$ rpki-client -vvf rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft File: _y7elNMHvCOJpLc5WSplf3FhzKI.mft (raw, json) Hash identifier: 6GDlzQvZdQ7hlHNE/axvGFQwR0miX9w49/z4cQbVz6c= Subject key identifier: C2:C8:2E:F2:E2:FF:7B:7F:4D:C8:8A:3D:80:21:7C:16:A5:27:0F:FB Authority key identifier: FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2 Certificate issuer: /CN=A911A7C2/serialNumber=FF2EDE94D307BC2389A4B739592A657F7161CCA2 Certificate serial: 0173 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft Manifest number: 016D Signing time: Wed 05 Nov 2025 04:03:27 +0000 Manifest this update: Wed 05 Nov 2025 04:03:27 +0000 Manifest next update: Wed 12 Nov 2025 04:03:27 +0000 Files and hashes: 1: _y7elNMHvCOJpLc5WSplf3FhzKI.crl (hash: PkFFF2s5U87VrTJ+GX4zsaL3Mr1s1SGbxY4mSDlo2Ag=) 2: BFA5084C8E9011EEAD56911CC4F9AE02.roa (hash: fV5G2JHx/0fBFcbcRO1EqGSRjg68YJvhatHDOdfRaJ8=) 3: 020CCB128E9011EEB7C5651BC4F9AE02.roa (hash: Ftqlgd8k9h+7jvDiAqF4wkjpcUSN8GhKRQccLRNHlws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.crl rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:03:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 371 (0x173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A7C2, serialNumber=FF2EDE94D307BC2389A4B739592A657F7161CCA2 Validity Not Before: Nov 5 04:03:27 2025 GMT Not After : Nov 12 04:03:27 2025 GMT Subject: CN=690acc8f-c79c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c7:26:36:de:7f:b2:53:69:bf:d0:92:89:a0: ed:76:16:42:33:4b:98:65:49:38:d1:c0:72:4a:02: ab:47:98:44:84:66:12:5e:24:aa:0d:77:5c:2a:e9: 4c:f5:b7:98:43:de:56:ca:1d:09:8f:1e:e1:be:5c: 76:b2:5d:bb:ac:ed:46:d6:9c:85:0f:34:39:6f:95: e1:8f:02:9b:08:34:61:be:d4:99:d3:6e:26:68:8b: 5d:8a:dd:a3:25:d6:d1:13:40:be:bf:28:d4:12:2c: 7f:bf:9a:a6:d8:6e:5c:46:d3:13:0f:b0:e5:0e:61: b2:6e:f5:78:c9:bc:f3:ad:48:7a:1e:a9:82:06:f5: 5c:85:d1:a7:5c:8a:89:62:a1:b9:25:13:1c:d1:80: af:9e:af:73:81:24:de:68:4b:f8:ae:d8:12:5f:c6: b3:a8:d1:8c:0d:50:34:f6:ed:84:08:cf:23:0b:06: 70:01:e5:dd:4d:98:d4:49:c0:40:9a:be:e4:f9:29: a2:c8:88:ae:64:03:3e:d0:84:64:96:97:12:7d:d1: 5a:36:d2:c7:15:b9:a1:5d:eb:a5:0b:7c:41:3a:00: 51:bf:83:09:f0:f5:94:65:65:e8:73:2d:56:f7:9c: 7c:13:8a:b5:57:a7:16:e4:83:04:1e:fa:16:0d:3d: 27:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C8:2E:F2:E2:FF:7B:7F:4D:C8:8A:3D:80:21:7C:16:A5:27:0F:FB X509v3 Authority Key Identifier: keyid:FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:70:b4:34:f8:46:98:53:b7:3a:a4:81:c4:94:01:69:15:0c: bf:08:95:fd:2d:87:3b:4b:b3:fd:8c:0a:9d:e4:7b:ac:41:2d: d6:5c:d0:b7:81:4c:b0:ed:67:c2:d7:c4:e4:39:eb:47:26:e3: ba:e0:2b:2a:d0:ef:e1:6a:87:c8:b1:73:e0:4c:79:1f:07:e8: 40:3d:dc:1c:8b:67:98:76:1d:58:45:07:d6:87:f7:12:07:55: ac:88:fe:90:b8:fc:7d:a0:72:3b:41:14:b0:55:9f:b9:2a:b1: eb:64:a2:08:72:1b:45:6b:38:40:ee:96:9d:f7:90:c6:23:40: 23:7a:e1:48:eb:ee:ab:36:b8:00:8f:47:09:a0:79:1b:09:fd: 23:cb:93:0f:5f:33:c9:66:1d:9b:44:b1:23:c9:de:cc:64:e4: 3f:69:42:91:cc:18:ae:ef:a3:66:b5:e4:3d:86:6a:92:05:c6: 28:5c:07:59:fa:ea:f1:43:4c:71:db:a1:90:2f:8c:ac:2b:78: e3:7b:1a:14:21:65:e8:6c:53:f3:c0:cc:5b:2d:8e:f2:8c:e6: b2:15:09:af:a3:34:ec:31:8d:32:45:78:29:a5:d3:fa:c6:da: 51:1a:1e:4e:89:14:a8:f7:f1:f7:89:85:71:34:5f:28:42:78: c5:35:a3:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE3QzIxMTAvBgNVBAUTKEZGMkVERTk0RDMwN0JDMjM4OUE0QjczOTU5MkE2NTdG NzE2MUNDQTIwHhcNMjUxMTA1MDQwMzI3WhcNMjUxMTEyMDQwMzI3WjAYMRYwFAYD VQQDEw02OTBhY2M4Zi1jNzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwccmNt5/slNpv9CSiaDtdhZCM0uYZUk40cBySgKrR5hEhGYSXiSqDXdcKulM 9beYQ95Wyh0Jjx7hvlx2sl27rO1G1pyFDzQ5b5XhjwKbCDRhvtSZ024maItdit2j JdbRE0C+vyjUEix/v5qm2G5cRtMTD7DlDmGybvV4ybzzrUh6HqmCBvVchdGnXIqJ YqG5JRMc0YCvnq9zgSTeaEv4rtgSX8azqNGMDVA09u2ECM8jCwZwAeXdTZjUScBA mr7k+SmiyIiuZAM+0IRklpcSfdFaNtLHFbmhXeulC3xBOgBRv4MJ8PWUZWXocy1W 95x8E4q1V6cW5IMEHvoWDT0nfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLILvLi /3t/TciKPYAhfBalJw/7MB8GA1UdIwQYMBaAFP8u3pTTB7wjiaS3OVkqZX9xYcyi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTdDMi83QUI4NTA4ODhF ODkxMUVFQTZBNUUzNTdDNEY5QUUwMi9feTdlbE5NSHZDT0pwTGM1V1NwbGYzRmh6 S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL195N2VsTk1IdkNPSnBMYzVXU3BsZjNGaHpLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTdDMi83QUI4NTA4ODhFODkxMUVFQTZBNUUzNTdDNEY5QUUwMi9feTdlbE5NSHZD T0pwTGM1V1NwbGYzRmh6S0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwcLQ0+EaYU7c6pIHElAFpFQy/CJX9LYc7S7P9jAqd5HusQS3WXNC3 gUyw7WfC18TkOetHJuO64Csq0O/haofIsXPgTHkfB+hAPdwci2eYdh1YRQfWh/cS B1WsiP6QuPx9oHI7QRSwVZ+5KrHrZKIIchtFazhA7pad95DGI0AjeuFI6+6rNrgA j0cJoHkbCf0jy5MPXzPJZh2bRLEjyd7MZOQ/aUKRzBiu76NmteQ9hmqSBcYoXAdZ +urxQ0xx26GQL4ysK3jjexoUIWXobFPzwMxbLY7yjOayFQmvozTsMY0yRXgppdP6 xtpRGh5OiRSo9/H3iYVxNF8oQnjFNaPY -----END CERTIFICATE-----Generated at Wed Nov 5 16:39:26 2025 by rpki-client