$ rpki-client -vvf rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft File: P1VrwCUQM7zlcvxsirdgrMSXBZM.mft (raw, json) Hash identifier: fRsX6G+Gal5rPDqSXcS3QCv0Wk6VhbO70OorMwA69WM= Subject key identifier: D4:64:76:7F:C1:D6:BD:0F:D4:72:44:94:51:3C:25:E4:2D:6F:CF:D7 Authority key identifier: 3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93 Certificate issuer: /CN=A919CF42/serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593 Certificate serial: 1582 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft Manifest number: 1567 Signing time: Sun 02 Nov 2025 16:47:34 +0000 Manifest this update: Sun 02 Nov 2025 16:47:34 +0000 Manifest next update: Sun 09 Nov 2025 16:47:34 +0000 Files and hashes: 1: P1VrwCUQM7zlcvxsirdgrMSXBZM.crl (hash: hJP6WMrg6XDoIfX+8n++8hxN0xBK/nNNoT+uz5fPW3o=) 2: 65C8C388EAFB11ED9F4DC557C4F9AE02.roa (hash: WVZ1/uIyOSqp7Em7YlQqzkYloU6mxq2B8kLksLfxIF8=) 3: 9FA735ECEAF811ED9E2D1958C4F9AE02.roa (hash: HFVHQ+wL1mQEZ01i4CvLThp7tarfU14b1p5XC7Hrt/Y=) 4: F148BE6E511611EE85A7E634C4F9AE02.roa (hash: 9hsbmWbhyRE5mUOuFHl04Y4Uut8mlBoehod5tJbgja0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5506 (0x1582) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CF42, serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593 Validity Not Before: Nov 2 16:47:34 2025 GMT Not After : Nov 9 16:47:34 2025 GMT Subject: CN=69078b26-c07e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:30:e5:24:63:77:9b:81:68:75:bb:48:1c:57: ed:fa:7f:b4:34:e7:f2:5c:cd:3e:db:e1:2c:05:18: f9:f2:8e:27:8a:94:27:b8:41:a4:60:df:10:f3:d0: b3:ee:82:4b:bd:74:41:f0:ae:5c:33:53:f8:7c:70: 58:67:05:cf:13:ea:4a:85:ac:3c:4b:c4:bc:55:97: 5e:81:d0:42:f7:29:9a:2b:e0:ae:2d:3b:9b:f8:41: d9:25:ba:dc:fb:dd:c3:63:40:ff:6b:4d:ec:5c:2f: 2a:fa:e8:49:c7:f4:a8:5f:94:dd:03:bb:fc:ce:f1: 57:fa:8d:eb:02:cc:a7:66:a7:0a:02:3a:73:0b:75: 3b:0d:d1:cb:3b:c0:a1:77:34:aa:28:d5:34:a9:19: 28:fb:b1:9c:4e:7d:5f:b7:68:b0:91:c7:db:7d:59: 8b:32:35:38:35:7d:1d:aa:0d:8e:bb:cd:35:34:02: d8:36:c7:20:56:a5:9c:27:ca:31:a4:92:39:fe:f2: 9b:2f:26:04:28:0a:f1:f1:f6:bd:46:ae:21:07:81: a1:70:0a:da:2e:c7:9f:f6:2d:4a:42:da:d5:25:f6: 31:a6:44:91:79:48:26:19:3a:de:51:18:57:f2:98: da:5c:dd:52:e2:73:70:32:fc:75:16:3d:2c:61:fb: bb:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:64:76:7F:C1:D6:BD:0F:D4:72:44:94:51:3C:25:E4:2D:6F:CF:D7 X509v3 Authority Key Identifier: