$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft File: F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft (raw, json) Hash identifier: SkvBrBZkS90eb9DMk/V5P11lQ5LIj3xOGzNNp7OrOQI= Subject key identifier: 24:D7:87:6C:36:E9:CE:95:E5:8C:86:BD:81:7D:BE:01:1F:1F:84:18 Authority key identifier: 17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3 Certificate issuer: /CN=A9148C7B/serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3 Certificate serial: 3563 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft Manifest number: 351C Signing time: Sat 18 Oct 2025 14:50:46 +0000 Manifest this update: Sat 18 Oct 2025 14:50:45 +0000 Manifest next update: Sat 25 Oct 2025 14:50:45 +0000 Files and hashes: 1: F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl (hash: b1tbYvPrwYpAtFmlkSR31wnsCYPac1cVazUNgrtviM8=) 2: 0AD382BA3AC211F08E4A722CC4F9AE02.roa (hash: Xmx7r1RGT7f/JoA9c/U1eUxsqAqHU53hlPB4+oTq2f8=) 3: 8F40C09ACCDB11EE9490B979C4F9AE02.roa (hash: sZVhikXu0+BgylCyd4weUDz3omEWpmI+GLV51J/cwuU=) 4: 7165DB28E2C911EF8A1C1514C4F9AE02.roa (hash: q2ExykZAmfzp0xfcMOWOgSv2/3eS55YeYtvtqyJjJO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:50:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13667 (0x3563) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3 Validity Not Before: Oct 18 14:50:45 2025 GMT Not After : Oct 25 14:50:45 2025 GMT Subject: CN=68f3a946-a9dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e1:5f:4c:8b:08:2d:a7:b9:96:31:64:d1:03: 53:24:d1:cb:13:1c:e3:9d:9d:c4:f2:cd:dc:ec:bd: 45:0e:28:35:4c:58:b2:a3:67:95:04:4b:89:a8:e4: d1:60:bd:46:e7:b9:2c:6a:a2:a9:94:4b:80:2d:80: 32:2a:6c:ee:38:10:ff:a1:32:ca:9d:bc:d1:56:80: a6:e3:9a:54:94:b3:77:b8:12:d1:48:cb:e1:32:1e: db:79:b0:15:51:62:f7:c7:f4:fe:de:8f:30:59:de: 74:82:56:a4:bc:95:8a:2b:87:e1:c1:4b:46:b0:94: 8c:36:1e:2c:76:70:bf:1e:0b:73:56:26:1c:08:69: f6:72:1e:40:73:7a:ee:84:fd:b2:4a:de:15:ca:05: fa:3a:b8:b2:ae:f5:4b:07:3f:98:7a:36:a8:68:58: ec:f7:a2:00:18:f1:0e:bd:f4:86:7f:be:02:b2:3e: 5c:55:b3:a7:7f:3d:a3:e4:e2:63:7a:07:31:1a:63: e3:17:c4:06:a1:3d:74:b7:4b:e8:cc:52:7d:22:35: 3b:fc:d4:ea:a2:38:28:6f:5a:0e:85:8e:6e:33:61: a2:06:9c:18:cf:72:cc:37:af:20:7c:24:6a:7b:d2: 35:55:dc:30:7e:7e:7e:8c:36:dd:e7:cc:db:21:0c: 33:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D7:87:6C:36:E9:CE:95:E5:8C:86:BD:81:7D:BE:01:1F:1F:84:18 X509v3 Authority Key Identifier: keyid:17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:80:5d:2d:02:1e:1b:7a:33:93:a1:b6:ee:8d:4a:0a:d9:d5: d0:9e:33:ae:54:c2:42:c8:6f:a0:72:31:fc:9c:ed:87:51:35: d5:7b:16:04:89:87:1b:0f:96:7f:9e:8d:e4:bb:2e:df:53:3f: 32:ca:26:18:5c:a3:66:f6:c3:54:f1:db:18:95:90:74:0e:d4: fc:3f:63:3b:79:5c:42:0d:ce:fb:48:9c:bf:f3:bc:49:77:be: d7:52:32:c5:9d:c6:89:c4:8f:38:3e:55:5b:e1:e2:73:7e:f2: 10:1f:6c:e2:a8:76:9f:d0:a2:26:93:8a:02:b6:c9:f7:38:54: 34:35:06:6b:aa:0d:21:80:fc:30:78:ce:bc:49:de:1e:56:63: 05:5b:0d:a5:ce:b5:4f:35:9b:60:3a:1a:2d:12:3c:e6:e9:ef: ea:c0:fe:2e:c3:91:33:80:56:bc:6a:6c:f4:c4:f0:c9:3a:bb: c7:ed:ba:44:fd:10:06:45:37:62:30:3d:f1:2e:6a:8c:9c:99: 93:17:35:df:b6:3a:ce:9f:d4:58:8e:e4:7a:75:fe:76:2e:0d: 02:ad:7d:f3:fd:bd:09:da:75:c9:01:19:da:fd:d1:1c:32:42: c9:7b:2e:cc:74:d4:db:d3:24:25:fa:4d:b6:b6:13:08:c0:53: c7:a4:22:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDE3NTc3RjFFOTJFQjMzQjJDREU2RTQ4OUMwQjlBOTlB MkUwMkZEQTMwHhcNMjUxMDE4MTQ1MDQ1WhcNMjUxMDI1MTQ1MDQ1WjAYMRYwFAYD VQQDEw02OGYzYTk0Ni1hOWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAteFfTIsILae5ljFk0QNTJNHLExzjnZ3E8s3c7L1FDig1TFiyo2eVBEuJqOTR YL1G57ksaqKplEuALYAyKmzuOBD/oTLKnbzRVoCm45pUlLN3uBLRSMvhMh7bebAV UWL3x/T+3o8wWd50glakvJWKK4fhwUtGsJSMNh4sdnC/HgtzViYcCGn2ch5Ac3ru hP2ySt4VygX6OriyrvVLBz+YejaoaFjs96IAGPEOvfSGf74Csj5cVbOnfz2j5OJj egcxGmPjF8QGoT10t0vozFJ9IjU7/NTqojgob1oOhY5uM2GiBpwYz3LMN68gfCRq e9I1Vdwwfn5+jDbd58zbIQwzwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTXh2w2 6c6V5YyGvYF9vgEfH4QYMB8GA1UdIwQYMBaAFBdXfx6S6zOyzebkicC5qZouAv2j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi82NzUyMDhBRTFE OTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03TE41dVNKd0xtcG1pNENf YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YxZF9IcExyTTdMTjV1U0p3TG1wbWk0Q19hTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi82NzUyMDhBRTFEOTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03 TE41dVNKd0xtcG1pNENfYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQgF0tAh4bejOTobbujUoK2dXQnjOuVMJCyG+gcjH8nO2HUTXVexYE iYcbD5Z/no3kuy7fUz8yyiYYXKNm9sNU8dsYlZB0DtT8P2M7eVxCDc77SJy/87xJ d77XUjLFncaJxI84PlVb4eJzfvIQH2ziqHaf0KImk4oCtsn3OFQ0NQZrqg0hgPww eM68Sd4eVmMFWw2lzrVPNZtgOhotEjzm6e/qwP4uw5EzgFa8amz0xPDJOrvH7bpE /RAGRTdiMD3xLmqMnJmTFzXftjrOn9RYjuR6df52Lg0CrX3z/b0J2nXJARna/dEc MkLJey7MdNTb0yQl+k22thMIwFPHpCII -----END CERTIFICATE-----Generated at Mon Oct 20 04:18:30 2025 by rpki-client