$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft File: 1gwwsan1nJWa1JZ_L21XKst1KZw.mft (raw, json) Hash identifier: czOI1hO5aSJBP70m6N+26rhPWjvx3FXbFiEEP2uH3JQ= Subject key identifier: 53:83:BE:41:7B:32:62:E4:20:6F:20:6B:0F:24:C9:BC:6B:8A:AC:9F Authority key identifier: D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C Certificate issuer: /CN=A91E5EEA/serialNumber=D60C30B1A9F59C959AD4967F2F6D572ACB75299C Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft Manifest number: 9E Signing time: Wed 05 Nov 2025 06:38:58 +0000 Manifest this update: Wed 05 Nov 2025 06:38:58 +0000 Manifest next update: Wed 12 Nov 2025 06:38:58 +0000 Files and hashes: 1: 1gwwsan1nJWa1JZ_L21XKst1KZw.crl (hash: H43vudam5irZmwgNKEdgyZd0tQbf4YVZuzIwWC7uuXA=) 2: 2B6A4C480CDC11F0BAA65183C4F9AE02.roa (hash: htNwSI5H54iT9rmt0clXooV7uI/0VSjQJZC/u1wLlfY=) 3: A7C0D96E0CDD11F0A8463D28C4F9AE02.roa (hash: 3AmwEQdkffGIWwCP59F8UtXcsDQEm9UnobcPgXH/cBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.crl rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5EEA, serialNumber=D60C30B1A9F59C959AD4967F2F6D572ACB75299C Validity Not Before: Nov 5 06:38:58 2025 GMT Not After : Nov 12 06:38:58 2025 GMT Subject: CN=690af102-8d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bd:e5:0e:99:d6:93:3d:04:9a:3f:1c:fd:c9: 1f:e3:b5:21:84:09:c3:89:ce:04:60:6e:19:b8:05: 44:1d:08:64:80:35:9c:12:42:4a:ba:c6:b2:b2:4a: 30:27:bf:a5:e1:bc:33:f3:4d:ad:46:cb:ab:4d:ca: 31:82:99:eb:38:f8:6c:7a:aa:fd:b0:70:d9:04:7f: 5a:a1:ff:c7:d5:ae:92:53:dd:60:cf:b6:ed:00:c3: c0:87:76:05:83:c5:2e:a2:0e:9d:14:d3:94:8e:3a: c3:ba:e1:fd:e1:56:10:02:35:55:ba:29:88:79:e8: 7c:b5:19:58:f3:58:46:60:5f:0d:d8:c1:79:ce:6b: 17:32:ab:d8:5c:02:33:24:69:54:c3:36:26:51:e0: e3:42:f7:b7:26:8c:d1:9d:c8:ee:7d:46:00:80:87: 76:a9:9d:40:d9:1b:ae:2c:c3:3b:c8:6c:2e:72:20: 29:15:85:28:4c:18:3b:e0:34:f7:d7:ed:6a:ee:4d: 56:1b:34:79:ad:83:24:07:41:19:55:3f:85:a6:ba: 1f:90:2c:14:3c:51:a3:c5:b8:f5:05:bd:64:15:c2: a7:11:a4:28:a9:8f:33:42:e5:a5:54:14:ee:31:aa: 3a:7b:2d:7b:cf:82:4f:45:24:36:6f:87:fb:49:c6: fc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:83:BE:41:7B:32:62:E4:20:6F:20:6B:0F:24:C9:BC:6B:8A:AC:9F X509v3 Authority Key Identifier: keyid:D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:a2:18:c1:d7:e8:bc:4b:a4:84:8d:48:7f:50:b0:79:86:de: 