keyid:3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:27:8c:03:46:ef:ff:a5:6d:92:1c:c2:44:d3:c4:96:fb:4e: 31:1b:0b:b3:1e:5b:e9:4b:69:e9:9e:6a:27:82:12:15:e1:f3: 8d:1f:ed:b5:95:44:16:cc:1a:c2:f1:72:b1:a5:3d:92:5a:bb: 23:78:c8:d4:8d:8e:a4:f9:59:aa:53:41:30:1e:ca:2d:08:0e: 5f:a0:8b:4f:dc:68:88:9d:28:30:09:19:6f:6c:92:e7:de:ce: 41:5c:ba:65:bf:42:d8:42:7c:8f:c5:da:15:e0:d0:f5:1d:ff: 66:6e:21:f6:46:61:87:f0:02:0e:bf:1b:89:1d:81:a5:b3:e0: 94:53:9f:f7:81:57:5d:9b:39:f7:1c:63:68:9e:b1:aa:b6:50: b0:fb:66:c0:c3:f4:56:bd:e5:64:e3:dd:2d:4a:9b:6a:77:88: 96:ed:00:ce:28:8e:52:be:e8:17:2a:50:69:1c:70:05:7b:19: e9:a2:e9:25:14:d3:3a:a5:14:38:96:4a:29:59:8f:31:9f:3c: 4e:11:4a:66:82:35:a7:ec:d8:42:76:7b:6d:65:d1:a1:a9:8f: 97:86:5b:2c:6a:91:06:af:84:43:01:28:c7:33:98:7e:80:75: c6:10:df:41:4e:e9:95:fe:0c:d1:54:bc:dc:73:07:7f:7e:68: 61:8b:6a:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNGNDIxMTAvBgNVBAUTKDNGNTU2QkMwMjUxMDMzQkNFNTcyRkM2QzhBQjc2MEFD QzQ5NzA1OTMwHhcNMjUxMTAyMTY0NzM0WhcNMjUxMTA5MTY0NzM0WjAYMRYwFAYD VQQDEw02OTA3OGIyNi1jMDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjDlJGN3m4FodbtIHFft+n+0NOfyXM0+2+EsBRj58o4nipQnuEGkYN8Q89Cz 7oJLvXRB8K5cM1P4fHBYZwXPE+pKhaw8S8S8VZdegdBC9ymaK+CuLTub+EHZJbrc +93DY0D/a03sXC8q+uhJx/SoX5TdA7v8zvFX+o3rAsynZqcKAjpzC3U7DdHLO8Ch dzSqKNU0qRko+7GcTn1ft2iwkcfbfVmLMjU4NX0dqg2Ou801NALYNscgVqWcJ8ox pJI5/vKbLyYEKArx8fa9Rq4hB4GhcAraLsef9i1KQtrVJfYxpkSReUgmGTreURhX 8pjaXN1S4nNwMvx1Fj0sYfu7NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNRkdn/B 1r0P1HJElFE8JeQtb8/XMB8GA1UdIwQYMBaAFD9Va8AlEDO85XL8bIq3YKzElwWT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0Y0Mi83QTZBQkZDQzRD QzYxMUU4QkVGMDNENzVDNEY5QUUwMi9QMVZyd0NVUU03emxjdnhzaXJkZ3JNU1hC Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AxVnJ3Q1VRTTd6bGN2eHNpcmRnck1TWEJaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0Y0Mi83QTZBQkZDQzRDQzYxMUU4QkVGMDNENzVDNEY5QUUwMi9QMVZyd0NVUU03 emxjdnhzaXJkZ3JNU1hCWk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCJ4wDRu//pW2SHMJE08SW+04xGwuzHlvpS2npnmonghIV4fONH+21 lUQWzBrC8XKxpT2SWrsjeMjUjY6k+VmqU0EwHsotCA5foItP3GiInSgwCRlvbJLn 3s5BXLplv0LYQnyPxdoV4ND1Hf9mbiH2RmGH8AIOvxuJHYGls+CUU5/3gVddmzn3 HGNonrGqtlCw+2bAw/RWveVk490tSptqd4iW7QDOKI5SvugXKlBpHHAFexnpoukl FNM6pRQ4lkopWY8xnzxOEUpmgjWn7NhCdnttZdGhqY+XhlssapEGr4RDASjHM5h+ gHXGEN9BTumV/gzRVLzccwd/fmhhi2pg -----END CERTIFICATE-----Generated at Mon Nov 3 07:11:13 2025 by rpki-client