$ rpki-client -vvf rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft File: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft (raw, json) Hash identifier: e/0Dk2T1Qu92HqhutwbUNNbYnnbC9tgoHQbBjO4ziLg= Subject key identifier: 72:7E:4D:5F:F8:E8:2D:33:B3:33:B1:42:67:03:B8:E4:CF:67:24:74 Authority key identifier: D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21 Certificate issuer: /CN=A91F495C/serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421 Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft Manifest number: EF Signing time: Sun 19 Oct 2025 08:16:08 +0000 Manifest this update: Sun 19 Oct 2025 08:16:07 +0000 Manifest next update: Sun 26 Oct 2025 08:16:07 +0000 Files and hashes: 1: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl (hash: Zu6MvDcnN31wPFJPXOAY3wA1bu9JCzq0mJmhp1x7Xbk=) 2: 084D41C6407111EFB0944C40C4F9AE02.roa (hash: Jb/5el+254tvWTwmxgE5e2fworHZ6IC6eYTkaaOmWbo=) 3: 08FDDCFC407111EFB0944C40C4F9AE02.roa (hash: 5j1mJUsKsqLJqbWxCLNYcCoMJnOjUallWOckNeSTW7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:16:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F495C, serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421 Validity Not Before: Oct 19 08:16:07 2025 GMT Not After : Oct 26 08:16:07 2025 GMT Subject: CN=68f49e48-1fcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b5:2e:53:f1:3a:09:f3:bc:95:f1:65:39:24: 60:3b:21:00:d6:d4:99:54:93:e3:f1:2e:db:52:17: ce:05:08:ad:21:8c:38:4c:f5:01:db:d0:87:0e:05: 92:c3:f4:5c:21:0b:f8:00:26:55:09:40:5c:f4:b1: a3:87:7d:de:a7:32:0f:51:00:e6:04:b3:e9:55:26: 6f:31:3b:af:19:2d:c0:44:aa:ef:0f:95:28:0f:c1: 93:ca:51:02:95:3e:ca:db:39:63:c8:f9:f6:2a:05: 2e:c2:b3:c0:50:14:0d:ad:04:7e:c0:98:da:19:87: 21:14:21:4f:11:93:27:da:5b:79:26:84:86:a6:d2: f6:6c:4a:8d:76:c5:bf:6f:cb:ec:df:3a:a3:e6:82: b3:ab:bf:1c:c5:d4:39:24:f7:58:96:e3:17:a7:f4: 5a:0c:56:f7:18:5b:0f:c5:1e:17:bd:67:e6:a8:e5: 99:6d:33:09:e8:66:51:52:60:fc:ca:31:2e:a1:8e: a2:bb:c3:e8:ff:5b:b1:49:0a:b3:ce:27:35:fe:62: 41:94:08:fc:b2:6d:c7:7d:0f:2a:86:7b:d7:f0:a4: 71:17:54:83:48:b2:c9:81:e5:d0:9c:41:ff:68:73: 23:fd:92:fe:5c:92:54:97:85:41:09:0f:d6:ab:fc: 98:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:7E:4D:5F:F8:E8:2D:33:B3:33:B1:42:67:03:B8:E4:CF:67:24:74 X509v3 Authority Key Identifier: keyid:D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:ea:35:d5:51:6c:82:0e:ca:44:a3:41:c0:3b:36:a0:7d:17: 