$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft File: 1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft (raw, json) Hash identifier: SQqdcr0Rr98oDJepMLS9WPGwTss8EjW/vEZJ4Epy7A4= Subject key identifier: 7D:72:04:F8:BB:E8:46:D5:D7:2B:F4:16:87:2C:A8:47:98:02:92:FF Authority key identifier: D7:2E:92:43:5C:E7:DB:B7:78:9B:24:38:A4:8F:21:1C:43:1C:58:02 Certificate issuer: /CN=A911F5B7/serialNumber=D72E92435CE7DBB7789B2438A48F211C431C5802 Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft Manifest number: 0CD5 Signing time: Mon 20 Oct 2025 20:04:23 +0000 Manifest this update: Mon 20 Oct 2025 20:04:23 +0000 Manifest next update: Mon 27 Oct 2025 20:04:23 +0000 Files and hashes: 1: 1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl (hash: frLaIT68vxguRG8RT8zrSSecaC2Tfpla0DDsv+TV9nY=) 2: 751E90665BAB11EFB9769A80C4F9AE02.roa (hash: eILOAPk7hEfHA4Xc/eZDuicer6q0kZbC4fsjNG1XiFo=) 3: 21980772889311F09BCDF026C4F9AE02.roa (hash: vyvXubrm30cc5Lys14j8eTN8Ivb86Ln6IWEbkR3PYy0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 20:04:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5B7, serialNumber=D72E92435CE7DBB7789B2438A48F211C431C5802 Validity Not Before: Oct 20 20:04:23 2025 GMT Not After : Oct 27 20:04:23 2025 GMT Subject: CN=68f695c7-8ab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ab:18:d6:18:59:be:50:e7:00:26:c2:1a:36: bd:da:4c:d3:78:d7:c5:f7:93:93:be:10:b5:38:7d: 81:12:25:87:27:5c:40:8d:ed:ff:10:f3:08:72:72: 55:3c:25:4f:7c:51:11:74:3a:dc:09:ef:9f:a5:08: 0b:c0:b5:67:3c:4d:cd:92:82:53:36:29:b5:a7:c9: 5c:01:78:84:a1:91:f8:e7:55:2c:95:2e:40:9d:3c: 1c:b6:db:16:d1:bb:37:18:1e:bd:4b:08:1f:30:19: b2:73:a4:2d:4a:6b:6a:51:8e:a9:09:f9:03:db:b4: 59:bc:30:4b:69:fc:51:2a:60:d0:04:58:86:f7:2f: 7e:11:32:36:a8:f4:2a:c7:cf:d2:f3:07:0b:78:4b: 56:38:25:9a:fd:38:9e:0d:26:10:5d:8c:e0:41:5b: 6f:1c:f2:44:73:56:a5:97:d0:c8:b3:2c:52:e3:39: 67:c1:2e:6c:9f:13:27:4e:b6:a5:43:14:22:22:b6: a2:8b:81:c7:11:d0:bd:ef:9e:42:ee:91:d9:dc:47: 4d:86:18:15:80:6e:6d:a8:61:ad:55:a9:8c:a2:dd: 58:a5:6c:33:05:82:2d:40:51:79:e5:f7:2b:e9:bd: bf:32:06:4f:c6:be:84:8e:24:4b:5b:e8:93:94:e7: 40:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:72:04:F8:BB:E8:46:D5:D7:2B:F4:16:87:2C:A8:47:98:02:92:FF X509v3 Authority Key Identifier: keyid:D7:2E:92:43:5C:E7:DB:B7:78:9B:24:38:A4:8F:21:1C:43:1C:58:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:59:d7:51:ce:c9:27:c8:f1:13:c7:33:11:ed:8f:83:4b:b4: