$ rpki-client -vvf rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.mft File: 19cjt6SfGf_8n8cw1A9pUEjMCZk.mft (raw, json) Hash identifier: PGjlxuO5F134bISWZ/D+ADcKlW2FIrwT0QTJx8k34Dk= Subject key identifier: 42:48:C4:B8:91:C7:BF:D4:3D:D5:16:3E:7D:F8:61:78:42:F1:1B:41 Authority key identifier: D7:D7:23:B7:A4:9F:19:FF:FC:9F:C7:30:D4:0F:69:50:48:CC:09:99 Certificate issuer: /CN=A919C068/serialNumber=D7D723B7A49F19FFFC9FC730D40F695048CC0999 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/19cjt6SfGf_8n8cw1A9pUEjMCZk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.mft Manifest number: 19 Signing time: Sun 19 Oct 2025 11:26:41 +0000 Manifest this update: Sun 19 Oct 2025 11:26:40 +0000 Manifest next update: Sun 26 Oct 2025 11:26:40 +0000 Files and hashes: 1: 19cjt6SfGf_8n8cw1A9pUEjMCZk.crl (hash: +/wdh52lf/vaLxx2/oOUYtM9f3rvXrxIpECjkeQpdqY=) 2: 751861108E2B11F0BFDA106EC4F9AE02.roa (hash: Pueo4Q2vOuMQZ4I9zO+98kEqu2uxXJRejgT+irrxbhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.crl rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/19cjt6SfGf_8n8cw1A9pUEjMCZk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C068, serialNumber=D7D723B7A49F19FFFC9FC730D40F695048CC0999 Validity Not Before: Oct 19 11:26:40 2025 GMT Not After : Oct 26 11:26:40 2025 GMT Subject: CN=68f4caf0-0c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:cf:89:67:28:22:b0:39:06:7d:62:00:db:6c: ae:ca:93:4e:ef:8f:03:e5:ed:43:99:5f:e8:5c:bc: 14:8c:9f:c6:30:ae:da:90:7e:c6:83:7e:97:81:4d: 72:bd:c8:6a:8a:a1:9d:9c:4b:e7:80:13:ab:35:92: 9c:da:e4:2a:bd:01:91:ea:09:2f:55:c0:3e:2d:1f: ba:86:1e:46:e3:34:60:29:39:62:65:67:c0:b2:e9: 00:a6:4c:fd:59:6e:e3:be:ee:59:b9:96:6f:4a:df: cc:74:76:ec:5f:d5:ee:ca:93:ca:db:a9:93:e2:c0: e7:60:1e:b5:c9:62:f1:82:5b:dd:37:1b:95:fb:b8: 11:88:f0:74:eb:83:f9:30:6d:6c:99:2a:cc:ce:c2: a0:2c:44:44:18:8a:a3:0a:66:fb:a5:01:b6:74:f7: 0c:50:23:86:38:6b:4d:eb:9e:77:91:fb:30:28:27: aa:dc:6a:f5:c2:8e:1c:cd:d8:63:20:df:02:7c:a9: 4d:6d:25:cd:03:e8:5d:03:54:ad:42:1d:c8:5d:70: 80:20:99:d7:8b:07:b6:0d:e2:db:82:2d:b3:4d:4a: f3:fd:1b:a1:65:64:8c:77:fb:38:c2:16:f0:f8:b2: a0:57:65:e9:b7:28:e4:98:ea:b8:93:db:ba:77:cc: 6c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:48:C4:B8:91:C7:BF:D4:3D:D5:16:3E:7D:F8:61:78:42:F1:1B:41 X509v3 Authority Key Identifier: keyid:D7:D7:23:B7:A4:9F:19:FF:FC:9F:C7:30:D4:0F:69:50:48:CC:09:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/19cjt6SfGf_8n8cw1A9pUEjMCZk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:bd:4e:3f:58:47:16:9b:b5:77:60:86:61:a1:22:b5:74:a5: 