$ rpki-client -vvf rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft File: 1gA1BzfqQktAGySBBT0rwpFsutE.mft (raw, json) Hash identifier: jIotYLN5USXAKZnUUOjqKr8v/VK7OcTtwaD8LyLLSTA= Subject key identifier: 77:3F:7F:44:1A:3A:00:6F:FA:C2:C9:B6:D6:3D:EF:2A:BC:7D:A8:A8 Authority key identifier: D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1 Certificate issuer: /CN=A9154973/serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1 Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft Manifest number: DF Signing time: Sun 19 Oct 2025 08:37:16 +0000 Manifest this update: Sun 19 Oct 2025 08:37:15 +0000 Manifest next update: Sun 26 Oct 2025 08:37:15 +0000 Files and hashes: 1: 1gA1BzfqQktAGySBBT0rwpFsutE.crl (hash: OsKCSKeOpcK7nJlg+EJrIcKZVQBQLCsOe+fsYetnkSg=) 2: FD557922606A11EF8B9F6820C4F9AE02.roa (hash: ewsNS72wnAdnQiFMusstfvI/PZNeUDtev9nr2+xdPsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:37:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154973, serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1 Validity Not Before: Oct 19 08:37:15 2025 GMT Not After : Oct 26 08:37:15 2025 GMT Subject: CN=68f4a33c-1c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:68:4a:9c:bf:fb:e3:bd:a8:f5:d8:cd:28:0c: 2b:19:b2:36:7b:a0:22:4c:5c:77:95:a2:0d:61:3c: de:f5:63:21:d1:6a:6b:38:2b:a7:76:fe:64:c7:06: f2:22:6b:2a:23:3a:8a:a0:fb:6f:2a:4d:a6:4d:78: 24:8d:6f:88:87:a9:8d:97:1d:0b:33:5e:29:cd:bf: 6d:76:c5:0b:2a:b9:d8:7e:61:f1:71:fe:53:a9:69: e5:ca:75:55:f2:a4:53:bd:2f:8c:3a:19:3a:32:00: ad:e9:ea:69:f1:ff:f3:a4:f0:f7:76:32:dc:fc:df: 08:3b:f1:f2:25:39:db:c7:ae:27:1a:3c:ab:bd:54: 9b:e7:cb:20:74:9f:2f:6d:09:cc:e5:4f:5a:80:ac: 57:9f:45:61:16:a7:e6:26:54:95:c6:ca:ea:ab:43: 7c:7d:ac:54:16:64:88:05:4b:e0:16:44:a9:16:77: 83:93:d3:0b:5d:96:ad:d7:26:75:41:e0:1c:88:cf: 49:af:a3:23:23:1b:59:f1:29:3a:84:91:25:11:06: d8:43:fe:ae:20:e1:29:6c:82:9e:d2:d1:e6:9b:d0: 41:00:60:51:d5:c2:d4:96:6b:2b:f9:20:d0:94:df: b5:44:6d:a7:b1:d6:6a:2e:e4:78:cd:cc:bb:6d:43: c4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:3F:7F:44:1A:3A:00:6F:FA:C2:C9:B6:D6:3D:EF:2A:BC:7D:A8:A8 X509v3 Authority Key Identifier: keyid:D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:f1:79:85:2a:26:ba:f3:ef:dc:19:22:8c:5a:42:bf:da:bc: d4:e9:e3:0f:4a:5e:e3:34:5c:3b:09:0a:e2:92:77:1a:44:bc: b9:92:68:6a:f0:a9:15:f5:59:f2:e0:ab:47:e7:21:84:9f:ab: d1:9c:06:d3:e1:89:e9:e2:b6:65:6b:94:d6:d3:7a:11:ca:e4: de:c5:12:a6:d5:35:35:c5:a6:05:f9:f4:06:b7:67:72:b7:df: e4:42:47:bc:f3:57:b7:00:d4:ba:fe:b0:c0:9b:03:56:8d:68: c6:a9:bf:fa:5c:7d:a1:ed:d5:41:6f:72:92:e2:42:96:9b:fe: 69:f3:06:bd:b2:a8:4b:5e:99:95:12:02:95:bb:a6:ca:63:b0: e3:a9:30:4b:12:81:78:03:8d:04:2d:a1:e0:04:00:5e:93:b5: 1e:7e:6c:e3:ab:03:7e:f4:b9:87:31:4f:ab:95:f5:e5:9f:83: b4:00:27:82:16:95:87:4d:6b:ec:32:1c:7d:35:1f:95:e9:19: cc:da:16:17:07:4a:84:d1:bc:60:af:56:cc:5c:6d:01:bc:21: 7a:27:fe:ad:f3:f1:d5:6c:3e:fe:c8:37:2f:6f:cf:fa:b0:f3: c8:c9:48:d6:e2:81:db:dc:8b:f3:de:0e:7a:72:a7:3d:e9:ed: 7f:03:9c:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ5NzMxMTAvBgNVBAUTKEQ2MDAzNTA3MzdFQTQyNEI0MDFCMjQ4MTA1M0QyQkMy OTE2Q0JBRDEwHhcNMjUxMDE5MDgzNzE1WhcNMjUxMDI2MDgzNzE1WjAYMRYwFAYD VQQDEw02OGY0YTMzYy0xYzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0GhKnL/7472o9djNKAwrGbI2e6AiTFx3laINYTze9WMh0WprOCundv5kxwby ImsqIzqKoPtvKk2mTXgkjW+Ih6mNlx0LM14pzb9tdsULKrnYfmHxcf5TqWnlynVV 8qRTvS+MOhk6MgCt6epp8f/zpPD3djLc/N8IO/HyJTnbx64nGjyrvVSb58sgdJ8v bQnM5U9agKxXn0VhFqfmJlSVxsrqq0N8faxUFmSIBUvgFkSpFneDk9MLXZat1yZ1 QeAciM9Jr6MjIxtZ8Sk6hJElEQbYQ/6uIOEpbIKe0tHmm9BBAGBR1cLUlmsr+SDQ lN+1RG2nsdZqLuR4zcy7bUPELQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHc/f0Qa OgBv+sLJttY97yq8faioMB8GA1UdIwQYMBaAFNYANQc36kJLQBskgQU9K8KRbLrR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDk3My9BNjVCQzYyNjYw NkExMUVGODk4RURCMUZDNEY5QUUwMi8xZ0ExQnpmcVFrdEFHeVNCQlQwcndwRnN1 dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFnQTFCemZxUWt0QUd5U0JCVDByd3BGc3V0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDk3My9BNjVCQzYyNjYwNkExMUVGODk4RURCMUZDNEY5QUUwMi8xZ0ExQnpmcVFr dEFHeVNCQlQwcndwRnN1dEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB18XmFKia68+/cGSKMWkK/2rzU6eMPSl7jNFw7CQrikncaRLy5kmhq 8KkV9Vny4KtH5yGEn6vRnAbT4Ynp4rZla5TW03oRyuTexRKm1TU1xaYF+fQGt2dy t9/kQke881e3ANS6/rDAmwNWjWjGqb/6XH2h7dVBb3KS4kKWm/5p8wa9sqhLXpmV EgKVu6bKY7DjqTBLEoF4A40ELaHgBABek7UefmzjqwN+9LmHMU+rlfXln4O0ACeC FpWHTWvsMhx9NR+V6RnM2hYXB0qE0bxgr1bMXG0BvCF6J/6t8/HVbD7+yDcvb8/6 sPPIyUjW4oHb3Ivz3g56cqc96e1/A5xu -----END CERTIFICATE-----Generated at Mon Oct 20 05:39:00 2025 by rpki-client