$ rpki-client -vvf rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft File: 1c9c-LTYDyITBPNliOOVYERH93o.mft (raw, json) Hash identifier: dzF1K1bUD6HVtE88XkdeSYFInDbGulZrwTh6Jdpwoho= Subject key identifier: E9:3F:FB:FA:38:FB:6E:11:66:D6:BE:6B:C6:37:97:F2:EA:60:E0:53 Authority key identifier: D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A Certificate issuer: /CN=A914A5BB/serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A Certificate serial: 0239 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft Manifest number: 0235 Signing time: Sun 19 Oct 2025 04:03:50 +0000 Manifest this update: Sun 19 Oct 2025 04:03:49 +0000 Manifest next update: Sun 26 Oct 2025 04:03:49 +0000 Files and hashes: 1: 1c9c-LTYDyITBPNliOOVYERH93o.crl (hash: to2lJ96iRK+t6wI77U/OLARZahZ7g29YST5z9CJkpCw=) 2: A83E51EC45F611EDBA9D6062C4F9AE02.roa (hash: jD51iPrbzJDYVHI7eRj6WEF8ux+0Y9e0GCmn/E2/uJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:03:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 569 (0x239) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A5BB, serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A Validity Not Before: Oct 19 04:03:49 2025 GMT Not After : Oct 26 04:03:49 2025 GMT Subject: CN=68f46325-f6e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:60:41:30:8d:39:25:4f:b5:f9:4c:3b:57:c9: a8:f7:b5:0a:aa:16:b9:c3:60:ea:ad:66:28:7c:c1: 08:36:6d:fb:be:f9:d6:aa:5e:ba:2b:ed:d5:44:95: 65:3a:38:b4:b0:d7:ca:8f:ee:2c:5b:80:9c:9b:2d: 96:8a:43:3e:17:87:11:2f:ab:ad:40:b5:71:a7:2e: 7c:cd:a2:86:5d:48:1a:9f:75:be:87:04:9c:0e:d4: 49:59:1e:5e:71:24:84:48:2f:05:99:5a:7d:e5:ef: bb:d7:2c:de:89:a7:dd:e7:bc:2c:1d:a0:a9:89:e6: 5c:3e:7d:e4:2e:1b:9e:19:bb:9f:81:ba:a8:a8:78: e1:ff:bc:aa:f8:ec:ec:b2:5e:32:8d:03:12:94:71: a6:88:89:a7:1e:6a:c8:69:1e:18:16:c9:d5:23:fd: 24:54:e2:41:80:cd:28:d7:80:a7:84:a4:97:e1:11: 36:d6:87:90:cf:49:e9:ea:ab:63:13:c2:84:4e:b1: 2c:71:83:a4:54:19:6b:17:3d:33:c1:6e:cb:3e:cc: 8a:ab:aa:3e:9c:dd:16:d4:2c:de:81:09:f8:55:ae: 99:59:85:1f:e7:cb:88:ef:bf:1e:bb:80:aa:4a:9d: 77:f9:ec:de:50:c4:42:65:3d:7e:52:bf:92:b0:b3: 4c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:3F:FB:FA:38:FB:6E:11:66:D6:BE:6B:C6:37:97:F2:EA:60:E0:53 X509v3 Authority Key Identifier: keyid:D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:e2:a4:ac:e4:07:02:05:2b:f0:4b:c2:61:fd:28:87:10:bd: db:b3:92:e4:0f:6c:5c:c7:e7:51:da:9c:1e:e8:04:4f:0b:51: 2e:2f:6e:e3:60:ec:93:6f:6a:2f:de:4b:27:8f:9d:f5:3b:8f: 90:fe:9d:57:89:31:e2:f2:68:0f:8c:b2:f9:53:e8:ca:e3:85: c0:b4:70:bd:f4:cc:49:25:b8:cb:f6:05:23:c1:3d:6c:2d:91: 1d:45:4d:7d:d0:04:82:0b:42:ac:46:ed:20:3a:8a:2a:37:52: 07:d0:67:7e:76:47:7d:d7:f4:13:b0:93:71:45:4b:76:4a:90: e8:a1:7c:d1:c2:22:09:53:6c:1d:16:b5:72:9e:0d:4e:c2:40: 1c:b2:cb:11:9a:a3:04:46:47:8d:fc:3c:ea:4b:e8:1c:7b:10: 1a:96:4a:8f:35:81:d6:fd:c5:8d:55:cc:9c:d8:e3:6e:38:2c: a3:d1:a6:2f:52:2f:d9:9b:56:bd:45:8a:2a:f8:c6:e7:c7:c0: 1e:d2:42:8b:20:34:5f:da:33:d8:8c:5a:29:ec:35:f1:eb:f4: ce:98:7f:44:85:8d:48:26:4e:e8:33:d8:64:ce:1b:93:fd:4b: af:23:e8:7b:fa:25:f3:c1:ab:e0:8c:c9:10:91:79:7d:19:b2: 51:e8:ce:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE1QkIxMTAvBgNVBAUTKEQ1Q0Y1Q0Y4QjREODBGMjIxMzA0RjM2NTg4RTM5NTYw NDQ0N0Y3N0EwHhcNMjUxMDE5MDQwMzQ5WhcNMjUxMDI2MDQwMzQ5WjAYMRYwFAYD VQQDEw02OGY0NjMyNS1mNmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArWBBMI05JU+1+Uw7V8mo97UKqha5w2DqrWYofMEINm37vvnWql66K+3VRJVl Oji0sNfKj+4sW4Ccmy2WikM+F4cRL6utQLVxpy58zaKGXUgan3W+hwScDtRJWR5e cSSESC8FmVp95e+71yzeiafd57wsHaCpieZcPn3kLhueGbufgbqoqHjh/7yq+Ozs sl4yjQMSlHGmiImnHmrIaR4YFsnVI/0kVOJBgM0o14CnhKSX4RE21oeQz0np6qtj E8KETrEscYOkVBlrFz0zwW7LPsyKq6o+nN0W1CzegQn4Va6ZWYUf58uI778eu4Cq Sp13+ezeUMRCZT1+Ur+SsLNMUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOk/+/o4 +24RZta+a8Y3l/LqYOBTMB8GA1UdIwQYMBaAFNXPXPi02A8iEwTzZYjjlWBER/d6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTVCQi83MjNDRDlBQTQ1 RjIxMUVEOTY0QjRDNUFDNEY5QUUwMi8xYzljLUxUWUR5SVRCUE5saU9PVllFUkg5 M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjOWMtTFRZRHlJVEJQTmxpT09WWUVSSDkzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTVCQi83MjNDRDlBQTQ1RjIxMUVEOTY0QjRDNUFDNEY5QUUwMi8xYzljLUxUWUR5 SVRCUE5saU9PVllFUkg5M28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR4qSs5AcCBSvwS8Jh/SiHEL3bs5LkD2xcx+dR2pwe6ARPC1EuL27j YOyTb2ov3ksnj531O4+Q/p1XiTHi8mgPjLL5U+jK44XAtHC99MxJJbjL9gUjwT1s LZEdRU190ASCC0KsRu0gOooqN1IH0Gd+dkd91/QTsJNxRUt2SpDooXzRwiIJU2wd FrVyng1OwkAcsssRmqMERkeN/DzqS+gcexAalkqPNYHW/cWNVcyc2ONuOCyj0aYv Ui/Zm1a9RYoq+Mbnx8Ae0kKLIDRf2jPYjFop7DXx6/TOmH9EhY1IJk7oM9hkzhuT /UuvI+h7+iXzwavgjMkQkXl9GbJR6M7b -----END CERTIFICATE-----Generated at Mon Oct 20 21:34:27 2025 by rpki-client