33:19:8d:90:46:91:50:d0:5b:d8:a2:b5:ae:ed:86:04:53:b1: 78:73:98:ec:68:16:51:69:c8:ba:2f:d4:06:61:a1:5a:7e:7d: 8b:9a:45:ee:b8:6e:c9:ae:87:ad:f4:9d:b0:b0:8d:7c:2f:57: 3c:11:a4:89:28:2e:5e:14:e6:fd:62:13:8d:a6:7f:8c:44:8c: 65:3e:f0:23:c3:cb:8b:0f:47:33:3d:2e:d7:79:33:db:c4:24: e9:06:f7:4d:d4:4b:4d:bd:2b:dc:aa:fc:5b:a8:01:fa:36:fd: c3:8e:d2:4d:e9:70:03:55:89:8c:20:db:d0:95:f3:df:cf:c2: 9c:c8:78:92:f1:50:31:37:7b:89:47:78:69:36:89:9e:2c:ec: 15:35:d5:42:5b:d4:68:51:3c:c6:88:11:08:a4:eb:5b:96:35: ac:a3:a2:a1:43:a2:b5:91:b9:28:fd:af:05:9f:65:2f:87:38: 31:bd:4e:99:aa:41:9a:19:cd:56:e2:3f:48:45:2c:e0:cd:c4: d4:a5:62:ed:2f:b0:08:d5:98:34:2f:7c:d7:da:7f:95:e4:23: d3:a4:6a:3c:1a:af:51:42:2a:93:d4:bf:51:b2:8b:4a:a6:d2: 29:fe:db:d6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QzA2ODExMC8GA1UEBRMoRDdENzIzQjdBNDlGMTlGRkZDOUZDNzMwRDQwRjY5NTA0 OENDMDk5OTAeFw0yNTEwMTkxMTI2NDBaFw0yNTEwMjYxMTI2NDBaMBgxFjAUBgNV BAMTDTY4ZjRjYWYwLTBjMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDez4lnKCKwOQZ9YgDbbK7Kk07vjwPl7UOZX+hcvBSMn8YwrtqQfsaDfpeBTXK9 yGqKoZ2cS+eAE6s1kpza5Cq9AZHqCS9VwD4tH7qGHkbjNGApOWJlZ8Cy6QCmTP1Z buO+7lm5lm9K38x0duxf1e7Kk8rbqZPiwOdgHrXJYvGCW903G5X7uBGI8HTrg/kw bWyZKszOwqAsREQYiqMKZvulAbZ09wxQI4Y4a03rnneR+zAoJ6rcavXCjhzN2GMg 3wJ8qU1tJc0D6F0DVK1CHchdcIAgmdeLB7YN4tuCLbNNSvP9G6FlZIx3+zjCFvD4 sqBXZem3KOSY6riT27p3zGwXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQkjEuJHH v9Q91RY+ffhheELxG0EwHwYDVR0jBBgwFoAU19cjt6SfGf/8n8cw1A9pUEjMCZkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlDMDY4L0RCMUIyODBFOENC ODExRjA4MkM5MkU2M0M0RjlBRTAyLzE5Y2p0NlNmR2ZfOG44Y3cxQTlwVUVqTUNa ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvMTljanQ2U2ZHZl84bjhjdzFBOXBVRWpNQ1prLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlD MDY4L0RCMUIyODBFOENCODExRjA4MkM5MkU2M0M0RjlBRTAyLzE5Y2p0NlNmR2Zf OG44Y3cxQTlwVUVqTUNaay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ69Tj9YRxabtXdghmGhIrV0pTMZjZBGkVDQW9iita7thgRTsXhzmOxo FlFpyLov1AZhoVp+fYuaRe64bsmuh630nbCwjXwvVzwRpIkoLl4U5v1iE42mf4xE jGU+8CPDy4sPRzM9Ltd5M9vEJOkG903US029K9yq/FuoAfo2/cOO0k3pcANViYwg 29CV89/PwpzIeJLxUDE3e4lHeGk2iZ4s7BU11UJb1GhRPMaIEQik61uWNayjoqFD orWRuSj9rwWfZS+HODG9TpmqQZoZzVbiP0hFLODNxNSlYu0vsAjVmDQvfNfaf5Xk I9Okajwar1FCKpPUv1Gyi0qm0in+29Y= -----END CERTIFICATE-----Generated at Wed Oct 22 10:21:55 2025 by rpki-client