$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft File: 1p-GUNl6UkwplFPMtI13tOZf3yI.mft (raw, json) Hash identifier: hH4ZLRWHkuhpH/JILqjT6O4FtzO85AIXyy89KGgylrI= Subject key identifier: 44:9C:E6:90:FD:DC:17:78:03:5E:5F:FB:D3:38:9F:D5:65:A0:77:94 Authority key identifier: D6:9F:86:50:D9:7A:52:4C:29:94:53:CC:B4:8D:77:B4:E6:5F:DF:22 Certificate issuer: /CN=A91F0695/serialNumber=D69F8650D97A524C299453CCB48D77B4E65FDF22 Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1p-GUNl6UkwplFPMtI13tOZf3yI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft Manifest number: 0157 Signing time: Sun 19 Oct 2025 06:51:55 +0000 Manifest this update: Sun 19 Oct 2025 06:51:54 +0000 Manifest next update: Sun 26 Oct 2025 06:51:54 +0000 Files and hashes: 1: 1p-GUNl6UkwplFPMtI13tOZf3yI.crl (hash: mozO7pLtRgePWFBdE+92bVvRq/bEBoztVrfJH+zTDRU=) 2: D1054582A0C111EEA54E2F0BC4F9AE02.roa (hash: LiqmtbZL/k65yoRZh2qeTmSOnyQ0Qghej6NC1OoEsfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.crl rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1p-GUNl6UkwplFPMtI13tOZf3yI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0695, serialNumber=D69F8650D97A524C299453CCB48D77B4E65FDF22 Validity Not Before: Oct 19 06:51:54 2025 GMT Not After : Oct 26 06:51:54 2025 GMT Subject: CN=68f48a8b-f8ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ec:df:a1:91:79:b1:4e:0f:3e:17:5a:f8:fa: 53:7b:b2:8b:dc:36:f9:dc:a7:f8:d7:8f:16:df:fa: e3:52:6c:32:a7:ca:ee:fb:a6:83:67:91:8d:0d:bd: ad:06:c0:3d:bd:42:26:83:d3:7b:d3:be:b5:de:99: e1:70:f6:ea:27:63:e1:74:eb:80:1b:3e:90:0a:a5: 94:85:f1:dc:83:1d:38:ff:ec:50:47:a3:eb:09:a0: 6f:fe:f9:30:2b:6f:56:f0:39:06:97:29:e9:a5:16: 7b:c5:9f:21:be:90:ca:26:d8:1d:9b:82:fb:3f:45: d0:b1:19:07:4e:c8:71:c1:9d:5a:16:ac:65:a3:43: 06:12:34:49:bf:96:ed:0c:a3:c1:cd:c4:c5:cb:e0: 1a:6a:b9:2e:8e:c5:a3:d7:93:60:8b:31:63:0f:94: 9b:4c:59:a8:dd:e1:c8:a5:28:ed:80:03:2d:9b:19: 82:33:6d:4b:9e:9f:71:61:39:6f:17:9b:bc:ba:5d: 9e:a7:7d:cb:df:86:d3:82:d9:77:a1:b5:65:c6:47: 9f:88:8d:79:ab:a8:e8:14:28:a7:5f:45:13:03:0e: 07:ac:10:b5:4c:60:8c:7c:cb:87:94:9b:d2:e9:94: 6e:39:04:01:fb:d5:cf:af:53:06:2e:04:59:3f:0a: 6b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:9C:E6:90:FD:DC:17:78:03:5E:5F:FB:D3:38:9F:D5:65:A0:77:94 X509v3 Authority Key Identifier: keyid:D6:9F:86:50:D9:7A:52:4C:29:94:53:CC:B4:8D:77:B4:E6:5F:DF:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1p-GUNl6UkwplFPMtI13tOZf3yI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:4f:01:6c:ea:a3:95:e9:c6:1f:f5:ca:35:67:7b:06:1d:7e: ca:09:68:6c:d7:da:df:5f:95:97:3b:37:b0:47:95:93:9b:3c: 09:c9:57:00:48:85:8e:f4:d0:6d:05:b5:e2:50:3f:33:ed:81: 3b:4a:b8:3c:dd:89:92:19:84:d9:86:79:de:d9:f9:02:26:6d: ad:51:0c:9d:53:3e:55:2c:f5:35:85:6d:32:63:40:d9:46:bd: c8:8a:be:55:5b:eb:05:32:4a:57:00:17:59:a6:a4:d6:16:75: ef:a6:f2:99:ad:f9:a9:87:95:18:53:f8:2c:0a:b8:af:1c:90: c4:67:d8:85:dc:2d:1c:19:02:df:ea:17:6f:e4:de:30:24:e7: d0:e1:ca:42:3e:cf:d7:42:b3:1c:f7:80:85:17:c0:2f:23:b1: 8e:b8:3b:94:7a:7a:b0:46:94:14:54:59:35:48:18:5f:88:d3: 5e:7c:0a:61:39:d9:50:ce:0a:cd:95:90:ae:79:0b:d9:4e:68: 01:3a:81:cd:93:28:44:2f:e7:8c:05:08:d7:4d:cf:e2:80:e9: a7:67:d1:5f:eb:b0:ab:55:6d:3c:24:e3:2f:72:3d:2a:e2:bc: cf:47:90:60:ec:ae:78:88:f0:fe:c8:1f:50:a2:83:10:a7:03: f0:ff:9f:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA2OTUxMTAvBgNVBAUTKEQ2OUY4NjUwRDk3QTUyNEMyOTk0NTNDQ0I0OEQ3N0I0 RTY1RkRGMjIwHhcNMjUxMDE5MDY1MTU0WhcNMjUxMDI2MDY1MTU0WjAYMRYwFAYD VQQDEw02OGY0OGE4Yi1mOGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxezfoZF5sU4PPhda+PpTe7KL3Db53Kf4148W3/rjUmwyp8ru+6aDZ5GNDb2t BsA9vUImg9N707613pnhcPbqJ2PhdOuAGz6QCqWUhfHcgx04/+xQR6PrCaBv/vkw K29W8DkGlynppRZ7xZ8hvpDKJtgdm4L7P0XQsRkHTshxwZ1aFqxlo0MGEjRJv5bt DKPBzcTFy+AaarkujsWj15NgizFjD5SbTFmo3eHIpSjtgAMtmxmCM21Lnp9xYTlv F5u8ul2ep33L34bTgtl3obVlxkefiI15q6joFCinX0UTAw4HrBC1TGCMfMuHlJvS 6ZRuOQQB+9XPr1MGLgRZPwprsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFESc5pD9 3Bd4A15f+9M4n9VloHeUMB8GA1UdIwQYMBaAFNafhlDZelJMKZRTzLSNd7TmX98i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDY5NS83QzY3ODE0OEEw QzExMUVFQjIyMzI5NEFDNEY5QUUwMi8xcC1HVU5sNlVrd3BsRlBNdEkxM3RPWmYz eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFwLUdVTmw2VWt3cGxGUE10STEzdE9aZjN5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDY5NS83QzY3ODE0OEEwQzExMUVFQjIyMzI5NEFDNEY5QUUwMi8xcC1HVU5sNlVr d3BsRlBNdEkxM3RPWmYzeUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQTwFs6qOV6cYf9co1Z3sGHX7KCWhs19rfX5WXOzewR5WTmzwJyVcA SIWO9NBtBbXiUD8z7YE7Srg83YmSGYTZhnne2fkCJm2tUQydUz5VLPU1hW0yY0DZ Rr3Iir5VW+sFMkpXABdZpqTWFnXvpvKZrfmph5UYU/gsCrivHJDEZ9iF3C0cGQLf 6hdv5N4wJOfQ4cpCPs/XQrMc94CFF8AvI7GOuDuUenqwRpQUVFk1SBhfiNNefAph OdlQzgrNlZCueQvZTmgBOoHNkyhEL+eMBQjXTc/igOmnZ9Ff67CrVW08JOMvcj0q 4rzPR5Bg7K54iPD+yB9QooMQpwPw/5/Z -----END CERTIFICATE-----Generated at Mon Oct 20 14:00:37 2025 by rpki-client