$ rpki-client -vvf rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft File: c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft (raw, json) Hash identifier: 68EvA2e5Iae5fJGI4pwqGpiEd0hsWWLMrg0TJqDReQ4= Subject key identifier: 25:FE:91:9C:69:7F:32:56:2B:3E:CE:4E:B0:E2:1E:2E:EB:05:3A:F8 Authority key identifier: 73:FB:B5:8F:55:71:F3:F4:C6:2A:63:FD:F5:AF:EF:9C:B7:0E:74:03 Certificate issuer: /CN=A911C3BB/serialNumber=73FBB58F5571F3F4C62A63FDF5AFEF9CB70E7403 Certificate serial: 01FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft Manifest number: 01F7 Signing time: Sun 19 Oct 2025 04:49:06 +0000 Manifest this update: Sun 19 Oct 2025 04:49:05 +0000 Manifest next update: Sun 26 Oct 2025 04:49:05 +0000 Files and hashes: 1: c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl (hash: nFXACMdWjU8rwO2B3eANuRSB31RTGyKT1uJFVy67cjM=) 2: CB2788CAAB4C11EDB3DC7336C4F9AE02.roa (hash: 5/W5EqvBYrwaBbNXisgVsa/BWjLPbFWwbLiAWCjCMGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:49:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 507 (0x1fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C3BB, serialNumber=73FBB58F5571F3F4C62A63FDF5AFEF9CB70E7403 Validity Not Before: Oct 19 04:49:05 2025 GMT Not After : Oct 26 04:49:05 2025 GMT Subject: CN=68f46dc1-93d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:de:c9:91:65:73:d0:de:4a:48:94:c7:c0:54: 5b:79:1e:60:55:b1:fc:55:f8:1f:2a:db:a8:7d:f7: 4c:41:4d:54:c7:1f:9b:00:8a:b9:84:e7:72:e7:7d: ef:12:09:89:6c:78:e6:a4:42:d7:8a:44:c7:7d:c4: e2:80:53:45:61:89:27:78:81:91:92:cc:1f:8f:e9: 7e:4a:00:46:b6:3f:56:db:47:55:2e:21:aa:bb:52: 59:b4:d6:98:6c:e2:b8:7d:1d:24:3e:07:35:e5:56: 42:14:a2:37:ce:21:de:2b:83:75:b7:ae:16:21:57: 95:fe:82:1a:61:d5:22:4e:05:ed:b0:4c:4c:ad:9f: 9c:f7:21:6a:8d:2d:24:d3:08:8a:4f:08:37:75:a3: 9c:a2:5d:d8:f9:d8:d7:72:4a:2b:82:2e:a4:91:98: b5:9c:2b:04:5d:b9:9b:d8:cd:e8:83:58:6c:49:cf: 19:78:a1:26:12:d9:39:47:87:80:59:41:e3:90:87: a1:f3:a0:f4:1b:ca:b0:d0:b5:75:bb:50:2b:2a:71: 8f:49:87:5f:14:15:e1:71:6e:01:44:b1:f1:e3:f3: 0f:d4:92:a8:c3:1c:a3:a6:46:8f:3d:ff:32:92:50: 4c:b3:75:72:16:eb:29:79:c5:bc:6a:3e:e4:10:9b: f1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:FE:91:9C:69:7F:32:56:2B:3E:CE:4E:B0:E2:1E:2E:EB:05:3A:F8 X509v3 Authority Key Identifier: keyid:73:FB:B5:8F:55:71:F3:F4:C6:2A:63:FD:F5:AF:EF:9C:B7:0E:74:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:15:8c:f5:6a:31:f4:0e:00:25:61:77:f1:50:b3:2e:ff:04: 