$ rpki-client -vvf rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft File: 1xRtqd4o9btePeL_AMWfyFyZONo.mft (raw, json) Hash identifier: Qti3jmyUDg1k6w9gYsCH/hYxLD8Dk7bPprNS/QTZCk0= Subject key identifier: 06:05:ED:98:13:26:90:88:B4:FC:92:A3:D0:2C:E0:18:BB:91:EA:F4 Authority key identifier: D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA Certificate issuer: /CN=A91D560D/serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA Certificate serial: 08FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft Manifest number: 1439 Signing time: Tue 04 Nov 2025 19:14:40 +0000 Manifest this update: Tue 04 Nov 2025 19:14:39 +0000 Manifest next update: Tue 11 Nov 2025 19:14:39 +0000 Files and hashes: 1: 1xRtqd4o9btePeL_AMWfyFyZONo.crl (hash: wRayiv8pkw65chbF2mvbLwmQVgcQts0mRlVz4MnL8m0=) 2: 48BC2840B0CC11F08FB0892CC4F9AE02.roa (hash: XHcO89/MPgzwW4rGQ9ytEtMm5vtuH3reQ/AQuvNxnSo=) 3: 5A0EECF4B0CC11F08F8E932CC4F9AE02.roa (hash: TR2sbaJKnc/SEaXKQ1o7lEeyXHgsYm5mtCELfAe/UxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:14:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2298 (0x8fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D560D, serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA Validity Not Before: Nov 4 19:14:39 2025 GMT Not After : Nov 11 19:14:39 2025 GMT Subject: CN=690a50a0-5042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7c:67:2c:25:6d:99:df:01:6e:6a:ce:9d:16: ad:d8:02:c4:86:1a:45:38:cf:11:01:36:a6:67:4d: f7:30:72:b7:c6:2c:c5:46:5b:0a:1c:e8:25:8c:cf: 28:ca:73:79:96:a9:19:e3:39:eb:a8:db:67:71:da: b3:ea:e6:29:0c:c5:14:0d:5d:07:50:d7:f9:95:2c: d2:d2:bd:a3:c7:57:08:81:4c:80:58:48:4a:72:8f: de:42:f4:3a:d5:d9:26:7a:a9:b6:00:5b:36:6f:0f: 32:03:2e:be:93:d1:aa:87:78:91:bd:91:b2:b4:1a: 0b:b2:80:1d:40:23:30:b6:60:9a:0e:aa:e2:19:30: 39:50:74:f9:21:84:9c:93:52:89:3e:4d:32:2c:eb: 8d:f3:07:9e:44:71:f6:08:9f:1e:d9:20:c0:56:42: 06:7a:ea:66:bb:9a:34:3c:87:5e:c1:71:1e:51:73: d6:d0:d5:2d:c2:c4:f1:e4:78:bb:61:13:73:10:d4: e5:6f:cd:9c:58:54:2d:c2:95:21:9a:4d:33:d6:06: 99:4b:3d:44:97:f4:10:0c:42:77:15:5b:16:1e:38: 87:8b:aa:b9:51:3b:2b:98:c3:e1:02:8d:f8:11:2b: d5:19:3e:6b:66:06:f6:6a:52:50:cf:27:4e:91:e4: c6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:05:ED:98:13:26:90:88:B4:FC:92:A3:D0:2C:E0:18:BB:91:EA:F4 X509v3 Authority Key Identifier: