$ rpki-client -vvf rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft File: sY6ktIaEpn3qATi6uiMwbQADzcw.mft (raw, json) Hash identifier: yyguSMje34qJB/CXDMWvnXqql+ju2kOuxh2Gi7Jc6Hc= Subject key identifier: F6:67:3A:7D:7C:C2:C4:E3:F1:22:1D:8A:FB:74:11:80:FD:B1:27:57 Authority key identifier: B1:8E:A4:B4:86:84:A6:7D:EA:01:38:BA:BA:23:30:6D:00:03:CD:CC Certificate issuer: /CN=A913EE77/serialNumber=B18EA4B48684A67DEA0138BABA23306D0003CDCC Certificate serial: 074B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft Manifest number: 0AE0 Signing time: Sun 26 Oct 2025 19:54:30 +0000 Manifest this update: Sun 26 Oct 2025 19:54:29 +0000 Manifest next update: Sun 02 Nov 2025 19:54:29 +0000 Files and hashes: 1: sY6ktIaEpn3qATi6uiMwbQADzcw.crl (hash: 1nIWC1YvIzCGaRHxLsjBSwhkqM7mCNNZBHMA2VzkAT8=) 2: A8D10944DEA511EEB7B9DC35C4F9AE02.roa (hash: F5nZUR683r0GHaN7PIQS7ScZ+hYmoRww/yUwHk4aoNk=) 3: A0A9FE74DEA511EE8F515632C4F9AE02.roa (hash: SjnLXmN7OQs2QJo93KJDaMm8uwo9AE2p0tGK7wMyelo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.crl rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 19:54:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1867 (0x74b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EE77, serialNumber=B18EA4B48684A67DEA0138BABA23306D0003CDCC Validity Not Before: Oct 26 19:54:29 2025 GMT Not After : Nov 2 19:54:29 2025 GMT Subject: CN=68fe7c76-3a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0c:94:51:d8:e7:c5:f8:00:20:d9:40:33:6f: 40:0e:ff:73:d7:9c:b5:78:44:3a:e1:ef:51:25:7c: 2f:ec:a8:02:17:7b:bf:80:e4:a5:7b:5f:0b:b7:75: e6:56:c7:d9:02:27:ad:be:1e:6f:be:a6:1d:b8:52: ed:8e:db:8a:71:a1:04:ef:6e:84:17:a3:9e:76:4c: 5b:19:1f:de:36:97:dd:19:f8:c3:a9:4d:f9:7d:52: 24:17:9b:c2:43:66:21:c0:80:bd:40:0e:fe:76:c2: c0:f2:8a:30:65:35:e3:20:5a:2d:5b:4e:e1:1d:65: 64:79:08:c4:8d:b7:5b:fb:f0:15:73:a1:7c:5d:9d: 19:8a:f3:6a:e4:90:9b:41:38:b1:8e:4e:8c:a7:77: 68:34:54:ce:c4:a5:17:c1:1c:8c:56:7d:65:e1:fe: d7:c6:f7:29:b8:5f:da:fd:9c:d0:41:dd:b8:85:f4: e5:ea:dd:8e:2c:d0:9b:50:a2:42:a4:07:7d:5d:d4: ba:eb:30:c9:ca:3b:85:1d:1d:5d:71:d2:2e:74:b1: 53:e2:57:d0:bf:ae:0c:01:89:ee:9a:14:7a:8c:8a: c2:17:4c:03:be:62:65:a3:d8:e9:71:3c:cb:0b:f8: cc:35:9f:1b:a6:42:ec:5b:a3:09:c2:ba:4d:57:e9: 34:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:67:3A:7D:7C:C2:C4:E3:F1:22:1D:8A:FB:74:11:80:FD:B1:27:57 X509v3 Authority Key Identifier: keyid:B1:8E:A4:B4:86:84:A6:7D:EA:01:38:BA:BA:23:30:6D:00:03:CD:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:f4:f5:d4:96:e9:e2:8d:ba:3f:15:3f:e8:9c:15:19:28:e7: af:f1:9c:6e:a6:74:2b:ff:dd:c7:cf:a5:91:28:ba:90:3d:9f: df:a7:19:a2:c6:d8:fc:63:b6:d5:1e:10:80:16:c6:0a:9a:35: 04:b4:ae:66:20:a1:06:19:63:9a:56:45:4b:f7:a2:34:e3:30: 0d:4c:e2:60:b7:2a:d4:ca:a0:3a:29:b6:03:47:06:17:8e:c4: fb:0b:76:57:2a:22:3b:4a:78:4b:b2:50:76:95:7c:4e:a7:bb: a1:3f:63:4a:ba:0f:36:18:a7:22:ab:c1:97:76:a3:c8:ba:d0: fc:e7:6e:ae:5a:01:43:9f:00:a7:89:5f:c0:fb:19:46:f5:98: 92:13:d4:f4:9b:8b:48:62:30:1e:41:54:38:54:a1:e1:93:94: 90:34:fd:d3:68:94:e4:8b:8b:91:29:5c:90:9e:2a:57:95:a0: 95:6c:70:b0:34:e8:41:46:09:80:39:8e:a2:51:fe:c2:a4:98: ac:e8:28:d4:47:dd:66:70:59:58:2b:ba:7f:bb:89:9d:50:e8: 2d:a7:a7:eb:9e:a1:14:a2:20:d2:b2:fd:d2:69:f5:17:e3:65: 44:81:9a:b9:a1:88:3d:2a:85:fc:47:3d:bc:ec:51:03:09:97: 64:c8:3e:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VFNzcxMTAvBgNVBAUTKEIxOEVBNEI0ODY4NEE2N0RFQTAxMzhCQUJBMjMzMDZE MDAwM0NEQ0MwHhcNMjUxMDI2MTk1NDI5WhcNMjUxMTAyMTk1NDI5WjAYMRYwFAYD VQQDEw02OGZlN2M3Ni0zYTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgyUUdjnxfgAINlAM29ADv9z15y1eEQ64e9RJXwv7KgCF3u/gOSle18Lt3Xm VsfZAietvh5vvqYduFLtjtuKcaEE726EF6OedkxbGR/eNpfdGfjDqU35fVIkF5vC Q2YhwIC9QA7+dsLA8oowZTXjIFotW07hHWVkeQjEjbdb+/AVc6F8XZ0ZivNq5JCb QTixjk6Mp3doNFTOxKUXwRyMVn1l4f7XxvcpuF/a/ZzQQd24hfTl6t2OLNCbUKJC pAd9XdS66zDJyjuFHR1dcdIudLFT4lfQv64MAYnumhR6jIrCF0wDvmJlo9jpcTzL C/jMNZ8bpkLsW6MJwrpNV+k09wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZnOn18 wsTj8SIdivt0EYD9sSdXMB8GA1UdIwQYMBaAFLGOpLSGhKZ96gE4urojMG0AA83M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUU3Ny9DNDAwQkI1QzU2 RDExMUVBQTk0RTdFNURDNEY5QUUwMi9zWTZrdElhRXBuM3FBVGk2dWlNd2JRQUR6 Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NZNmt0SWFFcG4zcUFUaTZ1aU13YlFBRHpjdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUU3Ny9DNDAwQkI1QzU2RDExMUVBQTk0RTdFNURDNEY5QUUwMi9zWTZrdElhRXBu M3FBVGk2dWlNd2JRQUR6Y3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAX9PXUlunijbo/FT/onBUZKOev8ZxupnQr/93Hz6WRKLqQPZ/fpxmi xtj8Y7bVHhCAFsYKmjUEtK5mIKEGGWOaVkVL96I04zANTOJgtyrUyqA6KbYDRwYX jsT7C3ZXKiI7SnhLslB2lXxOp7uhP2NKug82GKciq8GXdqPIutD8526uWgFDnwCn iV/A+xlG9ZiSE9T0m4tIYjAeQVQ4VKHhk5SQNP3TaJTki4uRKVyQnipXlaCVbHCw NOhBRgmAOY6iUf7CpJis6CjUR91mcFlYK7p/u4mdUOgtp6frnqEUoiDSsv3SafUX 42VEgZq5oYg9KoX8Rz287FEDCZdkyD4n -----END CERTIFICATE-----Generated at Tue Oct 28 18:45:54 2025 by rpki-client