$ rpki-client -vvf rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft File: 1cBKCsLVKt_nBVZHjcsOHYHtENo.mft (raw, json) Hash identifier: lg2Wgg2LJcWRCDLyhwcBuLe0kLrrQLl9LkGWfybJGLQ= Subject key identifier: 48:F9:01:36:25:48:4F:04:CC:0E:0F:10:2F:DE:27:91:BA:51:01:64 Authority key identifier: D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA Certificate issuer: /CN=A91284EC/serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA Certificate serial: 04C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft Manifest number: 04BB Signing time: Sun 19 Oct 2025 01:43:39 +0000 Manifest this update: Sun 19 Oct 2025 01:43:38 +0000 Manifest next update: Sun 26 Oct 2025 01:43:38 +0000 Files and hashes: 1: 1cBKCsLVKt_nBVZHjcsOHYHtENo.crl (hash: QfVFuyw3EA/ASJ9jijek2oq22kWqMeVCr3q7kosgNCM=) 2: F11B4C14E40111ECBD78E571C4F9AE02.roa (hash: viYY8r9Z3djQTP7Mtv5p3ALckTBTe0eKvVy/mChOa9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1218 (0x4c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91284EC, serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA Validity Not Before: Oct 19 01:43:38 2025 GMT Not After : Oct 26 01:43:38 2025 GMT Subject: CN=68f4424b-a65b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c1:d4:3c:4c:89:90:c4:ec:9d:34:50:3b:7f: b9:28:e4:d9:ea:bf:57:de:9d:b1:f4:0d:51:b5:f7: 0b:25:47:d6:7e:fd:6b:bd:df:f1:e9:7f:68:bc:f8: ed:58:41:13:90:98:1c:ee:da:0a:ab:80:2c:b8:cd: 3a:79:34:d6:21:e3:57:43:4a:ea:39:13:32:15:cf: 67:4e:4e:28:ee:9b:a5:45:ae:71:6c:7e:3d:95:fc: 0a:fa:1a:b0:5a:16:52:d0:72:a3:fe:cf:ab:b9:8b: f0:c3:30:48:4d:cb:cb:37:e2:ef:98:3d:df:cd:69: 4d:00:fb:0a:80:41:f1:5c:f7:df:35:5f:e3:f8:d3: 00:f9:3b:04:6c:c5:e5:ce:a1:55:51:fb:16:5d:93: 81:b5:53:cc:26:25:74:5a:2f:70:b2:79:c8:ef:34: 66:09:cd:7d:17:dc:0f:e9:ef:ea:c7:3d:8b:e9:5d: 98:ee:1c:e4:6f:73:f9:79:53:a3:d6:36:24:0f:b8: b6:55:e8:ac:5f:79:79:c5:7b:58:67:f4:f7:d7:10: 15:a2:73:3f:63:d4:c7:34:b9:ea:f7:7e:b5:ec:ee: d9:65:92:7c:01:f5:91:23:86:69:bb:9b:c1:36:ae: 64:55:ac:cb:27:88:34:4f:35:3b:a2:60:41:4a:68: 7a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F9:01:36:25:48:4F:04:CC:0E:0F:10:2F:DE:27:91:BA:51:01:64 X509v3 Authority Key Identifier: keyid:D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:74:f2:7d:fd:02:b5:cd:76:b8:e9:57:fb:24:17:13:3a:30: ee:8b:78:c7:78:49:d3:46:c0:d9:76:36:65:29:01:85:f4:73: 4b:1a:00:80:eb:37:3f:29:2f:0e:5b:35:94:36:dc:79:45:ce: 31:bb:4d:5b:d9:99:11:bf:fe:7b:26:bc:50:19:23:61:f2:eb: 14:b5:fb:49:be:03:8f:f2:7d:d0:27:c7:24:5d:0d:4e:5d:cb: 5f:70:6a:48:da:87:b3:f0:c4:bb:fb:4a:9a:64:f2:e5:ae:d3: 88:dd:b7:d6:3d:eb:5e:d7:33:e3:d2:ef:fd:4f:c8:4d:f9:a2: 38:7a:c9:7b:e1:e7:88:2d:55:95:27:06:31:c2:ad:38:c8:41: 02:c3:4d:09:90:ea:83:48:1c:2e:58:ea:93:cc:45:9c:55:22: f7:bb:59:53:9c:8b:af:c8:b3:74:37:ac:66:4f:c9:cd:3a:42: f0:e7:4d:e7:f5:67:55:f3:cc:aa:90:c4:f6:7f:19:b6:7a:b1: 43:30:6d:9d:be:91:7b:f5:b4:0c:bb:24:33:93:ff:da:14:d2: 30:d2:63:23:41:78:d6:27:b3:b3:a9:a4:40:54:c7:0e:de:2e: ac:ea:fc:a1:e9:22:cf:bf:2e:5d:48:5b:8f:05:46:5b:5c:29: a0:e5:eb:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg0RUMxMTAvBgNVBAUTKEQ1QzA0QTBBQzJENTJBREZFNzA1NTY0NzhEQ0IwRTFE ODFFRDEwREEwHhcNMjUxMDE5MDE0MzM4WhcNMjUxMDI2MDE0MzM4WjAYMRYwFAYD VQQDEw02OGY0NDI0Yi1hNjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMHUPEyJkMTsnTRQO3+5KOTZ6r9X3p2x9A1RtfcLJUfWfv1rvd/x6X9ovPjt WEETkJgc7toKq4AsuM06eTTWIeNXQ0rqORMyFc9nTk4o7pulRa5xbH49lfwK+hqw WhZS0HKj/s+ruYvwwzBITcvLN+LvmD3fzWlNAPsKgEHxXPffNV/j+NMA+TsEbMXl zqFVUfsWXZOBtVPMJiV0Wi9wsnnI7zRmCc19F9wP6e/qxz2L6V2Y7hzkb3P5eVOj 1jYkD7i2VeisX3l5xXtYZ/T31xAVonM/Y9THNLnq93617O7ZZZJ8AfWRI4Zpu5vB Nq5kVazLJ4g0TzU7omBBSmh6AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEj5ATYl SE8EzA4PEC/eJ5G6UQFkMB8GA1UdIwQYMBaAFNXASgrC1Srf5wVWR43LDh2B7RDa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODRFQy9FQkY2MDFGQzQ4 Q0YxMUVDQTY2NkIwM0VDNEY5QUUwMi8xY0JLQ3NMVkt0X25CVlpIamNzT0hZSHRF Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjQktDc0xWS3RfbkJWWkhqY3NPSFlIdEVOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODRFQy9FQkY2MDFGQzQ4Q0YxMUVDQTY2NkIwM0VDNEY5QUUwMi8xY0JLQ3NMVkt0 X25CVlpIamNzT0hZSHRFTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbdPJ9/QK1zXa46Vf7JBcTOjDui3jHeEnTRsDZdjZlKQGF9HNLGgCA 6zc/KS8OWzWUNtx5Rc4xu01b2ZkRv/57JrxQGSNh8usUtftJvgOP8n3QJ8ckXQ1O XctfcGpI2oez8MS7+0qaZPLlrtOI3bfWPete1zPj0u/9T8hN+aI4esl74eeILVWV JwYxwq04yEECw00JkOqDSBwuWOqTzEWcVSL3u1lTnIuvyLN0N6xmT8nNOkLw503n 9WdV88yqkMT2fxm2erFDMG2dvpF79bQMuyQzk//aFNIw0mMjQXjWJ7OzqaRAVMcO 3i6s6vyh6SLPvy5dSFuPBUZbXCmg5ess -----END CERTIFICATE-----Generated at Mon Oct 20 14:38:46 2025 by rpki-client