99:b0:d8:f4:5c:46:ce:d0:5f:3c:9c:a8:75:e8:c2:b6:ec:99: 86:2d:b1:cf:39:77:21:3f:8e:9f:f3:6a:7a:5f:8d:9c:7d:9e: c0:40:d9:d1:fe:0d:ab:3c:af:eb:79:05:e8:63:31:1b:48:9a: 41:ac:16:85:d4:66:5d:81:5a:84:68:a1:db:8f:0b:d5:95:2a: 1f:f3:1e:8d:ed:93:4d:bd:17:72:19:c8:a7:03:7d:15:7e:a6: 02:14:fa:c9:12:71:72:f3:1d:42:18:be:90:0f:64:81:51:ac: d1:18:22:ce:7e:74:5b:ec:56:1f:55:5b:21:ed:e1:b9:99:73: 56:63:5e:cc:e8:4d:2e:3a:22:5c:68:48:b1:da:cb:8a:ad:51: 09:d5:49:a8:a0:aa:95:d9:ea:6c:31:39:f8:b2:e7:77:2d:60: 0a:d8:1b:4c:a7:85:1c:db:63:68:5b:b0:03:47:5b:c9:68:63: d2:03:fb:22:a4:1c:ff:be:3b:b9:f1:d1:09:4c:fa:10:e8:49: ad:7b:63:1a:a6:d6:66:15:ec:e2:5a:68:3f:d6:f6:26:c0:d1: 07:69:0b:e0:9d:35:be:69:ae:04:01:5f:f0:b4:3f:45:2b:71: a3:4f:1a:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMzQkIxMTAvBgNVBAUTKDczRkJCNThGNTU3MUYzRjRDNjJBNjNGREY1QUZFRjlD QjcwRTc0MDMwHhcNMjUxMDE5MDQ0OTA1WhcNMjUxMDI2MDQ0OTA1WjAYMRYwFAYD VQQDEw02OGY0NmRjMS05M2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwN7JkWVz0N5KSJTHwFRbeR5gVbH8VfgfKtuoffdMQU1Uxx+bAIq5hOdy533v EgmJbHjmpELXikTHfcTigFNFYYkneIGRkswfj+l+SgBGtj9W20dVLiGqu1JZtNaY bOK4fR0kPgc15VZCFKI3ziHeK4N1t64WIVeV/oIaYdUiTgXtsExMrZ+c9yFqjS0k 0wiKTwg3daOcol3Y+djXckorgi6kkZi1nCsEXbmb2M3og1hsSc8ZeKEmEtk5R4eA WUHjkIeh86D0G8qw0LV1u1ArKnGPSYdfFBXhcW4BRLHx4/MP1JKowxyjpkaPPf8y klBMs3VyFuspecW8aj7kEJvxuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCX+kZxp fzJWKz7OTrDiHi7rBTr4MB8GA1UdIwQYMBaAFHP7tY9VcfP0xipj/fWv75y3DnQD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzNCQi9DOTA4ODc5QUFC NDkxMUVEOUZCNDBCMzVDNEY5QUUwMi9jX3UxajFWeDhfVEdLbVA5OWFfdm5MY09k QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NfdTFqMVZ4OF9UR0ttUDk5YV92bkxjT2RBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzNCQi9DOTA4ODc5QUFCNDkxMUVEOUZCNDBCMzVDNEY5QUUwMi9jX3UxajFWeDhf VEdLbVA5OWFfdm5MY09kQU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmFYz1ajH0DgAlYXfxULMu/wSZsNj0XEbO0F88nKh16MK27JmGLbHP OXchP46f82p6X42cfZ7AQNnR/g2rPK/reQXoYzEbSJpBrBaF1GZdgVqEaKHbjwvV lSof8x6N7ZNNvRdyGcinA30VfqYCFPrJEnFy8x1CGL6QD2SBUazRGCLOfnRb7FYf VVsh7eG5mXNWY17M6E0uOiJcaEix2suKrVEJ1UmooKqV2epsMTn4sud3LWAK2BtM p4Uc22NoW7ADR1vJaGPSA/sipBz/vju58dEJTPoQ6Emte2MaptZmFeziWmg/1vYm wNEHaQvgnTW+aa4EAV/wtD9FK3GjTxof -----END CERTIFICATE-----Generated at Mon Oct 20 17:43:48 2025 by rpki-client