$ rpki-client -vvf rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft File: P1VrwCUQM7zlcvxsirdgrMSXBZM.mft (raw, json) Hash identifier: OQFRQwed7xQEk5B5PdcB4hHG9R40xh2NIcQwqZIe68w= Subject key identifier: 41:FA:45:9C:91:11:45:67:2B:44:DA:93:67:E3:C8:6A:31:C4:4A:A0 Authority key identifier: 3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93 Certificate issuer: /CN=A919CF42/serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593 Certificate serial: 1583 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft Manifest number: 1568 Signing time: Tue 04 Nov 2025 16:53:22 +0000 Manifest this update: Tue 04 Nov 2025 16:53:21 +0000 Manifest next update: Tue 11 Nov 2025 16:53:21 +0000 Files and hashes: 1: P1VrwCUQM7zlcvxsirdgrMSXBZM.crl (hash: zbiZUvXFECyV4jhsr8Lw0eSOHDEBlagX2+zdSPJhzzg=) 2: 65C8C388EAFB11ED9F4DC557C4F9AE02.roa (hash: WVZ1/uIyOSqp7Em7YlQqzkYloU6mxq2B8kLksLfxIF8=) 3: 9FA735ECEAF811ED9E2D1958C4F9AE02.roa (hash: HFVHQ+wL1mQEZ01i4CvLThp7tarfU14b1p5XC7Hrt/Y=) 4: F148BE6E511611EE85A7E634C4F9AE02.roa (hash: 9hsbmWbhyRE5mUOuFHl04Y4Uut8mlBoehod5tJbgja0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:53:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5507 (0x1583) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CF42, serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593 Validity Not Before: Nov 4 16:53:21 2025 GMT Not After : Nov 11 16:53:21 2025 GMT Subject: CN=690a2f82-8dfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:20:71:f6:77:39:67:ce:84:df:30:44:fb:e3: e9:0c:fc:e0:0b:1f:2b:a4:64:71:3e:f6:6b:7d:c3: de:06:30:76:7a:0f:73:c8:c2:7e:09:d0:34:5b:40: f1:33:1f:9e:f8:71:0e:b1:bd:a1:22:e8:5c:f1:72: ca:6c:c5:f8:d9:08:11:f9:6a:53:b9:23:e2:e2:3c: b7:2f:0c:f9:52:9b:46:33:28:5a:e0:85:fc:eb:e7: db:f3:cd:8e:17:8e:d0:2c:39:bc:8d:9c:04:8c:d1: 1d:6e:15:89:22:0d:17:18:d6:55:b7:a4:99:a2:d6: b6:0a:9c:d1:99:b9:c3:b4:78:f7:b5:37:4f:fe:8d: 86:66:1d:f1:0d:9b:03:a0:ce:49:8e:09:b1:88:04: 28:7a:46:99:90:ca:96:ad:87:ce:6b:3f:a9:40:02: e5:06:26:96:60:ef:d9:6a:df:cb:2a:ba:ef:e6:e4: 37:5f:f6:46:5c:d6:1c:7b:9c:37:43:a0:0e:cb:a7: a7:da:63:ee:c6:c6:26:f8:3b:92:d1:84:73:00:2f: 10:37:5c:0c:54:d9:ce:9a:9c:ad:bb:10:84:cb:b1: 09:3f:c3:a2:e9:64:fe:6e:26:3a:0e:77:1e:fc:dd: 1e:d8:a8:ef:c7:48:3d:19:bd:50:8a:cc:8a:26:e3: 94:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:FA:45:9C:91:11:45:67:2B:44:DA:93:67:E3:C8:6A:31:C4:4A:A0 X509v3 Authority Key Identifier: keyid:3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:0d:1d:d4:f6:25:55:35:52:44:2a:c4:95:34:16:db:2e:94: 31:3a:b6:10:4a:1d:42:e7:1d:f4:76:7c:b6:1f:e0:99:a7:4c: 7d:3e:a2:22:36:6a:b7:0b:01:69:cd:e9:81:49:c3:04:ca:40: 56:8b:a2:d1:63:13:36:6a:c7:fa:27:3f:84:65:8b:72:e9:93: 36:33:5f:2f:f3:69:03:e0:82:8c:17:da:20:88:39:31:4f:87: c1:a3:e9:2c:3a:24:ac:bc:3a:90:d4:30:c4:ae:e7:f8:ab:2a: 24:d3:00:d9:3b:e2:d9:9a:28:c6:4a:3d:b6:9c:f9:c1:fc:ca: ed:11:20:33:12:a0:00:08:df:e0:fe:b5:7e:7a:77:cc:49:25: 40:49:20:91:04:c0:81:b9:02:9e:70:32:77:34:fb:8b:bc:96: 1d:be:39:2f:78:b7:b6:ee:2a:dc:25:e9:0c:55:4a:e7:bd:45: 30:4c:bd:a9:29:65:a2:95:e3:03:1f:81:31:50:15:85:5b:cf: aa:a4:c7:22:a9:e6:1c:18:2d:43:1d:7f:63:0f:5a:15:c1:d2: ca:03:4b:ba:28:52:c5:06:c2:ec:35:46:67:a0:97:a9:28:5e: cb:e0:38:e9:9d:1f:7d:3e:ec:ad:1c:15:b9:cb:d1:c9:84:27: 7e:7a:a5:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNGNDIxMTAvBgNVBAUTKDNGNTU2QkMwMjUxMDMzQkNFNTcyRkM2QzhBQjc2MEFD QzQ5NzA1OTMwHhcNMjUxMTA0MTY1MzIxWhcNMjUxMTExMTY1MzIxWjAYMRYwFAYD VQQDEw02OTBhMmY4Mi04ZGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCBx9nc5Z86E3zBE++PpDPzgCx8rpGRxPvZrfcPeBjB2eg9zyMJ+CdA0W0Dx Mx+e+HEOsb2hIuhc8XLKbMX42QgR+WpTuSPi4jy3Lwz5UptGMyha4IX86+fb882O F47QLDm8jZwEjNEdbhWJIg0XGNZVt6SZota2CpzRmbnDtHj3tTdP/o2GZh3xDZsD oM5JjgmxiAQoekaZkMqWrYfOaz+pQALlBiaWYO/Zat/LKrrv5uQ3X/ZGXNYce5w3 Q6AOy6en2mPuxsYm+DuS0YRzAC8QN1wMVNnOmpytuxCEy7EJP8Oi6WT+biY6Dnce /N0e2Kjvx0g9Gb1QisyKJuOUoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEH6RZyR EUVnK0Tak2fjyGoxxEqgMB8GA1UdIwQYMBaAFD9Va8AlEDO85XL8bIq3YKzElwWT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0Y0Mi83QTZBQkZDQzRD QzYxMUU4QkVGMDNENzVDNEY5QUUwMi9QMVZyd0NVUU03emxjdnhzaXJkZ3JNU1hC Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AxVnJ3Q1VRTTd6bGN2eHNpcmRnck1TWEJaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0Y0Mi83QTZBQkZDQzRDQzYxMUU4QkVGMDNENzVDNEY5QUUwMi9QMVZyd0NVUU03 emxjdnhzaXJkZ3JNU1hCWk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNDR3U9iVVNVJEKsSVNBbbLpQxOrYQSh1C5x30dny2H+CZp0x9PqIi Nmq3CwFpzemBScMEykBWi6LRYxM2asf6Jz+EZYty6ZM2M18v82kD4IKMF9ogiDkx T4fBo+ksOiSsvDqQ1DDEruf4qyok0wDZO+LZmijGSj22nPnB/MrtESAzEqAACN/g /rV+enfMSSVASSCRBMCBuQKecDJ3NPuLvJYdvjkveLe27ircJekMVUrnvUUwTL2p KWWileMDH4ExUBWFW8+qpMciqeYcGC1DHX9jD1oVwdLKA0u6KFLFBsLsNUZnoJep KF7L4DjpnR99PuytHBW5y9HJhCd+eqUU -----END CERTIFICATE-----Generated at Wed Nov 5 10:09:00 2025 by rpki-client