$ rpki-client -vvf rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft File: 1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft (raw, json) Hash identifier: Jt6gS8Lk28jzwqAL7HS/TqmgDNoTmQDCbZCswK5kvSM= Subject key identifier: BF:1D:A4:C6:E4:48:53:5B:D3:0E:AC:E9:2D:97:A1:47:AC:67:17:D0 Authority key identifier: D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D Certificate issuer: /CN=A91174ED/serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft Manifest number: 38 Signing time: Sun 19 Oct 2025 11:02:54 +0000 Manifest this update: Sun 19 Oct 2025 11:02:54 +0000 Manifest next update: Sun 26 Oct 2025 11:02:54 +0000 Files and hashes: 1: 1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl (hash: /nNhY4hyIQ/lpyg98f217/+i/qOlq+WJFRA/cdAMrCE=) 2: FE892768620711F0BE75F534C4F9AE02.roa (hash: lIvntJbQ3iLGqhEBLcowTkqSPPrJfP4D0bbkG1Wfg+g=) 3: E7BD97EE5D9311F0AFF08443C4F9AE02.roa (hash: 945+Vkteqw/NwLcrpePu74zLw2XjOxBSUFg1u4xLkkU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91174ED, serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D Validity Not Before: Oct 19 11:02:54 2025 GMT Not After : Oct 26 11:02:54 2025 GMT Subject: CN=68f4c55e-b2a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fc:83:52:1f:75:f4:a9:ed:ba:61:d1:cf:88: 8d:6a:0d:c2:53:4c:1e:5a:27:c6:72:89:8a:47:5b: 12:5f:a8:79:6d:02:55:8c:87:84:bf:64:21:9f:9c: 42:77:39:e3:1e:4b:99:ac:cf:ba:70:0f:f6:cb:b3: 12:28:a2:7b:16:1f:c3:b8:a2:97:6e:d7:45:f8:26: 59:f2:2c:7d:c0:be:b0:9d:99:7f:e1:cb:6a:f7:b8: 46:9c:6c:ab:6c:2b:3c:8a:49:f1:0f:8b:39:ca:29: 31:22:93:33:2c:01:8e:bb:d8:84:a5:6e:88:15:0f: 74:3e:10:1f:60:19:1b:47:65:d6:f4:dc:3c:60:3e: b9:c7:6f:c8:ae:ef:38:ff:34:02:80:4b:fe:1d:75: 66:4c:34:9c:ca:8a:31:2f:7f:40:d6:14:b8:34:ec: 26:66:ae:8f:6f:8e:95:03:89:a6:42:c4:17:92:99: 43:8d:77:fd:ab:ca:e9:e7:35:c9:64:45:ab:c8:b7: 6b:b9:02:d0:0a:53:bb:f4:8d:a1:b4:45:42:27:c9: 6c:22:31:dd:f6:7f:48:fa:99:50:df:9a:f2:78:4d: 44:3e:75:12:06:9d:4f:fa:9b:d6:e5:d4:53:5f:17: b2:31:04:e2:6d:a1:73:e7:40:b7:7e:f5:d6:db:49: a6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:1D:A4:C6:E4:48:53:5B:D3:0E:AC:E9:2D:97:A1:47:AC:67:17:D0 X509v3 Authority Key Identifier: keyid:D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:2a:21:75:51:55:b4:04:6a:a5:8b:1c:84:46:21:1b:dc:96: be:23:87:70:64:e1:82:93:d5:1f:06:56:f2:da:9a:fc:05:78: 0a:58:e7:b3:c2:e7:8c:2c:ac:8d:b3:6b:05:bd:aa:cc:b2:e8: 89:91:03:6e:4b:b5:63:3b:f7:18:90:3a:2a:65:39:a1:0e:e9: e3:59:1e:e3:3a:a5:7a:32:c5:8d:e7:08:f6:47:a3:fe:1f:87: 70:19:9f:c3:f8:89:24:e6:38:06:49:f2:52:a2:6c:66:00:e7: b3:a9:21:28:11:4b:a1:72:a0:e4:48:3b:8b:22:f9:90:40:b3: 6c:c7:d8:4f:16:82:c0:19:39:90:ff:b3:04:2b:61:63:76:28: 7f:50:a3:75:f6:04:06:64:17:56:a6:8d:74:58:1a:5d:ac:fc: aa:e3:30:14:31:39:ea:97:66:3b:27:78:e7:88:f2:76:88:72: 78:0e:06:32:59:1b:0e:a6:0c:f2:d3:5f:ac:d5:63:de:bb:b5: 61:ea:0a:29:8a:d1:49:95:e0:f2:ae:5f:9a:8f:41:ef:25:77: 1b:5f:6e:36:7c:3c:fd:b5:9a:52:9c:6e:3a:08:17:47:73:9b: 67:3e:09:12:95:81:72:52:bf:cc:db:e2:51:95:08:3a:4a:9d: 95:2a:a9:fc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NzRFRDExMC8GA1UEBRMoRDVCQzc5MEFCMDM3Qjg3RERGNjM5M0Q3NDEzNkJGMDc3 QTFEMjk5RDAeFw0yNTEwMTkxMTAyNTRaFw0yNTEwMjYxMTAyNTRaMBgxFjAUBgNV BAMTDTY4ZjRjNTVlLWIyYTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDc/INSH3X0qe26YdHPiI1qDcJTTB5aJ8ZyiYpHWxJfqHltAlWMh4S/ZCGfnEJ3 OeMeS5msz7pwD/bLsxIoonsWH8O4opdu10X4JlnyLH3AvrCdmX/hy2r3uEacbKts KzyKSfEPiznKKTEikzMsAY672ISlbogVD3Q+EB9gGRtHZdb03DxgPrnHb8iu7zj/ NAKAS/4ddWZMNJzKijEvf0DWFLg07CZmro9vjpUDiaZCxBeSmUONd/2ryunnNclk RavIt2u5AtAKU7v0jaG0RUInyWwiMd32f0j6mVDfmvJ4TUQ+dRIGnU/6m9bl1FNf F7IxBOJtoXPnQLd+9dbbSaYHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvx2kxuRI U1vTDqzpLZehR6xnF9AwHwYDVR0jBBgwFoAU1bx5CrA3uH3fY5PXQTa/B3odKZ0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3NEVELzE0MzU4MTYyNUQ5 MjExRjA5MERGMzgzNkM0RjlBRTAyLzFieDVDckEzdUgzZlk1UFhRVGFfQjNvZEta MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMWJ4NUNyQTN1SDNmWTVQWFFUYV9CM29kS1owLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 NEVELzE0MzU4MTYyNUQ5MjExRjA5MERGMzgzNkM0RjlBRTAyLzFieDVDckEzdUgz Zlk1UFhRVGFfQjNvZEtaMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE8qIXVRVbQEaqWLHIRGIRvclr4jh3Bk4YKT1R8GVvLamvwFeApY57PC 54wsrI2zawW9qsyy6ImRA25LtWM79xiQOiplOaEO6eNZHuM6pXoyxY3nCPZHo/4f h3AZn8P4iSTmOAZJ8lKibGYA57OpISgRS6FyoORIO4si+ZBAs2zH2E8WgsAZOZD/ swQrYWN2KH9Qo3X2BAZkF1amjXRYGl2s/KrjMBQxOeqXZjsneOeI8naIcngOBjJZ Gw6mDPLTX6zVY967tWHqCimK0UmV4PKuX5qPQe8ldxtfbjZ8PP21mlKcbjoIF0dz m2c+CRKVgXJSv8zb4lGVCDpKnZUqqfw= -----END CERTIFICATE-----Generated at Mon Oct 20 13:50:27 2025 by rpki-client