$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft File: T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft (raw, json) Hash identifier: OT/0edvWhsj4aYtoZ08bGq2CokeBdvUX/u5xgcpTQXU= Subject key identifier: 8C:D3:87:A4:7D:B2:6B:14:B9:99:0A:E2:C6:B0:6E:AF:96:21:EE:83 Authority key identifier: 4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29 Certificate issuer: /CN=A91BB883/serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29 Certificate serial: 0C58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft Manifest number: 0C50 Signing time: Sat 18 Oct 2025 19:22:27 +0000 Manifest this update: Sat 18 Oct 2025 19:22:26 +0000 Manifest next update: Sat 25 Oct 2025 19:22:26 +0000 Files and hashes: 1: T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl (hash: id65UzymGbeSomyYuryx2wxEuh3Ub0py+goYfgtuUZI=) 2: 8160C03610E911EA86FA6774C4F9AE02.roa (hash: 8XfCRrs6KyewkevpBqIWOSXTDqr80tEQ4o/AVxw5pnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:22:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3160 (0xc58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB883, serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29 Validity Not Before: Oct 18 19:22:26 2025 GMT Not After : Oct 25 19:22:26 2025 GMT Subject: CN=68f3e8f2-39ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:80:5b:a6:92:a0:f0:a5:29:dc:e6:6e:49:00: 9c:f5:14:35:03:c3:a7:47:e3:39:0d:df:57:ae:c8: 17:83:a2:09:10:dd:f1:de:5f:ba:ca:f2:78:0a:39: 7c:3d:0c:30:6a:24:5e:9f:df:aa:41:51:94:02:c6: b6:7a:b2:7a:83:36:61:6f:11:b5:3a:ee:53:4a:35: 52:7d:09:8a:87:b6:fe:cf:6d:8d:81:e2:e4:15:a4: 6e:45:a3:98:78:01:cf:28:72:5a:f6:c5:aa:cc:53: b7:b5:a9:b7:19:c7:21:5c:45:1e:62:d3:8a:38:77: b0:5d:bb:af:ef:ac:e6:61:91:2f:e5:11:48:c9:d4: 9f:bf:47:e9:c9:d0:6e:53:48:fc:47:25:af:47:92: f5:81:f7:d1:be:db:3d:be:de:a8:b0:e7:8e:44:53: 24:5a:50:6b:6e:f8:a6:11:85:15:4c:65:a9:2b:23: af:46:0a:f3:94:ff:34:59:fb:50:9a:12:e2:8e:6c: 17:fc:f5:1a:1d:32:26:a7:22:19:02:86:f4:da:56: 90:41:4e:c4:5f:d8:eb:18:0e:b0:13:43:cc:42:f8: cb:08:d8:03:02:f8:fa:0d:10:3b:1a:74:e7:29:8c: 03:ee:5a:a4:15:59:d3:37:d4:5a:fe:78:5f:d8:74: c0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D3:87:A4:7D:B2:6B:14:B9:99:0A:E2:C6:B0:6E:AF:96:21:EE:83 X509v3 Authority Key Identifier: keyid:4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:52:b0:5b:be:5e:be:fd:4b:15:09:3f:e8:0d:a7:6f:a0:1a: c3:5e:ad:2f:37:88:37:c3:c3:2a:16:62:65:e6:de:93:ce:b0: 4e:d7:ae:65:bf:70:a2:e6:e7:e6:1a:29:b0:68:c4:4c:69:fc: 60:4c:73:4c:65:11:ac:a1:8d:f6:1b:de:3c:1f:6d:70:43:cb: d5:29:c7:c3:8f:af:d4:d5:33:53:56:80:6e:60:f9:77:86:65: 08:5d:03:4a:f4:b0:0f:43:d2:67:d2:2d:a8:60:d7:26:00:b9: e1:73:06:51:b0:82:fd:f0:4a:c0:67:5d:c0:ef:ee:3a:3a:99: 17:e1:3c:df:bf:8d:85:09:c3:54:9c:fc:65:3b:6c:0c:4c:b7: 77:f9:09:6b:4a:0f:0f:bb:3b:bb:e6:13:3a:b0:e2:ef:3f:68: 3f:49:f3:ce:81:6c:76:09:05:cc:cf:65:39:33:8a:7e:d3:e4: 3c:c7:c1:f2:58:da:dd:ff:a3:55:38:f4:f1:ea:e6:46:4b:5a: 81:96:6a:68:f6:23:4a:1b:3a:56:49:b2:14:b1:1a:6b:95:3b: f3:f2:b6:e4:c9:79:49:35:cf:28:df:b5:bb:51:82:e4:b5:13: 02:08:2a:eb:61:f4:eb:cf:7f:bc:0c:9e:99:26:a9:ab:2e:0f: 1b:93:46:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI4ODMxMTAvBgNVBAUTKDRGNUFGNTY1RDMwREQ1NEYyNDE0N0VGNUUxNzhBQTBC QUEzM0ZDMjkwHhcNMjUxMDE4MTkyMjI2WhcNMjUxMDI1MTkyMjI2WjAYMRYwFAYD VQQDEw02OGYzZThmMi0zOWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4YBbppKg8KUp3OZuSQCc9RQ1A8OnR+M5Dd9XrsgXg6IJEN3x3l+6yvJ4Cjl8 PQwwaiRen9+qQVGUAsa2erJ6gzZhbxG1Ou5TSjVSfQmKh7b+z22NgeLkFaRuRaOY eAHPKHJa9sWqzFO3tam3GcchXEUeYtOKOHewXbuv76zmYZEv5RFIydSfv0fpydBu U0j8RyWvR5L1gffRvts9vt6osOeORFMkWlBrbvimEYUVTGWpKyOvRgrzlP80WftQ mhLijmwX/PUaHTImpyIZAob02laQQU7EX9jrGA6wE0PMQvjLCNgDAvj6DRA7GnTn KYwD7lqkFVnTN9Ra/nhf2HTANQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzTh6R9 smsUuZkK4sawbq+WIe6DMB8GA1UdIwQYMBaAFE9a9WXTDdVPJBR+9eF4qguqM/wp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjg4My9FOTgyQkEzNjEw RTcxMUVBOUQyMUMyNkZDNEY5QUUwMi9UMXIxWmRNTjFVOGtGSDcxNFhpcUM2b3pf Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QxcjFaZE1OMVU4a0ZINzE0WGlxQzZvel9Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjg4My9FOTgyQkEzNjEwRTcxMUVBOUQyMUMyNkZDNEY5QUUwMi9UMXIxWmRNTjFV OGtGSDcxNFhpcUM2b3pfQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHUrBbvl6+/UsVCT/oDadvoBrDXq0vN4g3w8MqFmJl5t6TzrBO165l v3Ci5ufmGimwaMRMafxgTHNMZRGsoY32G948H21wQ8vVKcfDj6/U1TNTVoBuYPl3 hmUIXQNK9LAPQ9Jn0i2oYNcmALnhcwZRsIL98ErAZ13A7+46OpkX4Tzfv42FCcNU nPxlO2wMTLd3+QlrSg8Puzu75hM6sOLvP2g/SfPOgWx2CQXMz2U5M4p+0+Q8x8Hy WNrd/6NVOPTx6uZGS1qBlmpo9iNKGzpWSbIUsRprlTvz8rbkyXlJNc8o37W7UYLk tRMCCCrrYfTrz3+8DJ6ZJqmrLg8bk0a1 -----END CERTIFICATE-----Generated at Mon Oct 20 19:11:48 2025 by rpki-client