$ rpki-client -vvf rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft File: 556bUhJjfjPKXcthdpCc4ZYhumQ.mft (raw, json) Hash identifier: MWpBX5LxPZFIxjZ37uH/ZQ+THUI8w16riFis107BySs= Subject key identifier: 6B:1C:05:86:85:19:1B:17:2F:39:E7:FA:AC:25:DB:35:89:39:A2:5D Authority key identifier: E7:9E:9B:52:12:63:7E:33:CA:5D:CB:61:76:90:9C:E1:96:21:BA:64 Certificate issuer: /CN=A919C47E/serialNumber=E79E9B5212637E33CA5DCB6176909CE19621BA64 Certificate serial: 04A1 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft Manifest number: 049A Signing time: Sat 18 Oct 2025 17:30:02 +0000 Manifest this update: Sat 18 Oct 2025 17:30:01 +0000 Manifest next update: Sat 25 Oct 2025 17:30:01 +0000 Files and hashes: 1: 556bUhJjfjPKXcthdpCc4ZYhumQ.crl (hash: 04fYiqAAHetAEqpwpjG3mi9ekS9Hfzpu+KH+fGH5E18=) 2: B7E86B40595311EC9ECF510BC4F9AE02.roa (hash: Lnyzv8UILVvSxBwFCz0H7Yvcdy+f/I6Ub3qLIXVIRQ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.crl rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1185 (0x4a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C47E, serialNumber=E79E9B5212637E33CA5DCB6176909CE19621BA64 Validity Not Before: Oct 18 17:30:01 2025 GMT Not After : Oct 25 17:30:01 2025 GMT Subject: CN=68f3ce99-d8e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c2:8a:fc:63:c3:01:f5:37:27:1b:cc:ea:4c: 08:c6:2b:dc:ff:03:92:49:f4:31:68:32:99:34:18: 49:74:a0:ca:81:82:2c:46:af:a8:df:31:cc:87:17: c5:9c:55:e7:83:de:69:7b:dd:11:99:c9:fa:ab:d0: 89:01:41:ab:94:ce:9c:22:6a:3f:4e:59:1f:35:73: 4a:57:04:6f:60:eb:2d:d0:dc:85:05:69:fa:5f:bf: 3e:b9:d8:bc:18:70:a4:a4:b7:27:aa:3a:2d:58:d4: 69:e5:1c:88:07:5e:42:f0:f4:d9:dd:b6:d6:7b:46: c0:34:56:77:9e:4e:e4:38:dc:d7:d7:ee:71:bf:ba: c6:7c:91:56:a9:90:35:65:d8:bc:d9:72:f4:d0:c8: 30:93:34:9f:d0:64:ff:55:36:97:e4:d4:8b:30:ff: 5a:fb:52:74:0d:0f:27:44:5a:d8:09:a6:ba:b7:94: 0b:f2:cf:14:a7:6c:9e:88:3c:2c:1b:19:10:88:b0: 96:e7:2e:58:34:b8:f8:38:4d:6a:c0:a6:99:34:e2: 75:e5:c9:c7:25:7b:c6:6a:95:71:6d:6a:48:ba:2d: 60:6e:93:15:09:b3:20:28:60:c8:5c:93:70:f4:9a: 14:39:e2:ed:b0:87:0e:23:84:87:6f:1b:3e:e8:0c: b5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1C:05:86:85:19:1B:17:2F:39:E7:FA:AC:25:DB:35:89:39:A2:5D X509v3 Authority Key Identifier: keyid:E7:9E:9B:52:12:63:7E:33:CA:5D:CB:61:76:90:9C:E1:96:21:BA:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:c7:da:74:6a:5e:f0:fb:eb:c1:1c:7b:c2:d7:6a:cd:68:5f: e3:37:0b:3d:44:0e:d0:fd:df:2f:35:ba:c8:22:f9:5f:23:cc: 24:30:8b:c8:d8:4c:cf:3f:76:f6:35:36:36:43:f0:b4:21:08: 30:7c:15:bc:3f:5c:b7:bb:69:01:27:5c:6c:08:d2:d3:07:15: 2c:9e:c6:be:c5:8e:fa:78:7d:4b:86:f2:f2:df:33:0c:6c:13: 8f:a3:94:98:71:c9:da:c1:8a:2e:da:6e:1b:2d:95:14:35:58: fb:ee:c1:5a:ba:44:fd:29:90:02:79:6d:5a:27:49:9c:d5:a3: 87:20:c4:f1:f2:04:54:cc:e1:f5:e7:3c:da:8d:cc:80:bf:6d: 91:ee:36:c9:12:b9:23:d0:61:27:1b:ed:b7:33:07:d2:a7:7e: 3f:6c:4c:b0:77:db:03:75:05:a8:1e:58:46:01:34:c7:a0:e5: 0d:c6:75:df:19:2a:8e:1d:7b:a1:1f:41:58:77:77:ec:ea:54: ec:06:39:0d:a3:f0:4e:9e:80:c9:bd:92:50:c1:37:9f:69:f4: 72:b7:5f:9e:e7:f3:ac:35:e8:87:f2:c3:77:cf:b6:4b:d7:5a: a8:e2:b5:2a:55:98:47:3a:4e:0c:5c:ad:be:4a:3b:61:c2:e9: 48:83:08:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM0N0UxMTAvBgNVBAUTKEU3OUU5QjUyMTI2MzdFMzNDQTVEQ0I2MTc2OTA5Q0Ux OTYyMUJBNjQwHhcNMjUxMDE4MTczMDAxWhcNMjUxMDI1MTczMDAxWjAYMRYwFAYD VQQDEw02OGYzY2U5OS1kOGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqMKK/GPDAfU3JxvM6kwIxivc/wOSSfQxaDKZNBhJdKDKgYIsRq+o3zHMhxfF nFXng95pe90Rmcn6q9CJAUGrlM6cImo/TlkfNXNKVwRvYOst0NyFBWn6X78+udi8 GHCkpLcnqjotWNRp5RyIB15C8PTZ3bbWe0bANFZ3nk7kONzX1+5xv7rGfJFWqZA1 Zdi82XL00MgwkzSf0GT/VTaX5NSLMP9a+1J0DQ8nRFrYCaa6t5QL8s8Up2yeiDws GxkQiLCW5y5YNLj4OE1qwKaZNOJ15cnHJXvGapVxbWpIui1gbpMVCbMgKGDIXJNw 9JoUOeLtsIcOI4SHbxs+6Ay15QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGscBYaF GRsXLznn+qwl2zWJOaJdMB8GA1UdIwQYMBaAFOeem1ISY34zyl3LYXaQnOGWIbpk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzQ3RS8xRTc1MzY1MDU5 NEUxMUVDQTA2MjkyNTZDNEY5QUUwMi81NTZiVWhKamZqUEtYY3RoZHBDYzRaWWh1 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzU1NmJVaEpqZmpQS1hjdGhkcENjNFpZaHVtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzQ3RS8xRTc1MzY1MDU5NEUxMUVDQTA2MjkyNTZDNEY5QUUwMi81NTZiVWhKamZq UEtYY3RoZHBDYzRaWWh1bVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCax9p0al7w++vBHHvC12rNaF/jNws9RA7Q/d8vNbrIIvlfI8wkMIvI 2EzPP3b2NTY2Q/C0IQgwfBW8P1y3u2kBJ1xsCNLTBxUsnsa+xY76eH1LhvLy3zMM bBOPo5SYccnawYou2m4bLZUUNVj77sFaukT9KZACeW1aJ0mc1aOHIMTx8gRUzOH1 5zzajcyAv22R7jbJErkj0GEnG+23MwfSp34/bEywd9sDdQWoHlhGATTHoOUNxnXf GSqOHXuhH0FYd3fs6lTsBjkNo/BOnoDJvZJQwTefafRyt1+e5/OsNeiH8sN3z7ZL 11qo4rUqVZhHOk4MXK2+SjthwulIgwgD -----END CERTIFICATE-----Generated at Mon Oct 20 16:04:28 2025 by rpki-client