keyid:D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:92:62:e5:d1:0e:98:72:be:4c:60:c1:74:10:82:1b:3c:b1: 83:ba:59:19:e5:4c:6a:e6:a9:f2:8e:2f:7b:34:0f:7b:28:fb: 66:47:a2:c4:fc:b3:6a:e7:06:0f:7b:ff:62:43:f3:3d:86:5a: 94:7a:fe:09:30:04:2b:e1:12:32:49:f7:63:d7:5e:e7:b0:48: 53:b1:e0:41:e3:57:0b:2f:c2:45:bf:5a:09:87:5e:dc:38:ae: d0:0e:7f:ef:40:21:1b:7d:a8:33:07:62:50:1d:ff:b9:5c:e5: 42:e3:88:1c:65:23:99:ac:38:96:33:2b:41:3f:8a:dd:5b:20: dd:cd:46:58:24:d2:6e:70:5d:a4:2f:a9:4b:dc:a6:79:f6:43: 31:42:32:4b:2f:04:15:3f:55:ff:46:82:9c:e1:4a:40:43:33: 06:fe:1c:b3:af:c4:3a:59:20:29:fd:71:34:d5:24:a9:3b:d8: 39:98:f1:b2:f6:4c:36:68:ea:e3:bd:1d:4b:96:c9:4b:e9:67: da:30:35:8c:45:a7:53:51:1b:2f:fb:9a:35:1f:14:d3:9b:a4: 81:b8:bb:f1:90:58:6d:c6:90:61:2b:3d:3a:83:5e:34:95:6b: 14:77:e9:70:b3:09:98:99:bf:ab:65:04:48:25:bb:02:ad:cc: 82:f2:fe:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU2MEQxMTAvBgNVBAUTKEQ3MTQ2REE5REUyOEY1QkI1RTNERTJGRjAwQzU5RkM4 NUM5OTM4REEwHhcNMjUxMTA0MTkxNDM5WhcNMjUxMTExMTkxNDM5WjAYMRYwFAYD VQQDEw02OTBhNTBhMC01MDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwHxnLCVtmd8BbmrOnRat2ALEhhpFOM8RATamZ033MHK3xizFRlsKHOgljM8o ynN5lqkZ4znrqNtncdqz6uYpDMUUDV0HUNf5lSzS0r2jx1cIgUyAWEhKco/eQvQ6 1dkmeqm2AFs2bw8yAy6+k9Gqh3iRvZGytBoLsoAdQCMwtmCaDqriGTA5UHT5IYSc k1KJPk0yLOuN8weeRHH2CJ8e2SDAVkIGeupmu5o0PIdewXEeUXPW0NUtwsTx5Hi7 YRNzENTlb82cWFQtwpUhmk0z1gaZSz1El/QQDEJ3FVsWHjiHi6q5UTsrmMPhAo34 ESvVGT5rZgb2alJQzydOkeTGsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAYF7ZgT JpCItPySo9As4Bi7ker0MB8GA1UdIwQYMBaAFNcUbaneKPW7Xj3i/wDFn8hcmTja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTYwRC82OEMzRjQ5QTQx RUUxMUVBOUNFQTFGNzVDNEY5QUUwMi8xeFJ0cWQ0bzlidGVQZUxfQU1XZnlGeVpP Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4UnRxZDRvOWJ0ZVBlTF9BTVdmeUZ5Wk9Oby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTYwRC82OEMzRjQ5QTQxRUUxMUVBOUNFQTFGNzVDNEY5QUUwMi8xeFJ0cWQ0bzli dGVQZUxfQU1XZnlGeVpPTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmkmLl0Q6Ycr5MYMF0EIIbPLGDulkZ5Uxq5qnyji97NA97KPtmR6LE /LNq5wYPe/9iQ/M9hlqUev4JMAQr4RIySfdj117nsEhTseBB41cLL8JFv1oJh17c OK7QDn/vQCEbfagzB2JQHf+5XOVC44gcZSOZrDiWMytBP4rdWyDdzUZYJNJucF2k L6lL3KZ59kMxQjJLLwQVP1X/RoKc4UpAQzMG/hyzr8Q6WSAp/XE01SSpO9g5mPGy 9kw2aOrjvR1LlslL6WfaMDWMRadTURsv+5o1HxTTm6SBuLvxkFhtxpBhKz06g140 lWsUd+lwswmYmb+rZQRIJbsCrcyC8v4o -----END CERTIFICATE-----Generated at Wed Nov 5 05:49:57 2025 by rpki-client