$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5183/A4AF2CB08E8F11F0B07D9E0FC4F9AE02/1vZclkuOj1C0u4fpTxStruksJyw.mft File: 1vZclkuOj1C0u4fpTxStruksJyw.mft (raw, json) Hash identifier: yulKDhXHMiD3V30JtteqC4UntRjeO1Ov4Hm4lJzAxio= Subject key identifier: 77:9F:8B:1C:D9:CD:E2:4D:27:D2:CB:A4:08:64:59:3C:DD:4F:EB:3C Authority key identifier: D6:F6:5C:96:4B:8E:8F:50:B4:BB:87:E9:4F:14:AD:AE:E9:2C:27:2C Certificate issuer: /CN=A91F5183/serialNumber=D6F65C964B8E8F50B4BB87E94F14ADAEE92C272C Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vZclkuOj1C0u4fpTxStruksJyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5183/A4AF2CB08E8F11F0B07D9E0FC4F9AE02/1vZclkuOj1C0u4fpTxStruksJyw.mft Manifest number: 14 Signing time: Sun 19 Oct 2025 11:27:43 +0000 Manifest this update: Sun 19 Oct 2025 11:27:42 +0000 Manifest next update: Sun 26 Oct 2025 11:27:42 +0000 Files and hashes: 1: 1vZclkuOj1C0u4fpTxStruksJyw.crl (hash: YuhRQ0ixYOMZ3bcYoU8hpRmRDuTJkhegswukHrN83Xo=) 2: 1DE4BA468E9011F08491DD13C4F9AE02.roa (hash: CkfmKzz9bLpPVsLhJYxDdkf3dPl9E+JbBOW2D8bZ1LY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5183/A4AF2CB08E8F11F0B07D9E0FC4F9AE02/1vZclkuOj1C0u4fpTxStruksJyw.crl rsync://rpki.apnic.net/member_repository/A91F5183/A4AF2CB08E8F11F0B07D9E0FC4F9AE02/1vZclkuOj1C0u4fpTxStruksJyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vZclkuOj1C0u4fpTxStruksJyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:27:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5183, serialNumber=D6F65C964B8E8F50B4BB87E94F14ADAEE92C272C Validity Not Before: Oct 19 11:27:42 2025 GMT Not After : Oct 26 11:27:42 2025 GMT Subject: CN=68f4cb2e-eefd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a1:34:03:e4:c3:df:b6:ec:91:2b:a4:b9:a9: cc:83:fd:b8:3f:66:dc:f5:8d:66:ea:56:d9:c5:44: 11:8b:e9:32:fc:08:97:be:ce:74:88:b7:59:9f:e3: e9:dd:fd:45:30:80:51:77:dd:9c:b0:ca:6c:3b:4c: 13:48:37:56:0f:34:97:82:1e:6d:9d:b9:c8:1a:8d: 71:c0:be:35:c0:e7:c3:04:6e:b7:d3:68:ed:12:4d: c3:03:42:42:34:a5:49:8e:9b:f2:6d:d3:65:4c:0f: 2b:36:68:ae:c9:7b:05:09:78:0b:01:57:44:05:be: 33:c2:71:6d:4c:5e:0c:38:7a:01:f7:c5:5d:51:52: 6e:97:f6:0c:4f:3f:d1:48:22:b8:2e:85:7a:d6:d8: 64:e7:6b:be:00:3a:78:d7:88:1d:4e:e0:cf:93:1c: 5f:f6:18:56:80:21:6a:52:1b:d9:43:33:f1:f6:30: c5:76:9a:01:c8:74:29:bb:80:b7:12:c8:20:96:26: 51:b6:8a:1d:48:55:aa:4c:b0:79:59:f2:a5:2b:dc: 5d:e8:d2:57:42:52:69:06:fa:68:da:34:f3:a5:25: 7c:12:6a:9e:f7:f6:9a:c5:21:b6:9e:9a:b0:b5:ac: 4c:0c:e0:08:fc:25:16:0a:aa:9b:ae:08:33:42:b3: 1a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:9F:8B:1C:D9:CD:E2:4D:27:D2:CB:A4:08:64:59:3C:DD:4F:EB:3C X509v3 Authority Key Identifier: keyid:D6:F6:5C:96:4B:8E:8F:50:B4:BB:87:E9:4F:14:AD:AE:E9:2C:27:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5183/A4AF2CB08E8F11F0B07D9E0FC4F9AE02/1vZclkuOj1C0u4fpTxStruksJyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vZclkuOj1C0u4fpTxStruksJyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5183/A4AF2CB08E8F11F0B07D9E0FC4F9AE02/1vZclkuOj1C0u4fpTxStruksJyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:b6:77:1e:0c:ff:f4:aa:e7:37:31:21:ed:e0:3a:31:16:d1: 27:f9:c0:d4:75:63:bb:28:32:94:91:1b:95:2d:ca:8c:d1:79: bd:cb:18:46:c3:6c:7c:63:5b:f2:a8:94:39:a5:5d:de:cb:77: 8d:f9:da:84:2e:91:59:eb:74:e4:58:e6:06:ca:41:e7:76:c1: ab:56:8c:88:04:b4:cb:49:eb:cf:12:7c:54:cd:6a:87:9d:b4: 5f:ee:e3:dd:f2:aa:09:b0:13:0f:24:35:c9:21:17:6c:9c:4b: 08:c1:84:e8:4a:73:57:03:05:b9:2b:b6:1b:50:fe:52:80:01: d4:5d:7f:ca:18:91:a4:37:24:29:08:0a:9f:53:71:da:c3:c0: 17:01:1e:0e:5c:22:17:01:cb:46:de:61:2c:68:99:de:91:2b: fe:80:be:e9:02:52:be:9c:1f:8e:41:19:02:82:ce:ba:06:1b: 22:cc:ab:b3:1f:73:62:49:cc:28:72:99:1b:16:96:3c:fb:ed: f6:17:e4:a8:35:bf:54:33:ec:d5:e2:58:ab:33:8e:13:6a:a7: 15:f7:ec:6d:d2:cc:f1:45:64:f3:37:70:e8:11:08:d5:20:9b: 6e:fa:f6:74:80:e1:91:db:60:b4:9d:f4:3a:1d:f8:6c:39:87: b4:7a:7c:ca -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NTE4MzExMC8GA1UEBRMoRDZGNjVDOTY0QjhFOEY1MEI0QkI4N0U5NEYxNEFEQUVF OTJDMjcyQzAeFw0yNTEwMTkxMTI3NDJaFw0yNTEwMjYxMTI3NDJaMBgxFjAUBgNV BAMTDTY4ZjRjYjJlLWVlZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1oTQD5MPftuyRK6S5qcyD/bg/Ztz1jWbqVtnFRBGL6TL8CJe+znSIt1mf4+nd /UUwgFF33Zywymw7TBNIN1YPNJeCHm2ducgajXHAvjXA58MEbrfTaO0STcMDQkI0 pUmOm/Jt02VMDys2aK7JewUJeAsBV0QFvjPCcW1MXgw4egH3xV1RUm6X9gxPP9FI IrguhXrW2GTna74AOnjXiB1O4M+THF/2GFaAIWpSG9lDM/H2MMV2mgHIdCm7gLcS yCCWJlG2ih1IVapMsHlZ8qUr3F3o0ldCUmkG+mjaNPOlJXwSap739prFIbaemrC1 rEwM4Aj8JRYKqpuuCDNCsxpHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUd5+LHNnN 4k0n0sukCGRZPN1P6zwwHwYDVR0jBBgwFoAU1vZclkuOj1C0u4fpTxStruksJyww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1MTgzL0E0QUYyQ0IwOEU4 RjExRjBCMDdEOUUwRkM0RjlBRTAyLzF2WmNsa3VPajFDMHU0ZnBUeFN0cnVrc0p5 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMXZaY2xrdU9qMUMwdTRmcFR4U3RydWtzSnl3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 MTgzL0E0QUYyQ0IwOEU4RjExRjBCMDdEOUUwRkM0RjlBRTAyLzF2WmNsa3VPajFD MHU0ZnBUeFN0cnVrc0p5dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFm2dx4M//Sq5zcxIe3gOjEW0Sf5wNR1Y7soMpSRG5UtyozReb3LGEbD bHxjW/KolDmlXd7Ld4352oQukVnrdORY5gbKQed2watWjIgEtMtJ688SfFTNaoed tF/u493yqgmwEw8kNckhF2ycSwjBhOhKc1cDBbkrthtQ/lKAAdRdf8oYkaQ3JCkI Cp9TcdrDwBcBHg5cIhcBy0beYSxomd6RK/6AvukCUr6cH45BGQKCzroGGyLMq7Mf c2JJzChymRsWljz77fYX5Kg1v1Qz7NXiWKszjhNqpxX37G3SzPFFZPM3cOgRCNUg m2769nSA4ZHbYLSd9Dod+Gw5h7R6fMo= -----END CERTIFICATE-----Generated at Mon Oct 20 19:55:27 2025 by rpki-client