$ rpki-client -vvf rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft File: V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft (raw, json) Hash identifier: /fxOObGinpeOKzgtEGP3Dw6m2spUJ5TIrb//ukKwgT4= Subject key identifier: 2D:52:A5:6A:9D:E5:87:3B:14:20:2E:EF:0B:75:D7:E8:0E:3D:64:8B Authority key identifier: 57:99:72:E6:0E:A6:F4:63:84:89:1A:D0:E3:F4:17:90:C8:08:05:F1 Certificate issuer: /CN=A919C1A2/serialNumber=579972E60EA6F46384891AD0E3F41790C80805F1 Certificate serial: 023F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft Manifest number: 023A Signing time: Sun 19 Oct 2025 04:04:22 +0000 Manifest this update: Sun 19 Oct 2025 04:04:21 +0000 Manifest next update: Sun 26 Oct 2025 04:04:21 +0000 Files and hashes: 1: V5ly5g6m9GOEiRrQ4_QXkMgIBfE.crl (hash: iuYI7XsxI4DeZ03lPhodMA1trIKs0Hn5/oRwVVeI2Do=) 2: 46B3DF5A46E111EDB39B8526C4F9AE02.roa (hash: qtQ5quSwMYsKVelHw8PoUcCRH9+p/SKKBVtmk8NHuxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.crl rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 575 (0x23f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C1A2, serialNumber=579972E60EA6F46384891AD0E3F41790C80805F1 Validity Not Before: Oct 19 04:04:21 2025 GMT Not After : Oct 26 04:04:21 2025 GMT Subject: CN=68f46345-371b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ea:c6:59:05:30:18:09:90:08:a1:49:5f:58: fd:4c:eb:5e:cd:d7:00:33:e2:5f:56:55:f0:ab:8d: 68:23:25:f9:76:07:21:69:db:f2:d1:d8:d3:df:f8: 8d:f9:fc:05:2b:89:77:8d:c4:0c:71:c4:94:cd:cb: 5b:01:8e:fb:bb:c3:f1:30:b0:a2:87:29:0b:86:ec: ac:28:74:72:69:ec:5d:cf:29:b5:80:f3:90:79:e4: 68:43:31:e3:db:d0:cf:3b:a8:9e:c6:fb:a7:50:ee: 95:4f:5a:0f:d1:a3:4c:95:fa:8d:49:9f:1a:96:be: 1b:cc:4a:2e:c3:48:ee:90:df:23:98:4a:dc:df:31: 59:23:73:34:e1:33:4b:f7:70:84:1f:85:8d:8a:42: a8:05:17:c1:f9:76:a0:e0:00:75:ee:98:af:2f:4f: 69:0a:e4:9f:02:c4:99:84:49:a5:2a:23:48:77:d2: d8:1b:67:17:81:b5:e7:0b:d1:bf:fe:6d:17:54:0f: 8d:62:a1:1b:be:ad:ac:65:2c:4a:64:e6:3c:58:f7: b5:ed:75:59:48:5d:f0:1a:85:af:41:df:1d:25:b5: 95:fa:9b:c5:7f:f8:ee:b8:a0:35:6b:a1:ec:f0:22: 4a:ad:11:9d:cf:a7:fc:90:a9:8d:2e:b9:a1:d5:cb: d7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:52:A5:6A:9D:E5:87:3B:14:20:2E:EF:0B:75:D7:E8:0E:3D:64:8B X509v3 Authority Key Identifier: keyid:57:99:72:E6:0E:A6:F4:63:84:89:1A:D0:E3:F4:17:90:C8:08:05:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:72:67:63:28:bf:e8:d7:b4:98:bc:07:83:54:51:a8:2d:e9: 