$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft File: 1p-GUNl6UkwplFPMtI13tOZf3yI.mft (raw, json) Hash identifier: g523Yv5nevKXizITCNrDKCI6CIP3Sm/CRJlR6Ds8SHg= Subject key identifier: B9:45:44:18:5B:FB:DB:E9:78:D4:D0:E8:97:07:BE:35:2C:26:C7:81 Authority key identifier: D6:9F:86:50:D9:7A:52:4C:29:94:53:CC:B4:8D:77:B4:E6:5F:DF:22 Certificate issuer: /CN=A91F0695/serialNumber=D69F8650D97A524C299453CCB48D77B4E65FDF22 Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1p-GUNl6UkwplFPMtI13tOZf3yI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft Manifest number: 015E Signing time: Mon 03 Nov 2025 04:04:12 +0000 Manifest this update: Mon 03 Nov 2025 04:04:12 +0000 Manifest next update: Mon 10 Nov 2025 04:04:12 +0000 Files and hashes: 1: 1p-GUNl6UkwplFPMtI13tOZf3yI.crl (hash: mJg/dMXidclY3hXqLXmygQHFjMygUzblXgeubZGB0D4=) 2: D1054582A0C111EEA54E2F0BC4F9AE02.roa (hash: LiqmtbZL/k65yoRZh2qeTmSOnyQ0Qghej6NC1OoEsfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.crl rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1p-GUNl6UkwplFPMtI13tOZf3yI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:04:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0695, serialNumber=D69F8650D97A524C299453CCB48D77B4E65FDF22 Validity Not Before: Nov 3 04:04:12 2025 GMT Not After : Nov 10 04:04:12 2025 GMT Subject: CN=690829bc-8659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:06:d2:6d:52:03:76:ca:a7:8c:24:73:58:ef: c1:f2:3f:cb:e3:cf:6e:77:37:91:ed:8b:2a:e1:f3: e0:c7:56:a9:58:18:28:93:8a:34:e4:90:83:b3:e8: a9:28:33:a1:79:90:ec:9d:00:aa:5b:cd:84:1e:7a: 80:10:4a:1f:26:cb:ab:16:74:d3:98:1d:64:fc:f5: 06:4b:69:f9:19:93:74:66:7d:60:8a:5f:b5:64:95: 63:c2:20:a0:07:fb:64:87:a8:8b:28:9e:7c:b7:e6: 8d:77:a1:38:94:93:1f:dc:75:21:ee:e3:1d:14:29: a6:d5:26:72:7e:52:69:f4:07:c3:77:e4:40:88:e9: 21:cd:b4:8a:64:38:9a:44:bd:54:68:76:98:62:54: 95:8a:f2:9a:f2:b6:93:ef:51:02:be:9f:f9:68:0d: fc:36:90:5d:39:af:bd:c9:1a:50:3e:d8:18:5d:e2: 5f:61:6a:02:7e:95:5b:f7:07:f7:c6:2a:3d:37:eb: aa:c1:61:f1:60:91:f9:79:c4:ed:b8:10:16:4c:4f: a3:70:f2:f2:ab:dd:eb:20:2d:52:79:8a:3d:53:7f: 4c:40:22:6f:37:c1:d3:a7:46:2f:da:43:bf:7c:62: 3c:aa:94:92:b6:64:6a:2d:61:3d:be:b2:bb:37:9d: d4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:45:44:18:5B:FB:DB:E9:78:D4:D0:E8:97:07:BE:35:2C:26:C7:81 X509v3 Authority Key Identifier: