$ rpki-client -vvf rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft File: 1cNfp3myIZlgnD6gpTHFoNMyrQE.mft (raw, json) Hash identifier: laKoBxa4IzJpL+dvPmH8IJ71wRuequxlwBJrV00phII= Subject key identifier: 6A:87:B3:BE:7A:87:C4:31:99:14:56:9F:12:F5:C6:14:AE:82:C9:B9 Authority key identifier: D5:C3:5F:A7:79:B2:21:99:60:9C:3E:A0:A5:31:C5:A0:D3:32:AD:01 Certificate issuer: /CN=A912A8BC/serialNumber=D5C35FA779B22199609C3EA0A531C5A0D332AD01 Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft Manifest number: 01D1 Signing time: Sun 19 Oct 2025 05:16:25 +0000 Manifest this update: Sun 19 Oct 2025 05:16:25 +0000 Manifest next update: Sun 26 Oct 2025 05:16:25 +0000 Files and hashes: 1: 1cNfp3myIZlgnD6gpTHFoNMyrQE.crl (hash: NlGmzr91DMU8o5mtkYqx+yer1SNjZKeGHotrL3cV+cM=) 2: 4D962E8AE65111ED90E5833EC4F9AE02.roa (hash: 3SQV1F9slNIO5M7UqEAQZkXcxMO9bvgWNAs/r+smThc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.crl rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:16:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A8BC, serialNumber=D5C35FA779B22199609C3EA0A531C5A0D332AD01 Validity Not Before: Oct 19 05:16:25 2025 GMT Not After : Oct 26 05:16:25 2025 GMT Subject: CN=68f47429-0461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3f:db:10:2e:cd:b1:43:98:70:1c:8e:58:a1: 73:22:1d:10:ca:06:d2:6f:6e:00:e7:5c:11:fb:85: d3:ed:03:d6:00:89:df:b2:f5:09:8f:11:aa:ef:9b: 0d:6f:ea:77:6b:fc:e9:a8:4d:44:ba:a1:75:d9:06: 89:1c:f3:01:57:d7:03:11:1e:2a:56:67:e6:a7:21: b4:70:bd:59:c5:5f:ea:06:d0:2e:3d:e7:91:6e:80: ad:14:4f:3c:10:eb:97:35:93:68:15:e6:c4:cc:12: 9f:2e:91:74:40:c4:94:11:0f:eb:73:b1:71:1a:71: 93:a1:03:17:24:8d:b5:8b:93:5c:2b:84:71:f9:54: 57:5d:0e:5f:5e:5e:c7:8f:3b:65:8a:e4:83:a7:ea: 9d:ec:04:27:ba:a8:53:e8:f7:f9:2e:70:03:71:66: 54:5c:b6:79:bf:70:da:35:8f:bc:28:0f:6a:d7:52: 98:05:b0:df:1f:6f:f8:f5:3e:70:c4:a9:d0:f5:ee: aa:76:08:a9:15:d9:3a:1c:06:a8:4d:e9:fa:69:f1: 4f:0a:d1:70:76:e3:b7:36:09:89:41:fb:34:c2:ea: 6a:d1:64:2e:2f:a1:8a:2a:93:10:4d:28:c5:b3:6e: 8b:43:73:06:3f:6c:42:c4:cd:91:ed:4f:2d:a5:02: ff:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:87:B3:BE:7A:87:C4:31:99:14:56:9F:12:F5:C6:14:AE:82:C9:B9 X509v3 Authority Key Identifier: keyid:D5:C3:5F:A7:79:B2:21:99:60:9C:3E:A0:A5:31:C5:A0:D3:32:AD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:47:89:fd:58:5a:32:54:e5:3a:05:33:e0:43:43:55:71:ba: 