$ rpki-client -vvf rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft File: AGzRlAGFL6t1v25TlZr665WsJfI.mft (raw, json) Hash identifier: s489tsjUxw4ancmkNhHMWN4Gi/GSTaRi0QhiEiu39LY= Subject key identifier: 78:D4:64:15:5E:3D:E4:35:50:EE:D7:A2:DA:5F:AF:B2:27:AE:D4:41 Authority key identifier: 00:6C:D1:94:01:85:2F:AB:75:BF:6E:53:95:9A:FA:EB:95:AC:25:F2 Certificate issuer: /CN=A919CE1D/serialNumber=006CD19401852FAB75BF6E53959AFAEB95AC25F2 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGzRlAGFL6t1v25TlZr665WsJfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft Manifest number: 32 Signing time: Sun 19 Oct 2025 11:08:38 +0000 Manifest this update: Sun 19 Oct 2025 11:08:37 +0000 Manifest next update: Sun 26 Oct 2025 11:08:37 +0000 Files and hashes: 1: AGzRlAGFL6t1v25TlZr665WsJfI.crl (hash: Tu1GWsngYKQUVD+pUAwp5QzonxJqvNg2yQI5TMgloio=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.crl rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGzRlAGFL6t1v25TlZr665WsJfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:08:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CE1D, serialNumber=006CD19401852FAB75BF6E53959AFAEB95AC25F2 Validity Not Before: Oct 19 11:08:37 2025 GMT Not After : Oct 26 11:08:37 2025 GMT Subject: CN=68f4c6b5-a094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:aa:37:59:6c:03:56:83:8d:df:e7:4a:28:e1: fd:a7:e6:73:26:8b:5c:b2:67:5f:c2:91:05:c7:7a: 4e:98:e6:72:7a:85:ae:18:f8:63:6e:51:46:30:01: 3e:48:49:5b:7d:d6:e3:b3:39:bf:87:1c:5d:46:9a: a2:11:2d:f6:d5:3f:68:9b:97:1c:8c:47:d1:e4:9e: f5:2b:bc:22:13:98:51:33:97:3f:d5:ad:e2:1c:36: 84:67:23:e8:71:6d:23:58:9d:42:6d:50:1b:8e:10: cd:87:24:5f:67:b4:54:2d:63:53:68:0d:1b:90:49: 0f:0e:45:64:21:1b:35:fc:1f:ae:17:8e:1f:f1:f3: 75:3f:81:a6:e9:f4:2d:dc:32:74:a6:06:7c:cd:80: 1a:5a:1d:11:ea:0f:16:9b:99:bc:3f:d3:53:b8:5f: 74:12:33:87:a6:80:7b:85:56:54:5c:6d:cc:f3:e1: 4e:62:36:0c:35:1a:6f:ae:85:a9:3d:6a:57:cb:b4: 04:df:3d:2e:f8:79:b6:9d:93:12:59:a4:3e:69:bb: 9c:62:7c:0c:7a:bb:36:12:7c:66:3c:02:dd:f1:ac: ec:60:89:d9:96:8e:60:42:f0:49:18:07:51:59:46: eb:dd:28:d0:aa:4a:6f:0f:28:60:15:64:6c:df:f7: 39:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D4:64:15:5E:3D:E4:35:50:EE:D7:A2:DA:5F:AF:B2:27:AE:D4:41 X509v3 Authority Key Identifier: keyid:00:6C:D1:94:01:85:2F:AB:75:BF:6E:53:95:9A:FA:EB:95:AC:25:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGzRlAGFL6t1v25TlZr665WsJfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d5:cf:8c:ab:66:ab:85:ec:1d:a8:f5:68:8e:54:a0:d4:53: 