$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft File: 1RZ7lweHQQlX4l2fh1CFYPAFd24.mft (raw, json) Hash identifier: s7Jsg5kCrvAo9nHkA5q2UA5VlkmHYM8uelPP/mH8R8M= Subject key identifier: A8:DD:AE:98:E2:A0:00:12:E0:1B:48:81:E3:95:88:80:57:C7:B1:CA Authority key identifier: D5:16:7B:97:07:87:41:09:57:E2:5D:9F:87:50:85:60:F0:05:77:6E Certificate issuer: /CN=A91B9011/serialNumber=D5167B970787410957E25D9F87508560F005776E Certificate serial: 0602 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft Manifest number: 05FD Signing time: Sun 19 Oct 2025 00:31:43 +0000 Manifest this update: Sun 19 Oct 2025 00:31:42 +0000 Manifest next update: Sun 26 Oct 2025 00:31:42 +0000 Files and hashes: 1: 1RZ7lweHQQlX4l2fh1CFYPAFd24.crl (hash: q8X/9txCoWii8o/caAam7r1pebM+XOMOOHHZqBZaUWc=) 2: 438893AC55BE11EDBDE51983C4F9AE02.roa (hash: Y1Hqc3CucW1MGNfTEVOgwuu3xdmSB7zSj6HU8UBJr7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.crl rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:31:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1538 (0x602) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9011, serialNumber=D5167B970787410957E25D9F87508560F005776E Validity Not Before: Oct 19 00:31:42 2025 GMT Not After : Oct 26 00:31:42 2025 GMT Subject: CN=68f4316e-1dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9d:d9:9d:10:fc:ce:3b:73:36:24:c4:72:b5: a0:8d:12:39:b3:db:e7:23:11:b8:10:67:dd:1c:03: c7:e5:cd:0b:27:ee:7c:32:b0:34:8b:7e:f0:a1:19: 48:84:b3:27:07:e8:88:e9:3d:b3:00:b0:5d:64:81: 2d:3d:73:80:73:8a:e9:e2:e3:0a:31:96:30:49:dc: d2:60:85:82:30:16:84:47:af:9e:c8:a0:a6:06:5f: 95:d2:9c:26:a1:7d:81:e0:40:b2:38:53:89:11:4b: 10:c4:8e:4a:4e:36:98:07:80:63:4e:0e:fa:8d:f8: 0b:17:4c:6f:67:6e:9c:65:1e:32:a1:70:73:60:b9: 53:77:dc:aa:70:99:53:41:06:15:61:12:6c:35:d7: 94:04:df:26:f2:cf:64:5c:fa:17:91:ee:19:63:a3: ad:74:74:85:9b:69:55:c7:09:dd:18:8d:c9:2a:2f: fc:a6:eb:3a:94:ba:5c:c3:3d:7a:7a:e2:a3:0f:ba: 22:a4:1b:73:81:68:d8:f8:e8:d6:0f:bf:e4:da:f5: e9:a9:a9:f3:17:8f:2a:2f:d9:a7:78:44:6d:e6:af: 10:23:ee:27:dc:3e:ad:26:e8:1a:fe:ab:04:d5:ad: 94:d2:84:08:4f:f9:93:7d:82:c3:3e:d4:1c:43:47: c5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:DD:AE:98:E2:A0:00:12:E0:1B:48:81:E3:95:88:80:57:C7:B1:CA X509v3 Authority Key Identifier: keyid:D5:16:7B:97:07:87:41:09:57:E2:5D:9F:87:50:85:60:F0:05:77:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:91:54:81:d6:b5:59:c2:2f:20:af:de:53:80:fe:06:12:01: 