$ rpki-client -vvf rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft File: 1bTWxIC76WuryHIkhQJdTEX-x4o.mft (raw, json) Hash identifier: ynnyxMM0ZrrKFkzwvzRqq8EhLFvIAlzmpi9NrRaTJGI= Subject key identifier: A7:4C:C9:24:05:B5:D5:DE:D5:A6:68:3C:7C:CA:55:51:F9:27:91:F1 Authority key identifier: D5:B4:D6:C4:80:BB:E9:6B:AB:C8:72:24:85:02:5D:4C:45:FE:C7:8A Certificate issuer: /CN=A91907D3/serialNumber=D5B4D6C480BBE96BABC8722485025D4C45FEC78A Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1bTWxIC76WuryHIkhQJdTEX-x4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft Manifest number: 3A Signing time: Wed 05 Nov 2025 07:47:59 +0000 Manifest this update: Wed 05 Nov 2025 07:47:58 +0000 Manifest next update: Wed 12 Nov 2025 07:47:58 +0000 Files and hashes: 1: 1bTWxIC76WuryHIkhQJdTEX-x4o.crl (hash: 1kUIrAikm4259Xn+Cc2XadMaKxaf6/Nq5HuO8s96E3g=) 2: 38361A086DD311F08BB89272C4F9AE02.roa (hash: jze8pXPb+Ih57A9PJ1kUit8+mteLPMOuLcigHYQRgfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.crl rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1bTWxIC76WuryHIkhQJdTEX-x4o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:47:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91907D3, serialNumber=D5B4D6C480BBE96BABC8722485025D4C45FEC78A Validity Not Before: Nov 5 07:47:58 2025 GMT Not After : Nov 12 07:47:58 2025 GMT Subject: CN=690b012f-c286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:02:71:e7:02:dd:a8:53:e7:a3:64:bb:e9:0c: 06:7b:f9:02:68:33:45:50:2b:33:f6:e2:68:a3:3a: bd:5a:a7:d3:52:fe:ce:6e:08:18:0b:39:82:e6:63: a2:d3:f0:d2:6c:2a:40:19:d7:93:c2:be:a4:33:f6: e2:a2:4c:8c:8b:be:7c:e3:9a:d1:74:53:7a:e7:57: ae:63:6f:84:ea:be:a7:4a:ea:58:8d:f8:2e:f4:05: 51:14:14:97:8f:a2:89:95:88:eb:f5:69:b4:65:49: ee:2c:26:0f:03:0f:1b:9e:f0:9a:db:ea:64:0f:aa: ae:68:09:b3:c3:10:8c:ac:aa:3e:25:ee:21:0e:d0: 8e:94:68:60:7a:8e:33:43:9f:af:96:0c:00:dd:46: c9:07:4a:70:9e:08:da:fa:5b:7f:4f:56:1a:09:23: c6:0c:f5:b7:b4:98:4d:ea:a8:e6:08:11:d3:de:4b: 7a:31:22:06:f7:67:ad:8b:21:96:c2:26:02:84:45: 2e:44:63:9c:ff:ca:65:f9:42:91:94:c1:78:70:f3: 8e:b0:a1:35:26:af:c4:08:22:93:46:34:22:7c:c9: fe:e2:5b:58:0f:ea:cd:01:89:43:8c:26:e9:d8:92: 4a:76:bd:87:cf:3e:bb:a7:a5:28:b6:13:5b:ca:3d: 8e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:4C:C9:24:05:B5:D5:DE:D5:A6:68:3C:7C:CA:55:51:F9:27:91:F1 X509v3 Authority Key Identifier: