$ rpki-client -vvf rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft File: -cNjgFn4ZOhK479Q2qwHnGhGPqc.mft (raw, json) Hash identifier: atSyUjVpInkExpwfSXZyvfCVCLIHM3AU/2in1LexBig= Subject key identifier: 81:CF:9F:51:83:9A:86:29:57:D6:C6:89:46:CD:7E:D9:DF:45:C2:C1 Authority key identifier: F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 Certificate issuer: /CN=A919DB2F/serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Certificate serial: 0581 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft Manifest number: 056D Signing time: Mon 27 Oct 2025 00:23:21 +0000 Manifest this update: Mon 27 Oct 2025 00:23:20 +0000 Manifest next update: Mon 03 Nov 2025 00:23:20 +0000 Files and hashes: 1: -cNjgFn4ZOhK479Q2qwHnGhGPqc.crl (hash: zLCkyhjwsEmFFF+kGJ2EO4jVxK/nl5nv2K6XzHDLCYQ=) 2: F307B7F4912A11F0B418B448C4F9AE02.roa (hash: yjx/NrxzZgDiEgxVTNY6l8PB/PX5P1BrG3zGpxB5GDo=) 3: 27023558912A11F09F7D4044C4F9AE02.roa (hash: +v5rysmnVhOkTUg6d0tgPtn6VplDudh8Q8DnVgzZQm0=) 4: E0A5F584DFAC11EE8C281B42C4F9AE02.roa (hash: QC4EhNSXvJgfmvNa3iGuDkLhBq1A6Ut/uA6vL0hAWZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 00:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1409 (0x581) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DB2F, serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Validity Not Before: Oct 27 00:23:20 2025 GMT Not After : Nov 3 00:23:20 2025 GMT Subject: CN=68febb79-a3c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1c:23:0c:ec:d8:0d:ec:71:26:0b:a7:db:57: ed:ae:36:c5:d4:4a:28:04:5d:52:0a:ae:c7:a6:be: f5:18:de:a2:8d:c3:f3:51:22:82:70:a6:b6:ca:3d: 7f:c0:aa:a1:4a:a6:8a:f9:88:f8:1b:85:b1:25:e2: 09:8a:fb:f2:5a:0a:04:36:90:fb:58:27:3b:5d:02: 1b:ea:dd:36:ec:3a:5a:44:d5:56:3e:89:90:45:4d: 69:79:0e:a0:5d:e6:10:a7:a9:58:70:2d:02:f4:70: d3:f6:44:a1:1a:06:ac:24:f2:70:ca:c1:f0:57:1a: 23:4c:8b:2a:0d:06:30:fb:4b:48:18:bd:55:0a:d8: 10:6b:3c:4b:ce:86:21:55:19:f0:d8:26:bc:a3:a2: 54:08:1e:bc:24:29:83:28:d7:10:d5:08:27:74:ea: 95:89:68:fc:33:f8:c0:51:fc:b8:e6:68:13:c0:40: b0:45:cf:b7:e0:26:d3:7f:fd:86:46:fd:84:b0:ed: 44:1b:31:1a:a9:63:8c:a1:05:fb:a0:c7:c2:3d:79: ef:6e:1d:2e:ca:70:9c:58:7c:46:d3:8d:97:9e:3d: fa:3f:f5:c1:8c:75:99:5d:b7:4a:aa:e0:5c:a1:dd: 84:4a:91:ed:7e:fc:38:08:d5:c5:cb:41:32:33:73: 9e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:CF:9F:51:83:9A:86:29:57:D6:C6:89:46:CD:7E:D9:DF:45:C2:C1 X509v3 Authority Key Identifier: keyid:F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:90:71:7e:53:d6:09:cf:f0:a2:65:33:d4:9a:a5:a7:a1:19: 54:71:52:c4:af:4d:fa:4d:a9:ca:3f:94:01:f4:25:e0:6c:fe: 34:22:e3:a4:1e:74:81:ea:45:26:f6:91:7a:f1:a4:34:88:47: 79:eb:3c:17:ec:9b:00:a3:fc:85:2e:d1:26:c4:e0:06:52:7f: cc:51:50:be:1f:ed:8b:ac:c5:34:ad:11:5b:49:b2:99:b6:96: b3:6b:12:58:94:4d:0f:98:1c:df:8f:4c:7c:f6:72:d1:92:5f: f3:3a:35:51:14:c5:2a:86:0a:24:42:7e:c7:c2:48:76:10:f7: 96:79:32:79:d5:31:2d:6b:c6:db:4b:42:a0:2b:57:14:f9:35: 35:37:b6:d1:76:7b:ab:3f:1e:3f:1a:72:4f:a4:7d:2c:f1:b6: 68:df:94:e3:43:39:03:b7:9e:a7:41:ce:7b:da:14:f7:d6:8c: 79:fb:59:71:e1:5d:a4:d5:7a:df:2d:8a:59:a5:5d:50:9c:0a: a2:30:49:75:af:8e:c2:63:e6:66:5d:e9:83:a2:74:ac:b0:8b: 58:5c:bc:dd:16:5d:bc:d7:01:7b:a5:bf:8a:5c:61:90:7a:a1: e0:62:9e:93:50:04:06:75:05:9b:8f:0a:b1:ef:81:72:4c:43: 56:6b:2f:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURCMkYxMTAvBgNVBAUTKEY5QzM2MzgwNTlGODY0RTg0QUUzQkY1MERBQUMwNzlD Njg0NjNFQTcwHhcNMjUxMDI3MDAyMzIwWhcNMjUxMTAzMDAyMzIwWjAYMRYwFAYD VQQDEw02OGZlYmI3OS1hM2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4xwjDOzYDexxJgun21ftrjbF1EooBF1SCq7Hpr71GN6ijcPzUSKCcKa2yj1/ wKqhSqaK+Yj4G4WxJeIJivvyWgoENpD7WCc7XQIb6t027DpaRNVWPomQRU1peQ6g XeYQp6lYcC0C9HDT9kShGgasJPJwysHwVxojTIsqDQYw+0tIGL1VCtgQazxLzoYh VRnw2Ca8o6JUCB68JCmDKNcQ1QgndOqViWj8M/jAUfy45mgTwECwRc+34CbTf/2G Rv2EsO1EGzEaqWOMoQX7oMfCPXnvbh0uynCcWHxG042Xnj36P/XBjHWZXbdKquBc od2ESpHtfvw4CNXFy0EyM3Oe4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIHPn1GD moYpV9bGiUbNftnfRcLBMB8GA1UdIwQYMBaAFPnDY4BZ+GToSuO/UNqsB5xoRj6n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REIyRi9FRjU5Q0VDNDBB REExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpPaEs0NzlRMnF3SG5HaEdQ cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1jTmpnRm40Wk9oSzQ3OVEycXdIbkdoR1BxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REIyRi9FRjU5Q0VDNDBBREExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpP aEs0NzlRMnF3SG5HaEdQcWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCekHF+U9YJz/CiZTPUmqWnoRlUcVLEr036TanKP5QB9CXgbP40IuOk HnSB6kUm9pF68aQ0iEd56zwX7JsAo/yFLtEmxOAGUn/MUVC+H+2LrMU0rRFbSbKZ tpazaxJYlE0PmBzfj0x89nLRkl/zOjVRFMUqhgokQn7Hwkh2EPeWeTJ51TEta8bb S0KgK1cU+TU1N7bRdnurPx4/GnJPpH0s8bZo35TjQzkDt56nQc572hT31ox5+1lx 4V2k1XrfLYpZpV1QnAqiMEl1r47CY+ZmXemDonSssItYXLzdFl281wF7pb+KXGGQ eqHgYp6TUAQGdQWbjwqx74FyTENWay+i -----END CERTIFICATE-----Generated at Tue Oct 28 20:19:38 2025 by rpki-client