$ rpki-client -vvf rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft File: Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft (raw, json) Hash identifier: 28MShlVMhl5wB7QUtIFjzRdSfrA+hmjoEiaf2aC0viY= Subject key identifier: D1:57:35:70:2A:37:51:8B:9F:91:48:B3:1E:52:E4:40:35:26:4A:6E Authority key identifier: 62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F Certificate issuer: /CN=A9130395/serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F Certificate serial: 07E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft Manifest number: 07D1 Signing time: Sun 02 Nov 2025 21:14:24 +0000 Manifest this update: Sun 02 Nov 2025 21:14:23 +0000 Manifest next update: Sun 09 Nov 2025 21:14:23 +0000 Files and hashes: 1: Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl (hash: 1ZnQmqRMWV3o2CuL+yLGtshifQwYL3CpV5XPHHQ0/os=) 2: 8D0DD6C2690811EFAC6DE109C4F9AE02.roa (hash: NwxjtAuSig2rvDoAjn33E7f2GIqou7l6suAw9EO2UWA=) 3: 211D4B50690811EF9C1CC987C4F9AE02.roa (hash: O4fLWSLP7M21yKqkXao1YXymrONjU0BVRbI7T2L20kg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:14:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2017 (0x7e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130395, serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F Validity Not Before: Nov 2 21:14:23 2025 GMT Not After : Nov 9 21:14:23 2025 GMT Subject: CN=6907c9af-319f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a1:8d:e5:3d:ab:70:b4:71:67:dd:fb:e4:36: 73:03:5e:ed:b0:87:c7:69:d8:00:ee:1c:68:57:20: 93:f2:96:74:4f:23:4c:ec:4f:2e:b6:cf:1b:d4:57: 48:c4:67:56:a1:e7:83:f4:43:41:cd:d1:c7:40:51: 14:89:a7:66:38:64:c1:5c:70:94:ba:e3:7f:fe:49: ae:45:ed:e2:82:06:53:97:79:18:fd:1e:2f:83:60: ed:84:72:f3:92:9a:ea:44:d0:c2:35:39:f5:d5:10: 22:16:74:1b:ae:75:53:f7:5e:b3:2b:91:8f:e0:ba: 72:35:b8:f5:b6:68:de:22:63:5b:87:38:16:f6:82: df:06:45:27:48:40:b7:62:49:46:c3:7d:40:0b:93: 78:53:46:f4:42:25:f9:6f:56:a6:5c:b7:d1:a3:8f: cd:fe:b9:93:78:31:08:2a:37:44:31:92:26:fe:09: 5e:7e:5b:19:db:e4:81:58:7b:22:a7:b4:6e:7f:c0: d6:3d:33:3d:07:f6:85:8e:82:2f:15:e8:49:6b:e1: 01:49:ab:d6:b4:0e:5c:14:16:c2:56:4e:23:8e:90: e7:b7:65:fc:f3:d7:8f:cc:35:03:3e:2c:60:16:37: d5:82:b7:ca:f8:5f:21:c8:dc:3f:47:e5:b6:e7:8d: c7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:57:35:70:2A:37:51:8B:9F:91:48:B3:1E:52:E4:40:35:26:4A:6E X509v3 Authority Key Identifier: keyid:62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:e6:b8:e0:87:55:9b:9f:4d:46:d5:12:b1:f3:50:2d:98:9d: 96:d5:65:dd:68:87:d4:f0:d5:27:00:5a:b2:18:c1:97:7a:29: 2a:10:2f:cd:8f:ae:c9:97:f9:4e:a7:8d:51:7b:b9:65:97:ef: dc:90:9f:70:e3:56:6f:46:7a:fc:ef:a7:94:f7:7b:e5:5f:7d: af:8b:22:51:f3:17:56:95:ba:be:a8:33:87:10:17:59:1b:3a: 77:c0:8a:ba:bb:61:a3:19:f2:ea:82:f9:ce:3a:76:91:70:b6: 6d:85:f5:97:ee:70:8a:38:d9:c2:13:4a:e0:97:7b:56:2f:79: 27:a3:70:90:54:fa:fb:e8:3e:52:47:28:52:e5:c2:24:c1:10: 39:a5:09:46:57:d8:48:73:2c:03:88:08:f8:20:1f:0c:5e:af: f6:5a:d2:8c:1d:a0:44:43:55:13:0a:cc:6e:a8:c4:46:a2:c5: f1:b8:63:04:d6:df:02:11:e5:5f:51:cd:38:1b:a8:76:34:e5: 6f:36:13:5a:27:e5:9c:e6:a6:44:5c:cb:fd:a1:9d:c7:00:fb: 04:82:24:04:fb:fb:6f:76:80:1e:87:29:35:b3:a1:c9:de:b1: 6b:31:3a:4e:f7:e6:fa:e7:d7:5c:c1:4d:58:0c:85:ae:5b:92: 2d:0d:75:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAzOTUxMTAvBgNVBAUTKDYyQ0Q2RTY1MEQyMDlFNTBFRUZENjZDMzUyODhCNjA2 RjM2MkU4MEYwHhcNMjUxMTAyMjExNDIzWhcNMjUxMTA5MjExNDIzWjAYMRYwFAYD VQQDEw02OTA3YzlhZi0zMTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzqGN5T2rcLRxZ9375DZzA17tsIfHadgA7hxoVyCT8pZ0TyNM7E8uts8b1FdI xGdWoeeD9ENBzdHHQFEUiadmOGTBXHCUuuN//kmuRe3iggZTl3kY/R4vg2DthHLz kprqRNDCNTn11RAiFnQbrnVT916zK5GP4LpyNbj1tmjeImNbhzgW9oLfBkUnSEC3 YklGw31AC5N4U0b0QiX5b1amXLfRo4/N/rmTeDEIKjdEMZIm/gleflsZ2+SBWHsi p7Ruf8DWPTM9B/aFjoIvFehJa+EBSavWtA5cFBbCVk4jjpDnt2X889ePzDUDPixg FjfVgrfK+F8hyNw/R+W2543HAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFXNXAq N1GLn5FIsx5S5EA1JkpuMB8GA1UdIwQYMBaAFGLNbmUNIJ5Q7v1mw1KItgbzYugP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDM5NS9FQjY3MjI2NDE0 Q0ExMUVCODE2NDNCMEZDNEY5QUUwMi9ZczF1WlEwZ25sRHVfV2JEVW9pMkJ2Tmk2 QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzMXVaUTBnbmxEdV9XYkRVb2kyQnZOaTZBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDM5NS9FQjY3MjI2NDE0Q0ExMUVCODE2NDNCMEZDNEY5QUUwMi9ZczF1WlEwZ25s RHVfV2JEVW9pMkJ2Tmk2QTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDK5rjgh1Wbn01G1RKx81AtmJ2W1WXdaIfU8NUnAFqyGMGXeikqEC/N j67Jl/lOp41Re7lll+/ckJ9w41ZvRnr876eU93vlX32viyJR8xdWlbq+qDOHEBdZ Gzp3wIq6u2GjGfLqgvnOOnaRcLZthfWX7nCKONnCE0rgl3tWL3kno3CQVPr76D5S RyhS5cIkwRA5pQlGV9hIcywDiAj4IB8MXq/2WtKMHaBEQ1UTCsxuqMRGosXxuGME 1t8CEeVfUc04G6h2NOVvNhNaJ+Wc5qZEXMv9oZ3HAPsEgiQE+/tvdoAehyk1s6HJ 3rFrMTpO9+b659dcwU1YDIWuW5ItDXU0 -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:40 2025 by rpki-client