$ rpki-client -vvf rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft File: y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft (raw, json) Hash identifier: QNK8xCc7N7zLNMBmZHRZRtBgySR54mX29j9s8/u/t5w= Subject key identifier: AE:78:62:6B:7F:BD:2A:92:58:D9:2A:93:CC:21:E8:46:07:E2:CB:2B Authority key identifier: CB:93:F5:99:B0:5E:3F:CB:7B:21:24:B6:FC:3F:99:CC:36:20:F8:47 Certificate issuer: /CN=A913406B/serialNumber=CB93F599B05E3FCB7B2124B6FC3F99CC3620F847 Certificate serial: 0440 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft Manifest number: 043A Signing time: Mon 27 Oct 2025 01:21:05 +0000 Manifest this update: Mon 27 Oct 2025 01:21:04 +0000 Manifest next update: Mon 03 Nov 2025 01:21:04 +0000 Files and hashes: 1: y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl (hash: 447T79nKP2kUvn6nODpngdgo2EXOw1KOWDimkI80PAQ=) 2: ECE5D72C7C2D11EC8CAD9662C4F9AE02.roa (hash: QmVKtjuHtyLrViuDr1AXIV5G+8O7wZgZ1wAX25Be+OQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 00:55:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1088 (0x440) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913406B, serialNumber=CB93F599B05E3FCB7B2124B6FC3F99CC3620F847 Validity Not Before: Oct 27 01:21:04 2025 GMT Not After : Nov 3 01:21:04 2025 GMT Subject: CN=68fec900-4a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7b:39:f7:80:80:bc:75:f7:c9:8a:01:da:0d: 10:4b:16:76:4c:65:44:66:41:d5:ee:24:a9:dc:4e: 40:a6:a2:4b:32:4a:e0:a6:2c:ab:9a:b7:7c:ad:68: c8:b2:41:70:eb:8d:53:ec:dc:75:8b:67:3b:e9:5f: 06:58:ab:64:d2:e3:31:aa:8c:bc:e9:7d:d0:c3:db: 57:1f:fd:fd:91:4e:ed:5f:e5:14:4d:0b:ed:29:c4: 71:10:9c:dd:f1:30:1f:62:20:f0:99:42:46:d8:77: 2f:14:10:71:f7:d4:74:a0:22:e3:48:bd:2c:aa:d4: af:50:2e:10:a4:df:dd:c5:cb:ad:f0:07:d3:5a:19: 42:7a:0e:dc:ad:f3:b5:33:d7:97:3e:07:bb:7c:a9: 44:6c:cb:c4:73:52:0c:f0:e7:4d:4e:6c:ff:44:e7: 09:bb:ed:07:c2:d5:fe:7b:42:2a:db:e6:83:e9:1c: 8e:d9:96:66:c6:9d:8e:e7:a0:3a:ca:72:b8:ca:b1: 9a:67:1c:5a:aa:61:53:d5:90:35:b5:3b:d3:92:e0: 9b:0c:88:00:35:b7:6e:7e:a9:3d:1b:68:66:4a:92: 66:89:41:b0:7d:84:54:cb:78:48:70:b1:98:06:2d: 8a:78:76:b2:08:01:05:bb:8c:36:9d:1f:89:22:a4: 94:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:78:62:6B:7F:BD:2A:92:58:D9:2A:93:CC:21:E8:46:07:E2:CB:2B X509v3 Authority Key Identifier: keyid:CB:93:F5:99:B0:5E:3F:CB:7B:21:24:B6:FC:3F:99:CC:36:20:F8:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:35:4d:c6:16:ef:36:30:eb:cc:1e:43:d5:d1:36:ae:29:39: a5:56:d5:02:44:f6:4a:c2:8f:35:06:4a:36:7e:48:18:fa:67: c7:3a:80:5d:6d:94:e5:90:79:7b:3f:ee:53:58:61:7d:72:29: eb:b6:40:28:a5:08:8e:79:90:0d:72:01:ea:ec:a2:43:97:f3: 13:2f:6d:65:c9:c8:a4:19:97:30:0a:4a:33:50:0d:5a:fb:ec: 1e:af:d9:d5:26:0b:ff:e8:97:35:0f:bf:84:72:63:6e:52:80: aa:04:53:96:87:fb:de:37:8e:f4:50:cf:34:13:e9:77:87:f2: 1e:ca:b1:c3:bc:a7:a1:22:b0:ab:ad:dc:e7:14:03:2e:90:12: 95:8a:06:ec:07:ef:6e:cc:b0:14:b4:bf:09:12:60:f2:69:bf: 8d:7f:71:db:e3:3a:c7:ec:0f:41:a8:78:c5:c3:7a:76:76:23: 37:18:12:93:cf:e3:64:95:55:c9:68:c1:b3:a1:ec:42:ca:08: 29:69:71:51:e1:6c:e3:5f:ba:a4:b7:75:d3:23:25:e6:86:63: ad:b6:05:20:eb:b9:a8:cb:4b:e2:0d:1e:46:a5:f8:ba:b5:c7: 45:5a:a4:2c:4e:fd:43:bd:d8:99:da:45:51:69:83:c5:31:20: be:63:28:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQwNkIxMTAvBgNVBAUTKENCOTNGNTk5QjA1RTNGQ0I3QjIxMjRCNkZDM0Y5OUND MzYyMEY4NDcwHhcNMjUxMDI3MDEyMTA0WhcNMjUxMTAzMDEyMTA0WjAYMRYwFAYD VQQDEw02OGZlYzkwMC00YTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArns594CAvHX3yYoB2g0QSxZ2TGVEZkHV7iSp3E5ApqJLMkrgpiyrmrd8rWjI skFw641T7Nx1i2c76V8GWKtk0uMxqoy86X3Qw9tXH/39kU7tX+UUTQvtKcRxEJzd 8TAfYiDwmUJG2HcvFBBx99R0oCLjSL0sqtSvUC4QpN/dxcut8AfTWhlCeg7crfO1 M9eXPge7fKlEbMvEc1IM8OdNTmz/ROcJu+0HwtX+e0Iq2+aD6RyO2ZZmxp2O56A6 ynK4yrGaZxxaqmFT1ZA1tTvTkuCbDIgANbdufqk9G2hmSpJmiUGwfYRUy3hIcLGY Bi2KeHayCAEFu4w2nR+JIqSUdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK54Ymt/ vSqSWNkqk8wh6EYH4ssrMB8GA1UdIwQYMBaAFMuT9ZmwXj/LeyEktvw/mcw2IPhH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDA2Qi9ENjM4MjdBRTdD MjkxMUVDOEVFMzYxMERDNEY5QUUwMi95NVAxbWJCZVA4dDdJU1MyX0QtWnpEWWct RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k1UDFtYkJlUDh0N0lTUzJfRC1aekRZZy1FYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDA2Qi9ENjM4MjdBRTdDMjkxMUVDOEVFMzYxMERDNEY5QUUwMi95NVAxbWJCZVA4 dDdJU1MyX0QtWnpEWWctRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaNU3GFu82MOvMHkPV0TauKTmlVtUCRPZKwo81Bko2fkgY+mfHOoBd bZTlkHl7P+5TWGF9cinrtkAopQiOeZANcgHq7KJDl/MTL21lycikGZcwCkozUA1a ++wer9nVJgv/6Jc1D7+EcmNuUoCqBFOWh/veN470UM80E+l3h/IeyrHDvKehIrCr rdznFAMukBKVigbsB+9uzLAUtL8JEmDyab+Nf3Hb4zrH7A9BqHjFw3p2diM3GBKT z+NklVXJaMGzoexCyggpaXFR4WzjX7qkt3XTIyXmhmOttgUg67moy0viDR5Gpfi6 tcdFWqQsTv1DvdiZ2kVRaYPFMSC+YygX -----END CERTIFICATE-----Generated at Mon Oct 27 04:20:55 2025 by rpki-client