df:08:2d:86:42:df:77:f3:08:cf:06:3a:a3:bf:ab:f9:0d:c3: 58:11:f2:b2:39:9a:1b:fe:e8:43:bf:07:47:e6:96:f9:96:93: b1:7f:fb:82:2c:32:9a:e0:c6:cd:4e:6a:d2:54:c4:aa:06:aa: c4:a2:f3:46:1e:6f:13:36:cf:f0:8d:9e:dd:c2:54:5a:68:89: 24:f8:82:75:e8:1e:f5:c6:3c:29:39:1e:63:96:0a:7c:0a:56: ae:a7:f3:41:5c:a4:32:68:cb:51:03:06:e8:9f:97:b9:49:d8: 81:4d:f7:97:da:fa:32:e6:f2:e8:5f:9f:68:fc:ee:c5:21:c8: 8b:0a:bc:ae:3a:1f:6a:c1:f5:eb:f0:d6:c8:1c:e7:2b:c0:7a: 34:0a:a5:95:cc:78:d3:f2:40:14:2f:cf:3e:76:2c:ee:e7:2f: dd:bd:5b:57:bb:0f:b9:c4:ee:06:b3:ee:f8:9b:4f:a7:3b:85: 95:71:2f:e9:ab:55:bc:86:3c:1e:96:dc:61:73:57:c6:1a:12: a1:d2:6b:5a:36:4d:e7:ed:b0:53:e5:89:40:49:dc:ae:ce:23: be:11:b1:ae:a8:08:ec:dd:46:e3:f0:2e:06:42:38:06:ff:e5: fe:eb:dd:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1QjcxMTAvBgNVBAUTKEQ3MkU5MjQzNUNFN0RCQjc3ODlCMjQzOEE0OEYyMTFD NDMxQzU4MDIwHhcNMjUxMDIwMjAwNDIzWhcNMjUxMDI3MjAwNDIzWjAYMRYwFAYD VQQDEw02OGY2OTVjNy04YWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0qsY1hhZvlDnACbCGja92kzTeNfF95OTvhC1OH2BEiWHJ1xAje3/EPMIcnJV PCVPfFERdDrcCe+fpQgLwLVnPE3NkoJTNim1p8lcAXiEoZH451UslS5AnTwcttsW 0bs3GB69SwgfMBmyc6QtSmtqUY6pCfkD27RZvDBLafxRKmDQBFiG9y9+ETI2qPQq x8/S8wcLeEtWOCWa/TieDSYQXYzgQVtvHPJEc1all9DIsyxS4zlnwS5snxMnTral QxQiIraii4HHEdC9755C7pHZ3EdNhhgVgG5tqGGtVamMot1YpWwzBYItQFF55fcr 6b2/MgZPxr6EjiRLW+iTlOdAOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1yBPi7 6EbV1yv0FocsqEeYApL/MB8GA1UdIwQYMBaAFNcukkNc59u3eJskOKSPIRxDHFgC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVCNy83MUU3QTIyMjUx OTUxMUVBODQ2NEJBNzhDNEY5QUUwMi8xeTZTUTF6bjI3ZDRteVE0cEk4aEhFTWNX QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF5NlNRMXpuMjdkNG15UTRwSThoSEVNY1dBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVCNy83MUU3QTIyMjUxOTUxMUVBODQ2NEJBNzhDNEY5QUUwMi8xeTZTUTF6bjI3 ZDRteVE0cEk4aEhFTWNXQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjWddRzsknyPETxzMR7Y+DS7TfCC2GQt938wjPBjqjv6v5DcNYEfKy OZob/uhDvwdH5pb5lpOxf/uCLDKa4MbNTmrSVMSqBqrEovNGHm8TNs/wjZ7dwlRa aIkk+IJ16B71xjwpOR5jlgp8Claup/NBXKQyaMtRAwbon5e5SdiBTfeX2voy5vLo X59o/O7FIciLCryuOh9qwfXr8NbIHOcrwHo0CqWVzHjT8kAUL88+dizu5y/dvVtX uw+5xO4Gs+74m0+nO4WVcS/pq1W8hjweltxhc1fGGhKh0mtaNk3n7bBT5YlASdyu ziO+EbGuqAjs3Ubj8C4GQjgG/+X+691C -----END CERTIFICATE-----Generated at Wed Oct 22 18:40:02 2025 by rpki-client