$ rpki-client -vvf rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft File: -cNjgFn4ZOhK479Q2qwHnGhGPqc.mft (raw, json) Hash identifier: mlgtWa7+Zyhzyp9Mi5fDr5IDOT9LXdZKZ5WpleLSpTM= Subject key identifier: 36:05:2A:CC:F0:F4:34:EA:E2:7D:F8:59:6D:5A:E3:62:26:0B:86:D8 Authority key identifier: F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 Certificate issuer: /CN=A919DB2F/serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Certificate serial: 0586 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft Manifest number: 0572 Signing time: Tue 04 Nov 2025 23:28:03 +0000 Manifest this update: Tue 04 Nov 2025 23:28:02 +0000 Manifest next update: Tue 11 Nov 2025 23:28:02 +0000 Files and hashes: 1: -cNjgFn4ZOhK479Q2qwHnGhGPqc.crl (hash: Wyp/08i+nevuwOAjgHoSZd4CIwo5A/D6c8bDAbGuO/4=) 2: F307B7F4912A11F0B418B448C4F9AE02.roa (hash: yjx/NrxzZgDiEgxVTNY6l8PB/PX5P1BrG3zGpxB5GDo=) 3: 27023558912A11F09F7D4044C4F9AE02.roa (hash: +v5rysmnVhOkTUg6d0tgPtn6VplDudh8Q8DnVgzZQm0=) 4: E0A5F584DFAC11EE8C281B42C4F9AE02.roa (hash: QC4EhNSXvJgfmvNa3iGuDkLhBq1A6Ut/uA6vL0hAWZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:28:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1414 (0x586) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DB2F, serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Validity Not Before: Nov 4 23:28:02 2025 GMT Not After : Nov 11 23:28:02 2025 GMT Subject: CN=690a8c02-e95c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b3:0b:a9:35:86:d6:2b:3a:33:5d:0c:de:7c: f8:8b:2e:83:4f:4e:49:82:23:61:3d:3f:67:69:57: 62:d1:88:34:0d:4d:87:d0:72:d8:46:f3:9d:c4:3e: a3:38:f2:21:a9:ae:7f:a1:ad:e7:0e:9f:32:90:c6: 6e:52:05:10:5c:9e:4b:73:d9:58:fa:a3:46:ba:17: a9:a7:05:a3:22:5f:f3:4f:8c:ce:54:d2:8f:88:c4: 09:0e:c7:5f:1d:b9:ba:e2:86:67:41:8a:94:bf:b8: 65:fe:4c:f1:23:a6:37:96:f1:ef:23:15:c0:b1:b0: cd:61:c7:e6:00:19:0f:c7:c1:d4:1f:b1:33:f1:f7: c4:d8:bb:84:15:cb:73:e8:d7:da:23:22:56:7c:ba: 69:46:80:de:e6:8d:58:54:58:f9:eb:b4:7c:15:b0: 2c:d8:a5:d0:ec:dc:57:86:de:d7:75:3f:cd:f9:32: 5a:52:ab:e0:2f:d6:3c:8f:01:8f:05:cf:91:52:f6: 1b:54:8e:f7:98:92:82:b8:f6:00:ff:2f:22:09:27: 9a:f8:ec:6e:d2:d9:ba:4b:d7:be:97:24:72:bb:c7: b6:10:e8:bd:13:78:8f:4c:71:44:f1:28:80:78:a9: a1:cb:31:71:75:44:54:ff:a3:ee:d9:e1:66:15:5c: 44:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:05:2A:CC:F0:F4:34:EA:E2:7D:F8:59:6D:5A:E3:62:26:0B:86:D8 X509v3 Authority Key Identifier: