$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.mft File: rc1aTbWZxxrtk9CWqxTK-ggV5hc.mft (raw, json) Hash identifier: 4ZHxaZdiFEQXfBj2FC3+S5N1eKhDkAMA5tBnV3G/fVU= Subject key identifier: A5:1B:A6:EA:45:4E:2E:D3:10:A6:EF:C4:66:1B:86:FD:D9:B4:4B:C3 Authority key identifier: AD:CD:5A:4D:B5:99:C7:1A:ED:93:D0:96:AB:14:CA:FA:08:15:E6:17 Certificate issuer: /CN=A91E1498/serialNumber=ADCD5A4DB599C71AED93D096AB14CAFA0815E617 Certificate serial: 013A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rc1aTbWZxxrtk9CWqxTK-ggV5hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.mft Manifest number: 0135 Signing time: Sun 19 Oct 2025 07:24:13 +0000 Manifest this update: Sun 19 Oct 2025 07:24:13 +0000 Manifest next update: Sun 26 Oct 2025 07:24:13 +0000 Files and hashes: 1: rc1aTbWZxxrtk9CWqxTK-ggV5hc.crl (hash: t6fEEaq6UW+jzo+6MalTPA6EyG+q+5gUKNb46QliAz8=) 2: 6C523164E03F11EE87838439C4F9AE02.roa (hash: SK6ZvVianDlVw+18irRafax8Eg6g34dqTzqJORJNKeQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.crl rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rc1aTbWZxxrtk9CWqxTK-ggV5hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1498, serialNumber=ADCD5A4DB599C71AED93D096AB14CAFA0815E617 Validity Not Before: Oct 19 07:24:13 2025 GMT Not After : Oct 26 07:24:13 2025 GMT Subject: CN=68f4921d-9b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cd:7c:f1:d1:70:09:3b:7b:36:a1:d9:43:18: 7b:85:42:a2:29:cf:ce:fe:e8:28:ce:75:65:4d:d1: a2:7e:f5:1a:15:57:86:cf:54:33:17:de:6c:32:87: ba:5a:72:93:ad:78:ce:af:b8:e4:c3:11:08:bd:bd: 58:b2:83:57:7c:bb:a4:5e:0b:e2:93:92:ae:82:4f: 38:86:b7:8d:15:8e:d6:6c:7e:12:28:53:dd:e2:8e: ae:58:45:4d:8a:19:31:63:25:d6:f9:ee:05:33:07: 89:21:7c:bb:eb:a9:e0:69:86:6e:95:82:5e:de:81: a1:3a:e2:15:76:0e:ac:fa:34:81:b9:28:ae:b8:a0: 37:43:07:f6:d7:2d:0e:3d:61:a7:f1:30:0f:49:61: 20:c3:62:aa:e3:ce:36:29:89:d7:a4:d1:86:1b:19: 15:a2:c9:ef:f8:da:85:b4:83:12:fe:67:82:e7:39: a7:b4:a4:ef:51:72:0c:73:c0:02:4d:61:0e:37:49: 5c:11:51:39:8c:66:f5:78:f6:03:6e:1c:0b:9a:94: 3b:1f:d6:69:a7:15:43:9a:a3:13:c0:42:f4:3c:1f: d9:7a:81:89:f6:a4:ee:0c:2c:83:8d:0a:d3:c4:2d: 28:90:02:b7:be:5e:bb:1e:0c:be:9b:1e:2b:15:05: 70:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:1B:A6:EA:45:4E:2E:D3:10:A6:EF:C4:66:1B:86:FD:D9:B4:4B:C3 X509v3 Authority Key Identifier: keyid:AD:CD:5A:4D:B5:99:C7:1A:ED:93:D0:96:AB:14:CA:FA:08:15:E6:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rc1aTbWZxxrtk9CWqxTK-ggV5hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ba:11:78:10:ea:fa:22:9a:47:98:a0:06:0b:92:be:2d:16: 