$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft File: 1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft (raw, json) Hash identifier: 2QO4fO6T0a51vhH7NyQj54HFgihFhgnCfXDdN0Ay5PU= Subject key identifier: BE:63:6F:D4:E6:E2:E4:BA:43:77:F7:6B:A4:99:F3:01:93:BF:DA:11 Authority key identifier: D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2 Certificate issuer: /CN=A91CE959/serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2 Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft Manifest number: 012D Signing time: Mon 03 Nov 2025 04:37:18 +0000 Manifest this update: Mon 03 Nov 2025 04:37:17 +0000 Manifest next update: Mon 10 Nov 2025 04:37:17 +0000 Files and hashes: 1: 1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl (hash: y+AiN3SgLDIYJMyTZFeTqdI37t7fiRe1sy/+KeHrAYA=) 2: 99244E94FE0211EEB1F40344C4F9AE02.roa (hash: ryfpBDCWcmiRZYqeao/rsVyXOOOGDWQajzrZGBcgq+0=) 3: 03BA6992ED7711EE9998FC11C4F9AE02.roa (hash: NecAjd+CZeOPqXXjjBIs9rEIjFJr1slo8jl+q1zHuq8=) 4: 38556AC6ED7711EEA7B2AF12C4F9AE02.roa (hash: x08O0LKYaX3hn9bkCscla0qFn3NKZcPh8LO75bK0AIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE959, serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2 Validity Not Before: Nov 3 04:37:17 2025 GMT Not After : Nov 10 04:37:17 2025 GMT Subject: CN=6908317d-2124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c9:04:de:be:1a:4d:1f:73:75:02:ab:c2:7b: 04:b8:2b:ce:42:48:d7:96:0b:09:99:9a:93:66:b3: 5c:68:65:b5:22:da:fa:d8:6c:02:4e:c9:bf:5c:54: d0:09:07:0a:a1:98:9c:d7:fa:19:e1:f1:0a:80:de: e6:19:a0:d3:00:6d:08:ae:37:ce:bc:f0:20:e4:c1: 6d:7d:e4:4d:b8:a1:32:c6:c6:3b:b3:74:dd:73:2f: 31:fc:e9:26:5c:64:79:1c:52:90:7b:18:db:20:6b: 33:a0:cb:83:6c:70:c2:19:55:e2:1b:02:12:e6:76: f9:e0:cf:1d:fc:60:81:ea:93:64:71:b4:ce:e7:67: 8c:59:1b:74:39:3b:7d:a1:0d:cc:62:84:0f:a3:e6: 11:dc:b6:2f:f8:28:8e:d3:ae:00:0c:a3:e2:fc:47: 04:48:78:75:72:4c:82:a6:9a:bb:84:b0:27:03:a8: 2d:7e:7c:cd:c5:8a:03:b2:f1:e8:d7:da:d3:b2:b1: 92:3b:21:7b:31:cb:e9:9f:11:75:8b:46:b2:df:72: ad:1d:fc:f9:29:48:6d:ad:a6:07:a1:85:8f:68:ab: e1:e7:9f:89:97:45:3e:08:0e:d6:1e:e2:5a:78:a2: ff:a3:3b:95:a5:f8:15:9e:c8:67:a2:60:24:3f:bd: 81:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:63:6F:D4:E6:E2:E4:BA:43:77:F7:6B:A4:99:F3:01:93:BF:DA:11 X509v3 Authority Key Identifier: keyid:D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:09:d7:a3:fd:0c:a3:b0:7b:db:08:b2:c2:38:97:3a:68:55: 