$ rpki-client -vvf rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft File: 1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft (raw, json) Hash identifier: XcHPnn5NMtIXhTH3d1BOTb7btWvvLPEfQqlrLGdd2zM= Subject key identifier: 66:D6:5C:B5:02:30:3A:90:D3:9B:29:F4:F3:44:16:57:28:F2:9A:9F Authority key identifier: D4:B1:DD:3E:B1:A0:6F:A2:62:AB:6C:5E:BF:4A:F5:36:71:AC:D2:F4 Certificate issuer: /CN=A91311BC/serialNumber=D4B1DD3EB1A06FA262AB6C5EBF4AF53671ACD2F4 Certificate serial: 0115 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft Manifest number: 0111 Signing time: Sun 19 Oct 2025 07:49:18 +0000 Manifest this update: Sun 19 Oct 2025 07:49:18 +0000 Manifest next update: Sun 26 Oct 2025 07:49:18 +0000 Files and hashes: 1: 1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl (hash: 8snVI4Kl8cgF+7fq23O2sW6lDOkoA5nV6DfSS453OSk=) 2: 4B0C31680FA511EFA3249B35C4F9AE02.roa (hash: xyAm+OptmLWgEZqD9AH33MZxMqQhEFXVgaoDCMDjmoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:49:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91311BC, serialNumber=D4B1DD3EB1A06FA262AB6C5EBF4AF53671ACD2F4 Validity Not Before: Oct 19 07:49:18 2025 GMT Not After : Oct 26 07:49:18 2025 GMT Subject: CN=68f497fe-4de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1b:84:96:91:45:ec:96:d5:98:86:0a:bb:16: 2c:79:14:74:6b:99:42:57:01:c5:bf:e3:4c:1c:9b: 40:b0:1b:ae:fd:2b:12:01:12:00:bc:36:36:97:46: 61:b3:61:d4:31:fb:68:ff:42:c8:fe:53:6d:d2:7d: 6d:d1:d3:39:5a:8d:ae:cf:f1:ae:34:d2:a3:a0:f7: 18:44:a1:67:02:8b:bd:7e:0d:67:90:8f:69:13:15: 1d:86:a6:ba:32:98:06:0f:01:a4:55:72:5d:29:9e: f1:95:10:06:52:c7:a0:1d:40:8d:6e:fb:77:19:73: fe:4a:41:82:f6:c8:56:83:c1:d5:7d:c6:a9:50:d3: 88:20:9e:03:55:ec:69:d3:52:b7:7b:85:4b:14:2b: c9:85:93:f8:5a:99:38:be:19:6a:9f:dc:d7:18:d6: ed:f6:29:3f:e1:08:5b:76:69:a9:a4:1d:dd:44:db: f9:6b:55:75:3f:50:7e:ad:92:c9:48:86:e4:fc:73: e0:60:57:9e:5c:40:5a:bc:38:a8:a4:18:af:ca:4c: 21:5d:87:73:ce:1f:22:02:2f:67:59:79:5e:6b:32: e7:dd:d4:82:a9:e1:8d:7d:79:b5:3e:b2:53:f5:a0: 6e:3f:43:6d:97:d3:b0:63:f4:33:ba:6f:0e:87:26: 8d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D6:5C:B5:02:30:3A:90:D3:9B:29:F4:F3:44:16:57:28:F2:9A:9F X509v3 Authority Key Identifier: keyid:D4:B1:DD:3E:B1:A0:6F:A2:62:AB:6C:5E:BF:4A:F5:36:71:AC:D2:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:fd:21:fd:86:4a:f2:74:82:8a:08:c4:ce:c2:6a:61:a4:4e: 