$ rpki-client -vvf rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft File: _gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft (raw, json) Hash identifier: E90TjAOrLNbEu0gFVyGnRKL/d58d2sEVMMYIgPAZj6U= Subject key identifier: 29:F5:91:E7:F5:AC:15:E0:42:84:29:2C:23:C3:69:6D:95:A9:BC:98 Authority key identifier: FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C Certificate issuer: /CN=A919A3F0/serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft Manifest number: 01B1 Signing time: Mon 03 Nov 2025 03:11:14 +0000 Manifest this update: Mon 03 Nov 2025 03:11:14 +0000 Manifest next update: Mon 10 Nov 2025 03:11:14 +0000 Files and hashes: 1: _gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl (hash: y5RiL5p72xhmeiLNM+NvIBl7v7DQA9Gibvuh0huAOVU=) 2: D7B77EDA319411F08F477C2AC4F9AE02.roa (hash: C5cqhk4TJTYY2C3i+V15FW2BpXNmnBODb2L/J1hOJq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:11:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A3F0, serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C Validity Not Before: Nov 3 03:11:14 2025 GMT Not After : Nov 10 03:11:14 2025 GMT Subject: CN=69081d52-558d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:26:6b:74:33:3c:6f:71:25:52:5b:a8:7a:f1: 06:21:ac:d1:65:2f:cb:71:a4:aa:73:7e:2d:24:be: b5:13:7d:62:58:e4:a4:c8:6f:4b:c0:11:fd:e2:34: 50:8e:47:d9:8d:25:b0:a3:6a:87:35:96:cb:77:4d: 4a:21:ae:7e:75:5e:41:ca:88:90:5a:d4:8d:6a:c3: f8:b0:c2:24:a9:4d:af:cf:1a:71:11:1d:7c:47:80: 7f:d7:c6:3a:10:73:43:cb:9b:db:18:50:3d:e5:4e: 79:d1:5a:1f:c8:f1:92:90:97:00:8b:6b:87:43:19: 09:75:31:40:0c:27:bf:f4:75:46:2a:3f:b4:27:63: f5:50:7b:16:75:6c:4d:f8:72:18:db:0e:61:2e:2a: e2:8a:eb:72:17:85:b3:33:cb:2b:05:4e:9b:6c:9f: 13:2b:1b:7c:96:05:c2:c1:f1:ea:e7:ec:cf:50:9f: b5:50:99:fe:2a:fe:7c:a4:51:43:95:aa:bf:51:28: b7:b1:db:60:6c:24:b7:88:92:89:f8:e4:7a:f1:32: 7e:93:bc:e1:9e:f4:2b:9c:66:9a:30:8f:f2:57:9f: 64:a3:0b:2a:08:30:a5:e8:e4:7d:24:44:7b:23:ba: 38:74:25:cc:1a:22:1a:e0:e2:72:2d:14:1b:5a:ee: e7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F5:91:E7:F5:AC:15:E0:42:84:29:2C:23:C3:69:6D:95:A9:BC:98 X509v3 Authority Key Identifier: keyid:FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:0b:87:c3:c5:f1:47:5b:c3:10:92:88:cc:97:4b:b5:78:c9: dd:4e:56:3e:4e:8c:1b:5e:de:15:f6:9a:b0:6e:e2:29:42:b8: a8:0d:5f:20:fd:f0:1a:b7:3f:1b:62:f8:c2:03:a6:5d:7b:ff: c3:ce:7e:7e:a1:7e:10:f9:9c:ee:ba:4a:42:15:b3:c7:69:ac: 27:fe:01:da:3d:cc:e0:ab:5c:21:42:60:a1:2e:34:c7:f5:ee: 52:21:3a:18:f2:04:e0:48:af:12:0d:ef:d5:55:24:d9:a3:9f: eb:a7:a3:7e:60:05:99:82:21:21:f0:b6:96:9b:de:d8:16:70: de:32:49:8c:2b:b6:af:46:2c:1e:f0:d7:b7:38:19:2e:30:37: 33:45:59:54:45:a4:53:a3:b1:e1:f3:4e:27:b8:6c:b2:37:cd: 1a:b5:1e:52:5a:21:5a:81:11:7b:eb:cb:81:3b:f6:0d:70:0a: c2:66:b3:c0:50:c7:34:29:b9:74:fe:8f:a0:de:e7:20:f0:13: c6:01:57:df:d4:3c:ee:63:8f:43:9b:3e:a4:e6:7d:45:ca:2e: 55:cc:ff:a3:d3:78:3c:44:d5:da:26:a2:49:74:62:fe:61:7e: 85:86:a3:0d:50:8b:86:a6:77:6f:e4:dc:94:e5:d6:30:70:29: e9:96:cf:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUEzRjAxMTAvBgNVBAUTKEZFMDVFRkI3MDEyNUQ1MjA0NzZGNjNCQzYwOUY1NTRE QzQ5QUM1OUMwHhcNMjUxMTAzMDMxMTE0WhcNMjUxMTEwMDMxMTE0WjAYMRYwFAYD VQQDEw02OTA4MWQ1Mi01NThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzyZrdDM8b3ElUluoevEGIazRZS/LcaSqc34tJL61E31iWOSkyG9LwBH94jRQ jkfZjSWwo2qHNZbLd01KIa5+dV5ByoiQWtSNasP4sMIkqU2vzxpxER18R4B/18Y6 EHNDy5vbGFA95U550VofyPGSkJcAi2uHQxkJdTFADCe/9HVGKj+0J2P1UHsWdWxN +HIY2w5hLiriiutyF4WzM8srBU6bbJ8TKxt8lgXCwfHq5+zPUJ+1UJn+Kv58pFFD laq/USi3sdtgbCS3iJKJ+OR68TJ+k7zhnvQrnGaaMI/yV59kowsqCDCl6OR9JER7 I7o4dCXMGiIa4OJyLRQbWu7ndwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCn1kef1 rBXgQoQpLCPDaW2VqbyYMB8GA1UdIwQYMBaAFP4F77cBJdUgR29jvGCfVU3EmsWc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTNGMC9GM0MyQTkyMjJC OEExMUVFQUREMjIxMENDNEY5QUUwMi9fZ1h2dHdFbDFTQkhiMk84WUo5VlRjU2F4 WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19nWHZ0d0VsMVNCSGIyTzhZSjlWVGNTYXhady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTNGMC9GM0MyQTkyMjJCOEExMUVFQUREMjIxMENDNEY5QUUwMi9fZ1h2dHdFbDFT QkhiMk84WUo5VlRjU2F4WncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsC4fDxfFHW8MQkojMl0u1eMndTlY+TowbXt4V9pqwbuIpQrioDV8g /fAatz8bYvjCA6Zde//Dzn5+oX4Q+ZzuukpCFbPHaawn/gHaPczgq1whQmChLjTH 9e5SIToY8gTgSK8SDe/VVSTZo5/rp6N+YAWZgiEh8LaWm97YFnDeMkmMK7avRiwe 8Ne3OBkuMDczRVlURaRTo7Hh804nuGyyN80atR5SWiFagRF768uBO/YNcArCZrPA UMc0Kbl0/o+g3ucg8BPGAVff1DzuY49Dmz6k5n1Fyi5VzP+j03g8RNXaJqJJdGL+ YX6FhqMNUIuGpndv5NyU5dYwcCnpls8T -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:47 2025 by rpki-client