$ rpki-client -vvf rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft File: 19wEkNjuc-uWU-jiR2_8-4l0qt8.mft (raw, json) Hash identifier: p+eTB4Q7hkG69GCpnmx9mm4iot6vqEtSve8ooo2PD8c= Subject key identifier: 5E:68:95:60:34:5E:27:0C:1B:B0:D2:08:01:E3:7A:0B:86:7E:D4:99 Authority key identifier: D7:DC:04:90:D8:EE:73:EB:96:53:E8:E2:47:6F:FC:FB:89:74:AA:DF Certificate issuer: /CN=A918A0B8/serialNumber=D7DC0490D8EE73EB9653E8E2476FFCFB8974AADF Certificate serial: 0505 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/19wEkNjuc-uWU-jiR2_8-4l0qt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft Manifest number: 04FE Signing time: Tue 04 Nov 2025 23:44:02 +0000 Manifest this update: Tue 04 Nov 2025 23:44:01 +0000 Manifest next update: Tue 11 Nov 2025 23:44:01 +0000 Files and hashes: 1: 19wEkNjuc-uWU-jiR2_8-4l0qt8.crl (hash: AwKbFd70dcaKl8yOLz8xyAEgiPpJh3tSX1u/5OcENWQ=) 2: 233E4D90309811ECAED04B4AC4F9AE02.roa (hash: CZ7WkBrqTyJNM4Pw1sCP57Phckm4MGOWnQm76XtbNLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.crl rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/19wEkNjuc-uWU-jiR2_8-4l0qt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:38:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1285 (0x505) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A0B8, serialNumber=D7DC0490D8EE73EB9653E8E2476FFCFB8974AADF Validity Not Before: Nov 4 23:44:01 2025 GMT Not After : Nov 11 23:44:01 2025 GMT Subject: CN=690a8fc1-ec4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:eb:bb:5c:9c:04:f4:3f:28:77:94:c1:6a:a3: 31:57:62:e4:97:c8:87:51:34:f5:44:fe:5d:2a:d8: 53:b2:ed:72:ef:2f:b7:85:43:4b:7f:1c:64:ac:ed: 41:5f:c6:89:a2:94:85:e9:28:59:5e:30:ea:d9:8c: da:9f:64:ce:25:ae:0d:88:58:8d:27:ff:91:4c:4c: fa:3c:e9:1b:48:05:3c:fc:2a:6c:8a:2c:ad:ee:41: 39:bd:1e:30:6e:f0:32:cf:c2:b5:b9:41:e4:71:94: da:9e:49:89:e4:f6:b5:ff:27:15:ce:ad:01:82:ab: 26:59:5a:17:d0:90:bd:47:be:01:d4:7c:f9:7a:e6: 5d:e3:fe:ac:b8:3c:b2:cd:4a:7c:49:db:d9:00:59: f3:af:2c:b7:64:19:16:e8:8d:f1:01:07:1f:63:54: 16:a7:cf:1b:38:de:75:25:36:b8:b0:69:b9:15:0f: 61:0f:d9:65:ca:8e:e5:11:a9:6c:79:c5:66:d4:4c: 0d:f4:11:91:31:01:98:87:6b:89:69:8c:a2:dc:10: a6:3e:9e:fa:c7:59:c6:f7:22:54:bc:92:70:95:d7: 0b:dd:00:26:27:bc:91:01:b3:c5:06:34:bf:ba:7e: 62:55:b1:03:d9:b1:c7:6d:5f:12:60:c2:9e:d7:cf: 5f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:68:95:60:34:5E:27:0C:1B:B0:D2:08:01:E3:7A:0B:86:7E:D4:99 X509v3 Authority Key Identifier: keyid:D7:DC:04:90:D8:EE:73:EB:96:53:E8:E2:47:6F:FC:FB:89:74:AA:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/19wEkNjuc-uWU-jiR2_8-4l0qt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:0a:92:75:d1:f3:d6:01:c2:57:81:70:1f:63:61:69:41:79: 04:b3:b6:5b:c3:20:f4:52:09:2a:74:75:0e:66:30:85:44:0d: 87:74:5d:ba:0c:32:b8:5d:11:78:af:7e:28:7c:fe:98:8b:d1: b2:e0:57:4d:41:c3:aa:41:c0:9e:c3:9e:49:9a:d2:c6:ae:30: 4d:d3:0a:cc:b8:59:2a:26:19:7a:34:7d:79:6c:e5:b5:ae:dc: cd:27:0d:d4:ee:f0:2d:0b:0d:cc:99:93:4a:b7:e9:47:9a:44: c6:17:6e:73:3f:be:6d:ed:1d:b9:41:9a:ca:3d:84:fd:e0:40: ab:85:14:1e:ca:67:52:b6:6f:3a:0d:29:05:90:15:cd:0c:f7: 92:55:5f:7a:1a:06:67:06:8e:08:7d:bb:ad:b8:87:80:08:e9: e6:14:ae:4d:5c:b3:50:dc:0e:2c:fa:e9:3d:84:9a:d8:99:e3: 1b:60:c8:82:8b:08:64:f2:6d:f1:91:ee:99:8d:75:01:ac:66: 08:37:1f:fd:92:92:c4:a1:90:e5:e4:dd:56:c5:64:ba:97:db: 53:69:f7:3f:f5:ec:86:2d:8d:d6:fb:6f:15:67:49:08:43:b9: 41:98:59:72:06:df:fd:dd:ea:6d:0c:a4:5c:2f:b7:22:f1:a8: 82:72:20:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEEwQjgxMTAvBgNVBAUTKEQ3REMwNDkwRDhFRTczRUI5NjUzRThFMjQ3NkZGQ0ZC ODk3NEFBREYwHhcNMjUxMTA0MjM0NDAxWhcNMjUxMTExMjM0NDAxWjAYMRYwFAYD VQQDEw02OTBhOGZjMS1lYzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3eu7XJwE9D8od5TBaqMxV2Lkl8iHUTT1RP5dKthTsu1y7y+3hUNLfxxkrO1B X8aJopSF6ShZXjDq2Yzan2TOJa4NiFiNJ/+RTEz6POkbSAU8/Cpsiiyt7kE5vR4w bvAyz8K1uUHkcZTankmJ5Pa1/ycVzq0BgqsmWVoX0JC9R74B1Hz5euZd4/6suDyy zUp8SdvZAFnzryy3ZBkW6I3xAQcfY1QWp88bON51JTa4sGm5FQ9hD9llyo7lEals ecVm1EwN9BGRMQGYh2uJaYyi3BCmPp76x1nG9yJUvJJwldcL3QAmJ7yRAbPFBjS/ un5iVbED2bHHbV8SYMKe189fKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF5olWA0 XicMG7DSCAHjeguGftSZMB8GA1UdIwQYMBaAFNfcBJDY7nPrllPo4kdv/PuJdKrf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTBCOC8xN0RFRkYxNDJG RjYxMUVDOTA0N0EyNDNDNEY5QUUwMi8xOXdFa05qdWMtdVdVLWppUjJfOC00bDBx dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE5d0VrTmp1Yy11V1UtamlSMl84LTRsMHF0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTBCOC8xN0RFRkYxNDJGRjYxMUVDOTA0N0EyNDNDNEY5QUUwMi8xOXdFa05qdWMt dVdVLWppUjJfOC00bDBxdDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9CpJ10fPWAcJXgXAfY2FpQXkEs7ZbwyD0UgkqdHUOZjCFRA2HdF26 DDK4XRF4r34ofP6Yi9Gy4FdNQcOqQcCew55JmtLGrjBN0wrMuFkqJhl6NH15bOW1 rtzNJw3U7vAtCw3MmZNKt+lHmkTGF25zP75t7R25QZrKPYT94ECrhRQeymdStm86 DSkFkBXNDPeSVV96GgZnBo4IfbutuIeACOnmFK5NXLNQ3A4s+uk9hJrYmeMbYMiC iwhk8m3xke6ZjXUBrGYINx/9kpLEoZDl5N1WxWS6l9tTafc/9eyGLY3W+28VZ0kI Q7lBmFlyBt/93eptDKRcL7ci8aiCciCZ -----END CERTIFICATE-----Generated at Wed Nov 5 01:58:02 2025 by rpki-client