$ rpki-client -vvf rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft File: 03yc1lDAIKNQDtybQKVGqEw_Jgs.mft (raw, json) Hash identifier: +kU/3vcMU53Fs6rWn1I2uXAk6P75lLE372/Oo0ozkMo= Subject key identifier: F1:F3:2F:EA:6D:CF:14:95:44:37:65:4B:BA:32:89:6F:81:F2:B7:48 Authority key identifier: D3:7C:9C:D6:50:C0:20:A3:50:0E:DC:9B:40:A5:46:A8:4C:3F:26:0B Certificate issuer: /CN=A9153C50/serialNumber=D37C9CD650C020A3500EDC9B40A546A84C3F260B Certificate serial: 050E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft Manifest number: 0508 Signing time: Sun 02 Nov 2025 23:36:49 +0000 Manifest this update: Sun 02 Nov 2025 23:36:49 +0000 Manifest next update: Sun 09 Nov 2025 23:36:49 +0000 Files and hashes: 1: 03yc1lDAIKNQDtybQKVGqEw_Jgs.crl (hash: /RfTwDRhkHpA0zX8YKbfYF7fa3wXkOECQbs2LH19ceQ=) 2: 8B97D7A22CD911ECA528B744C4F9AE02.roa (hash: ejQetAzLgqVtDolBJZWz4Zc5LEXRfg3VkvX111clMEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.crl rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1294 (0x50e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153C50, serialNumber=D37C9CD650C020A3500EDC9B40A546A84C3F260B Validity Not Before: Nov 2 23:36:49 2025 GMT Not After : Nov 9 23:36:49 2025 GMT Subject: CN=6907eb11-4749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:77:c4:0e:f3:76:8e:cb:72:7c:ca:5b:59:30: ea:c6:08:82:43:58:d7:4e:b6:70:7f:54:2a:c0:5b: 33:bd:22:63:ea:c6:65:d5:d2:16:a5:70:d0:ce:8d: 84:32:f8:70:8f:05:f2:45:db:c1:e2:7b:cb:52:a3: 37:bf:8a:41:18:cb:10:13:92:9b:4f:65:f4:25:a9: 27:a8:3a:7b:65:77:9c:a6:8b:79:4a:06:62:02:7e: c7:ec:4a:e6:c6:ef:3d:7b:bd:4d:ce:c1:8d:88:0b: 27:2b:e7:a7:20:27:6c:09:4c:63:e2:45:b9:6b:5a: c0:5f:83:88:de:fc:8f:64:04:49:67:7c:20:7e:6b: 31:df:85:24:ef:4b:d1:93:b8:08:02:95:f7:84:9b: c5:f4:0b:89:33:78:9c:38:02:d6:3e:b6:50:e5:a0: 88:46:53:19:fd:d7:15:de:cf:28:86:e5:a8:a2:6c: a0:f2:e9:89:f8:67:ce:f7:1e:43:b2:eb:49:22:67: 9c:30:16:7b:d7:11:db:81:d8:dc:5f:66:71:a9:3c: 62:95:db:67:c0:e2:6b:04:bf:3f:37:61:9b:48:77: 16:ff:41:02:9d:ca:7d:08:2e:a3:53:44:fa:16:ac: bc:ac:8e:36:d5:fc:af:30:ec:e0:3c:11:16:4a:01: 0c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F3:2F:EA:6D:CF:14:95:44:37:65:4B:BA:32:89:6F:81:F2:B7:48 X509v3 Authority Key Identifier: keyid:D3:7C:9C:D6:50:C0:20:A3:50:0E:DC:9B:40:A5:46:A8:4C:3F:26:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:80:cc:e0:ca:f6:3e:43:aa:70:33:1f:6e:bf:03:42:a5:71: 