keyid:F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:92:2a:ff:a8:1a:fb:0a:a7:d7:a8:6a:4d:60:02:f3:cc:99: f4:c3:d5:0d:e5:e7:00:e4:d9:13:3d:87:a4:d2:6d:90:46:9f: af:59:cd:82:26:f7:29:41:30:83:0b:6c:36:5b:17:f0:96:1c: 1a:e5:57:1d:6d:fd:ad:51:3e:df:fa:13:6d:ad:80:13:4d:dd: 7b:9b:c9:e4:cb:29:15:12:fd:54:84:e4:ec:d1:fb:cf:18:91: 84:39:ed:26:4e:14:0d:81:b7:08:be:fd:16:e0:09:ea:01:d0: 28:0e:ad:4b:c7:07:a3:f2:80:05:13:f4:ff:53:97:be:43:bb: 51:d7:36:7f:b1:ee:06:00:b9:05:97:10:f8:7c:d4:ee:aa:77: 0c:53:ad:63:a3:58:49:8e:35:79:7f:33:4a:7d:f8:da:02:1d: be:43:5c:fa:55:ff:6f:78:17:aa:41:19:32:02:cf:8d:d3:cd: a9:8a:88:56:23:c9:24:33:31:22:a3:18:95:62:c5:5d:d8:48: 12:63:ba:d8:1f:8a:07:75:13:14:7d:ce:a0:c3:46:93:90:61: 35:ca:e5:71:c9:15:4e:e3:d1:06:da:f0:92:7d:77:23:64:97: ab:45:8e:19:87:f9:d0:12:d6:0b:cb:98:e8:8b:f9:5b:85:f2: 4c:76:65:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURCMkYxMTAvBgNVBAUTKEY5QzM2MzgwNTlGODY0RTg0QUUzQkY1MERBQUMwNzlD Njg0NjNFQTcwHhcNMjUxMTA0MjMyODAyWhcNMjUxMTExMjMyODAyWjAYMRYwFAYD VQQDEw02OTBhOGMwMi1lOTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLMLqTWG1is6M10M3nz4iy6DT05JgiNhPT9naVdi0Yg0DU2H0HLYRvOdxD6j OPIhqa5/oa3nDp8ykMZuUgUQXJ5Lc9lY+qNGuheppwWjIl/zT4zOVNKPiMQJDsdf Hbm64oZnQYqUv7hl/kzxI6Y3lvHvIxXAsbDNYcfmABkPx8HUH7Ez8ffE2LuEFctz 6NfaIyJWfLppRoDe5o1YVFj567R8FbAs2KXQ7NxXht7XdT/N+TJaUqvgL9Y8jwGP Bc+RUvYbVI73mJKCuPYA/y8iCSea+Oxu0tm6S9e+lyRyu8e2EOi9E3iPTHFE8SiA eKmhyzFxdURU/6Pu2eFmFVxEeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDYFKszw 9DTq4n34WW1a42ImC4bYMB8GA1UdIwQYMBaAFPnDY4BZ+GToSuO/UNqsB5xoRj6n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REIyRi9FRjU5Q0VDNDBB REExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpPaEs0NzlRMnF3SG5HaEdQ cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1jTmpnRm40Wk9oSzQ3OVEycXdIbkdoR1BxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REIyRi9FRjU5Q0VDNDBBREExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpP aEs0NzlRMnF3SG5HaEdQcWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVkir/qBr7CqfXqGpNYALzzJn0w9UN5ecA5NkTPYek0m2QRp+vWc2C JvcpQTCDC2w2Wxfwlhwa5Vcdbf2tUT7f+hNtrYATTd17m8nkyykVEv1UhOTs0fvP GJGEOe0mThQNgbcIvv0W4AnqAdAoDq1Lxwej8oAFE/T/U5e+Q7tR1zZ/se4GALkF lxD4fNTuqncMU61jo1hJjjV5fzNKffjaAh2+Q1z6Vf9veBeqQRkyAs+N082piohW I8kkMzEioxiVYsVd2EgSY7rYH4oHdRMUfc6gw0aTkGE1yuVxyRVO49EG2vCSfXcj ZJerRY4Zh/nQEtYLy5joi/lbhfJMdmXJ -----END CERTIFICATE-----Generated at Wed Nov 5 06:51:57 2025 by rpki-client