$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft File: 1bScAI9ih18VJth200lAoJsOnW0.mft (raw, json) Hash identifier: +m5dMJKF8qbk1i/yDk/8JTK98q8iQUtG+ykSVdToZ6E= Subject key identifier: 01:9C:4E:61:59:C3:12:F2:22:41:46:36:45:BE:4C:EF:F9:FC:7F:CC Authority key identifier: D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D Certificate issuer: /CN=A91FB434/serialNumber=D5B49C008F62875F1526D876D34940A09B0E9D6D Certificate serial: 15A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft Manifest number: 158D Signing time: Tue 04 Nov 2025 16:51:29 +0000 Manifest this update: Tue 04 Nov 2025 16:51:28 +0000 Manifest next update: Tue 11 Nov 2025 16:51:28 +0000 Files and hashes: 1: 1bScAI9ih18VJth200lAoJsOnW0.crl (hash: ZT63IMjmI0BRcHExAkosbUH5xRg7nkrHyoJ32jp1sLI=) 2: EC796D6C42D411E88EC29742C4F9AE02.roa (hash: 4omxKGchAtANINcKNMUv81DprGm9m6mhlkl3cRG7vXI=) 3: EB843B92329A11EE89CD8544C4F9AE02.roa (hash: b5yX1QAOSGwKLnK6fw3PZvYuW4+NY2un1A6EM1jEmyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.crl rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5537 (0x15a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB434, serialNumber=D5B49C008F62875F1526D876D34940A09B0E9D6D Validity Not Before: Nov 4 16:51:28 2025 GMT Not After : Nov 11 16:51:28 2025 GMT Subject: CN=690a2f11-34b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:37:ab:7d:b6:3d:ed:bb:8c:7a:e8:a8:02:94: c7:17:af:64:80:d1:32:04:fc:6a:a5:b0:ac:2a:64: 2c:2e:c4:4f:5e:d5:b7:f2:79:2c:6f:03:50:17:48: e5:c3:cb:d4:50:08:52:d4:32:11:3a:0e:f8:64:8d: 8e:42:6c:59:86:a0:5f:02:49:1e:d7:f5:65:6c:d3: 84:28:d6:cd:31:a3:9b:ae:9a:df:64:8f:c5:1f:8c: f5:5d:b8:24:17:92:1d:50:25:d1:f4:e3:5b:22:ee: ac:74:2c:ba:96:6a:75:32:97:12:46:16:96:72:0f: 10:f0:7e:77:53:fc:00:db:41:cd:4c:78:a2:68:7e: 48:03:d3:5e:59:7a:59:91:a1:d9:44:3a:17:8b:67: 53:46:63:36:4c:5e:32:b4:7d:7e:90:e1:47:fb:00: cd:ca:30:03:e0:e2:ce:78:58:02:d7:d1:01:e6:74: 7d:94:06:7d:ce:e4:74:f5:ba:c2:ff:02:5f:18:19: 8e:df:5b:6d:60:36:6f:8b:cd:dd:2f:fd:74:b7:73: 26:c0:ea:cf:e5:84:44:86:30:3e:b2:9d:cb:00:49: e3:4e:ff:a4:aa:00:1d:71:41:3e:bd:b1:dd:59:ef: 36:ca:47:e7:56:47:23:85:d9:23:62:91:74:9f:86: d5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:9C:4E:61:59:C3:12:F2:22:41:46:36:45:BE:4C:EF:F9:FC:7F:CC X509v3 Authority Key Identifier: keyid:D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:5d:cc:92:46:10:b0:aa:58:c7:92:1b:bd:22:76:cf:7c:1f: 