$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft File: _I1R2lNSEj3a5jdlZPjVaB2ksxw.mft (raw, json) Hash identifier: XZdTwi6QsIHqIJnLLNdBofmctTYOTBSR7ofiBIdFnME= Subject key identifier: 1C:05:43:8C:BE:FA:51:62:10:AC:C3:9E:37:DA:67:0B:58:D7:92:35 Authority key identifier: FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C Certificate issuer: /CN=A91FCB3B/serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C Certificate serial: 01A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft Manifest number: 01A0 Signing time: Sun 19 Oct 2025 05:52:34 +0000 Manifest this update: Sun 19 Oct 2025 05:52:34 +0000 Manifest next update: Sun 26 Oct 2025 05:52:34 +0000 Files and hashes: 1: _I1R2lNSEj3a5jdlZPjVaB2ksxw.crl (hash: N7+deSJs2BT+Box+acph8vYKJ3PxAswtNW522AQb0Ek=) 2: C9763EB431D811EE89285A41C4F9AE02.roa (hash: m1n+fMnb/ADNpdU1kcDXhgieJ7VTBfqDuhZU4DVN5dI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:52:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 420 (0x1a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCB3B, serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C Validity Not Before: Oct 19 05:52:34 2025 GMT Not After : Oct 26 05:52:34 2025 GMT Subject: CN=68f47ca2-9df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:db:40:93:d7:8e:19:63:fe:28:c1:ed:75:b8: c4:c1:3d:fd:87:d2:c8:e3:bd:c1:0f:a4:ac:20:2e: ca:3f:88:07:4d:66:38:d1:2e:e3:67:81:2a:03:8b: 89:2f:fd:9d:f7:02:05:53:af:ac:a1:01:91:d0:af: 07:ee:26:f1:65:b6:7f:d5:73:8f:9c:9b:f1:a8:23: 30:54:9b:c9:15:65:ff:a2:f7:76:9e:3f:d1:ff:79: 32:65:1f:ac:79:ef:6b:74:d9:07:f3:45:9b:fc:99: 62:7b:b6:a1:7c:f7:78:0f:db:ff:f6:23:31:95:2d: 93:e3:12:0c:fb:e7:83:45:85:3b:2a:5c:3b:6c:d9: 5e:50:f9:3d:a5:00:c4:38:eb:99:ed:a5:8c:eb:44: 58:a2:fe:dd:13:ae:fc:c5:02:4b:d4:d5:b0:cb:07: 72:79:8f:59:9c:11:08:17:73:28:43:4c:43:b0:f7: 38:59:ad:4a:24:6d:a6:db:63:a0:74:46:01:46:45: a8:e6:00:d6:2a:0b:8e:15:91:58:30:42:40:cd:e5: 78:9f:90:2d:57:7a:2e:85:a7:b2:cf:5a:76:21:8b: 3f:c7:81:de:1d:72:3f:bc:b4:85:7a:6f:f8:40:96: d9:02:c9:77:e9:46:df:9b:28:3b:d1:e5:22:9a:c3: 2e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:05:43:8C:BE:FA:51:62:10:AC:C3:9E:37:DA:67:0B:58:D7:92:35 X509v3 Authority Key Identifier: keyid:FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:94:d3:ec:63:ca:40:ef:17:1f:7e:14:52:b3:c5:42:f4:32: 07:03:e8:52:4b:8f:7e:4f:bc:be:92:27:a8:c4:c8:01:6f:bc: 13:ff:01:20:ec:ca:36:a0:14:ac:b0:37:c0:83:4a:d9:b2:86: 7f:5c:17:66:fc:91:ef:39:8d:82:a5:b8:f3:89:cb:ec:2a:db: 78:b8:0c:6f:91:a8:bf:19:76:13:9c:d4:5d:bf:de:c1:96:c8: 5d:d3:fb:fc:53:cb:00:c9:d7:7e:e2:6d:11:38:89:37:59:d2: f1:ad:f2:36:c2:21:c6:76:e0:57:90:a6:ba:5c:3f:43:1d:b8: b7:fb:2a:90:77:0d:04:d8:3d:82:07:3b:f3:49:69:57:a8:77: 8e:60:ee:28:63:57:6e:09:82:90:ca:38:cd:da:c5:fd:13:97: 02:8b:09:8f:7f:44:83:50:81:4c:fb:25:ff:30:ad:fd:2a:c5: 49:f5:ff:bc:b0:26:4c:1a:e6:52:fe:f4:32:3a:fb:52:61:bb: 7c:67:8d:fe:72:06:b3:90:a1:54:05:8d:84:ad:8d:59:c8:2a: a5:40:68:a0:db:ac:36:fd:43:82:1b:a8:fb:b4:58:06:42:18: d9:d4:81:33:0f:18:01:da:e9:12:a8:53:7a:6a:e0:0c:db:43: 6e:7b:fe:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNCM0IxMTAvBgNVBAUTKEZDOEQ1MURBNTM1MjEyM0REQUU2Mzc2NTY0RjhENTY4 MURBNEIzMUMwHhcNMjUxMDE5MDU1MjM0WhcNMjUxMDI2MDU1MjM0WjAYMRYwFAYD VQQDEw02OGY0N2NhMi05ZGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyttAk9eOGWP+KMHtdbjEwT39h9LI473BD6SsIC7KP4gHTWY40S7jZ4EqA4uJ L/2d9wIFU6+soQGR0K8H7ibxZbZ/1XOPnJvxqCMwVJvJFWX/ovd2nj/R/3kyZR+s ee9rdNkH80Wb/Jlie7ahfPd4D9v/9iMxlS2T4xIM++eDRYU7Klw7bNleUPk9pQDE OOuZ7aWM60RYov7dE678xQJL1NWwywdyeY9ZnBEIF3MoQ0xDsPc4Wa1KJG2m22Og dEYBRkWo5gDWKguOFZFYMEJAzeV4n5AtV3ouhaeyz1p2IYs/x4HeHXI/vLSFem/4 QJbZAsl36Ubfmyg70eUimsMudQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwFQ4y+ +lFiEKzDnjfaZwtY15I1MB8GA1UdIwQYMBaAFPyNUdpTUhI92uY3ZWT41WgdpLMc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0IzQi84NjI5QzQzMjMx RDgxMUVFOEJFOUM0NDBDNEY5QUUwMi9fSTFSMmxOU0VqM2E1amRsWlBqVmFCMmtz eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19JMVIybE5TRWozYTVqZGxaUGpWYUIya3N4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0IzQi84NjI5QzQzMjMxRDgxMUVFOEJFOUM0NDBDNEY5QUUwMi9fSTFSMmxOU0Vq M2E1amRsWlBqVmFCMmtzeHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFlNPsY8pA7xcffhRSs8VC9DIHA+hSS49+T7y+kieoxMgBb7wT/wEg 7Mo2oBSssDfAg0rZsoZ/XBdm/JHvOY2CpbjzicvsKtt4uAxvkai/GXYTnNRdv97B lshd0/v8U8sAydd+4m0ROIk3WdLxrfI2wiHGduBXkKa6XD9DHbi3+yqQdw0E2D2C BzvzSWlXqHeOYO4oY1duCYKQyjjN2sX9E5cCiwmPf0SDUIFM+yX/MK39KsVJ9f+8 sCZMGuZS/vQyOvtSYbt8Z43+cgazkKFUBY2ErY1ZyCqlQGig26w2/UOCG6j7tFgG QhjZ1IEzDxgB2ukSqFN6auAM20Nue/5O -----END CERTIFICATE-----Generated at Tue Oct 21 03:22:27 2025 by rpki-client