keyid:D5:B4:D6:C4:80:BB:E9:6B:AB:C8:72:24:85:02:5D:4C:45:FE:C7:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1bTWxIC76WuryHIkhQJdTEX-x4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:6d:7c:a7:73:60:29:cf:01:2a:a8:45:81:6f:9e:61:33:c2: e9:64:a5:b2:ea:53:05:8c:0d:99:8b:47:f6:a3:27:b7:d0:86: 28:94:84:84:21:f1:36:b8:a1:57:ae:27:93:51:48:f8:2a:79: f3:1c:2d:58:e1:01:ce:1e:35:58:5b:95:89:b1:97:c9:10:ef: 45:c1:a2:fd:4c:13:fa:d3:bf:c1:d7:72:a4:3e:12:91:74:0d: 44:88:41:da:0d:f0:b4:1a:03:ca:e9:48:f2:0c:87:be:fc:d3: a4:67:5d:1b:8d:f8:e7:be:f6:2c:ff:85:36:5d:9d:cb:e8:0a: 12:fe:ed:a9:24:0e:84:2b:71:ea:d9:94:15:90:35:76:de:09: ed:13:d8:2b:81:82:dd:ea:9b:bb:a8:40:10:1e:89:e0:a6:4e: e2:0e:c1:2e:16:c7:f6:4d:ec:63:a3:77:0a:19:0f:17:48:0c: 31:f7:6c:90:91:9c:33:ed:57:4e:a0:c5:3e:5b:30:3d:fa:b3: db:40:b7:48:f4:5c:4b:8e:1d:d6:34:cd:5d:d5:38:52:23:8e: 67:14:38:6d:c6:a4:bf:2b:02:15:29:46:61:23:a0:74:02:97: a8:df:2a:45:61:c1:c1:fd:f8:4c:77:9f:ba:43:43:46:4d:df: 72:fd:21:f9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MDdEMzExMC8GA1UEBRMoRDVCNEQ2QzQ4MEJCRTk2QkFCQzg3MjI0ODUwMjVENEM0 NUZFQzc4QTAeFw0yNTExMDUwNzQ3NThaFw0yNTExMTIwNzQ3NThaMBgxFjAUBgNV BAMTDTY5MGIwMTJmLWMyODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDxAnHnAt2oU+ejZLvpDAZ7+QJoM0VQKzP24mijOr1ap9NS/s5uCBgLOYLmY6LT 8NJsKkAZ15PCvqQz9uKiTIyLvnzjmtF0U3rnV65jb4TqvqdK6liN+C70BVEUFJeP oomViOv1abRlSe4sJg8DDxue8Jrb6mQPqq5oCbPDEIysqj4l7iEO0I6UaGB6jjND n6+WDADdRskHSnCeCNr6W39PVhoJI8YM9be0mE3qqOYIEdPeS3oxIgb3Z62LIZbC JgKERS5EY5z/ymX5QpGUwXhw846woTUmr8QIIpNGNCJ8yf7iW1gP6s0BiUOMJunY kkp2vYfPPrunpSi2E1vKPY6TAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUp0zJJAW1 1d7Vpmg8fMpVUfknkfEwHwYDVR0jBBgwFoAU1bTWxIC76WuryHIkhQJdTEX+x4ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwN0QzLzM4RkIyMTVDNkM1 OTExRjBBMzg4NEU3QUM0RjlBRTAyLzFiVFd4SUM3Nld1cnlISWtoUUpkVEVYLXg0 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMWJUV3hJQzc2V3VyeUhJa2hRSmRURVgteDRvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw N0QzLzM4RkIyMTVDNkM1OTExRjBBMzg4NEU3QUM0RjlBRTAyLzFiVFd4SUM3Nld1 cnlISWtoUUpkVEVYLXg0by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACNtfKdzYCnPASqoRYFvnmEzwulkpbLqUwWMDZmLR/ajJ7fQhiiUhIQh 8Ta4oVeuJ5NRSPgqefMcLVjhAc4eNVhblYmxl8kQ70XBov1ME/rTv8HXcqQ+EpF0 DUSIQdoN8LQaA8rpSPIMh77806RnXRuN+Oe+9iz/hTZdncvoChL+7akkDoQrcerZ lBWQNXbeCe0T2CuBgt3qm7uoQBAeieCmTuIOwS4Wx/ZN7GOjdwoZDxdIDDH3bJCR nDPtV06gxT5bMD36s9tAt0j0XEuOHdY0zV3VOFIjjmcUOG3GpL8rAhUpRmEjoHQC l6jfKkVhwcH9+Ex3n7pDQ0ZN33L9Ifk= -----END CERTIFICATE-----Generated at Wed Nov 5 15:05:38 2025 by rpki-client