6d:51:27:46:eb:53:40:52:f6:65:bb:3c:fe:33:8f:f4:65:75: 33:f8:17:d0:06:26:55:52:27:55:41:03:76:15:f6:4e:3b:74: 52:73:2a:d5:39:ad:a8:8e:b4:69:21:27:e0:a6:22:9d:e3:44: c8:c6:3d:b0:1d:13:13:d4:ee:24:29:9d:c3:b7:2f:b3:f5:c5: 42:8b:3b:a3:2c:19:16:f8:2a:ec:93:66:ac:10:4e:ea:fc:58: 98:f3:8e:d8:70:a9:19:30:bf:7e:61:e7:cd:f2:d5:f0:af:25: d3:92:e3:29:33:90:80:5b:ea:39:8d:2a:1d:25:31:c0:de:ed: c5:3b:d6:ce:3a:08:81:ab:48:a5:c9:d3:cb:79:5f:0c:75:db: a6:29:85:6e:1e:d3:6a:8a:4e:67:86:76:f9:b2:e3:48:fb:12: 9a:d2:63:75:50:33:8b:49:3f:ee:2e:5f:60:d0:ef:71:55:b7: b8:6b:78:5d:45:9b:84:cb:52:d5:6a:5f:b3:fb:ef:36:5b:dc: 7a:a1:1d:87:c9:a8:e6:31:17:07:a7:72:24:8a:a3:c9:70:e5: 21:fb:49:7f:2a:24:58:3f:1c:01:4c:d4:f9:dd:f0:2d:e0:91: 6c:8e:af:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U5NTkxMTAvBgNVBAUTKEQ2RUMyMkE3M0E1OUQyQUE5NTU5OTc0NzAyNzlDNjYy RDExMDg4RjIwHhcNMjUxMTAzMDQzNzE3WhcNMjUxMTEwMDQzNzE3WjAYMRYwFAYD VQQDEw02OTA4MzE3ZC0yMTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0skE3r4aTR9zdQKrwnsEuCvOQkjXlgsJmZqTZrNcaGW1Itr62GwCTsm/XFTQ CQcKoZic1/oZ4fEKgN7mGaDTAG0IrjfOvPAg5MFtfeRNuKEyxsY7s3Tdcy8x/Okm XGR5HFKQexjbIGszoMuDbHDCGVXiGwIS5nb54M8d/GCB6pNkcbTO52eMWRt0OTt9 oQ3MYoQPo+YR3LYv+CiO064ADKPi/EcESHh1ckyCppq7hLAnA6gtfnzNxYoDsvHo 19rTsrGSOyF7McvpnxF1i0ay33KtHfz5KUhtraYHoYWPaKvh55+Jl0U+CA7WHuJa eKL/ozuVpfgVnshnomAkP72BHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5jb9Tm 4uS6Q3f3a6SZ8wGTv9oRMB8GA1UdIwQYMBaAFNbsIqc6WdKqlVmXRwJ5xmLREIjy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTk1OS9BQTRDNzdFQ0VE NzYxMUVFQUQ4NzFBMTFDNEY5QUUwMi8xdXdpcHpwWjBxcVZXWmRIQW5uR1l0RVFp UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF1d2lwenBaMHFxVldaZEhBbm5HWXRFUWlQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTk1OS9BQTRDNzdFQ0VENzYxMUVFQUQ4NzFBMTFDNEY5QUUwMi8xdXdpcHpwWjBx cVZXWmRIQW5uR1l0RVFpUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiCdej/QyjsHvbCLLCOJc6aFVtUSdG61NAUvZluzz+M4/0ZXUz+BfQ BiZVUidVQQN2FfZOO3RScyrVOa2ojrRpISfgpiKd40TIxj2wHRMT1O4kKZ3Dty+z 9cVCizujLBkW+Crsk2asEE7q/FiY847YcKkZML9+YefN8tXwryXTkuMpM5CAW+o5 jSodJTHA3u3FO9bOOgiBq0ilydPLeV8MddumKYVuHtNqik5nhnb5suNI+xKa0mN1 UDOLST/uLl9g0O9xVbe4a3hdRZuEy1LVal+z++82W9x6oR2HyajmMRcHp3IkiqPJ cOUh+0l/KiRYPxwBTNT53fAt4JFsjq8c -----END CERTIFICATE-----Generated at Tue Nov 4 08:13:57 2025 by rpki-client