$ rpki-client -vvf rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft File: 1xhrKGW4YA1mKCKv65AVcAbg9BA.mft (raw, json) Hash identifier: eDlUqI6vop9l3f3/2pHrvb4X1lyA2Nxx3dkoV0zOU9I= Subject key identifier: 77:45:40:DE:D4:C7:C6:2E:3C:E4:FA:59:69:7D:5F:75:03:3B:B3:B6 Authority key identifier: D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10 Certificate issuer: /CN=A91F428C/serialNumber=D7186B2865B8600D662822AFEB90157006E0F410 Certificate serial: 34E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft Manifest number: 34DB Signing time: Tue 04 Nov 2025 15:06:50 +0000 Manifest this update: Tue 04 Nov 2025 15:06:49 +0000 Manifest next update: Tue 11 Nov 2025 15:06:49 +0000 Files and hashes: 1: 1xhrKGW4YA1mKCKv65AVcAbg9BA.crl (hash: M+0UBRIfDy4jbRukU+k/Ebl2ZVEKk1SPGzqj2KNm8MU=) 2: B8201598BED111EC93B74C4FC4F9AE02.roa (hash: JdQUVUw03f+72nj/VMFdFXWPwrE8S++NWd90s/zu6jk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.crl rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:06:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13536 (0x34e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F428C, serialNumber=D7186B2865B8600D662822AFEB90157006E0F410 Validity Not Before: Nov 4 15:06:49 2025 GMT Not After : Nov 11 15:06:49 2025 GMT Subject: CN=690a1689-05a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:67:32:33:a4:1e:20:fd:63:19:ff:c5:7d:8d: d6:94:2f:72:05:0a:43:c1:a2:a1:63:2c:74:b3:0f: ca:92:ea:b3:c7:6c:cd:f1:31:8b:91:84:09:89:80: f4:15:28:eb:1b:9f:26:50:4b:33:1f:82:9d:63:9f: 7e:5a:14:e5:75:7d:b9:46:18:71:ca:07:bf:70:10: 14:55:53:b6:71:f4:dd:a4:8b:f0:53:54:a5:b6:c9: b2:13:6d:4c:b8:a3:42:57:2e:14:7e:13:d6:30:64: 69:98:e4:b8:14:64:84:2e:53:47:ac:43:b7:e1:ec: f9:2e:6a:0d:56:fd:be:7d:5a:c9:32:b1:e5:d0:a8: 4f:8f:aa:c7:5e:03:3d:5c:c9:8f:e1:52:88:2c:a6: fd:18:14:bb:c8:f7:1e:5f:9a:0a:43:aa:07:6e:dc: 86:03:04:bf:a2:1b:5a:bd:97:3f:14:b6:2e:6d:7a: 14:cf:1d:cf:7e:f5:95:b8:08:ed:b3:fc:d8:24:81: 27:00:c3:ab:62:f8:18:ae:cb:9a:06:cc:67:a8:12: 00:f7:c6:3e:50:26:2b:9a:c8:e7:fa:aa:c2:c6:0e: bd:7c:6f:8d:d0:6f:14:e3:2c:0b:34:f0:f5:81:e2: f3:55:57:47:92:fa:be:b8:e7:a1:f3:b5:39:d2:80: c7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:45:40:DE:D4:C7:C6:2E:3C:E4:FA:59:69:7D:5F:75:03:3B:B3:B6 X509v3 Authority Key Identifier: keyid:D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:63:7a:ff:69:52:f0:5e:f3:90:25:a1:28:fe:27:62:e2:39: b1:cc:da:0d:d9:35:68:b1:ad:29:15:12:a4:2d:f4:d3:b2:ea: 3e:36:68:78:62:35:4c:1d:f6:b5:94:ab:ec:17:39:b4:71:88: 33:f6:5e:13:53:af:86:da:d7:42:5f:3e:2d:6e:8d:64:9b:03: d6:39:68:26:de:d4:2c:a3:52:3d:ca:83:17:96:76:4d:c9:10: b4:32:77:29:a7:f8:68:66:ad:83:f9:ab:26:08:33:48:fb:35: a9:af:4b:aa:ce:c2:77:d1:03:bb:12:1e:fa:69:d1:17:1a:c1: c3:f7:e1:d8:37:de:a4:38:32:31:75:21:21:29:0f:b2:fe:3f: a5:a7:29:55:93:0a:ba:d0:78:de:02:19:92:d5:3c:e6:85:cb: b7:95:18:51:e5:c1:57:15:ec:dc:a8:5b:19:67:ea:9b:ae:d3: d0:75:90:79:d8:27:90:19:1a:8f:6a:9e:97:81:e9:e9:76:d6: 1a:0e:1d:b2:3d:78:0f:a6:79:f6:9c:ff:75:88:4a:21:ac:70: 21:d4:87:30:56:17:1f:97:0d:49:8f:19:1b:79:8c:8c:ca:ec: f0:0a:ee:eb:64:4e:9e:77:94:cd:e9:fe:9d:8d:6d:16:a3:27: e5:ef:c0:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOEMxMTAvBgNVBAUTKEQ3MTg2QjI4NjVCODYwMEQ2NjI4MjJBRkVCOTAxNTcw MDZFMEY0MTAwHhcNMjUxMTA0MTUwNjQ5WhcNMjUxMTExMTUwNjQ5WjAYMRYwFAYD VQQDEw02OTBhMTY4OS0wNWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmcyM6QeIP1jGf/FfY3WlC9yBQpDwaKhYyx0sw/Kkuqzx2zN8TGLkYQJiYD0 FSjrG58mUEszH4KdY59+WhTldX25Rhhxyge/cBAUVVO2cfTdpIvwU1SltsmyE21M uKNCVy4UfhPWMGRpmOS4FGSELlNHrEO34ez5LmoNVv2+fVrJMrHl0KhPj6rHXgM9 XMmP4VKILKb9GBS7yPceX5oKQ6oHbtyGAwS/ohtavZc/FLYubXoUzx3PfvWVuAjt s/zYJIEnAMOrYvgYrsuaBsxnqBIA98Y+UCYrmsjn+qrCxg69fG+N0G8U4ywLNPD1 geLzVVdHkvq+uOeh87U50oDHpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHdFQN7U x8YuPOT6WWl9X3UDO7O2MB8GA1UdIwQYMBaAFNcYayhluGANZigir+uQFXAG4PQQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4Qy81MkZDQzY0ODFE QTAxMUUyQjZEODcwOTEwOEIwMkNEMi8xeGhyS0dXNFlBMW1LQ0t2NjVBVmNBYmc5 QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4aHJLR1c0WUExbUtDS3Y2NUFWY0FiZzlCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI4Qy81MkZDQzY0ODFEQTAxMUUyQjZEODcwOTEwOEIwMkNEMi8xeGhyS0dXNFlB MW1LQ0t2NjVBVmNBYmc5QkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYY3r/aVLwXvOQJaEo/idi4jmxzNoN2TVosa0pFRKkLfTTsuo+Nmh4 YjVMHfa1lKvsFzm0cYgz9l4TU6+G2tdCXz4tbo1kmwPWOWgm3tQso1I9yoMXlnZN yRC0Mncpp/hoZq2D+asmCDNI+zWpr0uqzsJ30QO7Eh76adEXGsHD9+HYN96kODIx dSEhKQ+y/j+lpylVkwq60HjeAhmS1Tzmhcu3lRhR5cFXFezcqFsZZ+qbrtPQdZB5 2CeQGRqPap6XgenpdtYaDh2yPXgPpnn2nP91iEohrHAh1IcwVhcflw1JjxkbeYyM yuzwCu7rZE6ed5TN6f6djW0Woyfl78D+ -----END CERTIFICATE-----Generated at Wed Nov 5 11:53:59 2025 by rpki-client