47:ca:da:3c:3f:f3:1c:f6:10:6e:32:df:68:53:fe:e0:1b:68: 28:1b:d2:e3:83:45:54:9b:10:58:82:97:b9:2b:96:ab:42:07: 7c:df:c2:89:da:d2:01:08:60:b5:2a:e0:d6:7a:dd:20:8d:25: 6f:dd:87:85:3e:3e:ec:e3:8f:18:12:0b:b7:af:43:1b:bb:64: 23:de:be:06:07:77:5d:74:6d:5c:cd:43:7c:29:07:1c:25:a4: c4:ff:9f:87:df:63:1d:b9:0f:c7:f5:14:21:37:03:c0:89:91: de:5a:41:05:f7:17:a0:f7:e0:a7:03:6f:95:5e:55:8c:82:3f: ca:83:4f:4e:11:aa:4e:9c:88:73:a8:b5:34:08:02:e6:48:a6: b7:c8:eb:27:75:37:12:49:99:ec:f3:e2:fc:4b:34:e2:0f:75: e8:ae:4d:8d:47:d8:5b:d3:1a:d8:e7:9d:ef:6c:42:35:a7:c0: 8f:72:58:1d:33:83:89:96:c7:98:ff:30:44:ac:07:05:0a:08: d4:2c:78:84:dc:98:5d:c2:4b:8c:f5:f9:8c:8d:c6:da:af:a2: f9:a4:e0:90:6c:9f:74:db:84:1d:68:53:f1:76:92:0b:78:48: db:bd:be:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNDNTAxMTAvBgNVBAUTKEQzN0M5Q0Q2NTBDMDIwQTM1MDBFREM5QjQwQTU0NkE4 NEMzRjI2MEIwHhcNMjUxMTAyMjMzNjQ5WhcNMjUxMTA5MjMzNjQ5WjAYMRYwFAYD VQQDEw02OTA3ZWIxMS00NzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArHfEDvN2jstyfMpbWTDqxgiCQ1jXTrZwf1QqwFszvSJj6sZl1dIWpXDQzo2E MvhwjwXyRdvB4nvLUqM3v4pBGMsQE5KbT2X0JaknqDp7ZXecpot5SgZiAn7H7Erm xu89e71NzsGNiAsnK+enICdsCUxj4kW5a1rAX4OI3vyPZARJZ3wgfmsx34Uk70vR k7gIApX3hJvF9AuJM3icOALWPrZQ5aCIRlMZ/dcV3s8ohuWoomyg8umJ+GfO9x5D sutJImecMBZ71xHbgdjcX2ZxqTxildtnwOJrBL8/N2GbSHcW/0ECncp9CC6jU0T6 Fqy8rI421fyvMOzgPBEWSgEMuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPHzL+pt zxSVRDdlS7oyiW+B8rdIMB8GA1UdIwQYMBaAFNN8nNZQwCCjUA7cm0ClRqhMPyYL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0M1MC80QjkwNjMwMjJD RDYxMUVDQTVEQTM1MzRDNEY5QUUwMi8wM3ljMWxEQUlLTlFEdHliUUtWR3FFd19K Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzAzeWMxbERBSUtOUUR0eWJRS1ZHcUV3X0pncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0M1MC80QjkwNjMwMjJDRDYxMUVDQTVEQTM1MzRDNEY5QUUwMi8wM3ljMWxEQUlL TlFEdHliUUtWR3FFd19KZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmgMzgyvY+Q6pwMx9uvwNCpXFHyto8P/Mc9hBuMt9oU/7gG2goG9Lj g0VUmxBYgpe5K5arQgd838KJ2tIBCGC1KuDWet0gjSVv3YeFPj7s448YEgu3r0Mb u2Qj3r4GB3dddG1czUN8KQccJaTE/5+H32MduQ/H9RQhNwPAiZHeWkEF9xeg9+Cn A2+VXlWMgj/Kg09OEapOnIhzqLU0CALmSKa3yOsndTcSSZns8+L8SzTiD3Xork2N R9hb0xrY553vbEI1p8CPclgdM4OJlseY/zBErAcFCgjULHiE3JhdwkuM9fmMjcba r6L5pOCQbJ9024QdaFPxdpILeEjbvb4Y -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:48 2025 by rpki-client