$ rpki-client -vvf rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft File: 2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft (raw, json) Hash identifier: r4Y/2Blp49bHd8xucNLVIJmdLN9h/o2K9F2bPL/7ee8= Subject key identifier: C4:AB:18:F7:07:38:2E:59:2F:18:46:FC:10:5A:1B:75:B7:E2:5C:CE Authority key identifier: D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E Certificate issuer: /CN=A919C19A/serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E Certificate serial: 04BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft Manifest number: 04AC Signing time: Mon 27 Oct 2025 00:58:54 +0000 Manifest this update: Mon 27 Oct 2025 00:58:53 +0000 Manifest next update: Mon 03 Nov 2025 00:58:53 +0000 Files and hashes: 1: 2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl (hash: 302kzsk/cingapavxKpz9zbTVwn1e7Uk1w698Nz2is0=) 2: F943257E12F511EDA9E7C939C4F9AE02.roa (hash: My/AnfHzuVQXYQgSRRC6SAXx84s6nLjdhtAzMmqyjDg=) 3: 4CC86698C4FA11EE86A51C0EC4F9AE02.roa (hash: 1L1EbJoORDKgeElorwmyrU76/atwwCYpeCr4PPGihVE=) 4: D9A7B280C4FA11EEA3AF2932C4F9AE02.roa (hash: D+FMpyZsISfccSz7KiOlQqTZgWE7m1EZKNLzF9fgEyY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 00:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1210 (0x4ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C19A, serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E Validity Not Before: Oct 27 00:58:53 2025 GMT Not After : Nov 3 00:58:53 2025 GMT Subject: CN=68fec3ce-65f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a0:28:cc:b2:84:5f:58:d8:4b:ed:fd:76:e6: 70:45:c2:de:1a:ef:1f:3e:a1:92:4e:0f:69:67:9c: 55:79:bc:ce:ee:71:2c:c9:16:e4:38:d6:a2:0e:76: 04:d1:a2:cc:06:df:c1:db:43:ae:87:3d:4e:39:a8: 79:07:7d:74:4c:5c:59:07:35:c5:4a:92:84:e0:6d: 7c:e4:47:86:e2:5f:5d:8e:3d:4f:cd:0a:20:1d:fe: ce:04:8c:42:2b:b2:ba:88:f7:fa:04:a1:a0:e6:3a: d0:5d:8d:1a:a1:78:91:1d:b3:54:4c:d4:6c:17:5c: bd:d9:31:10:f3:14:19:27:1f:15:07:c5:f8:8d:a2: 83:3d:5d:79:e6:17:1e:5a:c9:92:55:b9:88:77:2d: b4:82:e1:ac:20:1d:fc:2a:0f:2d:90:69:84:a7:f0: 60:a8:71:23:0f:a1:bb:d6:5e:7e:0d:09:4c:f4:57: 23:9b:d9:3c:5b:b3:b6:9b:57:6b:a2:b5:fb:b8:25: d6:01:2a:5b:a8:91:52:39:7c:92:e3:0c:00:f8:0a: ec:aa:0b:1d:8e:e4:5c:04:a5:29:0e:bf:f3:8a:75: 42:08:e1:b6:3c:f8:fb:da:c7:9d:5c:3c:d6:88:de: 5d:4d:a0:3d:9f:26:35:96:27:17:92:fc:43:ca:5f: a6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:AB:18:F7:07:38:2E:59:2F:18:46:FC:10:5A:1B:75:B7:E2:5C:CE X509v3 Authority