$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft File: 1383l1I1q95fSYn78_6TjVJ8GUg.mft (raw, json) Hash identifier: ykTaWDNR/uJNFUN99i9BvN4+PFlNzZV8We74s91D/go= Subject key identifier: 4D:AF:0A:40:D3:E2:8C:21:7E:5E:31:3B:83:96:50:15:9B:C5:68:43 Authority key identifier: D7:7F:37:97:52:35:AB:DE:5F:49:89:FB:F3:FE:93:8D:52:7C:19:48 Certificate issuer: /CN=A91F8336/serialNumber=D77F37975235ABDE5F4989FBF3FE938D527C1948 Certificate serial: 11FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft Manifest number: 11E3 Signing time: Sat 18 Oct 2025 17:42:20 +0000 Manifest this update: Sat 18 Oct 2025 17:42:19 +0000 Manifest next update: Sat 25 Oct 2025 17:42:19 +0000 Files and hashes: 1: 1383l1I1q95fSYn78_6TjVJ8GUg.crl (hash: D34siXD2s/ocXWxPDrS/hSLMYYUip3J8CbFs90TJXfk=) 2: 4AE6CFF8B25211EBA977EE09C4F9AE02.roa (hash: ZdFF8YkXhtC1AoahmW58AQqkSN0T37GBdkW2/eDce6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.crl rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:42:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4605 (0x11fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8336, serialNumber=D77F37975235ABDE5F4989FBF3FE938D527C1948 Validity Not Before: Oct 18 17:42:19 2025 GMT Not After : Oct 25 17:42:19 2025 GMT Subject: CN=68f3d17b-19f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2e:66:71:b2:fa:dd:b2:8f:cf:4d:48:d2:8f: 53:92:62:66:58:18:1c:27:9a:c4:d4:89:6c:78:74: 7d:77:d2:48:aa:69:18:d7:d7:99:a3:40:24:ee:47: fb:93:ef:33:19:8f:ff:c9:14:5d:f0:d5:40:4a:5e: e7:cb:c7:8a:35:20:6a:59:cc:08:f8:f6:e2:3c:cf: 4d:b4:8e:3f:50:fe:1f:d3:77:ef:0f:e3:49:89:1c: 04:19:dd:a7:98:9f:a1:2b:2e:84:64:8f:73:c5:ec: bb:31:17:64:f4:21:a8:54:8b:33:c9:45:36:69:66: 65:d9:1a:34:66:bb:d8:f1:78:e8:25:32:52:ce:c4: a8:85:1a:4f:3a:0a:ba:b8:01:82:d9:aa:4e:cc:c5: b0:d6:9d:e6:05:2f:c1:5b:ae:cf:c1:52:11:cb:03: dc:c9:6d:10:be:5d:b4:2b:1b:10:37:4c:08:c4:f2: b5:5e:8c:47:91:00:6b:e3:02:29:fd:81:89:48:94: 4b:8a:29:4c:d7:cd:9c:ba:d9:b6:4f:88:f9:6a:df: 78:69:72:3a:46:b4:e9:c9:b1:0a:bd:3d:2f:63:cb: 63:79:58:9f:79:7c:b4:8e:2a:66:2b:d9:11:ab:ae: 3c:d3:64:af:b3:2c:44:b7:8c:b6:8d:b2:51:a0:6f: af:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:AF:0A:40:D3:E2:8C:21:7E:5E:31:3B:83:96:50:15:9B:C5:68:43 X509v3 Authority Key Identifier: keyid:D7:7F:37:97:52:35:AB:DE:5F:49:89:FB:F3:FE:93:8D:52:7C:19:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:bd:06:f1:cb:c6:99:e8:80:88:49:23:a0:9b:b8:6f:f6:09: 