$ rpki-client -vvf rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft File: 2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft (raw, json) Hash identifier: yKD0WJsyzNOUSRN35V8UAm+R8Q5zxzqgVNsyW4hR4Go= Subject key identifier: 00:5A:51:C6:D2:8A:4A:08:E4:E1:A5:EA:71:02:A6:C8:F4:CA:8E:83 Authority key identifier: D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E Certificate issuer: /CN=A919C19A/serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E Certificate serial: 04B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft Manifest number: 04A9 Signing time: Sun 19 Oct 2025 01:46:53 +0000 Manifest this update: Sun 19 Oct 2025 01:46:52 +0000 Manifest next update: Sun 26 Oct 2025 01:46:52 +0000 Files and hashes: 1: 2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl (hash: sPS7IQ4lpb8ghm/94F+1/I3XuaYPm5yBpLUp3SyLbk8=) 2: F943257E12F511EDA9E7C939C4F9AE02.roa (hash: My/AnfHzuVQXYQgSRRC6SAXx84s6nLjdhtAzMmqyjDg=) 3: 4CC86698C4FA11EE86A51C0EC4F9AE02.roa (hash: 1L1EbJoORDKgeElorwmyrU76/atwwCYpeCr4PPGihVE=) 4: D9A7B280C4FA11EEA3AF2932C4F9AE02.roa (hash: D+FMpyZsISfccSz7KiOlQqTZgWE7m1EZKNLzF9fgEyY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:46:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1207 (0x4b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C19A, serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E Validity Not Before: Oct 19 01:46:52 2025 GMT Not After : Oct 26 01:46:52 2025 GMT Subject: CN=68f4430c-4ea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:73:62:97:52:79:4f:4f:78:2a:51:15:c7:0d: 3c:6d:12:df:1f:d5:c3:2e:d6:15:d3:24:16:db:e8: 6d:51:59:3b:ff:ae:f0:b8:69:31:29:ae:fe:69:2c: ac:6c:cd:56:b5:79:33:f6:08:68:c1:45:90:5f:8d: 5f:46:fd:4c:03:7a:d9:08:d1:f9:78:3b:a7:25:32: ff:b3:92:41:a5:58:e6:da:6c:56:44:c7:2b:44:fd: e1:39:9d:9d:bd:02:d9:da:b4:7f:e3:a7:98:c9:b6: d4:12:e1:89:91:f7:e8:57:e9:bb:c0:f9:81:42:bc: de:f0:42:d7:f4:36:87:2a:af:90:1a:44:a8:b4:87: 12:8f:b5:97:b1:79:05:7f:ec:90:e5:08:42:a4:6c: c0:c8:02:9b:28:51:76:32:ea:e6:4d:78:f1:bd:a6: 32:40:08:d5:f8:6a:ea:57:8f:0d:9a:a2:f4:22:62: b7:2e:46:a8:bf:35:68:51:f0:81:31:01:31:94:5d: 4c:1d:e9:c2:67:ef:c3:54:eb:48:d9:6a:77:47:a7: 5c:46:6a:9e:a9:6d:09:d9:7a:53:20:89:8a:cb:6b: 9a:fd:51:5f:3e:bd:c4:32:9f:64:5f:b2:d2:59:ec: 92:ad:c8:73:93:4d:9e:a0:36:28:0d:54:ee:6f:e8: 64:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:5A:51:C6:D2:8A:4A:08:E4:E1:A5:EA:71:02:A6:C8:F4:CA:8E:83 X509v3 