$ rpki-client -vvf rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft File: -cNjgFn4ZOhK479Q2qwHnGhGPqc.mft (raw, json) Hash identifier: ifyNpyB8hBNhj0cfYF72h1HzGm4e8sLnU2wx2VpIccU= Subject key identifier: A7:DF:C8:B3:3E:03:7A:F6:42:E4:A5:13:35:B6:82:4A:44:45:72:1D Authority key identifier: F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 Certificate issuer: /CN=A919DB2F/serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Certificate serial: 057E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft Manifest number: 056A Signing time: Sun 19 Oct 2025 01:08:32 +0000 Manifest this update: Sun 19 Oct 2025 01:08:31 +0000 Manifest next update: Sun 26 Oct 2025 01:08:31 +0000 Files and hashes: 1: -cNjgFn4ZOhK479Q2qwHnGhGPqc.crl (hash: VJAN9CSKEk37QcHfjBGD4/EwfyBgrdXP56PYCHn3x7w=) 2: F307B7F4912A11F0B418B448C4F9AE02.roa (hash: yjx/NrxzZgDiEgxVTNY6l8PB/PX5P1BrG3zGpxB5GDo=) 3: 27023558912A11F09F7D4044C4F9AE02.roa (hash: +v5rysmnVhOkTUg6d0tgPtn6VplDudh8Q8DnVgzZQm0=) 4: E0A5F584DFAC11EE8C281B42C4F9AE02.roa (hash: QC4EhNSXvJgfmvNa3iGuDkLhBq1A6Ut/uA6vL0hAWZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:08:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1406 (0x57e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DB2F, serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Validity Not Before: Oct 19 01:08:31 2025 GMT Not After : Oct 26 01:08:31 2025 GMT Subject: CN=68f43a0f-5359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:01:5b:8f:b0:3c:cb:27:73:5d:fa:63:c7:a7: 1f:1e:36:a0:4a:a4:d2:f0:bd:1b:0d:e1:77:b2:d7: 23:80:2b:04:ed:b0:a8:b5:1b:93:9e:c9:e3:64:46: b4:0b:db:ca:98:6b:e5:84:51:7e:be:28:f9:4d:40: 34:c0:c2:5d:73:f5:fd:1a:a7:cd:2f:11:08:e1:a0: 46:51:13:15:70:81:8d:e7:72:41:07:f7:a6:db:e1: a5:28:5a:f4:63:2d:ac:81:6d:4a:b2:d7:de:45:75: 01:f6:b0:f0:b1:62:c2:9b:30:95:cd:4a:bc:15:cd: fc:1f:ad:67:22:12:b0:f9:5d:ad:4a:7b:92:66:6a: 82:22:90:78:b9:41:22:29:28:38:ed:f8:2b:a7:08: 08:ac:47:5d:be:6e:5d:99:f3:87:56:20:4e:08:4c: 38:1f:03:4a:f9:a4:99:51:00:dd:e3:1d:97:df:69: 7e:5d:b0:7b:e9:c9:92:11:6b:0d:d5:b5:ca:ec:18: b5:b5:12:c5:0e:ca:b6:16:ac:98:22:05:e6:49:e3: f1:82:35:b8:fb:12:a8:65:8c:85:c7:7d:ad:38:6a: 83:19:16:49:45:74:f6:f7:9a:5f:75:27:18:fb:dc: cf:5f:df:91:a6:04:d9:ec:bf:8e:58:1e:1d:55:71: 22:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:DF:C8:B3:3E:03:7A:F6:42:E4:A5:13:35:B6:82:4A:44:45:72:1D X509v3 Authority Key Identifier: keyid:F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:15:25:2d:da:f1:f1:d0:ef:af:0b:8a:ad:62:60:7c:24:87: 65:aa:14:65:09:56:fb:ff:01:9e:61:3e:0e:fe:e2:70:37:c7: 7c:a1:6d:5e:76:72:63:4e:5a:fd:e2:27:e3:43:9a:be:77:fc: d6:5d:ba:c3:5b:24:ac:e5:34:2d:36:2f:79:6b:fe:15:b1:f6: d2:a3:93:03:69:4e:2b:4f:eb:97:c2:72:9e:11:62:1d:9f:31: e0:10:5e:5f:6a:a1:cf:4e:7a:71:57:be:65:35:31:d4:86:19: 97:f4:8e:3d:8a:34:20:22:e9:32:ec:03:6a:9f:77:73:d8:62: 30:23:5d:b1:a8:ec:7c:66:d9:4a:33:c7:8b:b2:78:cc:9d:7a: f2:fe:45:4b:5b:66:d8:b3:7b:61:05:47:8b:79:4c:d2:40:d9: 38:37:6c:15:31:62:99:07:3c:fb:7b:dc:1e:60:fa:c6:27:e8: ec:25:3b:e1:af:2d:f4:3b:a7:4b:68:8a:1d:2e:7c:cb:bd:9d: 35:85:fb:63:a9:db:ad:29:8b:cf:b3:d0:79:08:3e:dd:a2:f8: 19:46:4d:74:59:c3:dd:ba:f3:58:00:ed:32:99:4a:d9:c8:a5: a6:8a:d3:c8:2d:64:4a:8c:1d:86:c8:7a:ae:3b:41:99:cc:21: ab:37:3d:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURCMkYxMTAvBgNVBAUTKEY5QzM2MzgwNTlGODY0RTg0QUUzQkY1MERBQUMwNzlD Njg0NjNFQTcwHhcNMjUxMDE5MDEwODMxWhcNMjUxMDI2MDEwODMxWjAYMRYwFAYD VQQDEw02OGY0M2EwZi01MzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApwFbj7A8yydzXfpjx6cfHjagSqTS8L0bDeF3stcjgCsE7bCotRuTnsnjZEa0 C9vKmGvlhFF+vij5TUA0wMJdc/X9GqfNLxEI4aBGURMVcIGN53JBB/em2+GlKFr0 Yy2sgW1KstfeRXUB9rDwsWLCmzCVzUq8Fc38H61nIhKw+V2tSnuSZmqCIpB4uUEi KSg47fgrpwgIrEddvm5dmfOHViBOCEw4HwNK+aSZUQDd4x2X32l+XbB76cmSEWsN 1bXK7Bi1tRLFDsq2FqyYIgXmSePxgjW4+xKoZYyFx32tOGqDGRZJRXT295pfdScY +9zPX9+RpgTZ7L+OWB4dVXEi0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKffyLM+ A3r2QuSlEzW2gkpERXIdMB8GA1UdIwQYMBaAFPnDY4BZ+GToSuO/UNqsB5xoRj6n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REIyRi9FRjU5Q0VDNDBB REExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpPaEs0NzlRMnF3SG5HaEdQ cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1jTmpnRm40Wk9oSzQ3OVEycXdIbkdoR1BxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REIyRi9FRjU5Q0VDNDBBREExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpP aEs0NzlRMnF3SG5HaEdQcWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgFSUt2vHx0O+vC4qtYmB8JIdlqhRlCVb7/wGeYT4O/uJwN8d8oW1e dnJjTlr94ifjQ5q+d/zWXbrDWySs5TQtNi95a/4VsfbSo5MDaU4rT+uXwnKeEWId nzHgEF5faqHPTnpxV75lNTHUhhmX9I49ijQgIuky7ANqn3dz2GIwI12xqOx8ZtlK M8eLsnjMnXry/kVLW2bYs3thBUeLeUzSQNk4N2wVMWKZBzz7e9weYPrGJ+jsJTvh ry30O6dLaIodLnzLvZ01hftjqdutKYvPs9B5CD7dovgZRk10WcPduvNYAO0ymUrZ yKWmitPILWRKjB2GyHquO0GZzCGrNz1M -----END CERTIFICATE-----Generated at Mon Oct 20 12:00:56 2025 by rpki-client