08:e0:0b:50:68:fb:d9:a3:89:73:78:2b:b1:ec:81:d0:ed:38: e8:1e:a4:cb:46:45:6b:5b:c2:c4:f4:06:51:80:8d:df:36:55: 25:19:4c:05:14:69:24:93:c6:9d:2b:ad:b8:fc:6d:0b:14:73: af:2d:11:00:0c:e1:44:b5:81:da:fd:12:8e:64:22:4a:16:af: 62:7b:3d:ff:42:fd:27:9b:d9:10:87:45:71:eb:14:0c:0e:58: da:e9:eb:74:40:71:44:0b:87:1f:59:d2:40:f0:84:4e:a5:b6: 2b:09:f9:97:13:bd:0d:57:e7:9d:73:79:b4:84:83:de:b7:eb: e0:f3:4c:00:e7:8c:66:5c:22:45:03:cd:51:d9:55:c2:28:94: 0f:45:ad:dc:60:ba:a9:d2:cd:4c:68:2d:c1:79:a4:70:c3:d5: 76:95:1c:55:e1:c9:1e:8d:bc:a5:f7:07:6c:3a:ba:0d:c9:b3: a4:34:92:f5:7c:0c:6b:08:90:a0:8f:25:64:47:40:f2:3a:6f: 1b:0a:28:c5:c9:60:eb:0e:4c:e0:95:03:aa:2b:07:66:65:40: 85:cd:b2:d4:03:e6:41:a1:d5:b8:ce:d0:c1:aa:4d:f7:09:ef: 1e:8e:bf:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVFRUExMTAvBgNVBAUTKEQ2MEMzMEIxQTlGNTlDOTU5QUQ0OTY3RjJGNkQ1NzJB Q0I3NTI5OUMwHhcNMjUxMTA1MDYzODU4WhcNMjUxMTEyMDYzODU4WjAYMRYwFAYD VQQDEw02OTBhZjEwMi04ZDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwb3lDpnWkz0Emj8c/ckf47UhhAnDic4EYG4ZuAVEHQhkgDWcEkJKusayskow J7+l4bwz802tRsurTcoxgpnrOPhseqr9sHDZBH9aof/H1a6SU91gz7btAMPAh3YF g8Uuog6dFNOUjjrDuuH94VYQAjVVuimIeeh8tRlY81hGYF8N2MF5zmsXMqvYXAIz JGlUwzYmUeDjQve3JozRncjufUYAgId2qZ1A2RuuLMM7yGwuciApFYUoTBg74DT3 1+1q7k1WGzR5rYMkB0EZVT+FprofkCwUPFGjxbj1Bb1kFcKnEaQoqY8zQuWlVBTu Mao6ey17z4JPRSQ2b4f7Scb8QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFODvkF7 MmLkIG8gaw8kybxriqyfMB8GA1UdIwQYMBaAFNYMMLGp9ZyVmtSWfy9tVyrLdSmc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUVFQS9FM0ZDRDE0NEQ0 Q0YxMUVGOThERjk4MkJDNEY5QUUwMi8xZ3d3c2FuMW5KV2ExSlpfTDIxWEtzdDFL WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFnd3dzYW4xbkpXYTFKWl9MMjFYS3N0MUtady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUVFQS9FM0ZDRDE0NEQ0Q0YxMUVGOThERjk4MkJDNEY5QUUwMi8xZ3d3c2FuMW5K V2ExSlpfTDIxWEtzdDFLWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrohjB1+i8S6SEjUh/ULB5ht4I4AtQaPvZo4lzeCux7IHQ7TjoHqTL RkVrW8LE9AZRgI3fNlUlGUwFFGkkk8adK624/G0LFHOvLREADOFEtYHa/RKOZCJK Fq9iez3/Qv0nm9kQh0Vx6xQMDlja6et0QHFEC4cfWdJA8IROpbYrCfmXE70NV+ed c3m0hIPet+vg80wA54xmXCJFA81R2VXCKJQPRa3cYLqp0s1MaC3BeaRww9V2lRxV 4ckejbyl9wdsOroNybOkNJL1fAxrCJCgjyVkR0DyOm8bCijFyWDrDkzglQOqKwdm ZUCFzbLUA+ZBodW4ztDBqk33Ce8ejr88 -----END CERTIFICATE-----Generated at Wed Nov 5 20:54:57 2025 by rpki-client