5f:23:9b:c1:96:84:ee:7b:0e:97:39:fa:0d:4d:a2:b2:9d:05: f8:c3:e3:19:a8:b2:e5:f4:72:6e:f3:87:d1:55:46:f8:09:bc: 77:99:9e:2b:04:7c:a0:cd:12:b0:dd:fb:b5:4a:07:62:c3:2c: 15:d5:3a:05:dc:c4:8e:51:ff:38:01:c4:a2:1d:ed:6d:59:27: ec:94:67:04:92:45:63:56:59:6a:82:44:66:ba:7b:42:8b:dd: e2:3f:06:86:b1:d5:c9:8a:44:59:4c:75:9c:67:69:fc:14:67: 68:76:e2:6c:d4:f1:31:3b:96:4b:71:85:d2:c1:73:62:33:69: 36:a9:89:cc:42:7f:c3:d2:3e:43:a6:82:1e:0b:cc:ad:64:02: 6a:6a:c5:1c:3b:53:ea:2d:a5:72:b2:ba:d6:4c:90:46:86:e8: ca:04:90:59:65:17:66:fb:09:02:43:a7:55:f4:32:cc:75:db: 33:db:1c:01:50:71:d6:9b:bd:f4:d1:c6:e6:66:31:28:f0:b1: 33:71:56:a2:5b:5a:bd:c5:ed:f9:62:ac:03:98:5a:48:9b:91: b4:de:7f:17:1d:30:4d:24:e4:40:ae:09:99:83:29:8f:0c:3c: 29:df:27:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkwMTExMTAvBgNVBAUTKEQ1MTY3Qjk3MDc4NzQxMDk1N0UyNUQ5Rjg3NTA4NTYw RjAwNTc3NkUwHhcNMjUxMDE5MDAzMTQyWhcNMjUxMDI2MDAzMTQyWjAYMRYwFAYD VQQDEw02OGY0MzE2ZS0xZGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr53ZnRD8zjtzNiTEcrWgjRI5s9vnIxG4EGfdHAPH5c0LJ+58MrA0i37woRlI hLMnB+iI6T2zALBdZIEtPXOAc4rp4uMKMZYwSdzSYIWCMBaER6+eyKCmBl+V0pwm oX2B4ECyOFOJEUsQxI5KTjaYB4BjTg76jfgLF0xvZ26cZR4yoXBzYLlTd9yqcJlT QQYVYRJsNdeUBN8m8s9kXPoXke4ZY6OtdHSFm2lVxwndGI3JKi/8pus6lLpcwz16 euKjD7oipBtzgWjY+OjWD7/k2vXpqanzF48qL9mneERt5q8QI+4n3D6tJuga/qsE 1a2U0oQIT/mTfYLDPtQcQ0fFmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjdrpji oAAS4BtIgeOViIBXx7HKMB8GA1UdIwQYMBaAFNUWe5cHh0EJV+Jdn4dQhWDwBXdu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTAxMS8zODg4RTBDNEM3 M0ExMUVCOTAwNzU1MTBDNEY5QUUwMi8xUlo3bHdlSFFRbFg0bDJmaDFDRllQQUZk MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFSWjdsd2VIUVFsWDRsMmZoMUNGWVBBRmQyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTAxMS8zODg4RTBDNEM3M0ExMUVCOTAwNzU1MTBDNEY5QUUwMi8xUlo3bHdlSFFR bFg0bDJmaDFDRllQQUZkMjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEkVSB1rVZwi8gr95TgP4GEgFfI5vBloTuew6XOfoNTaKynQX4w+MZ qLLl9HJu84fRVUb4Cbx3mZ4rBHygzRKw3fu1SgdiwywV1ToF3MSOUf84AcSiHe1t WSfslGcEkkVjVllqgkRmuntCi93iPwaGsdXJikRZTHWcZ2n8FGdoduJs1PExO5ZL cYXSwXNiM2k2qYnMQn/D0j5DpoIeC8ytZAJqasUcO1PqLaVysrrWTJBGhujKBJBZ ZRdm+wkCQ6dV9DLMddsz2xwBUHHWm7300cbmZjEo8LEzcVaiW1q9xe35YqwDmFpI m5G03n8XHTBNJORArgmZgymPDDwp3yex -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:01 2025 by rpki-client