$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft File: 1Sj61Lh2q_twrziSIg8pPheRtrw.mft (raw, json) Hash identifier: h5xFQ4NvsKfEvjHG9JhWLqizF12A/NAN/BxmVyBoX7k= Subject key identifier: C3:CB:30:0A:01:AE:8A:53:45:57:B7:89:CC:39:44:0C:7B:FE:16:A6 Authority key identifier: D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC Certificate issuer: /CN=A91CE6C5/serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC Certificate serial: 038E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft Manifest number: 0382 Signing time: Wed 05 Nov 2025 00:56:49 +0000 Manifest this update: Wed 05 Nov 2025 00:56:48 +0000 Manifest next update: Wed 12 Nov 2025 00:56:48 +0000 Files and hashes: 1: 1Sj61Lh2q_twrziSIg8pPheRtrw.crl (hash: R083s+xNVZ82Tnlj+57kBioAzKLnBSbGCBMybSLnjdE=) 2: C0E56FB2D56B11EFB540FB53C4F9AE02.roa (hash: WjUHxTEWTF20WZmvNCerm3WpHrjM2Bec4x3sz7dnvmU=) 3: A0841A68D0D511EC81001E73C4F9AE02.roa (hash: 28rk2f2SK8fYlNSOWgKUvbvWyh9sktvms5gVEW96hEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.crl rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:56:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 910 (0x38e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE6C5, serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC Validity Not Before: Nov 5 00:56:48 2025 GMT Not After : Nov 12 00:56:48 2025 GMT Subject: CN=690aa0d1-7463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7a:34:2d:42:8a:07:27:51:2f:a5:65:bb:22: 93:21:e7:72:c1:c9:7f:2c:a2:8b:ab:e0:6a:61:c0: 48:a0:ce:40:bf:54:6a:05:38:ed:36:8c:d4:a8:40: 7c:f5:c4:a1:81:0c:84:60:43:a6:63:b1:7e:4a:bd: 25:b9:bc:ec:88:0c:4f:76:38:ee:a2:94:e1:75:69: 64:d6:b4:9e:cf:b2:c9:5c:01:00:00:e9:69:2e:da: d9:5a:26:46:4e:b4:53:80:2d:99:10:fe:99:cc:03: 64:8b:ff:7b:70:f1:c3:a7:28:64:88:2a:c9:81:ae: 29:75:29:0f:8d:17:68:b5:66:85:30:9e:82:7f:b2: ca:c3:c0:dc:6c:43:9c:70:64:fd:34:9e:b4:58:8c: 4e:60:b7:f2:f0:70:0a:d3:1b:d9:d7:76:c1:29:02: 80:55:61:2f:09:15:ee:fe:31:f8:0a:5e:77:3e:59: 87:b1:0d:4c:e6:1f:3c:60:11:d3:4e:29:fb:21:7f: d2:d6:b5:0b:e6:cf:1c:01:da:d2:da:d8:07:a5:eb: a6:7c:7c:85:ab:bf:c5:c9:31:3e:21:4a:2b:1c:b0: f9:30:33:eb:e6:e6:af:42:18:39:a6:e8:3c:3a:84: 31:33:ad:85:16:c4:cf:8b:5e:17:bf:a3:17:a0:db: 88:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CB:30:0A:01:AE:8A:53:45:57:B7:89:CC:39:44:0C:7B:FE:16:A6 X509v3 Authority Key Identifier: keyid:D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:74:20:82:94:46:c3:a4:32:1e:3a:ce:cd:b1:35:0f:b9:02: 61:1c:aa:ba:99:e1:10:7b:53:7f:13:a1:75:3d:b7:93:6d:d1: a7:b9:a7:0c:9f:26:c5:90:c0:68:7c:c7:67:ad:9a:20:da:52: 78:a7:c5:52:11:5f:7f:8d:60:e1:6a:a0:a4:42:46:9b:14:ce: ab:2e:a6:06:35:d5:88:76:d7:08:93:3e:a6:76:65:f7:08:22: 6c:a6:cc:55:cf:b0:7e:1a:cf:b3:fe:40:4b:ad:84:fa:bc:9b: 42:f4:9b:ba:9c:95:1b:90:fc:a4:60:2c:0a:7d:c0:8e:2b:4f: f2:f8:a3:ea:7d:dc:24:e4:ca:58:a3:87:43:3f:c7:1b:a9:28: 5e:12:1d:ea:9a:87:17:58:bb:53:68:1d:78:53:a9:c6:70:33: b0:88:02:3f:e0:3c:f2:e3:d9:99:a1:0b:ef:84:1c:3b:28:87: 62:f8:30:3b:7a:e3:d8:b1:b6:f4:00:d2:02:c4:36:62:83:a1: 7b:19:68:f4:99:ca:c0:ec:5a:60:96:8d:2b:47:a1:59:13:1a: d7:92:27:e0:ab:7f:f3:e5:b7:3c:af:0e:a2:d0:0c:be:ea:1b: 43:2f:76:45:38:ec:e0:40:2c:a1:d3:11:24:5d:5c:1d:2d:b2: 7d:e7:bb:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U2QzUxMTAvBgNVBAUTKEQ1MjhGQUQ0Qjg3NkFCRkI3MEFGMzg5MjIyMEYyOTNF MTc5MUI2QkMwHhcNMjUxMTA1MDA1NjQ4WhcNMjUxMTEyMDA1NjQ4WjAYMRYwFAYD VQQDEw02OTBhYTBkMS03NDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxno0LUKKBydRL6VluyKTIedywcl/LKKLq+BqYcBIoM5Av1RqBTjtNozUqEB8 9cShgQyEYEOmY7F+Sr0lubzsiAxPdjjuopThdWlk1rSez7LJXAEAAOlpLtrZWiZG TrRTgC2ZEP6ZzANki/97cPHDpyhkiCrJga4pdSkPjRdotWaFMJ6Cf7LKw8DcbEOc cGT9NJ60WIxOYLfy8HAK0xvZ13bBKQKAVWEvCRXu/jH4Cl53PlmHsQ1M5h88YBHT Tin7IX/S1rUL5s8cAdrS2tgHpeumfHyFq7/FyTE+IUorHLD5MDPr5uavQhg5pug8 OoQxM62FFsTPi14Xv6MXoNuIGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPLMAoB ropTRVe3icw5RAx7/hamMB8GA1UdIwQYMBaAFNUo+tS4dqv7cK84kiIPKT4Xkba8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTZDNS9FODI2NjAyMEM2 QzAxMUVDOEFCNzU1M0ZDNEY5QUUwMi8xU2o2MUxoMnFfdHdyemlTSWc4cFBoZVJ0 cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFTajYxTGgycV90d3J6aVNJZzhwUGhlUnRydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTZDNS9FODI2NjAyMEM2QzAxMUVDOEFCNzU1M0ZDNEY5QUUwMi8xU2o2MUxoMnFf dHdyemlTSWc4cFBoZVJ0cncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0dCCClEbDpDIeOs7NsTUPuQJhHKq6meEQe1N/E6F1PbeTbdGnuacM nybFkMBofMdnrZog2lJ4p8VSEV9/jWDhaqCkQkabFM6rLqYGNdWIdtcIkz6mdmX3 CCJspsxVz7B+Gs+z/kBLrYT6vJtC9Ju6nJUbkPykYCwKfcCOK0/y+KPqfdwk5MpY o4dDP8cbqSheEh3qmocXWLtTaB14U6nGcDOwiAI/4Dzy49mZoQvvhBw7KIdi+DA7 euPYsbb0ANICxDZig6F7GWj0mcrA7Fpglo0rR6FZExrXkifgq3/z5bc8rw6i0Ay+ 6htDL3ZFOOzgQCyh0xEkXVwdLbJ957un -----END CERTIFICATE-----Generated at Wed Nov 5 16:42:28 2025 by rpki-client