$ rpki-client -vvf rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.mft File: 19cjt6SfGf_8n8cw1A9pUEjMCZk.mft (raw, json) Hash identifier: 4WSxKRgSIIJmC2u3BPG4TjCAPI2UMV92TKx//tYE1vQ= Subject key identifier: C3:64:79:1A:0E:BA:63:37:6A:4F:5E:08:21:43:37:21:AF:9F:54:7B Authority key identifier: D7:D7:23:B7:A4:9F:19:FF:FC:9F:C7:30:D4:0F:69:50:48:CC:09:99 Certificate issuer: /CN=A919C068/serialNumber=D7D723B7A49F19FFFC9FC730D40F695048CC0999 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/19cjt6SfGf_8n8cw1A9pUEjMCZk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.mft Manifest number: 21 Signing time: Wed 05 Nov 2025 07:58:46 +0000 Manifest this update: Wed 05 Nov 2025 07:58:46 +0000 Manifest next update: Wed 12 Nov 2025 07:58:46 +0000 Files and hashes: 1: 19cjt6SfGf_8n8cw1A9pUEjMCZk.crl (hash: khPlkRcILf7+mr9zquPVQDRn7rMjsK4VsLiXUFPpthY=) 2: 751861108E2B11F0BFDA106EC4F9AE02.roa (hash: Pueo4Q2vOuMQZ4I9zO+98kEqu2uxXJRejgT+irrxbhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.crl rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/19cjt6SfGf_8n8cw1A9pUEjMCZk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:58:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C068, serialNumber=D7D723B7A49F19FFFC9FC730D40F695048CC0999 Validity Not Before: Nov 5 07:58:46 2025 GMT Not After : Nov 12 07:58:46 2025 GMT Subject: CN=690b03b6-438d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:79:09:6f:cf:34:61:14:ac:f3:14:49:ca:3b: 28:98:1c:2c:42:f2:fa:e8:0c:58:da:c0:fa:3c:35: a8:f7:3b:03:00:b5:bb:b6:ef:99:57:f6:dc:ec:14: b2:6e:fb:f0:ef:7b:a5:ef:e6:96:a6:c1:31:db:bf: 4a:63:d8:cb:eb:e7:c0:ad:7c:1b:13:b0:f3:0b:4c: 85:11:5e:dd:7c:48:3c:6e:4c:2d:20:54:4a:5f:75: 82:07:4a:94:88:fb:03:a2:a9:bf:b6:5c:df:61:c6: d7:dc:3a:7b:e8:0b:10:70:55:8c:0e:c3:93:6a:77: 6e:4b:26:a5:81:37:95:d4:2a:13:d6:c2:cf:74:83: 9e:f0:cb:e3:f6:5c:bb:b3:d7:9f:d9:4f:86:d2:b0: c3:8b:f3:ae:38:4a:2f:7a:60:6a:2b:4b:36:2c:04: f6:2f:27:92:c6:d9:f3:27:a8:bc:97:2b:72:7b:fd: 75:c6:d0:6a:a9:35:fc:cf:bd:71:31:39:e6:47:e2: 9c:1b:62:08:9b:fb:be:25:0a:5d:6f:66:10:1b:0f: d6:22:ed:65:54:03:3c:ed:b0:d4:9c:13:7f:89:fb: 69:0e:c7:7e:fa:0f:7e:df:b5:99:78:22:71:f4:80: e3:bd:e2:ea:7c:1c:62:88:ea:33:eb:0c:99:ef:6c: 2e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:64:79:1A:0E:BA:63:37:6A:4F:5E:08:21:43:37:21:AF:9F:54:7B X509v3 Authority Key Identifier: keyid:D7:D7:23:B7:A4:9F:19:FF:FC:9F:C7:30:D4:0F:69:50:48:CC:09:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/19cjt6SfGf_8n8cw1A9pUEjMCZk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:2c:14:fd:97:e6:a2:78:cc:67:54:5a:bb:30:bb:e6:68:bd: aa:e7:91:b1:45:85:72:3a:db:03:93:c1:97:07:71:58:3b:a3: 1c:87:04:6a:a2:6a:5e:5f:4f:57:e6:12:f7:9e:14:13:05:ef: bd:c8:bf:e6:6c:6d:aa:df:36:41:2e:c5:ac:5d:6e:3d:40:ef: 47:76:36:a3:c6:88:da:9f:35:73:de:15:09:80:ba:ac:f7:1c: 6f:4e:69:bd:6d:f4:db:a0:a3:bc:a2:53:70:8a:12:7b:63:45: 8b:d4:a9:01:77:85:63:c1:44:59:99:90:1a:65:ee:51:86:e5: be:30:e8:3c:75:2b:81:7b:f2:4e:bd:50:31:85:f0:4a:7e:3b: fa:8d:be:3f:10:29:43:b6:1c:7b:dc:fd:9c:2b:0d:db:66:26: 38:2d:01:ad:d1:65:3e:22:31:a3:e4:3d:39:61:75:ca:8d:11: 5f:c2:fa:32:c6:ad:51:3c:fc:bc:b0:3d:dd:f8:ba:98:72:b4: b4:1c:7d:44:24:17:01:62:a9:7a:d8:56:4a:35:3c:09:fb:9c: 3c:78:18:d7:cf:fc:51:47:7f:55:44:81:f7:83:7c:cc:89:11: 16:a3:48:ce:c2:4e:92:2f:f2:0c:c6:b1:0e:65:17:94:4d:57: e5:b1:b2:4d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QzA2ODExMC8GA1UEBRMoRDdENzIzQjdBNDlGMTlGRkZDOUZDNzMwRDQwRjY5NTA0 OENDMDk5OTAeFw0yNTExMDUwNzU4NDZaFw0yNTExMTIwNzU4NDZaMBgxFjAUBgNV BAMTDTY5MGIwM2I2LTQzOGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeeQlvzzRhFKzzFEnKOyiYHCxC8vroDFjawPo8Naj3OwMAtbu275lX9tzsFLJu +/Dve6Xv5pamwTHbv0pj2Mvr58CtfBsTsPMLTIURXt18SDxuTC0gVEpfdYIHSpSI +wOiqb+2XN9hxtfcOnvoCxBwVYwOw5Nqd25LJqWBN5XUKhPWws90g57wy+P2XLuz 15/ZT4bSsMOL8644Si96YGorSzYsBPYvJ5LG2fMnqLyXK3J7/XXG0GqpNfzPvXEx OeZH4pwbYgib+74lCl1vZhAbD9Yi7WVUAzztsNScE3+J+2kOx376D37ftZl4InH0 gOO94up8HGKI6jPrDJnvbC57AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUw2R5Gg66 YzdqT14IIUM3Ia+fVHswHwYDVR0jBBgwFoAU19cjt6SfGf/8n8cw1A9pUEjMCZkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlDMDY4L0RCMUIyODBFOENC ODExRjA4MkM5MkU2M0M0RjlBRTAyLzE5Y2p0NlNmR2ZfOG44Y3cxQTlwVUVqTUNa ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvMTljanQ2U2ZHZl84bjhjdzFBOXBVRWpNQ1prLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlD MDY4L0RCMUIyODBFOENCODExRjA4MkM5MkU2M0M0RjlBRTAyLzE5Y2p0NlNmR2Zf OG44Y3cxQTlwVUVqTUNaay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEAsFP2X5qJ4zGdUWrswu+ZovarnkbFFhXI62wOTwZcHcVg7oxyHBGqi al5fT1fmEveeFBMF773Iv+ZsbarfNkEuxaxdbj1A70d2NqPGiNqfNXPeFQmAuqz3 HG9Oab1t9Nugo7yiU3CKEntjRYvUqQF3hWPBRFmZkBpl7lGG5b4w6Dx1K4F78k69 UDGF8Ep+O/qNvj8QKUO2HHvc/ZwrDdtmJjgtAa3RZT4iMaPkPTlhdcqNEV/C+jLG rVE8/LywPd34uphytLQcfUQkFwFiqXrYVko1PAn7nDx4GNfP/FFHf1VEgfeDfMyJ ERajSM7CTpIv8gzGsQ5lF5RNV+Wxsk0= -----END CERTIFICATE-----Generated at Wed Nov 5 16:56:08 2025 by rpki-client