$ rpki-client -vvf rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft File: AgWcvp-GRsVguhhH2euIPY0dRJ0.mft (raw, json) Hash identifier: iMEHMkH1V92zsSCNurzM7DXgeVdoXAulecHx+/tBQ0w= Subject key identifier: 4D:E4:1B:FC:88:51:89:D3:35:7D:E3:9C:BF:53:C0:72:DA:A9:ED:82 Authority key identifier: 02:05:9C:BE:9F:86:46:C5:60:BA:18:47:D9:EB:88:3D:8D:1D:44:9D Certificate issuer: /CN=A91525A0/serialNumber=02059CBE9F8646C560BA1847D9EB883D8D1D449D Certificate serial: 041B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft Manifest number: 0416 Signing time: Sun 19 Oct 2025 02:19:58 +0000 Manifest this update: Sun 19 Oct 2025 02:19:57 +0000 Manifest next update: Sun 26 Oct 2025 02:19:57 +0000 Files and hashes: 1: AgWcvp-GRsVguhhH2euIPY0dRJ0.crl (hash: GqpyxAGA4x3uBk65CZPVgsHUX8MXQUIveSyMPouk2eU=) 2: 3D2A9DB0897D11ECAE8A760BC4F9AE02.roa (hash: 9AxcqXh9wRNZ9KWB7JmYs1ClA4NJwiNWZURNVazJEDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.crl rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1051 (0x41b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91525A0, serialNumber=02059CBE9F8646C560BA1847D9EB883D8D1D449D Validity Not Before: Oct 19 02:19:57 2025 GMT Not After : Oct 26 02:19:57 2025 GMT Subject: CN=68f44acd-fe13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a6:77:e5:2f:9d:c3:5c:de:9a:5d:71:0b:d2: c8:d4:e5:56:fa:64:2a:bb:00:79:00:93:ca:a4:d6: b7:c2:31:05:93:fa:50:a5:5b:8e:92:ca:01:e9:bf: 2b:54:ca:d8:d5:19:f3:01:f6:85:ab:72:ae:68:d9: ba:8a:b6:2e:a6:1b:54:e3:7c:d0:68:1f:9b:d2:88: 0c:6e:d6:cd:55:71:d5:af:82:2b:2e:88:8f:81:83: bf:17:13:b1:f3:42:3d:f4:14:df:58:57:eb:74:d1: 95:5e:97:aa:b3:9e:a9:c5:12:2e:6d:f2:a2:c8:6a: 98:27:3c:6f:dc:1a:0b:ed:0f:8c:14:c5:ec:44:36: a7:20:1d:3d:5f:90:0b:25:3f:b9:49:89:68:bf:79: 5d:f3:d4:ba:36:08:78:26:c5:0a:7a:db:bc:48:25: 37:7b:e9:a2:e8:d4:ca:97:8b:09:18:fb:6d:57:9a: a4:96:05:7d:6e:53:fc:45:f9:a8:fe:ca:a2:fa:a2: af:a4:7f:7f:78:71:89:0f:40:bc:39:e6:31:bb:99: d2:17:d3:a6:51:76:d6:da:a0:c9:61:2d:36:5d:98: 34:5c:3d:c2:e9:97:bd:ff:1d:0b:12:6c:5a:4e:65: b6:8b:e0:b4:b1:38:1b:f1:69:a2:63:27:a5:bc:ac: 8e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E4:1B:FC:88:51:89:D3:35:7D:E3:9C:BF:53:C0:72:DA:A9:ED:82 X509v3 Authority Key Identifier: keyid:02:05:9C:BE:9F:86:46:C5:60:BA:18:47:D9:EB:88:3D:8D:1D:44:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:09:4a:3c:b0:a4:c6:aa:b0:e5:dc:3f:8d:3b:4c:1d:2b:f0: 