9e:ff:39:ba:5e:c2:1c:24:18:9d:50:aa:b3:e8:a0:47:51:1f: a0:e4:9d:f0:8e:a3:82:e5:db:7b:cc:38:ce:ea:2d:3e:9d:b9: 5a:10:fc:17:5e:7c:86:6c:b9:a0:0c:bd:7b:b3:c7:16:f3:36: 02:8e:fe:fa:85:ed:02:8b:69:54:22:6c:93:f5:92:dc:ee:0f: 36:39:45:7d:ef:61:6d:27:00:20:a8:c2:da:23:a0:f1:f2:5d: b7:6b:76:ca:dd:b5:ed:4a:ce:86:4e:ea:65:75:33:a2:4e:dc: 28:57:70:47:00:28:e7:64:58:d9:2a:03:3d:9c:36:b4:a8:94: a5:38:f1:39:10:d5:d3:89:f6:d2:e9:52:a0:4c:79:96:cd:78: 60:69:f2:1c:9d:e0:f6:c8:2e:a1:83:43:e7:11:e6:16:07:bc: 37:bb:81:24:84:55:93:64:24:01:96:29:04:d9:d3:a6:33:65: 18:12:a2:a7:7a:4d:00:67:6f:84:38:88:f3:07:67:47:15:aa: 9f:7f:3d:19:2c:a3:0e:1e:2a:03:2c:1d:a0:2a:f5:ab:28:f3: 60:c2:56:6f:36:7b:b8:bb:ae:75:00:3b:18:74:58:7f:9f:a1: e5:7c:c7:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzMzYxMTAvBgNVBAUTKEQ3N0YzNzk3NTIzNUFCREU1RjQ5ODlGQkYzRkU5MzhE NTI3QzE5NDgwHhcNMjUxMDE4MTc0MjE5WhcNMjUxMDI1MTc0MjE5WjAYMRYwFAYD VQQDEw02OGYzZDE3Yi0xOWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5S5mcbL63bKPz01I0o9TkmJmWBgcJ5rE1IlseHR9d9JIqmkY19eZo0Ak7kf7 k+8zGY//yRRd8NVASl7ny8eKNSBqWcwI+PbiPM9NtI4/UP4f03fvD+NJiRwEGd2n mJ+hKy6EZI9zxey7MRdk9CGoVIszyUU2aWZl2Ro0ZrvY8XjoJTJSzsSohRpPOgq6 uAGC2apOzMWw1p3mBS/BW67PwVIRywPcyW0Qvl20KxsQN0wIxPK1XoxHkQBr4wIp /YGJSJRLiilM182cutm2T4j5at94aXI6RrTpybEKvT0vY8tjeVifeXy0jipmK9kR q64802SvsyxEt4y2jbJRoG+vOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE2vCkDT 4owhfl4xO4OWUBWbxWhDMB8GA1UdIwQYMBaAFNd/N5dSNaveX0mJ+/P+k41SfBlI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODMzNi8zN0UxNjczRUZE MUQxMUU4QjNFMzZFNTdDNEY5QUUwMi8xMzgzbDFJMXE5NWZTWW43OF82VGpWSjhH VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEzODNsMUkxcTk1ZlNZbjc4XzZUalZKOEdVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODMzNi8zN0UxNjczRUZEMUQxMUU4QjNFMzZFNTdDNEY5QUUwMi8xMzgzbDFJMXE5 NWZTWW43OF82VGpWSjhHVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSvQbxy8aZ6ICISSOgm7hv9gme/zm6XsIcJBidUKqz6KBHUR+g5J3w jqOC5dt7zDjO6i0+nblaEPwXXnyGbLmgDL17s8cW8zYCjv76he0Ci2lUImyT9ZLc 7g82OUV972FtJwAgqMLaI6Dx8l23a3bK3bXtSs6GTupldTOiTtwoV3BHACjnZFjZ KgM9nDa0qJSlOPE5ENXTifbS6VKgTHmWzXhgafIcneD2yC6hg0PnEeYWB7w3u4Ek hFWTZCQBlikE2dOmM2UYEqKnek0AZ2+EOIjzB2dHFaqffz0ZLKMOHioDLB2gKvWr KPNgwlZvNnu4u651ADsYdFh/n6HlfMds -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:16 2025 by rpki-client