Key Identifier: keyid:D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:15:bf:51:a4:d3:99:49:08:11:d1:65:bc:80:38:72:88:43: 75:38:29:7f:e6:fe:ed:77:95:04:c7:4c:1f:f6:ec:df:f6:f9: ee:0b:31:f4:f1:fa:62:40:7b:1b:f4:c4:49:a1:fe:d7:9d:b1: c3:b1:04:19:16:55:21:b2:35:40:aa:6a:eb:19:3e:24:c1:d7: c0:c0:d6:77:d8:c4:6f:cd:1c:24:be:23:f1:43:bf:b5:07:33: a8:64:49:61:eb:98:2c:62:ca:4a:ed:c8:19:d3:dc:48:3e:61: fa:80:4f:58:98:e0:05:1a:56:05:94:fb:fa:18:5e:cb:9f:59: a6:04:9a:30:e6:b8:06:e2:c5:09:ab:22:59:f7:de:d6:de:36: d7:b7:17:89:d4:d1:b3:67:a4:d3:a5:88:b7:88:42:22:be:1a: 2b:f0:bc:02:63:22:db:29:09:c8:ee:9c:5f:04:7d:4c:06:98: e6:9b:90:ca:d2:a0:13:75:0e:82:68:e3:c9:b4:67:d7:25:9a: a7:3a:fb:6d:de:78:fe:04:56:5b:49:d1:95:21:9f:c1:2c:a9: 2d:e7:6d:c1:d2:5e:99:2f:f4:50:9f:3a:1a:9c:72:4d:a5:03: 51:e6:b0:8f:4a:84:84:aa:27:f4:7c:03:2f:da:f4:7d:47:57: 8a:a4:46:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMxOUExMTAvBgNVBAUTKEQ4OUNGRjZEN0Q5NTUxQUU3MDREOTNFOTc1NTM2MTZD OERCMTNGNUUwHhcNMjUxMDI3MDA1ODUzWhcNMjUxMTAzMDA1ODUzWjAYMRYwFAYD VQQDEw02OGZlYzNjZS02NWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAraAozLKEX1jYS+39duZwRcLeGu8fPqGSTg9pZ5xVebzO7nEsyRbkONaiDnYE 0aLMBt/B20Ouhz1OOah5B310TFxZBzXFSpKE4G185EeG4l9djj1PzQogHf7OBIxC K7K6iPf6BKGg5jrQXY0aoXiRHbNUTNRsF1y92TEQ8xQZJx8VB8X4jaKDPV155hce WsmSVbmIdy20guGsIB38Kg8tkGmEp/BgqHEjD6G71l5+DQlM9Fcjm9k8W7O2m1dr orX7uCXWASpbqJFSOXyS4wwA+ArsqgsdjuRcBKUpDr/zinVCCOG2PPj72sedXDzW iN5dTaA9nyY1licXkvxDyl+mCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMSrGPcH OC5ZLxhG/BBaG3W34lzOMB8GA1UdIwQYMBaAFNic/219lVGucE2T6XVTYWyNsT9e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzE5QS8yNEFCMkMzRTRG OEQxMUVDODE1NzEyNUZDNEY5QUUwMi8ySnpfYlgyVlVhNXdUWlBwZFZOaGJJMnhQ MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJKel9iWDJWVWE1d1RaUHBkVk5oYkkyeFAxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzE5QS8yNEFCMkMzRTRGOEQxMUVDODE1NzEyNUZDNEY5QUUwMi8ySnpfYlgyVlVh NXdUWlBwZFZOaGJJMnhQMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcFb9RpNOZSQgR0WW8gDhyiEN1OCl/5v7td5UEx0wf9uzf9vnuCzH0 8fpiQHsb9MRJof7XnbHDsQQZFlUhsjVAqmrrGT4kwdfAwNZ32MRvzRwkviPxQ7+1 BzOoZElh65gsYspK7cgZ09xIPmH6gE9YmOAFGlYFlPv6GF7Ln1mmBJow5rgG4sUJ qyJZ997W3jbXtxeJ1NGzZ6TTpYi3iEIivhor8LwCYyLbKQnI7pxfBH1MBpjmm5DK 0qATdQ6CaOPJtGfXJZqnOvtt3nj+BFZbSdGVIZ/BLKkt523B0l6ZL/RQnzoanHJN pQNR5rCPSoSEqif0fAMv2vR9R1eKpEab -----END CERTIFICATE-----Generated at Mon Oct 27 14:59:29 2025 by rpki-client