$ rpki-client -vvf rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft File: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft (raw, json) Hash identifier: dRZsAdQHA/cwAcTCOBiK/qPDgQUOb+l2hiJJMuvo64E= Subject key identifier: CB:52:B2:18:6A:88:57:31:70:C7:BE:04:CF:7C:FC:31:C5:04:9C:86 Authority key identifier: D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52 Certificate issuer: /CN=A911C2E1/serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52 Certificate serial: 0195 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft Manifest number: 0192 Signing time: Sun 19 Oct 2025 06:01:47 +0000 Manifest this update: Sun 19 Oct 2025 06:01:47 +0000 Manifest next update: Sun 26 Oct 2025 06:01:47 +0000 Files and hashes: 1: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl (hash: NBxig/LkMbE2sK39v83a6Nt1y+PSyA4tHQtWzUhrC18=) 2: 3FE30722468C11EE9462EC3AC4F9AE02.roa (hash: 5pLKoX5v/Omt/7dfktvLKHUBbKLWsrZdltrbS963Wno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 405 (0x195) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C2E1, serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52 Validity Not Before: Oct 19 06:01:47 2025 GMT Not After : Oct 26 06:01:47 2025 GMT Subject: CN=68f47ecb-e915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5f:45:eb:79:a7:36:3f:1f:d1:f3:54:85:d1: 67:07:a8:d0:56:ad:bc:eb:0b:1e:00:87:bb:67:1e: 07:c0:94:bc:2b:88:4e:8b:f2:80:7e:e3:ba:f3:c9: d2:8d:89:e6:72:92:f7:79:0b:a2:32:24:e2:f0:29: 03:d2:a1:c9:22:3e:88:2f:3b:17:c1:06:70:84:54: a7:34:2c:34:04:77:1f:8d:17:3b:8e:fa:e9:96:22: ae:8b:d6:d9:a2:1f:10:59:e8:e0:7a:1e:5b:be:75: 4f:5d:8c:c8:ee:5a:ea:1f:3f:39:9e:63:23:51:a9: f9:79:fd:f7:62:69:27:04:3c:a0:d1:a1:23:24:d4: 09:96:12:f5:51:6b:a0:58:bb:9c:7b:57:c5:7e:6c: b7:2c:5c:10:e2:3b:61:02:6f:4e:1a:5e:c8:0b:c1: 5e:9b:b7:96:12:13:ee:5b:d9:fc:da:63:13:ed:80: ef:20:b8:f5:91:6e:c5:d2:83:96:0a:af:ba:c2:33: cc:05:58:1a:d5:c0:13:8a:63:b5:37:16:f1:a0:48: 16:54:a2:a9:f6:03:2e:41:62:75:e2:94:3d:6b:c5: b2:1a:78:03:1e:c3:d8:55:eb:64:ca:d6:82:b8:af: 98:68:0e:3a:d2:6e:c0:e2:30:fc:14:3d:2c:d9:51: b1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:52:B2:18:6A:88:57:31:70:C7:BE:04:CF:7C:FC:31:C5:04:9C:86 X509v3 Authority Key Identifier: keyid:D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:5d:97:1f:23:c0:82:bd:98:90:e9:0f:bb:fa:fb:09:f1:42: 92:f3:c5:73:7b:61:d0:d2:39:65:47:0f:06:9e:c2:60:b1:f9: ad:2d:8f:d3:79:46:4b:7d:85:d0:79:c3:f6:e7:fb:2c:bb:13: 26:36:57:94:a9:ba:8e:3d:20:0d:5b:ec:c4:d6:f1:80:99:0e: 4f:d8:be:a5:09:ec:c5:86:64:bf:50:7e:7e:5e:9c:0f:7d:50: 48:8b:3c:02:76:3f:7b:bc:5d:a1:82:39:75:fe:40:71:6c:28: 7f:7f:c9:32:d1:4b:d2:a3:41:a2:50:28:d5:a0:27:80:9e:fa: 5f:d9:f6:1d:dc:eb:4a:92:67:b3:fc:28:a4:c1:5d:ab:66:52: 39:06:bd:7c:15:71:ab:d8:39:56:8c:bf:99:4e:1c:4c:60:d8: 9a:52:43:a2:70:5b:3b:02:4b:b4:96:95:6f:5a:a1:27:5a:3c: f6:73:88:89:f9:6a:1a:73:97:93:5a:da:05:9c:14:a5:cb:4b: ff:d8:f0:20:ec:8a:0c:7b:13:c4:be:a3:a7:d5:00:82:82:11: 74:cc:f2:fd:fd:86:22:ad:29:cd:3a:91:22:41:f8:14:41:da: 57:90:56:d6:7b:58:dc:2f:f6:05:09:f1:b5:fe:dc:ad:5c:19: c6:88:27:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyRTExMTAvBgNVBAUTKEQ0QkM3OUE0QjE1MzdGRUIwQUQ5MkVCM0YwQTdDQUYz NDUzQThGNTIwHhcNMjUxMDE5MDYwMTQ3WhcNMjUxMDI2MDYwMTQ3WjAYMRYwFAYD VQQDEw02OGY0N2VjYi1lOTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2l9F63mnNj8f0fNUhdFnB6jQVq286wseAIe7Zx4HwJS8K4hOi/KAfuO688nS jYnmcpL3eQuiMiTi8CkD0qHJIj6ILzsXwQZwhFSnNCw0BHcfjRc7jvrpliKui9bZ oh8QWejgeh5bvnVPXYzI7lrqHz85nmMjUan5ef33YmknBDyg0aEjJNQJlhL1UWug WLuce1fFfmy3LFwQ4jthAm9OGl7IC8Fem7eWEhPuW9n82mMT7YDvILj1kW7F0oOW Cq+6wjPMBVga1cATimO1NxbxoEgWVKKp9gMuQWJ14pQ9a8WyGngDHsPYVetkytaC uK+YaA460m7A4jD8FD0s2VGxiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMtSshhq iFcxcMe+BM98/DHFBJyGMB8GA1UdIwQYMBaAFNS8eaSxU3/rCtkus/CnyvNFOo9S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzJFMS85MDQ3RUYwNDQ2 OEExMUVFODc5RUI1MzVDNEY5QUUwMi8xTHg1cExGVGYtc0syUzZ6OEtmSzgwVTZq MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFMeDVwTEZUZi1zSzJTNno4S2ZLODBVNmoxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzJFMS85MDQ3RUYwNDQ2OEExMUVFODc5RUI1MzVDNEY5QUUwMi8xTHg1cExGVGYt c0syUzZ6OEtmSzgwVTZqMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkXZcfI8CCvZiQ6Q+7+vsJ8UKS88Vze2HQ0jllRw8GnsJgsfmtLY/T eUZLfYXQecP25/ssuxMmNleUqbqOPSANW+zE1vGAmQ5P2L6lCezFhmS/UH5+XpwP fVBIizwCdj97vF2hgjl1/kBxbCh/f8ky0UvSo0GiUCjVoCeAnvpf2fYd3OtKkmez /CikwV2rZlI5Br18FXGr2DlWjL+ZThxMYNiaUkOicFs7Aku0lpVvWqEnWjz2c4iJ +Woac5eTWtoFnBSly0v/2PAg7IoMexPEvqOn1QCCghF0zPL9/YYirSnNOpEiQfgU QdpXkFbWe1jcL/YFCfG1/tytXBnGiCcs -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:57 2025 by rpki-client