2a:1b:2b:3b:e8:1b:59:10:fe:61:58:d0:31:05:c5:d8:7b:d3: 2d:21:73:2a:2b:82:f2:14:b3:53:73:6a:3d:04:fc:fc:1d:8a: ff:5e:76:6a:3a:2c:3f:4e:5a:29:68:4b:d5:e3:49:a7:79:d3: de:fb:55:4a:5b:d4:ad:de:6e:4e:55:05:eb:6b:45:51:8f:d6: 74:90:dd:3e:d3:03:25:76:8c:10:7b:bd:f1:93:27:1c:69:94: b4:04:67:5f:7f:c8:63:85:f4:4d:5c:e6:8a:9f:d5:c8:17:55: 9b:f8:bd:54:40:be:b0:e2:18:82:66:de:c4:ae:14:54:47:3d: 48:04:65:6f:20:39:59:2d:96:29:de:6b:7f:1e:c4:d5:8a:22: 50:54:42:ae:e5:cf:4d:08:39:90:fb:72:4a:6a:5b:87:41:73: 1d:b8:4e:c2:b1:68:bf:8b:85:d4:c9:b4:84:72:fb:64:64:51: c4:52:23:07:e4:0d:0a:4f:1e:2c:a9:f2:30:64:fb:a9:7a:91: 7a:36:b0:d5:ff:b8:1b:4f:10:24:c2:cb:a1:c5:1b:cd:1a:48: a2:d7:99:c3:b0:e2:7d:c7:3c:71:e3:18:26:4d:69:db:0c:e7: 7e:fb:b9:07 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 Q0UxRDExMC8GA1UEBRMoMDA2Q0QxOTQwMTg1MkZBQjc1QkY2RTUzOTU5QUZBRUI5 NUFDMjVGMjAeFw0yNTEwMTkxMTA4MzdaFw0yNTEwMjYxMTA4MzdaMBgxFjAUBgNV BAMTDTY4ZjRjNmI1LWEwOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRqjdZbANWg43f50oo4f2n5nMmi1yyZ1/CkQXHek6Y5nJ6ha4Y+GNuUUYwAT5I SVt91uOzOb+HHF1GmqIRLfbVP2iblxyMR9HknvUrvCITmFEzlz/VreIcNoRnI+hx bSNYnUJtUBuOEM2HJF9ntFQtY1NoDRuQSQ8ORWQhGzX8H64Xjh/x83U/gabp9C3c MnSmBnzNgBpaHRHqDxabmbw/01O4X3QSM4emgHuFVlRcbczz4U5iNgw1Gm+uhak9 alfLtATfPS74ebadkxJZpD5pu5xifAx6uzYSfGY8At3xrOxgidmWjmBC8EkYB1FZ RuvdKNCqSm8PKGAVZGzf9zn7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeNRkFV49 5DVQ7tei2l+vsieu1EEwHwYDVR0jBBgwFoAUAGzRlAGFL6t1v25TlZr665WsJfIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlDRTFEL0JGRjI0QjE0NjJE RjExRjBBMUUzN0UwRUM0RjlBRTAyL0FHelJsQUdGTDZ0MXYyNVRsWnI2NjVXc0pm SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQUd6UmxBR0ZMNnQxdjI1VGxacjY2NVdzSmZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlD RTFEL0JGRjI0QjE0NjJERjExRjBBMUUzN0UwRUM0RjlBRTAyL0FHelJsQUdGTDZ0 MXYyNVRsWnI2NjVXc0pmSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE7Vz4yrZquF7B2o9WiOVKDUUyobKzvoG1kQ/mFY0DEFxdh70y0hcyor gvIUs1Nzaj0E/Pwdiv9edmo6LD9OWiloS9XjSad50977VUpb1K3ebk5VBetrRVGP 1nSQ3T7TAyV2jBB7vfGTJxxplLQEZ19/yGOF9E1c5oqf1cgXVZv4vVRAvrDiGIJm 3sSuFFRHPUgEZW8gOVktlinea38exNWKIlBUQq7lz00IOZD7ckpqW4dBcx24TsKx aL+LhdTJtIRy+2RkUcRSIwfkDQpPHiyp8jBk+6l6kXo2sNX/uBtPECTCy6HFG80a SKLXmcOw4n3HPHHjGCZNadsM5377uQc= -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:50 2025 by rpki-client