$ rpki-client -vvf rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft File: AGzRlAGFL6t1v25TlZr665WsJfI.mft (raw, json) Hash identifier: 2rJ/TUGyykvmsYvf+uL0rcDnCvRwjZdSJtmU2u3O9UU= Subject key identifier: 49:A1:52:3F:3A:49:C9:AE:0E:21:8C:ED:9F:B4:92:34:72:8E:91:8A Authority key identifier: 00:6C:D1:94:01:85:2F:AB:75:BF:6E:53:95:9A:FA:EB:95:AC:25:F2 Certificate issuer: /CN=A919CE1D/serialNumber=006CD19401852FAB75BF6E53959AFAEB95AC25F2 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGzRlAGFL6t1v25TlZr665WsJfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft Manifest number: 3A Signing time: Wed 05 Nov 2025 07:44:10 +0000 Manifest this update: Wed 05 Nov 2025 07:44:09 +0000 Manifest next update: Wed 12 Nov 2025 07:44:09 +0000 Files and hashes: 1: AGzRlAGFL6t1v25TlZr665WsJfI.crl (hash: MFX+vglM7MvqjF1mrt58sX9LvY8TvL+pz0r+a53r1sI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.crl rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGzRlAGFL6t1v25TlZr665WsJfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:44:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CE1D, serialNumber=006CD19401852FAB75BF6E53959AFAEB95AC25F2 Validity Not Before: Nov 5 07:44:09 2025 GMT Not After : Nov 12 07:44:09 2025 GMT Subject: CN=690b0049-0562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:af:af:83:4a:b2:a2:45:25:0d:b8:6f:b5:28: 9d:22:33:d0:e0:59:d1:c3:e4:21:57:ff:62:8a:3a: c9:51:4a:07:26:55:b6:dd:c8:b3:b9:c4:a4:4d:ee: 92:24:19:7c:81:74:57:d0:60:58:dc:55:d7:82:78: 5e:c0:87:9f:92:2f:0e:f4:cf:3d:ec:20:07:40:ff: 6a:7a:ed:64:35:21:8e:9a:57:16:29:5f:ca:21:5d: 83:0c:78:1d:6d:ec:90:38:9d:40:2d:90:d6:df:87: 1c:01:35:63:f3:24:65:8d:a4:25:7e:52:72:aa:17: d6:0f:cb:d8:0f:d3:97:6c:79:f7:2d:a3:40:25:f5: 1a:75:99:14:9b:c0:7f:bb:ac:fa:c5:72:e0:9d:5a: 72:ab:fc:9c:e8:31:e0:d9:a3:7a:c7:80:4c:f2:f2: b3:e3:5b:5c:54:9e:c1:1a:68:70:0e:b0:ac:9c:12: cc:6e:3e:85:12:f9:68:09:3a:30:7c:dd:9f:cf:8f: 81:0b:16:10:7b:4b:72:35:41:c3:e1:89:4b:86:b5: 61:a3:45:13:43:2e:7b:fb:ed:79:f7:5a:4f:a1:b5: 0d:6c:92:c0:b1:53:bf:53:db:35:4c:d3:f6:b1:38: 27:40:ec:0b:a1:6b:1b:d2:04:4c:11:17:68:52:87: 4e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A1:52:3F:3A:49:C9:AE:0E:21:8C:ED:9F:B4:92:34:72:8E:91:8A X509v3 Authority Key Identifier: keyid:00:6C:D1:94:01:85:2F:AB:75:BF:6E:53:95:9A:FA:EB:95:AC:25:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGzRlAGFL6t1v25TlZr665WsJfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:fb:49:a2:61:ff:d5:f5:05:d5:ea:8c:04:ac:76:8a:1b:a0: a5:9c:37:3f:db:38:07:9d:9e:35:ca:e3:56:a2:99:33:e5:90: 0a:24:26:ca:ad:82:45:98:92:84:bc:f0:80:df:d7:56:74:37: 10:a6:ed:ea:f5:22:89:2e:ad:f5:52:36:9a:90:7f:6c:82:cd: ea:69:70:3e:21:05:c8:ce:4d:9d:cd:11:d1:ca:f1:3a:54:de: cb:e4:b1:13:0c:0b:ae:3b:6e:f1:6a:82:21:3a:8f:e1:12:1b: 83:ae:ad:e4:fc:70:98:fa:5f:f7:74:dd:f3:43:2a:06:62:8d: 9f:fe:e1:47:da:70:fa:00:6b:e1:44:ff:08:23:70:dc:ee:7a: c2:3c:51:bb:78:19:f8:cb:db:6b:ad:fb:20:60:e2:a3:61:1a: f9:4a:8e:2b:99:09:2b:7b:8c:d1:b7:80:0e:9e:f2:4c:71:2f: 8c:7e:e2:a1:10:13:3d:4d:cf:61:86:9f:08:6a:cf:a0:01:02: a8:5d:a1:12:d7:1c:c5:87:50:46:33:1f:3a:c3:6c:50:62:38: 36:d8:da:96:0d:46:c6:c8:f1:4e:ec:9f:3f:17:c6:a8:30:bb: 01:cb:cf:6c:97:54:ec:58:be:87:db:f5:41:08:ba:0c:be:db: 0f:5c:e2:80 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 Q0UxRDExMC8GA1UEBRMoMDA2Q0QxOTQwMTg1MkZBQjc1QkY2RTUzOTU5QUZBRUI5 NUFDMjVGMjAeFw0yNTExMDUwNzQ0MDlaFw0yNTExMTIwNzQ0MDlaMBgxFjAUBgNV BAMTDTY5MGIwMDQ5LTA1NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvr6+DSrKiRSUNuG+1KJ0iM9DgWdHD5CFX/2KKOslRSgcmVbbdyLO5xKRN7pIk GXyBdFfQYFjcVdeCeF7Ah5+SLw70zz3sIAdA/2p67WQ1IY6aVxYpX8ohXYMMeB1t 7JA4nUAtkNbfhxwBNWPzJGWNpCV+UnKqF9YPy9gP05dsefcto0Al9Rp1mRSbwH+7 rPrFcuCdWnKr/JzoMeDZo3rHgEzy8rPjW1xUnsEaaHAOsKycEsxuPoUS+WgJOjB8 3Z/Pj4ELFhB7S3I1QcPhiUuGtWGjRRNDLnv77Xn3Wk+htQ1sksCxU79T2zVM0/ax OCdA7AuhaxvSBEwRF2hSh05nAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSaFSPzpJ ya4OIYztn7SSNHKOkYowHwYDVR0jBBgwFoAUAGzRlAGFL6t1v25TlZr665WsJfIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlDRTFEL0JGRjI0QjE0NjJE RjExRjBBMUUzN0UwRUM0RjlBRTAyL0FHelJsQUdGTDZ0MXYyNVRsWnI2NjVXc0pm SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQUd6UmxBR0ZMNnQxdjI1VGxacjY2NVdzSmZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlD RTFEL0JGRjI0QjE0NjJERjExRjBBMUUzN0UwRUM0RjlBRTAyL0FHelJsQUdGTDZ0 MXYyNVRsWnI2NjVXc0pmSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHP7SaJh/9X1BdXqjASsdooboKWcNz/bOAednjXK41aimTPlkAokJsqt gkWYkoS88IDf11Z0NxCm7er1IokurfVSNpqQf2yCzeppcD4hBcjOTZ3NEdHK8TpU 3svksRMMC647bvFqgiE6j+ESG4OureT8cJj6X/d03fNDKgZijZ/+4UfacPoAa+FE /wgjcNzuesI8Ubt4GfjL22ut+yBg4qNhGvlKjiuZCSt7jNG3gA6e8kxxL4x+4qEQ Ez1Nz2GGnwhqz6ABAqhdoRLXHMWHUEYzHzrDbFBiODbY2pYNRsbI8U7snz8Xxqgw uwHLz2yXVOxYvofb9UEIugy+2w9c4oA= -----END CERTIFICATE-----Generated at Wed Nov 5 16:30:20 2025 by rpki-client