$ rpki-client -vvf rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft File: P1VrwCUQM7zlcvxsirdgrMSXBZM.mft (raw, json) Hash identifier: CrD8UD0f1Bc0RN/aHR8/ILbcS7GtfmS/gOTYB3+GGbY= Subject key identifier: E5:CA:D0:CF:EC:AD:36:C8:59:A2:BF:E1:83:3D:2E:06:A7:AB:76:56 Authority key identifier: 3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93 Certificate issuer: /CN=A919CF42/serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593 Certificate serial: 157A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft Manifest number: 155F Signing time: Sat 18 Oct 2025 17:14:45 +0000 Manifest this update: Sat 18 Oct 2025 17:14:44 +0000 Manifest next update: Sat 25 Oct 2025 17:14:44 +0000 Files and hashes: 1: P1VrwCUQM7zlcvxsirdgrMSXBZM.crl (hash: XZZ//7jkLwRVWsewYD8Qj4OOxHSkQNKw6/XIkID4jW0=) 2: 65C8C388EAFB11ED9F4DC557C4F9AE02.roa (hash: WVZ1/uIyOSqp7Em7YlQqzkYloU6mxq2B8kLksLfxIF8=) 3: 9FA735ECEAF811ED9E2D1958C4F9AE02.roa (hash: HFVHQ+wL1mQEZ01i4CvLThp7tarfU14b1p5XC7Hrt/Y=) 4: F148BE6E511611EE85A7E634C4F9AE02.roa (hash: 9hsbmWbhyRE5mUOuFHl04Y4Uut8mlBoehod5tJbgja0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:14:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5498 (0x157a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CF42, serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593 Validity Not Before: Oct 18 17:14:44 2025 GMT Not After : Oct 25 17:14:44 2025 GMT Subject: CN=68f3cb05-8807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f2:05:9e:6d:16:b7:fd:5e:e8:01:11:32:fa: f8:51:d0:6e:05:68:df:d4:67:b8:d3:68:1a:c7:ac: c7:cb:a0:3f:fc:4a:38:58:a6:e6:31:44:76:40:90: ce:bb:81:ab:a4:69:ba:b4:da:fe:d7:b1:26:f2:7d: f4:b1:8d:a9:eb:01:c9:81:0c:b5:a3:c5:c6:3c:08: e1:d3:ea:ce:0b:84:db:99:b5:d0:96:06:8e:8e:bb: 91:f8:a6:c9:ce:0c:26:17:50:3a:3d:c9:e9:47:52: 51:0d:5a:8e:16:6d:c8:74:b9:6c:94:25:b7:29:6f: 5e:b8:84:9b:d5:29:ab:5d:72:6d:44:d4:a9:e8:31: 36:ee:d9:d6:83:63:27:27:cb:0f:64:8c:61:f4:ea: f5:3a:4f:06:65:87:1f:c3:34:cc:81:ef:a9:fb:1c: 3f:b3:74:4d:53:61:bf:16:f6:06:21:a3:57:93:90: 29:f3:ab:dd:6c:bf:50:9a:33:75:07:05:99:3e:32: e1:de:0b:99:1b:e7:7b:7f:3b:94:39:7f:6e:03:2b: 14:cd:6b:98:98:f5:16:7c:00:c9:09:0a:1b:51:7e: 44:45:09:d5:78:f4:96:2b:9f:a8:fc:08:65:a0:2c: c6:39:8e:c4:e7:f4:b3:6e:87:a7:c9:f1:96:91:35: 03:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:CA:D0:CF:EC:AD:36:C8:59:A2:BF:E1:83:3D:2E:06:A7:AB:76:56 X509v3 Authority Key Identifier: keyid:3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:9f:87:fe:b9:c7:5b:7a:37:93:06:aa:d4:70:1b:fd:e2:70: ff:76:82:3d:97:9e:59:76:60:38:e7:65:12:e1:e0:a8:59:63: c7:89:31:37:7d:da:03:bc:c1:5f:5d:9d:ce:2f:29:0f:57:4a: 29:78:ea:68:79:d7:da:81:a0:a5:6d:ca:21:9e:ff:b8:64:a6: 2f:b4:68:4d:8a:41:11:2c:5a:e5:08:d4:7b:67:d5:17:0e:26: e4:73:df:9d:b3:16:5f:70:3b:23:96:34:38:27:9e:29:d8:f1: d5:5e:49:f1:18:4a:a3:df:44:b1:ff:b7:f0:c3:f1:48:ff:5e: 4e:7f:3f:2d:1d:64:7a:4f:a7:df:9b:a5:aa:47:14:80:f9:1c: 48:5d:cf:2f:a1:7e:dd:74:02:cd:a5:13:ab:54:c3:dd:40:31: 23:41:de:24:a9:c3:24:ad:b3:e8:cb:ad:3a:66:bf:20:b0:19: a7:fc:3a:7f:5e:5f:6c:58:fc:85:8d:cb:69:1f:f4:74:27:d5: c9:a4:94:df:12:3f:13:70:47:8f:58:8e:ec:99:a6:b4:5e:e7: be:f3:83:5e:0c:8f:19:8a:a7:c7:1c:29:85:2b:f3:2c:9e:bf: ff:20:c3:35:30:c8:63:c7:cf:fe:5b:38:f7:ac:ce:04:fa:76: 32:87:fb:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNGNDIxMTAvBgNVBAUTKDNGNTU2QkMwMjUxMDMzQkNFNTcyRkM2QzhBQjc2MEFD QzQ5NzA1OTMwHhcNMjUxMDE4MTcxNDQ0WhcNMjUxMDI1MTcxNDQ0WjAYMRYwFAYD VQQDEw02OGYzY2IwNS04ODA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/IFnm0Wt/1e6AERMvr4UdBuBWjf1Ge402gax6zHy6A//Eo4WKbmMUR2QJDO u4GrpGm6tNr+17Em8n30sY2p6wHJgQy1o8XGPAjh0+rOC4TbmbXQlgaOjruR+KbJ zgwmF1A6PcnpR1JRDVqOFm3IdLlslCW3KW9euISb1SmrXXJtRNSp6DE27tnWg2Mn J8sPZIxh9Or1Ok8GZYcfwzTMge+p+xw/s3RNU2G/FvYGIaNXk5Ap86vdbL9QmjN1 BwWZPjLh3guZG+d7fzuUOX9uAysUzWuYmPUWfADJCQobUX5ERQnVePSWK5+o/Ahl oCzGOY7E5/SzboenyfGWkTUDdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOXK0M/s rTbIWaK/4YM9Lganq3ZWMB8GA1UdIwQYMBaAFD9Va8AlEDO85XL8bIq3YKzElwWT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0Y0Mi83QTZBQkZDQzRD QzYxMUU4QkVGMDNENzVDNEY5QUUwMi9QMVZyd0NVUU03emxjdnhzaXJkZ3JNU1hC Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AxVnJ3Q1VRTTd6bGN2eHNpcmRnck1TWEJaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0Y0Mi83QTZBQkZDQzRDQzYxMUU4QkVGMDNENzVDNEY5QUUwMi9QMVZyd0NVUU03 emxjdnhzaXJkZ3JNU1hCWk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApn4f+ucdbejeTBqrUcBv94nD/doI9l55ZdmA452US4eCoWWPHiTE3 fdoDvMFfXZ3OLykPV0opeOpoedfagaClbcohnv+4ZKYvtGhNikERLFrlCNR7Z9UX Dibkc9+dsxZfcDsjljQ4J54p2PHVXknxGEqj30Sx/7fww/FI/15Ofz8tHWR6T6ff m6WqRxSA+RxIXc8voX7ddALNpROrVMPdQDEjQd4kqcMkrbPoy606Zr8gsBmn/Dp/ Xl9sWPyFjctpH/R0J9XJpJTfEj8TcEePWI7smaa0Xue+84NeDI8ZiqfHHCmFK/Ms nr//IMM1MMhjx8/+Wzj3rM4E+nYyh/tR -----END CERTIFICATE-----Generated at Mon Oct 20 04:25:29 2025 by rpki-client