7d:e4:41:c9:2b:39:b1:bd:07:ab:c8:d0:ba:10:f8:b2:c3:39: 57:87:44:2e:2f:60:93:ad:4d:a2:58:bf:47:d6:3b:a8:05:66: 79:d7:6a:1f:ab:fe:72:98:b5:24:ec:e2:d4:2f:fc:0b:01:bb: f7:1c:7d:a9:9f:71:a8:fb:fc:f7:59:a4:c9:3a:ee:4e:79:2f: 43:67:d7:c9:b4:cb:5f:fe:8d:66:c3:a9:47:dd:bc:f4:d9:b9: 0a:ac:8d:a4:83:bf:4b:37:89:11:9b:81:94:a7:e5:47:21:b2: aa:0b:53:f4:38:6a:21:10:db:85:c0:36:53:7d:11:30:db:a0: 2b:ae:e0:e4:5a:5d:19:b4:5c:3d:6d:3e:ea:64:da:0c:3b:e0: 16:61:90:5f:5c:a3:00:4c:fa:ae:b1:f1:4d:fd:85:06:1f:14: e0:e3:3b:2f:3b:d6:fc:82:b2:6a:54:f5:17:8e:ed:8c:0b:17: f3:f6:3d:fb:e5:38:c2:a1:55:94:a0:fb:5c:46:61:ff:f0:bb: d0:b5:ee:dc:e9:f5:a7:dc:69:1a:6a:cc:bd:d7:06:fa:72:9c: 22:5f:1d:6e:76:a1:0e:b1:a7:1c:27:07:fb:a3:c2:bd:ce:24: d8:a0:c0:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzExQkMxMTAvBgNVBAUTKEQ0QjFERDNFQjFBMDZGQTI2MkFCNkM1RUJGNEFGNTM2 NzFBQ0QyRjQwHhcNMjUxMDE5MDc0OTE4WhcNMjUxMDI2MDc0OTE4WjAYMRYwFAYD VQQDEw02OGY0OTdmZS00ZGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArhuElpFF7JbVmIYKuxYseRR0a5lCVwHFv+NMHJtAsBuu/SsSARIAvDY2l0Zh s2HUMfto/0LI/lNt0n1t0dM5Wo2uz/GuNNKjoPcYRKFnAou9fg1nkI9pExUdhqa6 MpgGDwGkVXJdKZ7xlRAGUsegHUCNbvt3GXP+SkGC9shWg8HVfcapUNOIIJ4DVexp 01K3e4VLFCvJhZP4Wpk4vhlqn9zXGNbt9ik/4QhbdmmppB3dRNv5a1V1P1B+rZLJ SIbk/HPgYFeeXEBavDiopBivykwhXYdzzh8iAi9nWXleazLn3dSCqeGNfXm1PrJT 9aBuP0Ntl9OwY/Qzum8OhyaNwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGbWXLUC MDqQ05sp9PNEFlco8pqfMB8GA1UdIwQYMBaAFNSx3T6xoG+iYqtsXr9K9TZxrNL0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTFCQy8wNUVFQUJGQzBG QTQxMUVGQTNBQThEMzNDNEY5QUUwMi8xTEhkUHJHZ2I2SmlxMnhldjByMU5uR3Mw dlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFMSGRQckdnYjZKaXEyeGV2MHIxTm5HczB2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTFCQy8wNUVFQUJGQzBGQTQxMUVGQTNBQThEMzNDNEY5QUUwMi8xTEhkUHJHZ2I2 SmlxMnhldjByMU5uR3MwdlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB/SH9hkrydIKKCMTOwmphpE595EHJKzmxvQeryNC6EPiywzlXh0Qu L2CTrU2iWL9H1juoBWZ512ofq/5ymLUk7OLUL/wLAbv3HH2pn3Go+/z3WaTJOu5O eS9DZ9fJtMtf/o1mw6lH3bz02bkKrI2kg79LN4kRm4GUp+VHIbKqC1P0OGohENuF wDZTfREw26ArruDkWl0ZtFw9bT7qZNoMO+AWYZBfXKMATPqusfFN/YUGHxTg4zsv O9b8grJqVPUXju2MCxfz9j375TjCoVWUoPtcRmH/8LvQte7c6fWn3Gkaasy91wb6 cpwiXx1udqEOsaccJwf7o8K9ziTYoMBa -----END CERTIFICATE-----Generated at Mon Oct 20 21:36:04 2025 by rpki-client