2c:2c:55:59:ab:47:2e:5f:b5:10:4e:22:61:f6:31:4c:f6:7e: f0:13:c1:d9:a8:d4:2c:aa:37:40:7b:b5:a1:be:43:ae:24:66: 67:1d:11:a1:3d:a7:10:fa:4a:1c:91:62:c0:45:e2:0e:2b:96: f0:e7:50:91:f4:3c:8a:c7:10:ca:4f:4a:4c:86:6e:ac:a1:b8: 2d:29:0a:d8:c3:27:46:6c:0c:1b:8e:a3:e0:24:72:e1:32:ec: c0:fb:9d:da:3f:bd:2f:91:02:99:a6:d1:85:87:e2:e5:80:6c: 46:cc:1f:69:a0:b7:9f:09:81:e5:05:d6:bd:0b:5a:e0:10:32: b9:2f:de:62:34:60:4a:71:02:d2:57:b8:4a:cc:b3:3d:b2:2b: 2b:05:c7:b8:5f:4a:6f:b3:9c:54:b8:4a:27:91:f1:8c:d5:6a: f1:9c:57:bd:7a:e4:7b:5f:38:03:6b:75:52:80:a9:13:12:68: ea:62:06:d7:65:13:90:82:69:06:b5:73:26:b1:d7:11:ba:a7: 4c:ba:13:3b:b1:6e:aa:b4:b4:e5:3c:2e:d5:f3:52:51:85:53: 17:4a:67:55:39:f3:31:5a:8d:0e:51:1f:82:a9:8d:4b:ea:eb: 4b:4a:e4:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE0OTgxMTAvBgNVBAUTKEFEQ0Q1QTREQjU5OUM3MUFFRDkzRDA5NkFCMTRDQUZB MDgxNUU2MTcwHhcNMjUxMDE5MDcyNDEzWhcNMjUxMDI2MDcyNDEzWjAYMRYwFAYD VQQDEw02OGY0OTIxZC05YjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0s188dFwCTt7NqHZQxh7hUKiKc/O/ugoznVlTdGifvUaFVeGz1QzF95sMoe6 WnKTrXjOr7jkwxEIvb1YsoNXfLukXgvik5Kugk84hreNFY7WbH4SKFPd4o6uWEVN ihkxYyXW+e4FMweJIXy766ngaYZulYJe3oGhOuIVdg6s+jSBuSiuuKA3Qwf21y0O PWGn8TAPSWEgw2Kq4842KYnXpNGGGxkVosnv+NqFtIMS/meC5zmntKTvUXIMc8AC TWEON0lcEVE5jGb1ePYDbhwLmpQ7H9ZppxVDmqMTwEL0PB/ZeoGJ9qTuDCyDjQrT xC0okAK3vl67Hgy+mx4rFQVwAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUbpupF Ti7TEKbvxGYbhv3ZtEvDMB8GA1UdIwQYMBaAFK3NWk21mcca7ZPQlqsUyvoIFeYX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTQ5OC9CM0M4QTk3Q0RG QjUxMUVFQjdBRDhGMkVDNEY5QUUwMi9yYzFhVGJXWnh4cnRrOUNXcXhUSy1nZ1Y1 aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JjMWFUYldaeHhydGs5Q1dxeFRLLWdnVjVoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTQ5OC9CM0M4QTk3Q0RGQjUxMUVFQjdBRDhGMkVDNEY5QUUwMi9yYzFhVGJXWnh4 cnRrOUNXcXhUSy1nZ1Y1aGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNuhF4EOr6IppHmKAGC5K+LRYsLFVZq0cuX7UQTiJh9jFM9n7wE8HZ qNQsqjdAe7WhvkOuJGZnHRGhPacQ+kockWLAReIOK5bw51CR9DyKxxDKT0pMhm6s obgtKQrYwydGbAwbjqPgJHLhMuzA+53aP70vkQKZptGFh+LlgGxGzB9poLefCYHl Bda9C1rgEDK5L95iNGBKcQLSV7hKzLM9sisrBce4X0pvs5xUuEonkfGM1WrxnFe9 euR7XzgDa3VSgKkTEmjqYgbXZROQgmkGtXMmsdcRuqdMuhM7sW6qtLTlPC7V81JR hVMXSmdVOfMxWo0OUR+CqY1L6utLSuRh -----END CERTIFICATE-----Generated at Sun Oct 19 23:01:00 2025 by rpki-client