$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft File: 1h14JILiVI0iXRvIiINjk97jmBI.mft (raw, json) Hash identifier: KGVKEbA/nwJzVtvYK/l7KaSKZ5uOT3DIf1CgKZCJEbw= Subject key identifier: A5:FB:48:21:8D:12:DE:4E:65:6E:39:C8:56:E9:6F:3E:7B:E4:5E:4B Authority key identifier: D6:1D:78:24:82:E2:54:8D:22:5D:1B:C8:88:83:63:93:DE:E3:98:12 Certificate issuer: /CN=A91F0A98/serialNumber=D61D782482E2548D225D1BC888836393DEE39812 Certificate serial: 01A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h14JILiVI0iXRvIiINjk97jmBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft Manifest number: 01A2 Signing time: Wed 05 Nov 2025 03:23:55 +0000 Manifest this update: Wed 05 Nov 2025 03:23:54 +0000 Manifest next update: Wed 12 Nov 2025 03:23:54 +0000 Files and hashes: 1: 1h14JILiVI0iXRvIiINjk97jmBI.crl (hash: 3J/XRswod5avLkVGAmwEEunPSUllx1O+/kcikFaeTps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.crl rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h14JILiVI0iXRvIiINjk97jmBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:23:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 418 (0x1a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0A98, serialNumber=D61D782482E2548D225D1BC888836393DEE39812 Validity Not Before: Nov 5 03:23:54 2025 GMT Not After : Nov 12 03:23:54 2025 GMT Subject: CN=690ac34a-9bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e2:97:fd:78:b5:b3:0c:6f:cb:6f:95:ae:9b: e6:2d:4d:8a:4a:77:da:cf:06:59:4f:10:bb:0a:7d: 0a:52:77:5d:fc:cb:4b:46:39:66:27:f7:66:37:ec: 81:ef:69:4e:90:02:66:1d:3d:fe:9b:5b:20:87:81: 85:94:df:09:0b:80:fe:a8:1b:ab:84:ce:ee:81:ff: dd:de:a5:1c:43:fc:02:05:85:52:92:e9:12:6b:6f: c9:ed:a1:28:cf:a4:a7:42:e6:46:10:a5:c6:ca:4d: b6:4d:87:c7:2e:8d:3e:6a:fd:52:3f:09:05:31:8e: 44:9d:15:30:bb:10:9e:52:50:f9:76:19:35:88:7a: d6:69:63:46:6d:e0:7e:08:38:44:6a:a1:48:86:5e: 94:0c:3b:b3:98:b8:46:65:8a:a4:dc:c2:24:52:18: 3d:ba:59:24:2f:66:80:2b:d0:9a:95:cb:33:e2:e3: 2e:8f:2c:21:4a:36:03:8e:91:51:79:e2:13:79:d5: 85:1f:2a:97:ed:e7:f6:c7:e9:8d:23:23:24:c0:22: d3:4d:50:f9:2f:05:40:57:85:2d:28:88:cc:fe:53: da:20:63:ed:e0:8c:df:fa:92:90:07:e4:a7:04:00: c5:c6:55:34:ba:1a:25:22:6d:d0:30:e1:70:c1:79: 69:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:FB:48:21:8D:12:DE:4E:65:6E:39:C8:56:E9:6F:3E:7B:E4:5E:4B X509v3 Authority Key Identifier: keyid:D6:1D:78:24:82:E2:54:8D:22:5D:1B:C8:88:83:63:93:DE:E3:98:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h14JILiVI0iXRvIiINjk97jmBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:38:4b:35:2f:89:f1:16:65:63:f4:50:c0:4a:17:e8:41:68: f7:c6:97:2e:bc:c5:74:96:d7:81:d8:5d:85:f6:40:90:03:3c: 12:ba:e7:14:08:66:32:fe:24:5b:c3:65:6d:6b:9d:3a:8a:a7: e4:d3:15:c9:f9:3e:ab:67:84:ad:71:d7:5a:d5:b6:b8:b0:04: cb:de:b6:2e:a7:e8:14:31:83:89:91:bf:90:7a:c6:1b:e2:8c: 1b:71:e4:9c:8c:3c:2f:fd:4c:40:32:f8:18:42:72:ee:86:40: 27:28:d2:e4:e8:2a:bc:45:0f:6c:1e:d4:9e:7e:cc:14:41:f7: 5a:fa:77:7f:b9:ac:af:e8:f2:ed:04:17:48:ce:f2:de:da:e7: 1e:a8:c5:38:ed:92:33:a5:02:47:92:a3:b7:50:6b:d8:54:36: f7:0b:5d:4b:d4:b5:e0:21:6e:d5:7a:b3:f5:dd:97:01:8c:83: 7c:d7:1a:66:e3:90:50:30:3c:16:41:05:9e:82:e1:e8:16:bb: cc:3e:ac:ac:fc:0e:25:d7:36:a1:83:8e:44:52:ab:5d:e9:f5: b0:e1:ae:cb:17:c3:9d:84:f1:7a:6c:8b:97:51:46:96:d3:22: da:8a:d4:10:a2:99:01:7f:5b:61:b2:82:a2:2f:7e:5e:d0:e0: fa:88:2e:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBBOTgxMTAvBgNVBAUTKEQ2MUQ3ODI0ODJFMjU0OEQyMjVEMUJDODg4ODM2Mzkz REVFMzk4MTIwHhcNMjUxMTA1MDMyMzU0WhcNMjUxMTEyMDMyMzU0WjAYMRYwFAYD VQQDEw02OTBhYzM0YS05YmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+KX/Xi1swxvy2+VrpvmLU2KSnfazwZZTxC7Cn0KUndd/MtLRjlmJ/dmN+yB 72lOkAJmHT3+m1sgh4GFlN8JC4D+qBurhM7ugf/d3qUcQ/wCBYVSkukSa2/J7aEo z6SnQuZGEKXGyk22TYfHLo0+av1SPwkFMY5EnRUwuxCeUlD5dhk1iHrWaWNGbeB+ CDhEaqFIhl6UDDuzmLhGZYqk3MIkUhg9ulkkL2aAK9Calcsz4uMujywhSjYDjpFR eeITedWFHyqX7ef2x+mNIyMkwCLTTVD5LwVAV4UtKIjM/lPaIGPt4Izf+pKQB+Sn BADFxlU0uholIm3QMOFwwXlpbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKX7SCGN Et5OZW45yFbpbz575F5LMB8GA1UdIwQYMBaAFNYdeCSC4lSNIl0byIiDY5Pe45gS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEE5OC84RjQ4NjRFQTM1 RTAxMUVFODdDMkE2NzBDNEY5QUUwMi8xaDE0SklMaVZJMGlYUnZJaUlOams5N2pt QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFoMTRKSUxpVkkwaVhSdklpSU5qazk3am1CSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEE5OC84RjQ4NjRFQTM1RTAxMUVFODdDMkE2NzBDNEY5QUUwMi8xaDE0SklMaVZJ MGlYUnZJaUlOams5N2ptQkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuOEs1L4nxFmVj9FDAShfoQWj3xpcuvMV0lteB2F2F9kCQAzwSuucU CGYy/iRbw2Vta506iqfk0xXJ+T6rZ4Stcdda1ba4sATL3rYup+gUMYOJkb+QesYb 4owbceScjDwv/UxAMvgYQnLuhkAnKNLk6Cq8RQ9sHtSefswUQfda+nd/uayv6PLt BBdIzvLe2uceqMU47ZIzpQJHkqO3UGvYVDb3C11L1LXgIW7VerP13ZcBjIN81xpm 45BQMDwWQQWeguHoFrvMPqys/A4l1zahg45EUqtd6fWw4a7LF8OdhPF6bIuXUUaW 0yLaitQQopkBf1thsoKiL35e0OD6iC6f -----END CERTIFICATE-----Generated at Wed Nov 5 15:18:31 2025 by rpki-client