$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft File: l1u5QYJWgUoFLa9U9woa3FNv35s.mft (raw, json) Hash identifier: GsbNERifiqrIBvGmTZ/QOHN9zGEQCSXT4tjZvRtFSR0= Subject key identifier: 88:B0:F6:A8:AB:34:B8:8A:9D:AF:98:6F:39:ED:E7:6E:80:90:82:36 Authority key identifier: 97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B Certificate issuer: /CN=A91A7842/serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B Certificate serial: 040E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft Manifest number: 0407 Signing time: Sun 19 Oct 2025 02:22:23 +0000 Manifest this update: Sun 19 Oct 2025 02:22:22 +0000 Manifest next update: Sun 26 Oct 2025 02:22:22 +0000 Files and hashes: 1: l1u5QYJWgUoFLa9U9woa3FNv35s.crl (hash: prPQjJlHmXImgoPzoJh+achlrFmdJoBSrgLlWrGZ5g8=) 2: 615BA1B8D91411EF9940471AC4F9AE02.roa (hash: 41dvwuGONsbAf2NNxcw97I3G8Q6DNf+rajP9T/KIeiw=) 3: 622B3AEAD91411EF9940471AC4F9AE02.roa (hash: q51gHdBYG+mFAHDh24P09p42ENPRR4e2b1fq2dGY3KM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1038 (0x40e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7842, serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B Validity Not Before: Oct 19 02:22:22 2025 GMT Not After : Oct 26 02:22:22 2025 GMT Subject: CN=68f44b5f-3ad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ed:d5:32:93:32:c3:d2:f3:2f:d8:a2:39:42: 3b:80:12:fb:5f:c6:6d:ad:01:a5:11:05:ca:73:4f: 03:f9:f4:6d:03:40:85:5a:f0:22:71:2f:cb:e9:51: 2c:c3:e2:2f:68:5f:32:c3:f6:bd:0f:f8:b0:b1:68: ee:be:66:ef:78:c6:59:8f:7a:aa:d3:9c:5b:66:1f: 37:50:2a:53:70:27:7b:b9:b2:3a:30:76:3b:08:5d: f0:c1:a2:bb:17:25:54:74:cf:69:31:66:b7:80:e6: b6:ad:77:66:d0:bc:50:26:30:61:aa:ae:e3:52:d1: 81:af:e3:7e:79:8c:a3:04:66:92:7e:3d:09:47:70: 57:e8:76:9b:d0:35:b1:99:3e:12:92:b7:3e:23:a0: ea:ed:08:60:e7:5f:2f:dd:19:cd:97:9f:41:5e:a1: c0:78:f0:c6:65:52:24:5e:93:ee:71:a5:ca:87:7f: 45:f8:c1:ac:4f:2e:dc:4f:82:1a:01:43:8d:4a:0d: 3f:84:9e:2b:d6:ed:ab:48:3c:c7:5e:37:52:9d:9e: 19:35:ff:a2:bb:c2:39:ce:08:a8:db:d3:31:c4:e5: 18:60:87:40:f9:1d:4f:b3:89:15:e7:ce:88:55:34: ba:e9:74:b3:27:62:e8:21:7b:77:df:8a:fb:97:b8: 8a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B0:F6:A8:AB:34:B8:8A:9D:AF:98:6F:39:ED:E7:6E:80:90:82:36 X509v3 Authority Key Identifier: keyid:97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:36:41:ec:bb:2a:1c:d7:ac:b8:ba:d8:0c:5f:ce:e8:5a:8f: 2a:28:df:b2:1f:a8:49:1e:a7:48:5a:9b:7b:f1:21:12:d1:d4: 05:1b:4e:20:ba:bc:cd:cc:e4:f1:23:45:b5:f8:5d:37:bd:9e: 0f:54:91:3e:9b:12:9a:16:5d:d2:09:a0:fe:b0:bf:64:ee:74: 6a:f1:7f:33:31:c1:a6:3d:ed:70:c8:39:be:f0:74:71:7f:23: 62:4a:c2:ff:3f:e7:75:fb:fe:e4:e1:70:72:b5:04:48:00:91: 71:50:95:4f:19:7d:63:bc:fd:6c:7f:21:77:87:80:5d:3d:f2: 1f:d7:8e:1e:e6:ec:ac:44:b0:44:8a:d6:4f:42:2c:28:28:a3: 63:97:19:7c:17:e5:51:af:e2:02:85:91:80:25:51:68:6a:ce: c8:04:30:5c:9c:3e:5b:80:e1:9d:88:12:ed:3f:33:5c:9a:91: c7:d8:cd:77:dd:3c:3b:eb:18:2b:0b:21:93:4a:b4:e1:89:92: 40:90:3e:27:7b:81:df:24:73:74:5f:90:e5:06:ec:a5:46:3f: c1:e0:fe:3d:ec:ad:28:4d:2e:0d:0d:fa:e9:4e:6b:ab:4e:c4: 88:30:54:af:03:94:ea:a7:32:a5:f0:f3:64:57:54:1a:94:23: 8e:c9:16:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4NDIxMTAvBgNVBAUTKDk3NUJCOTQxODI1NjgxNEEwNTJEQUY1NEY3MEExQURD NTM2RkRGOUIwHhcNMjUxMDE5MDIyMjIyWhcNMjUxMDI2MDIyMjIyWjAYMRYwFAYD VQQDEw02OGY0NGI1Zi0zYWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4u3VMpMyw9LzL9iiOUI7gBL7X8ZtrQGlEQXKc08D+fRtA0CFWvAicS/L6VEs w+IvaF8yw/a9D/iwsWjuvmbveMZZj3qq05xbZh83UCpTcCd7ubI6MHY7CF3wwaK7 FyVUdM9pMWa3gOa2rXdm0LxQJjBhqq7jUtGBr+N+eYyjBGaSfj0JR3BX6Hab0DWx mT4Skrc+I6Dq7Qhg518v3RnNl59BXqHAePDGZVIkXpPucaXKh39F+MGsTy7cT4Ia AUONSg0/hJ4r1u2rSDzHXjdSnZ4ZNf+iu8I5zgio29MxxOUYYIdA+R1Ps4kV586I VTS66XSzJ2LoIXt334r7l7iK1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIiw9qir NLiKna+Ybznt526AkII2MB8GA1UdIwQYMBaAFJdbuUGCVoFKBS2vVPcKGtxTb9+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzg0Mi83NkE4QzZCQThF NjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dVb0ZMYTlVOXdvYTNGTnYz NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxdTVRWUpXZ1VvRkxhOVU5d29hM0ZOdjM1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzg0Mi83NkE4QzZCQThFNjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dV b0ZMYTlVOXdvYTNGTnYzNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDANkHsuyoc16y4utgMX87oWo8qKN+yH6hJHqdIWpt78SES0dQFG04g urzNzOTxI0W1+F03vZ4PVJE+mxKaFl3SCaD+sL9k7nRq8X8zMcGmPe1wyDm+8HRx fyNiSsL/P+d1+/7k4XBytQRIAJFxUJVPGX1jvP1sfyF3h4BdPfIf144e5uysRLBE itZPQiwoKKNjlxl8F+VRr+IChZGAJVFoas7IBDBcnD5bgOGdiBLtPzNcmpHH2M13 3Tw76xgrCyGTSrThiZJAkD4ne4HfJHN0X5DlBuylRj/B4P497K0oTS4NDfrpTmur TsSIMFSvA5TqpzKl8PNkV1QalCOOyRaD -----END CERTIFICATE-----Generated at Mon Oct 20 14:01:53 2025 by rpki-client