$ rpki-client -vvf rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft File: r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft (raw, json) Hash identifier: /aozk9nmfW/HG3/10spoukcgcSK/sDyfquUJYXsnWik= Subject key identifier: A8:BF:DE:80:ED:4A:A5:DE:26:A2:AE:DC:5D:03:07:C6:0B:02:CD:9C Authority key identifier: AF:85:78:8B:8C:52:D1:28:D5:34:0A:75:09:5B:8F:0F:11:77:9C:48 Certificate issuer: /CN=A919F53A/serialNumber=AF85788B8C52D128D5340A75095B8F0F11779C48 Certificate serial: 077F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4V4i4xS0SjVNAp1CVuPDxF3nEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft Manifest number: 077A Signing time: Sat 18 Oct 2025 22:54:47 +0000 Manifest this update: Sat 18 Oct 2025 22:54:46 +0000 Manifest next update: Sat 25 Oct 2025 22:54:46 +0000 Files and hashes: 1: r4V4i4xS0SjVNAp1CVuPDxF3nEg.crl (hash: yKQoAskEofJYtP45oG/xrpIk0ySSTuq1OL8tA9Fb0y0=) 2: 72BCBB042FC211EBB8550B0AC4F9AE02.roa (hash: kntkOaZrAaOx4SVIiImPb0s+dVekp3sawuWhb73K14Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.crl rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4V4i4xS0SjVNAp1CVuPDxF3nEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:54:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1919 (0x77f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F53A, serialNumber=AF85788B8C52D128D5340A75095B8F0F11779C48 Validity Not Before: Oct 18 22:54:46 2025 GMT Not After : Oct 25 22:54:46 2025 GMT Subject: CN=68f41ab7-39c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:38:cc:af:3e:ec:72:dc:7b:6d:92:f2:06:16: db:31:03:14:f6:7b:f1:1a:cf:1d:13:1a:14:ac:15: 0d:2c:71:60:50:12:f2:74:06:0d:1b:c5:10:ad:34: 0d:ca:bf:3e:94:5e:e1:b3:a0:2b:6e:45:ad:1e:31: 62:d3:81:4e:ce:84:ef:c1:dc:8c:5d:52:44:c8:8c: 00:1c:99:e1:43:ad:76:39:82:c9:42:bf:02:c1:2f: c4:95:18:16:3e:7b:94:72:31:96:e1:60:db:89:1f: e0:e2:1a:59:2e:16:89:50:10:ed:c6:4f:f2:8b:02: be:a1:5f:bc:81:4a:95:4a:d2:75:0e:f3:ff:ca:35: 88:b4:6f:65:54:d1:98:e5:fd:46:c1:93:e9:db:73: 01:db:7f:5e:f0:ff:36:52:76:5e:02:22:95:3d:8d: 7c:cd:d0:5d:6b:36:36:2e:97:1f:88:36:5a:ce:f1: 50:ca:a2:61:b2:77:ef:38:cc:1d:91:7c:e4:c9:42: 2d:a4:ad:9c:50:29:a0:50:1a:6d:8c:2f:21:37:6f: 12:08:d3:16:fc:84:d6:7c:10:05:fe:f2:89:6c:b9: f6:c6:10:ef:81:87:1c:d9:6b:1a:8b:bf:76:be:0f: 6f:79:a9:41:b2:91:d8:e7:e2:f9:fc:8a:bb:14:62: 5b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:BF:DE:80:ED:4A:A5:DE:26:A2:AE:DC:5D:03:07:C6:0B:02:CD:9C X509v3 Authority Key Identifier: