$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft File: 1RZ7lweHQQlX4l2fh1CFYPAFd24.mft (raw, json) Hash identifier: 8KcHTfxeU6eUfpzlNM287mUpHNaNKA/oYbjMpCqLfvE= Subject key identifier: 8A:DF:3A:32:21:BB:5E:2C:64:C5:2A:7C:F6:A3:B3:51:D6:D4:1A:BB Authority key identifier: D5:16:7B:97:07:87:41:09:57:E2:5D:9F:87:50:85:60:F0:05:77:6E Certificate issuer: /CN=A91B9011/serialNumber=D5167B970787410957E25D9F87508560F005776E Certificate serial: 0609 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft Manifest number: 0604 Signing time: Sun 02 Nov 2025 22:52:45 +0000 Manifest this update: Sun 02 Nov 2025 22:52:45 +0000 Manifest next update: Sun 09 Nov 2025 22:52:45 +0000 Files and hashes: 1: 1RZ7lweHQQlX4l2fh1CFYPAFd24.crl (hash: 8CpcyFeMUj60Iucy9bha5qHC01LNhh+M/456KGpjn00=) 2: 438893AC55BE11EDBDE51983C4F9AE02.roa (hash: Y1Hqc3CucW1MGNfTEVOgwuu3xdmSB7zSj6HU8UBJr7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.crl rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:52:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1545 (0x609) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9011, serialNumber=D5167B970787410957E25D9F87508560F005776E Validity Not Before: Nov 2 22:52:45 2025 GMT Not After : Nov 9 22:52:45 2025 GMT Subject: CN=6907e0bd-24cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a8:69:9c:5a:f0:0a:ad:39:20:b4:63:b0:4f: e8:fe:0f:68:00:b2:73:93:f6:a1:4c:f9:2e:f1:db: 16:77:c6:d2:a3:55:43:d5:dd:de:a0:28:4c:40:98: 74:45:1a:07:9c:9c:53:5f:75:3a:ea:61:87:b8:84: 68:46:5a:21:c6:08:a3:e1:ba:22:66:b1:1b:c4:8b: 68:44:83:0c:3e:ae:b2:7a:75:04:db:48:44:10:f5: 65:2c:21:c3:f9:27:ea:40:19:ff:d2:47:1a:0c:50: ef:f0:34:68:d9:d3:7b:af:df:3e:30:9d:b5:e4:25: f7:97:65:55:a6:b8:41:9f:82:56:2c:ec:7e:2b:28: ad:6b:52:16:a4:0c:97:08:e7:bd:52:86:b7:26:3b: 66:ba:a5:38:3c:6c:3c:68:2d:ac:07:2f:5b:c6:13: 19:6b:1a:6d:14:74:40:9c:42:af:78:16:4f:eb:56: 0b:ac:b8:20:94:4b:a0:9d:2b:ad:58:6a:74:4f:bf: d2:5a:dc:4e:41:84:06:c5:0f:54:09:5a:8c:16:c1: 9c:c8:43:49:37:f4:8d:19:1d:c5:22:50:e7:b8:6d: 9e:72:92:77:da:6c:99:c0:5c:d7:8a:11:09:09:84: 26:89:07:af:97:f0:20:76:91:64:72:68:6a:54:31: 96:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:DF:3A:32:21:BB:5E:2C:64:C5:2A:7C:F6:A3:B3:51:D6:D4:1A:BB X509v3 Authority Key Identifier: keyid:D5:16:7B:97:07:87:41:09:57:E2:5D:9F:87:50:85:60:F0:05:77:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:d8:8b:3f:b8:c7:20:77:20:8f:72:ff:6c:dc:eb:2f:d4:6a: f1:3f:86:ef:a7:a4:6a:a2:57:6f:e8:66:39:21:1e:79:3f:01: a0:53:f8:c5:86:ce:30:a6:91:19:e9:8b:cd:6c:3a:16:98:c8: 86:da:85:69:56:95:e6:f9:83:83:49:68:5f:34:f1:27:3d:4d: 08:c3:01:39:82:19:55:42:13:e1:61:e5:b5:ea:38:36:7e:42: 00:b8:77:17:3f:9b:07:e1:1c:bf:48:87:0c:06:bc:b1:3e:3e: 0b:2c:64:1a:1d:82:eb:fb:fd:13:ed:76:fc:3a:c2:f1:6a:2d: cb:c4:50:2c:5e:98:96:5d:f4:05:07:4e:67:90:5f:22:62:2b: 5d:07:81:7f:32:e1:d2:c4:c5:44:b7:ae:9d:87:ef:71:30:5d: 34:52:4f:4d:4f:16:9d:7a:e7:d9:28:cc:03:08:1b:92:0d:c5: e7:11:b7:8e:a5:d0:38:d9:a9:be:b5:25:4c:15:92:9c:6b:ac: a9:ac:a7:98:40:a7:32:9b:df:e5:11:b2:ae:f3:a1:f1:14:76: 18:0b:c6:51:9e:02:dc:8c:f1:26:55:dd:3e:7b:f9:f1:36:19: 36:97:56:d3:56:e1:6e:ea:0f:88:a7:49:9a:3f:93:43:55:54: b9:bb:66:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkwMTExMTAvBgNVBAUTKEQ1MTY3Qjk3MDc4NzQxMDk1N0UyNUQ5Rjg3NTA4NTYw RjAwNTc3NkUwHhcNMjUxMTAyMjI1MjQ1WhcNMjUxMTA5MjI1MjQ1WjAYMRYwFAYD VQQDEw02OTA3ZTBiZC0yNGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsahpnFrwCq05ILRjsE/o/g9oALJzk/ahTPku8dsWd8bSo1VD1d3eoChMQJh0 RRoHnJxTX3U66mGHuIRoRlohxgij4boiZrEbxItoRIMMPq6yenUE20hEEPVlLCHD +SfqQBn/0kcaDFDv8DRo2dN7r98+MJ215CX3l2VVprhBn4JWLOx+Kyita1IWpAyX COe9Uoa3JjtmuqU4PGw8aC2sBy9bxhMZaxptFHRAnEKveBZP61YLrLgglEugnSut WGp0T7/SWtxOQYQGxQ9UCVqMFsGcyENJN/SNGR3FIlDnuG2ecpJ32myZwFzXihEJ CYQmiQevl/AgdpFkcmhqVDGW/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrfOjIh u14sZMUqfPajs1HW1Bq7MB8GA1UdIwQYMBaAFNUWe5cHh0EJV+Jdn4dQhWDwBXdu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTAxMS8zODg4RTBDNEM3 M0ExMUVCOTAwNzU1MTBDNEY5QUUwMi8xUlo3bHdlSFFRbFg0bDJmaDFDRllQQUZk MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFSWjdsd2VIUVFsWDRsMmZoMUNGWVBBRmQyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTAxMS8zODg4RTBDNEM3M0ExMUVCOTAwNzU1MTBDNEY5QUUwMi8xUlo3bHdlSFFR bFg0bDJmaDFDRllQQUZkMjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ2Is/uMcgdyCPcv9s3Osv1GrxP4bvp6Rqoldv6GY5IR55PwGgU/jF hs4wppEZ6YvNbDoWmMiG2oVpVpXm+YODSWhfNPEnPU0IwwE5ghlVQhPhYeW16jg2 fkIAuHcXP5sH4Ry/SIcMBryxPj4LLGQaHYLr+/0T7Xb8OsLxai3LxFAsXpiWXfQF B05nkF8iYitdB4F/MuHSxMVEt66dh+9xMF00Uk9NTxadeufZKMwDCBuSDcXnEbeO pdA42am+tSVMFZKca6yprKeYQKcym9/lEbKu86HxFHYYC8ZRngLcjPEmVd0+e/nx Nhk2l1bTVuFu6g+Ip0maP5NDVVS5u2bJ -----END CERTIFICATE-----Generated at Tue Nov 4 08:19:50 2025 by rpki-client