----END CERTIFICATE-----Generated at Tue Nov 4 21:36:48 2025 by rpki-client