$ rpki-client -vvf rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft File: f32FZbsEGDw68czSI-nEYR8VCAY.mft (raw, json) Hash identifier: IDzsLCqB9+UWwmr6SaYLazvtcertFwShfvQAeew2lV8= Subject key identifier: 2B:86:36:EF:B0:5F:07:12:25:DD:66:4C:EB:FE:30:1A:D7:40:69:9C Authority key identifier: 7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06 Certificate issuer: /CN=A9194004/serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806 Certificate serial: 01A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft Manifest number: 019F Signing time: Sun 19 Oct 2025 05:51:08 +0000 Manifest this update: Sun 19 Oct 2025 05:51:07 +0000 Manifest next update: Sun 26 Oct 2025 05:51:07 +0000 Files and hashes: 1: f32FZbsEGDw68czSI-nEYR8VCAY.crl (hash: TnUpQYpO81qqXb/3i4iw8rvlXteGdPabmRiZqWaDE3c=) 2: 4A6E97AC311E11EE85C30E3BC4F9AE02.roa (hash: qONN8LKBOCS/G8QK//DwNmNBl/nUXzBz7NrGBoGYHlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:51:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 418 (0x1a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194004, serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806 Validity Not Before: Oct 19 05:51:07 2025 GMT Not After : Oct 26 05:51:07 2025 GMT Subject: CN=68f47c4b-626c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:22:fd:e5:48:92:e4:f7:4e:86:dd:a7:c5:35: 02:25:9d:0c:8d:b0:5c:a6:03:b1:f1:49:82:21:35: f5:12:4b:d2:14:d1:1d:ec:1a:24:1f:08:86:f9:14: e0:65:fa:43:5e:03:af:27:d4:b7:50:c7:f1:a4:be: dc:a1:43:76:ba:67:28:32:ac:65:e9:5c:a0:aa:95: d0:df:e2:a0:2d:87:81:90:62:40:ba:53:b2:75:30: ee:30:ad:b4:db:06:e4:c5:14:90:70:e6:91:74:00: 99:42:11:72:d5:76:4a:39:a6:b1:44:69:df:be:24: ca:f1:a6:ef:1d:4e:50:88:17:75:f4:2d:2e:ec:de: 45:75:9c:a0:39:d3:3b:73:94:61:83:91:37:d3:13: e8:06:00:5c:44:32:c5:2d:45:47:ea:a6:fd:46:3f: 44:c1:cb:0d:27:42:d7:60:e5:46:08:cb:60:d0:ae: db:01:4b:40:b3:64:0d:50:5e:b2:28:66:80:91:ae: 31:de:a6:33:bf:b9:13:70:7e:8d:39:88:02:91:e0: dc:3c:a9:7b:0c:e1:a7:3a:8a:ba:3b:8d:ff:95:8f: 03:c6:fe:66:b1:31:c8:6c:2b:de:93:7f:85:1c:49: 89:73:13:3e:b6:d3:49:50:2e:58:0c:b8:73:59:c5: 7c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:86:36:EF:B0:5F:07:12:25:DD:66:4C:EB:FE:30:1A:D7:40:69:9C X509v3 Authority Key Identifier: keyid:7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:fa:17:d5:09:49:96:7f:ae:03:2b:f6:61:d0:35:4e:e2:59: cf:8b:77:10:5e:65:ff:be:f3:f2:a2:c5:f2:91:3f:f2:ce:ef: dc:9f:91:65:05:72:c2:32:9c:f0:be:36:26:ac:30:a8:2a:79: ea:2a:f6:33:f8:13:ce:77:2e:f4:9f:51:ef:7b:c2:49:16:2d: 82:ef:85:2d:f8:03:40:1b:40:db:d5:f5:a8:9a:c2:4f:0e:c0: d7:f7:0b:ff:4c:05:77:30:c2:99:fe:dc:6b:02:9b:6e:76:64: 76:cf:9e:b7:a2:61:29:dc:1d:27:11:dd:a7:a0:c1:0b:31:a5: a4:57:9f:2b:98:f8:9a:7a:3f:af:01:18:58:71:9a:b9:65:96: 07:78:80:3e:ac:8b:d8:3c:ee:4a:75:b7:d9:ff:02:6b:de:c7: 40:57:92:b5:a0:38:74:d9:e6:5c:67:c5:cb:8a:31:b2:e1:0c: 30:66:5d:02:64:2d:fc:17:83:0d:6c:64:92:4d:cb:25:81:fc: 86:96:4a:75:7c:07:90:a8:12:c1:a9:7a:a2:cc:ad:a3:b3:ab: ce:54:ae:95:b1:06:fe:83:1c:30:87:e6:e1:48:e2:75:5e:37: d4:9b:39:f2:44:17:e0:b0:ce:99:72:90:27:0d:62:a0:28:2c: 0d:97:b0:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQwMDQxMTAvBgNVBAUTKDdGN0Q4NTY1QkIwNDE4M0MzQUYxQ0NEMjIzRTlDNDYx MUYxNTA4MDYwHhcNMjUxMDE5MDU1MTA3WhcNMjUxMDI2MDU1MTA3WjAYMRYwFAYD VQQDEw02OGY0N2M0Yi02MjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3yL95UiS5PdOht2nxTUCJZ0MjbBcpgOx8UmCITX1EkvSFNEd7BokHwiG+RTg ZfpDXgOvJ9S3UMfxpL7coUN2umcoMqxl6VygqpXQ3+KgLYeBkGJAulOydTDuMK20 2wbkxRSQcOaRdACZQhFy1XZKOaaxRGnfviTK8abvHU5QiBd19C0u7N5FdZygOdM7 c5Rhg5E30xPoBgBcRDLFLUVH6qb9Rj9EwcsNJ0LXYOVGCMtg0K7bAUtAs2QNUF6y KGaAka4x3qYzv7kTcH6NOYgCkeDcPKl7DOGnOoq6O43/lY8Dxv5msTHIbCvek3+F HEmJcxM+ttNJUC5YDLhzWcV8SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCuGNu+w XwcSJd1mTOv+MBrXQGmcMB8GA1UdIwQYMBaAFH99hWW7BBg8OvHM0iPpxGEfFQgG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDAwNC8wNDk1NDZDRTMw MkMxMUVFQkEzRUEwMTNDNEY5QUUwMi9mMzJGWmJzRUdEdzY4Y3pTSS1uRVlSOFZD QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YzMkZaYnNFR0R3NjhjelNJLW5FWVI4VkNBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDAwNC8wNDk1NDZDRTMwMkMxMUVFQkEzRUEwMTNDNEY5QUUwMi9mMzJGWmJzRUdE dzY4Y3pTSS1uRVlSOFZDQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7+hfVCUmWf64DK/Zh0DVO4lnPi3cQXmX/vvPyosXykT/yzu/cn5Fl BXLCMpzwvjYmrDCoKnnqKvYz+BPOdy70n1Hve8JJFi2C74Ut+ANAG0Db1fWomsJP DsDX9wv/TAV3MMKZ/txrAptudmR2z563omEp3B0nEd2noMELMaWkV58rmPiaej+v ARhYcZq5ZZYHeIA+rIvYPO5KdbfZ/wJr3sdAV5K1oDh02eZcZ8XLijGy4QwwZl0C ZC38F4MNbGSSTcslgfyGlkp1fAeQqBLBqXqizK2js6vOVK6VsQb+gxwwh+bhSOJ1 XjfUmznyRBfgsM6ZcpAnDWKgKCwNl7CG -----END CERTIFICATE-----Generated at Mon Oct 20 07:46:25 2025 by rpki-client