5a:3e:26:3e:77:7e:43:77:d6:a9:ac:e8:b0:73:db:16:f8:b5: a4:9f:2e:9f:a2:5f:b8:24:5c:3d:84:a4:6d:9b:0c:25:04:6a: 35:81:83:e6:7c:44:79:8c:62:1c:33:86:3f:54:26:77:47:97: 9b:8f:1b:72:ae:60:fa:af:a9:36:37:9e:7f:67:c5:46:36:91: 6a:52:6a:e5:9a:f0:5b:02:e2:e0:aa:40:19:d9:97:33:5f:ae: 00:39:4a:9b:83:4f:6b:dc:ec:7b:77:93:4d:7b:8b:0e:ad:9e: ce:93:b7:07:23:0d:94:ca:94:8f:52:b5:49:ad:bc:3c:65:11: 4b:eb:e0:d6:2d:05:ec:1c:ab:52:17:9d:43:b0:df:e9:db:3e: 41:7c:e1:26:97:05:9a:31:a9:b1:19:fb:7a:ee:0a:4e:f0:25: dd:4e:33:1b:91:f7:13:28:66:2c:b3:32:3f:39:24:11:30:60: 3a:bd:d8:e7:69:e5:51:64:fb:c2:0f:ec:d4:4a:d3:3a:f0:f2: 5e:5e:28:37:d4:8f:f1:97:59:a2:2e:92:41:23:b1:97:3d:98: 60:da:e9:6a:1d:d8:8a:9e:f5:ed:91:30:45:ee:65:9b:11:02: ec:4e:a2:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI1QTAxMTAvBgNVBAUTKDAyMDU5Q0JFOUY4NjQ2QzU2MEJBMTg0N0Q5RUI4ODNE OEQxRDQ0OUQwHhcNMjUxMDE5MDIxOTU3WhcNMjUxMDI2MDIxOTU3WjAYMRYwFAYD VQQDEw02OGY0NGFjZC1mZTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoKZ35S+dw1zeml1xC9LI1OVW+mQquwB5AJPKpNa3wjEFk/pQpVuOksoB6b8r VMrY1RnzAfaFq3KuaNm6irYuphtU43zQaB+b0ogMbtbNVXHVr4IrLoiPgYO/FxOx 80I99BTfWFfrdNGVXpeqs56pxRIubfKiyGqYJzxv3BoL7Q+MFMXsRDanIB09X5AL JT+5SYlov3ld89S6Ngh4JsUKetu8SCU3e+mi6NTKl4sJGPttV5qklgV9blP8Rfmo /sqi+qKvpH9/eHGJD0C8OeYxu5nSF9OmUXbW2qDJYS02XZg0XD3C6Ze9/x0LEmxa TmW2i+C0sTgb8WmiYyelvKyOUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3kG/yI UYnTNX3jnL9TwHLaqe2CMB8GA1UdIwQYMBaAFAIFnL6fhkbFYLoYR9nriD2NHUSd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjVBMC8xNDA2MTkzNjg5 NzkxMUVDOTVDRjFEODJDNEY5QUUwMi9BZ1djdnAtR1JzVmd1aGhIMmV1SVBZMGRS SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FnV2N2cC1HUnNWZ3VoaEgyZXVJUFkwZFJKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjVBMC8xNDA2MTkzNjg5NzkxMUVDOTVDRjFEODJDNEY5QUUwMi9BZ1djdnAtR1Jz Vmd1aGhIMmV1SVBZMGRSSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6CUo8sKTGqrDl3D+NO0wdK/BaPiY+d35Dd9aprOiwc9sW+LWkny6f ol+4JFw9hKRtmwwlBGo1gYPmfER5jGIcM4Y/VCZ3R5ebjxtyrmD6r6k2N55/Z8VG NpFqUmrlmvBbAuLgqkAZ2ZczX64AOUqbg09r3Ox7d5NNe4sOrZ7Ok7cHIw2UypSP UrVJrbw8ZRFL6+DWLQXsHKtSF51DsN/p2z5BfOEmlwWaMamxGft67gpO8CXdTjMb kfcTKGYsszI/OSQRMGA6vdjnaeVRZPvCD+zUStM68PJeXig31I/xl1miLpJBI7GX PZhg2ulqHdiKnvXtkTBF7mWbEQLsTqJF -----END CERTIFICATE-----Generated at Mon Oct 20 04:19:18 2025 by rpki-client