$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft File: l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft (raw, json) Hash identifier: FZotmHjSnU8f94AMSYIWU7Df8FT2LbAqOZq10OPf/oA= Subject key identifier: 0A:8B:04:CF:17:85:CB:27:5F:5A:CF:F3:AA:04:81:85:01:18:2E:46 Authority key identifier: 97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4 Certificate issuer: /CN=A91CBB09/serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4 Certificate serial: 0438 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft Manifest number: 0433 Signing time: Sun 19 Oct 2025 02:10:38 +0000 Manifest this update: Sun 19 Oct 2025 02:10:37 +0000 Manifest next update: Sun 26 Oct 2025 02:10:37 +0000 Files and hashes: 1: l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl (hash: H228ZuZvbd7kLQgcnYoqLuKMiJuvbl5K8eIrVIz0snA=) 2: F865B8887CEB11ECA79BD83DC4F9AE02.roa (hash: 9AbsTY8cTY46TpPDuvc4IXAIWNpWgIpIVFjtcxPCVMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1080 (0x438) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB09, serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4 Validity Not Before: Oct 19 02:10:37 2025 GMT Not After : Oct 26 02:10:37 2025 GMT Subject: CN=68f4489d-4abb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ae:d6:1b:f7:a6:8a:4e:e6:1a:30:c5:2c:5c: 83:1f:94:f6:4a:11:7b:cf:b7:6f:c3:3b:4d:74:b0: 10:0c:f7:14:10:9a:40:de:8b:70:8d:e7:a7:4f:0b: 66:07:4e:c3:e1:4c:c5:93:56:95:d3:0b:2e:bc:4c: 7f:9e:95:75:50:73:31:0e:84:59:c5:aa:24:4e:4a: 26:1f:69:84:7e:2b:0a:ba:cd:bd:79:44:ff:3d:7a: b7:3b:57:d9:7f:5d:9d:14:24:4a:b5:54:65:d1:79: 73:fc:a1:c1:63:e6:17:81:55:a4:ef:b1:63:d0:eb: 8f:2b:a1:67:69:4c:de:95:09:1c:69:c7:51:4c:f1: f0:6e:77:4c:0f:dc:cd:3d:82:24:dc:82:36:85:da: 91:9f:71:13:a4:fe:f2:b2:53:94:d9:1b:a4:2c:37: 0c:7e:0b:df:97:d1:72:e8:88:b8:b4:35:93:94:96: 08:23:cb:96:c5:a8:7f:22:9d:d3:fc:e5:66:26:b6: 75:e2:33:20:a5:b8:1d:76:c5:d1:e4:c8:5e:a5:3e: d7:b2:be:91:73:85:0b:c0:06:92:6b:c4:82:7b:40: ee:db:4c:8f:0d:90:82:13:75:5c:30:99:cd:f9:e5: 6c:b7:22:9a:38:cc:d5:8f:da:35:b3:d8:07:c5:48: 08:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:8B:04:CF:17:85:CB:27:5F:5A:CF:F3:AA:04:81:85:01:18:2E:46 X509v3 Authority Key Identifier: keyid:97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e0:bc:81:1f:37:98:7d:25:2c:f1:eb:ac:3b:0b:d4:4d:45:ab: 09:bb:33:cd:ac:e1:75:ca:9c:81:e5:c6:c8:33:b9:fa:6e:7a: 16:1c:7a:ea:7f:dc:e5:35:84:2c:95:89:af:82:4f:63:57:3a: d1:07:70:b7:65:90:0a:9a:3d:04:4a:4b:46:8f:03:71:bf:81: 38:be:d1:cb:98:06:db:eb:e5:06:27:4c:62:7a:ed:eb:af:0e: 2b:2c:e4:fd:f8:55:1e:c9:bb:1c:36:bc:59:d7:63:78:1d:6d: 71:13:d1:67:de:3c:64:a2:63:d6:80:77:2c:9e:7b:6a:34:d1: 42:7d:09:20:cf:59:1a:d2:26:b8:65:79:91:f8:89:06:4b:0a: 3f:f0:82:fa:07:76:6e:4b:46:57:03:b4:34:af:35:94:28:6c: 70:75:c7:87:ef:6e:29:a0:4d:dc:b5:f8:81:e2:7d:8c:6b:cf: 0c:dc:8b:18:1e:c0:90:0b:b1:3a:b5:d9:61:f2:f6:47:3b:0e: fc:0e:30:c2:69:85:90:14:92:ba:02:ce:54:e2:9b:ea:b8:5c: 73:2d:2a:1f:9c:61:4e:79:85:8c:14:63:03:cd:9a:85:1e:9e: 02:b0:ea:33:3b:4d:c1:18:f6:2a:11:1f:75:bc:41:75:b8:ae: 4a:f2:16:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMDkxMTAvBgNVBAUTKDk3NUJENTVENjE1Qzk4NjBBQ0NGRDg2MDk5ODUzQkNC MTlBOTlCRTQwHhcNMjUxMDE5MDIxMDM3WhcNMjUxMDI2MDIxMDM3WjAYMRYwFAYD VQQDEw02OGY0NDg5ZC00YWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx67WG/emik7mGjDFLFyDH5T2ShF7z7dvwztNdLAQDPcUEJpA3otwjeenTwtm B07D4UzFk1aV0wsuvEx/npV1UHMxDoRZxaokTkomH2mEfisKus29eUT/PXq3O1fZ f12dFCRKtVRl0Xlz/KHBY+YXgVWk77Fj0OuPK6FnaUzelQkcacdRTPHwbndMD9zN PYIk3II2hdqRn3ETpP7yslOU2RukLDcMfgvfl9Fy6Ii4tDWTlJYII8uWxah/Ip3T /OVmJrZ14jMgpbgddsXR5MhepT7Xsr6Rc4ULwAaSa8SCe0Du20yPDZCCE3VcMJnN +eVstyKaOMzVj9o1s9gHxUgIUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAqLBM8X hcsnX1rP86oEgYUBGC5GMB8GA1UdIwQYMBaAFJdb1V1hXJhgrM/YYJmFO8sZqZvk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIwOS82MTFEQUJBMDdD RTgxMUVDQUM4OTQ4MzlDNEY5QUUwMi9sMXZWWFdGY21HQ3N6OWhnbVlVN3l4bXBt LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxdlZYV0ZjbUdDc3o5aGdtWVU3eXhtcG0tUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkIwOS82MTFEQUJBMDdDRTgxMUVDQUM4OTQ4MzlDNEY5QUUwMi9sMXZWWFdGY21H Q3N6OWhnbVlVN3l4bXBtLVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDgvIEfN5h9JSzx66w7C9RNRasJuzPNrOF1ypyB5cbIM7n6bnoWHHrq f9zlNYQslYmvgk9jVzrRB3C3ZZAKmj0ESktGjwNxv4E4vtHLmAbb6+UGJ0xieu3r rw4rLOT9+FUeybscNrxZ12N4HW1xE9Fn3jxkomPWgHcsnntqNNFCfQkgz1ka0ia4 ZXmR+IkGSwo/8IL6B3ZuS0ZXA7Q0rzWUKGxwdceH724poE3ctfiB4n2Ma88M3IsY HsCQC7E6tdlh8vZHOw78DjDCaYWQFJK6As5U4pvquFxzLSofnGFOeYWMFGMDzZqF Hp4CsOozO03BGPYqER91vEF1uK5K8hb+ -----END CERTIFICATE-----Generated at Mon Oct 20 04:46:43 2025 by rpki-client