$ rpki-client -vvf rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft File: IffNCqAWhDVSmHRj5kIpcu8DnOg.mft (raw, json) Hash identifier: XJR+ELnuoe2kI/ioCZ6smQNgRseGnePG1LYxkBmYPsk= Subject key identifier: 4C:39:89:DE:88:02:62:6B:61:F5:3F:1E:AA:E8:15:91:E5:96:46:0B Authority key identifier: 21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8 Certificate issuer: /CN=A919710C/serialNumber=21F7CD0AA016843552987463E6422972EF039CE8 Certificate serial: 04BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft Manifest number: 04B4 Signing time: Sun 19 Oct 2025 01:43:55 +0000 Manifest this update: Sun 19 Oct 2025 01:43:54 +0000 Manifest next update: Sun 26 Oct 2025 01:43:54 +0000 Files and hashes: 1: IffNCqAWhDVSmHRj5kIpcu8DnOg.crl (hash: vtoj/plvz5UBlBktw8AoWToM4DeGTyK6JsElM7lELUw=) 2: F47ED252878B11EEA8C62644C4F9AE02.roa (hash: FXBB9DdsLSCSLqmcy5GfEeeUEH9NAw4i9aMiOHO8iOI=) 3: E097013E910C11EFB994E187C4F9AE02.roa (hash: vrgdHN+EQa1Kq7q/Jj9Y5Q0FA9lEQE1lA2kxOo5yBEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:43:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1213 (0x4bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919710C, serialNumber=21F7CD0AA016843552987463E6422972EF039CE8 Validity Not Before: Oct 19 01:43:54 2025 GMT Not After : Oct 26 01:43:54 2025 GMT Subject: CN=68f4425a-5c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:37:d0:31:55:ff:f5:60:94:1a:77:4f:4f:5c: f0:ee:fb:2b:df:7b:fd:f3:58:ce:00:08:e7:f8:c2: 07:b1:34:f8:40:56:a8:0a:4c:0e:18:7b:da:83:e2: d5:95:88:e8:59:53:63:c0:15:2c:0b:9f:50:69:ef: 82:51:39:b4:80:b1:38:05:18:2e:5a:04:1f:e3:c9: a5:a0:d6:6e:c6:64:78:24:df:44:69:48:a2:58:8e: 02:49:42:21:5e:e5:28:a2:56:eb:8b:09:6f:81:2e: 20:b6:cd:e6:ad:42:51:fb:8e:ac:ae:01:12:af:cf: f9:7d:cf:a1:c6:13:45:32:69:0d:ec:90:88:9f:a1: 3c:69:6c:51:99:c7:f5:e6:5b:eb:45:66:4e:02:66: 4e:ac:e7:c0:a4:7b:0c:3e:26:d8:24:6c:cc:a1:9a: 6e:f8:48:e5:19:84:04:e4:d9:87:5a:a1:1a:12:d9: 03:a7:a3:28:77:2f:53:d0:38:5a:9d:4c:35:a3:fd: 8b:d0:70:d3:cf:0f:8e:5a:d2:e4:f8:8d:d0:9f:ba: 28:4a:7b:d0:d7:0a:bd:a1:99:5d:0e:65:3d:f8:df: 7d:f9:ac:e9:56:f4:b6:39:7b:dd:a8:d5:fb:cd:14: e3:b8:46:60:bd:b7:99:da:e0:33:3b:ce:c9:64:a2: 84:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:39:89:DE:88:02:62:6B:61:F5:3F:1E:AA:E8:15:91:E5:96:46:0B X509v3 Authority Key Identifier: keyid:21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:4c:ea:e5:3d:11:18:77:6c:7a:11:f5:32:ee:fb:84:9e:58: aa:3a:d3:03:1b:09:2e:9c:90:f4:04:31:17:ac:98:cd:86:e4: 6b:74:94:de:9d:31:0e:de:98:c6:12:22:61:7c:f9:26:15:ee: c7:ad:08:5d:94:c0:d5:b9:8a:3b:54:47:48:5b:95:4f:de:07: 87:d6:94:6b:05:be:98:e3:87:bc:ea:aa:19:5e:b7:79:68:65: 3b:e5:a3:70:f0:1f:7a:0c:34:8b:11:0b:9d:68:0d:71:61:9e: 6d:46:4a:0c:52:33:41:60:86:25:aa:28:33:0b:3d:68:3b:46: 53:86:ac:92:3a:db:ac:e9:0d:da:85:e0:82:be:56:3d:54:e0: c0:28:94:c0:dc:15:eb:21:5c:fe:3e:ba:e8:27:cc:29:df:a9: 78:17:ff:55:05:79:79:5e:f9:89:e5:de:2b:39:85:df:4c:19: 85:4c:fb:ca:95:e1:34:6f:dc:95:a8:e2:b0:34:27:93:08:ed: 58:cd:c3:8c:90:7e:30:d0:86:2c:dc:84:64:b6:41:38:fa:ac: 67:58:95:fc:fa:e0:f5:45:08:53:1a:09:3b:89:a1:42:4d:f6: d2:ed:0a:6e:f0:d9:69:f2:58:31:c3:ec:70:2f:ab:3c:fe:c6: 68:47:95:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxMEMxMTAvBgNVBAUTKDIxRjdDRDBBQTAxNjg0MzU1Mjk4NzQ2M0U2NDIyOTcy RUYwMzlDRTgwHhcNMjUxMDE5MDE0MzU0WhcNMjUxMDI2MDE0MzU0WjAYMRYwFAYD VQQDEw02OGY0NDI1YS01Yzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDfQMVX/9WCUGndPT1zw7vsr33v981jOAAjn+MIHsTT4QFaoCkwOGHvag+LV lYjoWVNjwBUsC59Qae+CUTm0gLE4BRguWgQf48mloNZuxmR4JN9EaUiiWI4CSUIh XuUoolbriwlvgS4gts3mrUJR+46srgESr8/5fc+hxhNFMmkN7JCIn6E8aWxRmcf1 5lvrRWZOAmZOrOfApHsMPibYJGzMoZpu+EjlGYQE5NmHWqEaEtkDp6Mody9T0Dha nUw1o/2L0HDTzw+OWtLk+I3Qn7ooSnvQ1wq9oZldDmU9+N99+azpVvS2OXvdqNX7 zRTjuEZgvbeZ2uAzO87JZKKE4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEw5id6I AmJrYfU/HqroFZHllkYLMB8GA1UdIwQYMBaAFCH3zQqgFoQ1Uph0Y+ZCKXLvA5zo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzEwQy8yRjM2NzYxMjRC NjAxMUVDOTU1NERDNTBDNEY5QUUwMi9JZmZOQ3FBV2hEVlNtSFJqNWtJcGN1OERu T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmZk5DcUFXaERWU21IUmo1a0lwY3U4RG5PZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzEwQy8yRjM2NzYxMjRCNjAxMUVDOTU1NERDNTBDNEY5QUUwMi9JZmZOQ3FBV2hE VlNtSFJqNWtJcGN1OERuT2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKTOrlPREYd2x6EfUy7vuEnliqOtMDGwkunJD0BDEXrJjNhuRrdJTe nTEO3pjGEiJhfPkmFe7HrQhdlMDVuYo7VEdIW5VP3geH1pRrBb6Y44e86qoZXrd5 aGU75aNw8B96DDSLEQudaA1xYZ5tRkoMUjNBYIYlqigzCz1oO0ZThqySOtus6Q3a heCCvlY9VODAKJTA3BXrIVz+PrroJ8wp36l4F/9VBXl5XvmJ5d4rOYXfTBmFTPvK leE0b9yVqOKwNCeTCO1YzcOMkH4w0IYs3IRktkE4+qxnWJX8+uD1RQhTGgk7iaFC TfbS7Qpu8Nlp8lgxw+xwL6s8/sZoR5Ur -----END CERTIFICATE-----Generated at Mon Oct 20 19:27:45 2025 by rpki-client