keyid:D6:9F:86:50:D9:7A:52:4C:29:94:53:CC:B4:8D:77:B4:E6:5F:DF:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1p-GUNl6UkwplFPMtI13tOZf3yI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:cd:51:a7:c3:8f:af:cb:af:cf:4a:8d:5a:d9:bf:4e:50:2b: 29:22:b5:ad:ca:24:80:e7:4c:80:1f:c8:54:55:74:c6:70:17: 7f:65:a8:fc:8a:fd:9f:81:72:d9:dd:4f:53:f5:39:1c:90:94: 03:a6:14:93:76:13:12:b2:8c:c7:4b:e3:47:f8:0d:02:48:51: 53:ec:a0:a6:e6:11:69:95:43:47:e4:82:db:0b:bf:a1:1d:b0: ab:4c:f4:1d:e2:90:bc:fa:6d:e8:57:db:98:a7:2e:3a:31:ac: 49:70:3c:31:b1:3b:0a:a5:91:8d:ea:98:17:48:33:38:63:11: 6e:4e:97:0e:20:cd:09:c5:ad:ce:c5:6d:fb:82:d7:69:e0:06: 5a:25:7b:e3:41:3f:c7:f3:8e:e2:29:e5:ff:e3:f9:72:22:09: 99:db:c3:e6:c4:a1:3a:b6:82:1d:69:f2:a4:87:b2:aa:05:8e: 27:74:d7:70:03:2d:5d:1f:c5:f5:ea:f2:d7:ef:a8:f6:0e:ee: 20:fb:10:f2:9b:b9:21:61:09:c4:d0:69:5c:be:6b:00:7b:3c: 94:0c:73:7b:d9:d8:19:26:21:36:d2:ee:a0:82:12:d1:da:44: 75:70:da:b9:60:17:d0:0c:b6:44:d6:87:63:64:f1:3b:40:1e: 77:e2:b5:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA2OTUxMTAvBgNVBAUTKEQ2OUY4NjUwRDk3QTUyNEMyOTk0NTNDQ0I0OEQ3N0I0 RTY1RkRGMjIwHhcNMjUxMTAzMDQwNDEyWhcNMjUxMTEwMDQwNDEyWjAYMRYwFAYD VQQDEw02OTA4MjliYy04NjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQbSbVIDdsqnjCRzWO/B8j/L489udzeR7Ysq4fPgx1apWBgok4o05JCDs+ip KDOheZDsnQCqW82EHnqAEEofJsurFnTTmB1k/PUGS2n5GZN0Zn1gil+1ZJVjwiCg B/tkh6iLKJ58t+aNd6E4lJMf3HUh7uMdFCmm1SZyflJp9AfDd+RAiOkhzbSKZDia RL1UaHaYYlSVivKa8raT71ECvp/5aA38NpBdOa+9yRpQPtgYXeJfYWoCfpVb9wf3 xio9N+uqwWHxYJH5ecTtuBAWTE+jcPLyq93rIC1SeYo9U39MQCJvN8HTp0Yv2kO/ fGI8qpSStmRqLWE9vrK7N53UuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLlFRBhb +9vpeNTQ6JcHvjUsJseBMB8GA1UdIwQYMBaAFNafhlDZelJMKZRTzLSNd7TmX98i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDY5NS83QzY3ODE0OEEw QzExMUVFQjIyMzI5NEFDNEY5QUUwMi8xcC1HVU5sNlVrd3BsRlBNdEkxM3RPWmYz eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFwLUdVTmw2VWt3cGxGUE10STEzdE9aZjN5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDY5NS83QzY3ODE0OEEwQzExMUVFQjIyMzI5NEFDNEY5QUUwMi8xcC1HVU5sNlVr d3BsRlBNdEkxM3RPWmYzeUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwzVGnw4+vy6/PSo1a2b9OUCspIrWtyiSA50yAH8hUVXTGcBd/Zaj8 iv2fgXLZ3U9T9TkckJQDphSTdhMSsozHS+NH+A0CSFFT7KCm5hFplUNH5ILbC7+h HbCrTPQd4pC8+m3oV9uYpy46MaxJcDwxsTsKpZGN6pgXSDM4YxFuTpcOIM0Jxa3O xW37gtdp4AZaJXvjQT/H847iKeX/4/lyIgmZ28PmxKE6toIdafKkh7KqBY4ndNdw Ay1dH8X16vLX76j2Du4g+xDym7khYQnE0GlcvmsAezyUDHN72dgZJiE20u6gghLR 2kR1cNq5YBfQDLZE1odjZPE7QB534rVo -----END CERTIFICATE-----Generated at Tue Nov 4 08:20:04 2025 by rpki-client