59:3b:dd:ec:3b:94:ed:94:2b:7a:f8:6b:42:cd:db:0e:ef:74: b8:18:d2:68:b8:d1:ca:77:32:b7:53:c2:8c:ad:46:ad:ba:73: 7e:07:a4:44:75:1b:43:8a:bc:64:c7:45:57:3e:b9:3d:89:ac: 66:29:29:2e:44:1d:6a:8f:9b:d2:1b:ba:30:ca:39:ba:18:f7: 48:55:e6:17:b8:f8:15:0d:f8:c1:da:9b:b5:5d:0b:11:07:b0: 56:28:ea:1a:59:08:81:53:4c:66:dd:06:16:26:00:2c:7a:98: a8:84:73:82:43:4f:ea:71:08:67:83:84:c2:af:cf:63:c6:47: 96:93:8f:f3:5f:2a:5e:1f:f5:88:73:aa:a4:c7:f5:d9:ab:8b: 65:cf:3f:85:66:72:58:d0:bf:7e:af:a6:e0:e5:ac:c5:86:de: 3e:b2:2e:a9:5b:dd:d2:1f:fc:2c:85:da:59:71:36:44:df:84: c2:0d:38:e6:0c:15:ee:fa:e3:61:7d:4a:ef:25:b3:18:05:98: fd:c0:73:33:ad:34:ab:1a:8b:19:9b:1e:95:46:4b:37:0d:fd: d5:ed:51:72:4a:ca:1e:0c:3b:84:7e:46:49:4f:4f:8e:9c:9e: c5:f4:06:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI0MzQxMTAvBgNVBAUTKEQ1QjQ5QzAwOEY2Mjg3NUYxNTI2RDg3NkQzNDk0MEEw OUIwRTlENkQwHhcNMjUxMTA0MTY1MTI4WhcNMjUxMTExMTY1MTI4WjAYMRYwFAYD VQQDEw02OTBhMmYxMS0zNGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArzerfbY97buMeuioApTHF69kgNEyBPxqpbCsKmQsLsRPXtW38nksbwNQF0jl w8vUUAhS1DIROg74ZI2OQmxZhqBfAkke1/VlbNOEKNbNMaObrprfZI/FH4z1Xbgk F5IdUCXR9ONbIu6sdCy6lmp1MpcSRhaWcg8Q8H53U/wA20HNTHiiaH5IA9NeWXpZ kaHZRDoXi2dTRmM2TF4ytH1+kOFH+wDNyjAD4OLOeFgC19EB5nR9lAZ9zuR09brC /wJfGBmO31ttYDZvi83dL/10t3MmwOrP5YREhjA+sp3LAEnjTv+kqgAdcUE+vbHd We82ykfnVkcjhdkjYpF0n4bVswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGcTmFZ wxLyIkFGNkW+TO/5/H/MMB8GA1UdIwQYMBaAFNW0nACPYodfFSbYdtNJQKCbDp1t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjQzNC9FMkM2MjY3NjQy RDMxMUU4QkJEQzA5NDFDNEY5QUUwMi8xYlNjQUk5aWgxOFZKdGgyMDBsQW9Kc09u VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFiU2NBSTlpaDE4Vkp0aDIwMGxBb0pzT25XMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjQzNC9FMkM2MjY3NjQyRDMxMUU4QkJEQzA5NDFDNEY5QUUwMi8xYlNjQUk5aWgx OFZKdGgyMDBsQW9Kc09uVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAXcySRhCwqljHkhu9InbPfB9ZO93sO5TtlCt6+GtCzdsO73S4GNJo uNHKdzK3U8KMrUatunN+B6REdRtDirxkx0VXPrk9iaxmKSkuRB1qj5vSG7owyjm6 GPdIVeYXuPgVDfjB2pu1XQsRB7BWKOoaWQiBU0xm3QYWJgAsepiohHOCQ0/qcQhn g4TCr89jxkeWk4/zXypeH/WIc6qkx/XZq4tlzz+FZnJY0L9+r6bg5azFht4+si6p W93SH/wshdpZcTZE34TCDTjmDBXu+uNhfUrvJbMYBZj9wHMzrTSrGosZmx6VRks3 Df3V7VFySsoeDDuEfkZJT0+OnJ7F9AZc -----END CERTIFICATE-----Generated at Wed Nov 5 10:01:28 2025 by rpki-client