$ rpki-client -vvf rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft File: _gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft (raw, json) Hash identifier: 7CPg4CSnOLZ3gYdYtDeWSIotKKU9djtO0d+cdjZOLCA= Subject key identifier: 54:02:53:1D:16:60:1A:B0:1F:B0:F0:6E:78:A5:0B:DA:5D:05:E6:E1 Authority key identifier: FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C Certificate issuer: /CN=A919A3F0/serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft Manifest number: 01AA Signing time: Sun 19 Oct 2025 05:48:27 +0000 Manifest this update: Sun 19 Oct 2025 05:48:26 +0000 Manifest next update: Sun 26 Oct 2025 05:48:26 +0000 Files and hashes: 1: _gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl (hash: Iw4GbWbimWl9tY3sxckoVffxmaMWBc79m2tFepBwfCI=) 2: D7B77EDA319411F08F477C2AC4F9AE02.roa (hash: C5cqhk4TJTYY2C3i+V15FW2BpXNmnBODb2L/J1hOJq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A3F0, serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C Validity Not Before: Oct 19 05:48:26 2025 GMT Not After : Oct 26 05:48:26 2025 GMT Subject: CN=68f47baa-25d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:41:42:62:cb:18:8c:8a:af:c4:f7:3f:8e:68: c6:a7:32:1d:fa:5f:c3:83:93:4d:69:03:d9:d6:d4: 9c:98:04:b8:d9:32:a1:1e:e5:cc:4e:b7:e5:97:d5: e8:1b:c1:c4:de:e9:fb:8d:8f:a7:d0:37:aa:2d:07: 37:a8:92:74:ec:a1:ed:b8:d2:7a:4f:b7:16:d2:d8: 26:7a:e3:b4:57:01:6b:69:77:89:5e:7f:9c:2f:f0: 5b:49:24:f3:42:a8:1c:dc:e1:bb:da:9d:d0:d6:85: 62:3d:90:79:1d:9b:76:39:a1:8b:83:24:51:e8:9e: e6:d9:ee:0c:7a:2e:1f:1b:f3:59:1a:af:3e:0c:b4: b7:51:32:f7:e2:55:de:14:bb:54:80:78:09:96:f4: 21:f7:11:d8:e1:d0:8b:ee:61:65:70:81:d1:a1:60: 80:b1:2e:84:7c:9b:a3:4b:8d:c0:80:3a:ce:29:2e: 67:2a:d4:5b:75:4e:c9:a9:cd:42:bf:2c:08:2f:a7: 8c:61:c1:b8:ce:0e:8a:67:e4:25:f6:3a:9d:10:9a: 88:7e:e2:9b:67:4c:68:e0:25:16:b0:b3:40:93:47: ab:23:64:30:e7:05:2a:ad:76:85:5d:c0:e0:0e:6d: 56:c2:4e:54:e8:8b:b2:1d:b4:29:52:0e:c1:1a:f6: cc:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:02:53:1D:16:60:1A:B0:1F:B0:F0:6E:78:A5:0B:DA:5D:05:E6:E1 X509v3 Authority Key Identifier: keyid:FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:3c:5a:c2:9c:a1:98:77:c5:2d:a6:c7:ec:52:24:78:a7:24: 11:60:b2:79:4d:25:eb:76:64:b5:75:f8:7c:e5:89:1b:e3:85: 9d:41:4c:be:77:5d:ec:ba:20:4a:40:da:56:f4:ba:70:7e:b2: 88:39:d5:2a:c1:d0:7f:36:17:b4:d6:04:a9:9a:1a:f7:88:61: 26:c8:d7:96:98:d2:70:eb:2a:a1:2a:01:b7:e1:52:41:c6:71: 63:28:5c:b4:fa:a7:bd:03:97:a2:fd:cf:2b:4c:60:79:07:88: 46:12:43:c6:59:db:ac:2d:a5:f3:7d:fd:1d:85:f6:9c:d5:fd: d5:b9:81:39:66:2c:aa:ae:fc:a3:58:46:fc:6b:bd:cf:14:d0: 13:6f:0d:fe:1a:6f:71:61:1c:1e:25:35:17:f6:81:f0:f7:be: 35:a1:d8:66:ed:e8:62:32:80:2d:4f:5e:0c:03:fb:d2:d2:0b: 19:fb:58:5e:33:36:30:13:93:67:a7:6b:9f:ab:63:54:00:77: 43:3a:44:60:6c:6f:71:e5:de:ab:42:c5:a6:67:0b:8e:65:9e: cf:83:1b:bf:63:71:f0:2d:96:cb:08:87:89:a9:0e:f7:50:dd: eb:17:67:13:08:86:2e:08:fc:f9:1d:f9:24:35:5e:35:8d:df: 82:c6:66:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUEzRjAxMTAvBgNVBAUTKEZFMDVFRkI3MDEyNUQ1MjA0NzZGNjNCQzYwOUY1NTRE QzQ5QUM1OUMwHhcNMjUxMDE5MDU0ODI2WhcNMjUxMDI2MDU0ODI2WjAYMRYwFAYD VQQDEw02OGY0N2JhYS0yNWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0FCYssYjIqvxPc/jmjGpzId+l/Dg5NNaQPZ1tScmAS42TKhHuXMTrfll9Xo G8HE3un7jY+n0DeqLQc3qJJ07KHtuNJ6T7cW0tgmeuO0VwFraXeJXn+cL/BbSSTz Qqgc3OG72p3Q1oViPZB5HZt2OaGLgyRR6J7m2e4Mei4fG/NZGq8+DLS3UTL34lXe FLtUgHgJlvQh9xHY4dCL7mFlcIHRoWCAsS6EfJujS43AgDrOKS5nKtRbdU7Jqc1C vywIL6eMYcG4zg6KZ+Ql9jqdEJqIfuKbZ0xo4CUWsLNAk0erI2Qw5wUqrXaFXcDg Dm1Wwk5U6IuyHbQpUg7BGvbMpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQCUx0W YBqwH7DwbnilC9pdBebhMB8GA1UdIwQYMBaAFP4F77cBJdUgR29jvGCfVU3EmsWc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTNGMC9GM0MyQTkyMjJC OEExMUVFQUREMjIxMENDNEY5QUUwMi9fZ1h2dHdFbDFTQkhiMk84WUo5VlRjU2F4 WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19nWHZ0d0VsMVNCSGIyTzhZSjlWVGNTYXhady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTNGMC9GM0MyQTkyMjJCOEExMUVFQUREMjIxMENDNEY5QUUwMi9fZ1h2dHdFbDFT QkhiMk84WUo5VlRjU2F4WncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPPFrCnKGYd8UtpsfsUiR4pyQRYLJ5TSXrdmS1dfh85Ykb44WdQUy+ d13suiBKQNpW9LpwfrKIOdUqwdB/Nhe01gSpmhr3iGEmyNeWmNJw6yqhKgG34VJB xnFjKFy0+qe9A5ei/c8rTGB5B4hGEkPGWdusLaXzff0dhfac1f3VuYE5Ziyqrvyj WEb8a73PFNATbw3+Gm9xYRweJTUX9oHw9741odhm7ehiMoAtT14MA/vS0gsZ+1he MzYwE5Nnp2ufq2NUAHdDOkRgbG9x5d6rQsWmZwuOZZ7Pgxu/Y3HwLZbLCIeJqQ73 UN3rF2cTCIYuCPz5HfkkNV41jd+Cxmai -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:31 2025 by rpki-client