$ rpki-client -vvf rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft File: X322UMrENFF2rD8H3vyZGtT-3rg.mft (raw, json) Hash identifier: vVALt282SzXb1XIKZIhY73MQT7VevLesGlJQiQEOFqM= Subject key identifier: 13:45:26:EE:D5:69:DA:CB:E3:9B:8C:B6:5C:4B:A0:6D:7E:D7:35:4A Authority key identifier: 5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8 Certificate issuer: /CN=A919470F/serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8 Certificate serial: 04F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft Manifest number: 04F7 Signing time: Sun 19 Oct 2025 01:26:43 +0000 Manifest this update: Sun 19 Oct 2025 01:26:42 +0000 Manifest next update: Sun 26 Oct 2025 01:26:42 +0000 Files and hashes: 1: X322UMrENFF2rD8H3vyZGtT-3rg.crl (hash: wa+GuF1DJlDAVlFeTLeBcY3Fgs+gZlGzbZ9lAVGLMBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1271 (0x4f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919470F, serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8 Validity Not Before: Oct 19 01:26:42 2025 GMT Not After : Oct 26 01:26:42 2025 GMT Subject: CN=68f43e52-870d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:35:e5:16:98:f6:45:fd:bb:ca:68:d9:0d:fe: de:22:57:05:07:a0:e1:a4:01:f5:fe:ba:d3:c9:88: 19:4f:7e:b8:86:a0:26:17:8d:4d:a7:49:94:eb:d1: 0c:83:35:23:f7:0a:66:f7:62:27:40:c4:bb:1c:31: 55:59:03:b4:a0:bc:02:8d:00:81:43:41:d6:fb:ca: ce:53:89:15:f3:fa:7d:bb:48:62:c3:c0:94:c1:f8: c6:e3:15:9b:84:17:89:7a:2a:f7:2d:65:9b:87:7a: b1:c3:02:a1:9f:cb:76:74:24:8a:1a:2c:b2:f2:92: 49:bd:90:d5:9f:ae:76:20:44:75:bd:a7:a7:65:9a: b8:70:e6:13:d9:98:0c:f9:e1:74:7f:12:75:e2:44: 1a:c3:5d:16:a6:b1:fb:e3:2d:76:e2:33:e0:27:3f: b3:46:a4:0a:46:4d:43:25:b5:7b:e0:bd:a4:a3:22: 1b:8c:49:7b:e1:46:dd:a9:fd:1d:f1:13:f2:1a:d8: 9c:b6:0c:e7:1a:7d:e7:a8:b9:d0:07:27:10:96:e0: 18:af:3a:6c:79:de:b9:4b:78:f0:7c:0b:53:6f:44: 40:fd:52:de:60:a4:7b:e6:0d:b2:4b:6f:35:8a:3e: 82:f0:9e:e2:7d:78:d6:93:b0:07:e5:4f:6d:34:78: 2c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:45:26:EE:D5:69:DA:CB:E3:9B:8C:B6:5C:4B:A0:6D:7E:D7:35:4A X509v3 Authority Key Identifier: keyid:5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:89:5f:cf:32:92:74:dd:fe:a2:f5:43:bf:e8:df:98:da:1d: a7:fb:f7:ef:42:7e:92:67:c5:5f:7b:de:da:ad:de:df:e7:ed: b1:68:e1:e0:0a:e9:da:dc:bb:3a:29:32:a1:28:79:38:ab:ed: 91:ae:d6:86:fc:6b:7c:d0:1d:4a:fc:16:5e:c3:30:bc:a3:60: d3:14:38:6a:f9:44:71:0c:3a:b3:b0:37:09:59:f3:fd:ce:ac: e9:d0:0e:a4:35:00:2a:59:e0:e8:77:b5:98:ef:a3:da:93:98: 5d:09:53:b2:72:b4:de:b8:15:a7:3a:b3:a3:64:e4:0f:ac:d1: cf:5b:af:b2:32:15:5d:0d:ae:ca:6f:ee:73:30:dd:d0:5a:0a: 71:e1:8a:c7:4d:b1:07:76:95:17:b4:8e:87:ff:f3:b0:89:15: a3:fe:21:19:69:6e:f4:0c:95:d7:c9:3d:5e:d1:57:33:a3:83: 8a:db:57:f6:ec:d1:ff:05:55:f9:04:d6:23:5c:fa:99:32:56: eb:48:f0:34:1d:8d:51:9e:d2:46:c4:cb:5b:f9:c2:28:f5:3a: ac:19:5c:ae:58:8f:f1:74:36:2b:55:61:32:7d:a4:a6:84:e3: b7:5e:0b:df:c5:ec:31:62:39:72:9e:a4:19:1c:e7:6d:88:0c: 56:d6:9a:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ3MEYxMTAvBgNVBAUTKDVGN0RCNjUwQ0FDNDM0NTE3NkFDM0YwN0RFRkM5OTFB RDRGRURFQjgwHhcNMjUxMDE5MDEyNjQyWhcNMjUxMDI2MDEyNjQyWjAYMRYwFAYD VQQDEw02OGY0M2U1Mi04NzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjXlFpj2Rf27ymjZDf7eIlcFB6DhpAH1/rrTyYgZT364hqAmF41Np0mU69EM gzUj9wpm92InQMS7HDFVWQO0oLwCjQCBQ0HW+8rOU4kV8/p9u0hiw8CUwfjG4xWb hBeJeir3LWWbh3qxwwKhn8t2dCSKGiyy8pJJvZDVn652IER1vaenZZq4cOYT2ZgM +eF0fxJ14kQaw10WprH74y124jPgJz+zRqQKRk1DJbV74L2koyIbjEl74Ubdqf0d 8RPyGtictgznGn3nqLnQBycQluAYrzpsed65S3jwfAtTb0RA/VLeYKR75g2yS281 ij6C8J7ifXjWk7AH5U9tNHgsMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBNFJu7V adrL45uMtlxLoG1+1zVKMB8GA1UdIwQYMBaAFF99tlDKxDRRdqw/B978mRrU/t64 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDcwRi9ENTVFQjVGMDJE MEYxMUVDQUY3NkU2ODRDNEY5QUUwMi9YMzIyVU1yRU5GRjJyRDhIM3Z5Wkd0VC0z cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gzMjJVTXJFTkZGMnJEOEgzdnlaR3RULTNyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDcwRi9ENTVFQjVGMDJEMEYxMUVDQUY3NkU2ODRDNEY5QUUwMi9YMzIyVU1yRU5G RjJyRDhIM3Z5Wkd0VC0zcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMiV/PMpJ03f6i9UO/6N+Y2h2n+/fvQn6SZ8Vfe97ard7f5+2xaOHg Cuna3Ls6KTKhKHk4q+2RrtaG/Gt80B1K/BZewzC8o2DTFDhq+URxDDqzsDcJWfP9 zqzp0A6kNQAqWeDod7WY76Pak5hdCVOycrTeuBWnOrOjZOQPrNHPW6+yMhVdDa7K b+5zMN3QWgpx4YrHTbEHdpUXtI6H//OwiRWj/iEZaW70DJXXyT1e0Vczo4OK21f2 7NH/BVX5BNYjXPqZMlbrSPA0HY1RntJGxMtb+cIo9TqsGVyuWI/xdDYrVWEyfaSm hOO3XgvfxewxYjlynqQZHOdtiAxW1prU -----END CERTIFICATE-----Generated at Mon Oct 20 16:25:44 2025 by rpki-client