Authority Key Identifier: keyid:D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:1e:ad:57:35:4d:bc:2f:45:4d:89:e8:75:63:f1:d3:13:fa: 98:5a:1c:f1:81:d8:7f:05:d5:f8:ad:bc:f3:90:3e:ef:2d:2e: 0a:6c:d8:50:9c:c4:8d:36:6b:65:b7:cb:3b:43:b3:1b:9c:c0: ac:35:0d:41:bc:1d:5b:6f:0c:b6:36:e9:30:a3:df:d1:a0:d7: 90:53:f7:c6:28:3e:d3:b6:1f:f9:de:a5:89:9e:36:2e:7c:1b: 4d:20:6e:2a:4d:11:70:4a:d0:7d:1f:21:14:62:e1:c5:83:50: 31:25:64:f3:46:76:e7:a3:f0:f6:ae:c2:8d:c0:56:bb:5d:c5: fa:1c:c8:bb:ec:ef:fb:5c:c6:13:39:25:55:54:46:b5:3d:b0: 83:b8:cf:45:4a:fa:9e:26:9b:df:4e:e3:1c:d4:90:d6:10:99: 5a:80:03:da:f2:f6:5b:ed:5a:f3:ce:51:6a:35:05:a8:e8:01: aa:36:5e:53:99:16:71:1e:12:3a:e9:65:61:b4:ce:33:5c:21: cf:b7:7c:09:2d:2a:6c:81:34:42:f1:60:53:f1:99:67:a5:be: f9:0d:f3:0b:73:19:7d:51:65:4b:28:2c:69:0e:2d:9a:c0:ac: 10:f8:be:3b:1a:ea:d4:f3:09:2d:7e:a5:6c:6a:ab:9c:19:2d: 3d:4a:0d:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMxOUExMTAvBgNVBAUTKEQ4OUNGRjZEN0Q5NTUxQUU3MDREOTNFOTc1NTM2MTZD OERCMTNGNUUwHhcNMjUxMDE5MDE0NjUyWhcNMjUxMDI2MDE0NjUyWjAYMRYwFAYD VQQDEw02OGY0NDMwYy00ZWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3HNil1J5T094KlEVxw08bRLfH9XDLtYV0yQW2+htUVk7/67wuGkxKa7+aSys bM1WtXkz9ghowUWQX41fRv1MA3rZCNH5eDunJTL/s5JBpVjm2mxWRMcrRP3hOZ2d vQLZ2rR/46eYybbUEuGJkffoV+m7wPmBQrze8ELX9DaHKq+QGkSotIcSj7WXsXkF f+yQ5QhCpGzAyAKbKFF2MurmTXjxvaYyQAjV+GrqV48NmqL0ImK3LkaovzVoUfCB MQExlF1MHenCZ+/DVOtI2Wp3R6dcRmqeqW0J2XpTIImKy2ua/VFfPr3EMp9kX7LS WeySrchzk02eoDYoDVTub+hkSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABaUcbS ikoI5OGl6nECpsj0yo6DMB8GA1UdIwQYMBaAFNic/219lVGucE2T6XVTYWyNsT9e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzE5QS8yNEFCMkMzRTRG OEQxMUVDODE1NzEyNUZDNEY5QUUwMi8ySnpfYlgyVlVhNXdUWlBwZFZOaGJJMnhQ MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJKel9iWDJWVWE1d1RaUHBkVk5oYkkyeFAxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzE5QS8yNEFCMkMzRTRGOEQxMUVDODE1NzEyNUZDNEY5QUUwMi8ySnpfYlgyVlVh NXdUWlBwZFZOaGJJMnhQMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFHq1XNU28L0VNieh1Y/HTE/qYWhzxgdh/BdX4rbzzkD7vLS4KbNhQ nMSNNmtlt8s7Q7MbnMCsNQ1BvB1bbwy2Nukwo9/RoNeQU/fGKD7Tth/53qWJnjYu fBtNIG4qTRFwStB9HyEUYuHFg1AxJWTzRnbno/D2rsKNwFa7XcX6HMi77O/7XMYT OSVVVEa1PbCDuM9FSvqeJpvfTuMc1JDWEJlagAPa8vZb7VrzzlFqNQWo6AGqNl5T mRZxHhI66WVhtM4zXCHPt3wJLSpsgTRC8WBT8Zlnpb75DfMLcxl9UWVLKCxpDi2a wKwQ+L47GurU8wktfqVsaqucGS09Sg0w -----END CERTIFICATE-----Generated at Mon Oct 20 14:00:11 2025 by rpki-client