keyid:AF:85:78:8B:8C:52:D1:28:D5:34:0A:75:09:5B:8F:0F:11:77:9C:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4V4i4xS0SjVNAp1CVuPDxF3nEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:ed:e6:f8:cb:35:27:80:a4:4d:c5:c6:28:80:68:83:51:60: 51:0f:05:65:42:d6:4d:92:d2:83:bb:2f:2c:60:c8:fd:57:95: b5:b0:10:c1:79:da:78:59:8a:18:7c:93:34:38:2f:04:0d:09: ad:7e:d1:db:d3:59:44:7d:11:62:13:7c:ba:b9:10:71:fb:36: e0:94:55:ce:2b:a7:75:88:8d:66:4f:b6:5e:81:00:c9:07:86: ee:12:27:5f:9f:92:80:e0:37:16:7e:9c:58:05:fd:00:b1:15: 4a:e3:ae:84:bb:20:42:32:25:e1:70:b0:07:67:52:c0:c0:06: 05:96:ba:db:79:e8:1c:ff:43:ed:6c:78:80:37:c5:4c:2e:4c: 36:0d:ad:0a:30:dd:f9:d2:6a:e5:2d:41:cc:cf:d3:90:b2:04: f8:36:a7:6d:8d:26:9f:85:88:26:d3:1e:74:b0:32:25:25:eb: 69:ae:8e:9d:b4:42:82:b2:4e:e5:d1:9c:c8:e3:ac:72:e5:10: 4e:15:20:57:48:f1:86:c2:38:35:97:bb:90:b2:5f:78:d7:ee: 82:0f:db:09:93:29:8b:76:15:5f:13:93:d4:f0:c8:2c:bf:85: c2:5c:d3:3e:06:d9:2e:00:8f:62:21:2d:26:53:a9:35:10:e2: 33:fd:fb:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY1M0ExMTAvBgNVBAUTKEFGODU3ODhCOEM1MkQxMjhENTM0MEE3NTA5NUI4RjBG MTE3NzlDNDgwHhcNMjUxMDE4MjI1NDQ2WhcNMjUxMDI1MjI1NDQ2WjAYMRYwFAYD VQQDEw02OGY0MWFiNy0zOWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqzjMrz7sctx7bZLyBhbbMQMU9nvxGs8dExoUrBUNLHFgUBLydAYNG8UQrTQN yr8+lF7hs6ArbkWtHjFi04FOzoTvwdyMXVJEyIwAHJnhQ612OYLJQr8CwS/ElRgW PnuUcjGW4WDbiR/g4hpZLhaJUBDtxk/yiwK+oV+8gUqVStJ1DvP/yjWItG9lVNGY 5f1GwZPp23MB239e8P82UnZeAiKVPY18zdBdazY2LpcfiDZazvFQyqJhsnfvOMwd kXzkyUItpK2cUCmgUBptjC8hN28SCNMW/ITWfBAF/vKJbLn2xhDvgYcc2Wsai792 vg9vealBspHY5+L5/Iq7FGJb5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKi/3oDt SqXeJqKu3F0DB8YLAs2cMB8GA1UdIwQYMBaAFK+FeIuMUtEo1TQKdQlbjw8Rd5xI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjUzQS8zNkI1MkRGQTJG QzAxMUVCQTI1RkU5ODJDNEY5QUUwMi9yNFY0aTR4UzBTalZOQXAxQ1Z1UER4RjNu RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I0VjRpNHhTMFNqVk5BcDFDVnVQRHhGM25FZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjUzQS8zNkI1MkRGQTJGQzAxMUVCQTI1RkU5ODJDNEY5QUUwMi9yNFY0aTR4UzBT alZOQXAxQ1Z1UER4RjNuRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCE7eb4yzUngKRNxcYogGiDUWBRDwVlQtZNktKDuy8sYMj9V5W1sBDB edp4WYoYfJM0OC8EDQmtftHb01lEfRFiE3y6uRBx+zbglFXOK6d1iI1mT7ZegQDJ B4buEidfn5KA4DcWfpxYBf0AsRVK466EuyBCMiXhcLAHZ1LAwAYFlrrbeegc/0Pt bHiAN8VMLkw2Da0KMN350mrlLUHMz9OQsgT4NqdtjSafhYgm0x50sDIlJetpro6d tEKCsk7l0ZzI46xy5RBOFSBXSPGGwjg1l7uQsl941+6CD9sJkymLdhVfE5PU8Mgs v4XCXNM+BtkuAI9iIS0mU6k1EOIz/ftt -----END CERTIFICATE-----Generated at Mon Oct 20 13:59:56 2025 by rpki-client