27:8f:b6:3c:c8:61:85:47:e9:54:a8:f2:d4:71:3e:57:36:91: 37:fb:7b:40:bb:b4:b9:0f:3f:80:33:ee:8e:e9:1f:d0:1b:2e: 16:ef:c8:49:91:f5:3c:f4:c7:ef:da:fd:d2:b1:ab:22:e8:9a: 18:19:fc:b4:a0:84:3c:8f:9a:ee:e5:ef:a8:b6:5e:cf:94:7f: 7d:ec:ba:46:dc:30:dc:4f:d8:34:9d:19:4a:bc:9b:30:8b:49: 90:ea:c7:ca:4f:78:20:c5:43:7b:7e:8e:a2:4d:6a:51:f7:9a: 98:da:c2:7a:26:6a:cc:94:41:c9:90:c6:8a:38:d7:02:f3:9d: da:60:78:f8:9a:77:5f:fa:81:77:3b:bd:90:53:32:b0:70:23: c4:cb:3f:f3:38:7b:a2:be:50:ea:c0:b9:80:93:2e:87:ca:b1: 7b:ce:0b:8c:85:17:27:9b:82:ea:7c:d0:4d:8f:42:46:25:43: 4d:08:52:f9:b1:a8:73:e5:1d:8d:c6:32:c7:35:82:49:c9:ed: e4:d2:de:04:36:bb:dc:a7:fb:25:3f:1c:f3:47:09:b5:06:ab: 90:1f:5f:5b:57:12:b0:53:9e:1e:c3:15:56:8c:c0:9e:47:e3: 85:fb:d5:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ5NUMxMTAvBgNVBAUTKEQ2QzgwQzVEMzhBQTNGMTBEMUVCMEUxMzlCOUU0OTRF QkY2QzY0MjEwHhcNMjUxMDE5MDgxNjA3WhcNMjUxMDI2MDgxNjA3WjAYMRYwFAYD VQQDEw02OGY0OWU0OC0xZmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx7UuU/E6CfO8lfFlOSRgOyEA1tSZVJPj8S7bUhfOBQitIYw4TPUB29CHDgWS w/RcIQv4ACZVCUBc9LGjh33epzIPUQDmBLPpVSZvMTuvGS3ARKrvD5UoD8GTylEC lT7K2zljyPn2KgUuwrPAUBQNrQR+wJjaGYchFCFPEZMn2lt5JoSGptL2bEqNdsW/ b8vs3zqj5oKzq78cxdQ5JPdYluMXp/RaDFb3GFsPxR4XvWfmqOWZbTMJ6GZRUmD8 yjEuoY6iu8Po/1uxSQqzzic1/mJBlAj8sm3HfQ8qhnvX8KRxF1SDSLLJgeXQnEH/ aHMj/ZL+XJJUl4VBCQ/Wq/yYBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJ+TV/4 6C0zszOxQmcDuOTPZyR0MB8GA1UdIwQYMBaAFNbIDF04qj8Q0esOE5ueSU6/bGQh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDk1Qy81QkM2M0VGNDQw NjUxMUVGODU2QzlFMjlDNEY5QUUwMi8xc2dNWFRpcVB4RFI2dzRUbTU1SlRyOXNa Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFzZ01YVGlxUHhEUjZ3NFRtNTVKVHI5c1pDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDk1Qy81QkM2M0VGNDQwNjUxMUVGODU2QzlFMjlDNEY5QUUwMi8xc2dNWFRpcVB4 RFI2dzRUbTU1SlRyOXNaQ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAh6jXVUWyCDspEo0HAOzagfRcnj7Y8yGGFR+lUqPLUcT5XNpE3+3tA u7S5Dz+AM+6O6R/QGy4W78hJkfU89Mfv2v3Ssasi6JoYGfy0oIQ8j5ru5e+otl7P lH997LpG3DDcT9g0nRlKvJswi0mQ6sfKT3ggxUN7fo6iTWpR95qY2sJ6JmrMlEHJ kMaKONcC853aYHj4mndf+oF3O72QUzKwcCPEyz/zOHuivlDqwLmAky6HyrF7zguM hRcnm4LqfNBNj0JGJUNNCFL5sahz5R2NxjLHNYJJye3k0t4ENrvcp/slPxzzRwm1 BquQH19bVxKwU54ewxVWjMCeR+OF+9Ur -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:48 2025 by rpki-client