$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft File: 67t1Ysakn7ft5XQSvB_61I4a-0k.mft (raw, json) Hash identifier: Ae/YRetne1sI83XC4NEx9YSqJVYQXuMtsj15NIOCZMU= Subject key identifier: 18:8E:4D:03:B9:D8:DC:26:33:9F:80:75:F6:6F:10:7F:20:59:A1:1E Authority key identifier: EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49 Certificate issuer: /CN=A914FE87/serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49 Certificate serial: 049E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft Manifest number: 0496 Signing time: Wed 05 Nov 2025 00:07:57 +0000 Manifest this update: Wed 05 Nov 2025 00:07:57 +0000 Manifest next update: Wed 12 Nov 2025 00:07:57 +0000 Files and hashes: 1: 67t1Ysakn7ft5XQSvB_61I4a-0k.crl (hash: XfK/tSE05EEE20WjSFDfBTueee15RAUgPVyiJ3cB+VI=) 2: 9F9CEB425CB911ECAEF7AE14C4F9AE02.roa (hash: 4J+Nn/bjKR28nk40OXzQpDjnmTjR/SOYeS05cuCBwyo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1182 (0x49e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FE87, serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49 Validity Not Before: Nov 5 00:07:57 2025 GMT Not After : Nov 12 00:07:57 2025 GMT Subject: CN=690a955d-7e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5a:14:d2:f0:63:d7:6b:88:f3:bf:22:fd:94: d4:2f:15:37:86:fd:06:b4:06:04:da:c5:52:7f:b2: 1f:ce:b2:3a:62:dc:6d:4d:a5:78:90:85:37:c7:08: 48:84:4b:45:7e:c5:96:58:91:38:0f:e5:1a:2f:43: 09:ee:ce:58:e9:37:89:2d:80:49:d8:42:d3:32:fa: ce:50:fe:3d:4a:22:a6:89:08:84:80:f8:2b:fb:4c: f2:55:40:4f:2a:b6:39:6f:1f:90:2e:d1:23:72:88: f7:3f:46:8d:0f:25:77:7e:22:b2:f6:ca:49:bb:d3: bf:ce:a4:9f:0b:20:56:ac:51:be:62:a7:c5:62:85: 47:d4:25:a8:30:ec:93:bd:f6:18:bf:2a:2c:e2:b2: 29:4b:0f:a6:b5:4a:aa:b0:68:9a:7b:6d:0c:9b:7f: 5b:8e:54:bf:cc:54:07:3d:2f:68:28:ec:99:b3:9b: 25:8e:09:41:9a:b5:ac:86:47:f6:49:a6:11:17:29: c1:89:90:1b:6c:e0:b9:7e:53:75:0c:50:50:2a:8c: 14:99:c1:09:91:52:d0:fd:c6:09:61:2f:7e:95:d6: 2d:59:7b:7a:54:bd:f5:53:28:b3:a0:20:f3:6b:04: 7f:a2:62:68:98:23:54:b2:90:e6:73:98:4e:96:35: b4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:8E:4D:03:B9:D8:DC:26:33:9F:80:75:F6:6F:10:7F:20:59:A1:1E X509v3 Authority Key Identifier: keyid:EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:80:fb:a8:06:b4:a5:4a:63:82:71:74:1a:35:c7:36:5f:18: a8:df:d1:82:60:b5:3e:79:19:29:3f:af:48:33:34:4e:49:58: d5:ef:fb:3e:5d:00:d2:47:8f:1d:17:63:3a:c9:04:bf:6c:d9: bc:8b:d9:44:69:83:09:9e:88:d6:63:2b:3d:db:37:25:2d:7c: c6:59:0b:7a:72:d2:4d:87:d7:ff:ca:62:f3:24:bf:6c:0f:16: f3:7d:52:bb:34:e2:d3:e3:87:aa:1f:e2:91:ff:ab:3b:97:7d: 68:f6:39:14:78:09:e1:9c:6e:c8:85:a9:c6:fc:ad:aa:0d:c0: 65:6e:96:8d:00:a0:23:39:b7:fb:3a:29:5c:ab:5c:c0:2b:ae: fa:52:21:50:85:85:52:d7:0d:72:9b:88:61:dc:0c:5f:a3:1c: a5:1d:25:95:3b:a9:eb:88:bf:24:b5:b2:66:11:bf:be:28:ee: bf:4b:a8:a1:9f:de:82:61:fd:87:ef:4f:01:78:3d:5f:08:5d: 25:b6:84:f5:5d:cf:4f:cb:d4:d1:bb:46:90:f6:76:cd:b6:ac: ed:ba:55:c8:0f:78:ce:b7:b3:72:dc:c2:7e:11:bb:56:9d:6a: 55:98:f7:b7:b8:ad:9a:b5:70:44:78:18:5f:79:c4:86:8a:fb: b9:32:ec:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZFODcxMTAvBgNVBAUTKEVCQkI3NTYyQzZBNDlGQjdFREU1NzQxMkJDMUZGQUQ0 OEUxQUZCNDkwHhcNMjUxMTA1MDAwNzU3WhcNMjUxMTEyMDAwNzU3WjAYMRYwFAYD VQQDEw02OTBhOTU1ZC03ZTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuloU0vBj12uI878i/ZTULxU3hv0GtAYE2sVSf7IfzrI6YtxtTaV4kIU3xwhI hEtFfsWWWJE4D+UaL0MJ7s5Y6TeJLYBJ2ELTMvrOUP49SiKmiQiEgPgr+0zyVUBP KrY5bx+QLtEjcoj3P0aNDyV3fiKy9spJu9O/zqSfCyBWrFG+YqfFYoVH1CWoMOyT vfYYvyos4rIpSw+mtUqqsGiae20Mm39bjlS/zFQHPS9oKOyZs5sljglBmrWshkf2 SaYRFynBiZAbbOC5flN1DFBQKowUmcEJkVLQ/cYJYS9+ldYtWXt6VL31UyizoCDz awR/omJomCNUspDmc5hOljW0DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBiOTQO5 2NwmM5+AdfZvEH8gWaEeMB8GA1UdIwQYMBaAFOu7dWLGpJ+37eV0Erwf+tSOGvtJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkU4Ny80RTE0MDFFNjVD QjYxMUVDQTc3MTE4MEVDNEY5QUUwMi82N3QxWXNha243ZnQ1WFFTdkJfNjFJNGEt MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3dDFZc2FrbjdmdDVYUVN2Ql82MUk0YS0way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkU4Ny80RTE0MDFFNjVDQjYxMUVDQTc3MTE4MEVDNEY5QUUwMi82N3QxWXNha243 ZnQ1WFFTdkJfNjFJNGEtMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRgPuoBrSlSmOCcXQaNcc2Xxio39GCYLU+eRkpP69IMzROSVjV7/s+ XQDSR48dF2M6yQS/bNm8i9lEaYMJnojWYys92zclLXzGWQt6ctJNh9f/ymLzJL9s DxbzfVK7NOLT44eqH+KR/6s7l31o9jkUeAnhnG7IhanG/K2qDcBlbpaNAKAjObf7 Oilcq1zAK676UiFQhYVS1w1ym4hh3AxfoxylHSWVO6nriL8ktbJmEb++KO6/S6ih n96CYf2H708BeD1fCF0ltoT1Xc9Py9TRu0aQ9nbNtqztulXID3jOt7Ny3MJ+EbtW nWpVmPe3uK2atXBEeBhfecSGivu5Muyx -----END CERTIFICATE-----Generated at Wed Nov 5 21:12:47 2025 by rpki-client