$ rpki-client -vvf rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft File: rYW34Ys6FvU-kpOKM07Guz64tjA.mft (raw, json) Hash identifier: QdQPPsGqGqx2WC+4uVmsXhBjgZsj5tjbePrT1Qc3GBQ= Subject key identifier: 75:2D:40:E3:45:6C:80:55:A0:80:B0:7C:DF:B2:41:84:48:C3:A3:4D Authority key identifier: AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30 Certificate issuer: /CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630 Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft Manifest number: 01B7 Signing time: Mon 03 Nov 2025 03:04:50 +0000 Manifest this update: Mon 03 Nov 2025 03:04:49 +0000 Manifest next update: Mon 10 Nov 2025 03:04:49 +0000 Files and hashes: 1: rYW34Ys6FvU-kpOKM07Guz64tjA.crl (hash: W7RMOpdSpB7wVTMSEymlDJ1JrzKE2MFn7D0QG1Dtb3c=) 2: A9321C0A1B2A11EE84F40B3AC4F9AE02.roa (hash: p81EH8N+mq+tuXFMTqadpbhtGnx8x8sovmy9swXxzCM=) 3: A8C501F61B2A11EE84F40B3AC4F9AE02.roa (hash: GGQZQXITbCi35kDi1cszvpoNDF4GQHNFV1AYsPL4NFA=) 4: B97D647C1A8811EEB5AE963CC4F9AE02.roa (hash: NMwwqT5E6qjLfBlg6rE6vavEzETFOwEvTWR7gAiqQV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:04:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FBB2, serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630 Validity Not Before: Nov 3 03:04:49 2025 GMT Not After : Nov 10 03:04:49 2025 GMT Subject: CN=69081bd1-c49b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:58:5a:c7:cf:54:5a:b9:7d:5d:ab:ba:da:c4: 47:b5:57:51:5f:32:ab:16:34:d9:7e:af:71:24:fd: 07:52:31:b4:0d:0a:bc:c0:7b:1a:64:76:d5:94:6b: 05:6a:03:fe:c2:a9:a0:59:17:3a:1e:10:e4:23:96: 9a:cf:5d:6e:11:da:48:4e:de:6a:ab:53:ed:85:12: cc:19:28:84:60:b0:52:83:1a:6c:0c:0e:86:65:50: bd:e3:84:03:a3:26:dd:5b:a4:86:00:8f:ef:5d:57: 87:b7:52:b7:f5:21:fa:0f:af:3e:6a:e9:53:89:e0: ec:62:f8:7f:42:93:37:8a:01:3f:b4:e4:b1:26:a4: bd:60:e1:a6:4d:60:93:e8:87:84:59:54:da:eb:39: 10:67:9f:07:58:b5:7a:32:d4:fb:aa:be:3f:00:f6: 4f:f4:94:6c:d4:50:d0:78:08:61:bb:5c:36:e8:79: 10:43:93:be:15:fe:9e:84:75:f8:37:13:6f:d3:cb: b4:8d:56:bb:d5:c2:1a:52:18:05:42:40:19:99:f6: f8:1a:73:5e:8e:28:68:f7:e0:bb:20:26:19:26:8a: 69:5b:2a:11:3d:c2:63:86:32:2e:ca:33:52:05:85: b7:23:38:0a:f2:a8:95:3e:cf:be:ee:96:a2:2a:e5: 5a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:2D:40:E3:45:6C:80:55:A0:80:B0:7C:DF:B2:41:84:48:C3:A3:4D X509v3 Authority Key Identifier: keyid:AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:ca:dd:23:09:3c:91:55:43:c4:32:b8:01:a1:bc:a0:c0:a4: fa:2f:29:56:6c:96:45:f8:91:75:6a:d2:a5:16:95:54:fb:96: b8:8c:14:8e:00:04:32:d4:07:b3:f8:2b:4d:e7:bb:47:0e:20: ac:78:7f:0f:0b:cf:6f:d2:aa:0f:95:1a:07:a4:35:ea:01:c7: 4c:96:7f:6b:83:d5:19:43:c9:34:e4:4c:c0:e9:bf:0e:3a:17: dd:37:4f:f3:b5:61:4b:0b:af:23:1d:60:54:ba:f9:57:df:ee: f3:2f:84:f1:cf:1d:2e:f7:94:50:9a:04:b5:3b:a5:5a:7e:56: 72:49:e2:63:75:55:13:90:a0:63:63:a9:c9:7b:06:09:8b:29: ce:fd:ad:61:57:0c:e0:fc:9b:89:5c:91:b3:70:62:e1:91:3d: 9c:b1:90:03:4c:cb:30:78:b1:ad:52:d9:d7:7e:81:5a:53:9d: 6c:b5:b4:0d:e5:52:55:64:10:83:58:f8:d3:eb:a8:ac:0b:2e: d5:ba:40:46:c5:6e:06:bb:fe:c5:dd:66:68:9c:cc:b0:f4:ca: e4:4f:b3:81:1d:f5:d2:0f:0d:4a:2e:56:69:ba:0d:8a:0f:2a: 24:fa:e1:55:ef:ce:f8:64:39:4b:42:2d:a3:6c:dc:4b:d0:12: 6a:ec:98:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZCQjIxMTAvBgNVBAUTKEFEODVCN0UxOEIzQTE2RjUzRTkyOTM4QTMzNEVDNkJC M0VCOEI2MzAwHhcNMjUxMTAzMDMwNDQ5WhcNMjUxMTEwMDMwNDQ5WjAYMRYwFAYD VQQDEw02OTA4MWJkMS1jNDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqFhax89UWrl9Xau62sRHtVdRXzKrFjTZfq9xJP0HUjG0DQq8wHsaZHbVlGsF agP+wqmgWRc6HhDkI5aaz11uEdpITt5qq1PthRLMGSiEYLBSgxpsDA6GZVC944QD oybdW6SGAI/vXVeHt1K39SH6D68+aulTieDsYvh/QpM3igE/tOSxJqS9YOGmTWCT 6IeEWVTa6zkQZ58HWLV6MtT7qr4/APZP9JRs1FDQeAhhu1w26HkQQ5O+Ff6ehHX4 NxNv08u0jVa71cIaUhgFQkAZmfb4GnNejiho9+C7ICYZJoppWyoRPcJjhjIuyjNS BYW3IzgK8qiVPs++7paiKuVaLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUtQONF bIBVoICwfN+yQYRIw6NNMB8GA1UdIwQYMBaAFK2Ft+GLOhb1PpKTijNOxrs+uLYw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkJCMi8wRTI3MDU0NDFB ODYxMUVFQTBBQTg3MTZDNEY5QUUwMi9yWVczNFlzNkZ2VS1rcE9LTTA3R3V6NjR0 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JZVzM0WXM2RnZVLWtwT0tNMDdHdXo2NHRqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkJCMi8wRTI3MDU0NDFBODYxMUVFQTBBQTg3MTZDNEY5QUUwMi9yWVczNFlzNkZ2 VS1rcE9LTTA3R3V6NjR0akEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwyt0jCTyRVUPEMrgBobygwKT6LylWbJZF+JF1atKlFpVU+5a4jBSO AAQy1Aez+CtN57tHDiCseH8PC89v0qoPlRoHpDXqAcdMln9rg9UZQ8k05EzA6b8O OhfdN0/ztWFLC68jHWBUuvlX3+7zL4Txzx0u95RQmgS1O6VaflZySeJjdVUTkKBj Y6nJewYJiynO/a1hVwzg/JuJXJGzcGLhkT2csZADTMsweLGtUtnXfoFaU51stbQN 5VJVZBCDWPjT66isCy7VukBGxW4Gu/7F3WZonMyw9MrkT7OBHfXSDw1KLlZpug2K Dyok+uFV7874ZDlLQi2jbNxL0BJq7Jia -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:12 2025 by rpki-client