79:79:a4:d0:e2:c4:ea:17:01:87:b7:83:c7:da:93:aa:18:ea: 73:ba:ad:54:c4:ae:af:5d:ed:02:60:d1:db:a8:69:14:bc:a4: 24:97:b3:34:d5:5c:87:f1:08:31:db:0a:16:d7:8e:ad:b6:f5: c8:f8:84:d7:fe:02:ce:26:3c:df:fc:fd:81:af:3d:33:7e:74: ff:af:1f:99:96:1e:85:64:38:13:d3:98:d8:20:23:33:d7:c4: 30:b9:ff:29:c7:37:e8:03:a5:3d:93:6e:6a:27:05:24:92:80: cf:a9:c8:d8:82:7d:4c:ff:c1:6a:46:bb:51:c9:d2:ba:6e:a5: 34:d1:df:75:08:e2:e2:66:bb:ee:9f:81:a4:a9:ee:ba:e6:d2: ef:81:85:fa:db:43:dc:d1:82:31:00:e6:2e:10:e1:3d:b5:77: 76:50:78:27:76:2d:77:ce:63:ba:96:35:82:31:0f:0e:33:d0: 7e:c7:43:55:8b:b1:62:60:23:55:ea:3c:c7:81:ff:8f:6b:2a: 14:ac:ef:ae:9f:a0:47:93:1d:9a:18:34:88:73:c8:96:58:da: f0:68:6e:e6:1b:d2:81:ef:70:b5:02:ee:b7:d6:42:0d:86:33: 10:77:90:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE4QkMxMTAvBgNVBAUTKEQ1QzM1RkE3NzlCMjIxOTk2MDlDM0VBMEE1MzFDNUEw RDMzMkFEMDEwHhcNMjUxMDE5MDUxNjI1WhcNMjUxMDI2MDUxNjI1WjAYMRYwFAYD VQQDEw02OGY0NzQyOS0wNDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyz/bEC7NsUOYcByOWKFzIh0QygbSb24A51wR+4XT7QPWAInfsvUJjxGq75sN b+p3a/zpqE1EuqF12QaJHPMBV9cDER4qVmfmpyG0cL1ZxV/qBtAuPeeRboCtFE88 EOuXNZNoFebEzBKfLpF0QMSUEQ/rc7FxGnGToQMXJI21i5NcK4Rx+VRXXQ5fXl7H jztliuSDp+qd7AQnuqhT6Pf5LnADcWZUXLZ5v3DaNY+8KA9q11KYBbDfH2/49T5w xKnQ9e6qdgipFdk6HAaoTen6afFPCtFwduO3NgmJQfs0wupq0WQuL6GKKpMQTSjF s26LQ3MGP2xCxM2R7U8tpQL/jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGqHs756 h8QxmRRWnxL1xhSugsm5MB8GA1UdIwQYMBaAFNXDX6d5siGZYJw+oKUxxaDTMq0B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQThCQy8wNTRBNEM1MEU2 NEQxMUVEQjNGODE3MzdDNEY5QUUwMi8xY05mcDNteUlabGduRDZncFRIRm9OTXly UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjTmZwM215SVpsZ25ENmdwVEhGb05NeXJRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QThCQy8wNTRBNEM1MEU2NEQxMUVEQjNGODE3MzdDNEY5QUUwMi8xY05mcDNteUla bGduRDZncFRIRm9OTXlyUUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLR4n9WFoyVOU6BTPgQ0NVcbp5eaTQ4sTqFwGHt4PH2pOqGOpzuq1U xK6vXe0CYNHbqGkUvKQkl7M01VyH8Qgx2woW146ttvXI+ITX/gLOJjzf/P2Brz0z fnT/rx+Zlh6FZDgT05jYICMz18Qwuf8pxzfoA6U9k25qJwUkkoDPqcjYgn1M/8Fq RrtRydK6bqU00d91COLiZrvun4Gkqe665tLvgYX620Pc0YIxAOYuEOE9tXd2UHgn di13zmO6ljWCMQ8OM9B+x0NVi7FiYCNV6jzHgf+PayoUrO+un6BHkx2aGDSIc8iW WNrwaG7mG9KB73C1Au631kINhjMQd5CT -----END CERTIFICATE-----Generated at Mon Oct 20 10:16:21 2025 by rpki-client