9a:f9:c0:14:1e:ba:2c:01:d5:08:f7:11:b6:a0:57:ef:55:5d: e3:2e:df:2e:7f:1a:61:6c:54:06:83:3e:be:43:bf:8a:ee:02: 46:25:67:37:fb:37:05:56:be:02:71:52:ae:0d:db:8b:1e:9a: c5:68:ca:38:ec:cf:91:d3:8f:8f:67:56:1c:3d:02:9f:76:5d: ec:15:ba:c5:6f:91:11:5e:84:dd:ce:ea:86:00:0a:11:5e:d5: 3e:1e:43:8f:a6:42:35:80:39:e1:6a:17:e4:3d:a6:11:65:d3: ac:8a:40:c7:f8:aa:7c:f5:51:af:b3:69:3f:28:46:90:c1:98: 50:9c:0a:3c:37:c2:1e:15:ca:c5:f3:05:c8:a8:9d:74:59:d5: a2:b3:16:af:6d:da:f0:12:82:88:6b:44:61:7b:d4:af:6c:15: 80:9f:e3:2d:ae:85:31:d0:e2:f7:78:f4:58:d6:9a:c4:36:cf: 9f:be:4a:98:e4:2e:87:14:d3:7e:2c:5d:29:33:ad:50:54:be: 4b:b8:ab:f4:38:ff:5c:53:d7:dc:02:67:79:e7:a7:db:4e:68: 65:1a:4d:02:5e:ea:1c:df:18:c0:ba:4c:79:70:37:f3:e5:13: ad:d7:bc:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMxQTIxMTAvBgNVBAUTKDU3OTk3MkU2MEVBNkY0NjM4NDg5MUFEMEUzRjQxNzkw QzgwODA1RjEwHhcNMjUxMDE5MDQwNDIxWhcNMjUxMDI2MDQwNDIxWjAYMRYwFAYD VQQDEw02OGY0NjM0NS0zNzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+rGWQUwGAmQCKFJX1j9TOtezdcAM+JfVlXwq41oIyX5dgchadvy0djT3/iN +fwFK4l3jcQMccSUzctbAY77u8PxMLCihykLhuysKHRyaexdzym1gPOQeeRoQzHj 29DPO6iexvunUO6VT1oP0aNMlfqNSZ8alr4bzEouw0jukN8jmErc3zFZI3M04TNL 93CEH4WNikKoBRfB+Xag4AB17pivL09pCuSfAsSZhEmlKiNId9LYG2cXgbXnC9G/ /m0XVA+NYqEbvq2sZSxKZOY8WPe17XVZSF3wGoWvQd8dJbWV+pvFf/juuKA1a6Hs 8CJKrRGdz6f8kKmNLrmh1cvXzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1SpWqd 5Yc7FCAu7wt11+gOPWSLMB8GA1UdIwQYMBaAFFeZcuYOpvRjhIka0OP0F5DICAXx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzFBMi80NzRDRDg0NDQ2 REQxMUVEOTI0MDIzMjBDNEY5QUUwMi9WNWx5NWc2bTlHT0VpUnJRNF9RWGtNZ0lC ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Y1bHk1ZzZtOUdPRWlSclE0X1FYa01nSUJmRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzFBMi80NzRDRDg0NDQ2REQxMUVEOTI0MDIzMjBDNEY5QUUwMi9WNWx5NWc2bTlH T0VpUnJRNF9RWGtNZ0lCZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCucmdjKL/o17SYvAeDVFGoLema+cAUHrosAdUI9xG2oFfvVV3jLt8u fxphbFQGgz6+Q7+K7gJGJWc3+zcFVr4CcVKuDduLHprFaMo47M+R04+PZ1YcPQKf dl3sFbrFb5ERXoTdzuqGAAoRXtU+HkOPpkI1gDnhahfkPaYRZdOsikDH+Kp89VGv s2k/KEaQwZhQnAo8N8IeFcrF8wXIqJ10WdWisxavbdrwEoKIa0Rhe9SvbBWAn+Mt roUx0OL3ePRY1prENs+fvkqY5C6HFNN+LF0pM61QVL5LuKv0OP9cU9fcAmd556fb TmhlGk0CXuoc3xjAukx5cDfz5ROt17yw -----END CERTIFICATE-----Generated at Mon Oct 20 21:54:21 2025 by rpki-client