$ rpki-client -vvf rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft File: gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft (raw, json) Hash identifier: tOV/6hBFH3qTjc/+SMbv2+dp9mheaJXAu75jnTAumIo= Subject key identifier: 8E:C6:BD:52:47:08:FC:7F:36:24:81:68:AE:89:5D:E4:6D:EA:D5:0D Authority key identifier: 83:2F:E5:61:4E:02:D3:50:F8:86:79:0D:E4:BD:C9:9F:42:64:55:E4 Certificate issuer: /CN=A9171669/serialNumber=832FE5614E02D350F886790DE4BDC99F426455E4 Certificate serial: 02CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft Manifest number: 02C7 Signing time: Mon 03 Nov 2025 01:21:44 +0000 Manifest this update: Mon 03 Nov 2025 01:21:43 +0000 Manifest next update: Mon 10 Nov 2025 01:21:43 +0000 Files and hashes: 1: gy_lYU4C01D4hnkN5L3Jn0JkVeQ.crl (hash: SEb71IZPlhcN4GsUji0TwSzIxPds0oHSlpgyLtKwnVI=) 2: 91BBC8880D9711ED8F09C27DC4F9AE02.roa (hash: KV+SoYHbA+Q51JP+NigJCe33FcHjWlimMC267ADRQGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.crl rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:21:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 715 (0x2cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171669, serialNumber=832FE5614E02D350F886790DE4BDC99F426455E4 Validity Not Before: Nov 3 01:21:43 2025 GMT Not After : Nov 10 01:21:43 2025 GMT Subject: CN=690803a8-aa03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:23:ed:34:ce:5c:79:cb:e0:d0:10:88:b7:a7: a8:b3:6b:fc:a5:3e:e2:3e:0f:ef:58:5f:84:e2:80: 00:09:2a:85:21:cd:93:7a:0d:eb:3e:27:b9:c0:8a: 30:ff:11:e1:1a:6f:ba:f5:25:e7:5b:68:6d:70:20: 39:0e:bc:7f:5b:51:42:43:83:d5:71:a5:1b:29:0e: 8f:b9:4e:d1:4c:74:40:cd:b5:12:62:8b:dd:75:66: 37:32:8e:cc:bc:7d:35:7a:5e:d2:c0:bd:49:ff:b6: db:d4:e6:f1:33:c3:5c:c5:d2:ba:6f:8e:31:c8:e5: 63:e3:fe:c4:f3:18:7e:c0:45:e0:25:e8:e7:a5:ac: a7:9e:1c:67:ab:f2:ab:65:00:64:7d:6b:2b:c4:bf: 90:60:1f:5d:34:96:b5:a5:ef:0a:d4:37:01:50:e0: 64:b1:c3:03:d7:94:14:8c:e7:d5:60:ce:71:f3:aa: 01:56:5b:1d:2a:0e:81:40:a4:ab:d1:e1:10:85:af: 5c:88:57:b8:aa:da:66:13:33:a6:b1:b7:26:e4:c7: 51:99:bb:85:cc:8f:0c:cb:b4:56:cd:84:67:51:66: 98:45:6b:d6:53:35:17:41:f9:fb:e8:7a:03:2d:54: 44:0a:cb:68:46:b7:24:12:35:af:c1:cc:34:1e:9e: 1c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C6:BD:52:47:08:FC:7F:36:24:81:68:AE:89:5D:E4:6D:EA:D5:0D X509v3 Authority Key Identifier: keyid:83:2F:E5:61:4E:02:D3:50:F8:86:79:0D:E4:BD:C9:9F:42:64:55:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:84:4b:cc:c6:30:50:1b:07:cc:db:d3:13:f6:2f:a3:f4:b2: 1b:73:d5:b6:a0:bb:2b:c6:37:c1:47:ad:a8:c2:77:5d:ac:e7: 17:9b:61:39:95:f0:ea:b8:7c:62:de:e1:ab:2e:a2:5d:d2:c1: 50:a4:98:a2:e7:17:84:cf:30:b7:59:8d:9d:22:b5:a3:1a:8d: 32:eb:de:da:0a:40:58:cf:5f:50:b2:35:bf:c8:00:18:46:c3: b3:0e:f0:56:eb:bb:6f:6f:2a:c9:79:86:c8:d9:3d:e9:86:db: 13:cd:5a:d3:db:74:2a:cb:2f:f4:0b:5b:aa:3f:28:b9:fb:70: 4b:c2:28:bb:f9:7d:43:ed:14:1d:11:e9:60:5a:07:0b:a8:67: 22:5b:27:55:08:51:8d:47:18:d6:cd:dc:5b:66:a3:a2:5d:03: ed:c2:db:21:df:19:f5:54:1d:87:f0:32:9a:ee:3a:6d:49:2d: e3:71:66:de:49:53:27:9a:65:e3:83:1b:f1:34:3b:31:5d:8c: 58:7e:79:4a:be:8d:64:bb:0a:37:d8:6e:b7:67:2a:8b:42:21: 37:76:10:2f:d8:25:dc:26:30:e4:f6:05:ce:a7:0e:2b:a5:3c: 4d:e5:ea:ca:f3:14:17:d9:ac:b9:1a:dc:2a:e1:56:c5:47:03: 72:23:ef:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE2NjkxMTAvBgNVBAUTKDgzMkZFNTYxNEUwMkQzNTBGODg2NzkwREU0QkRDOTlG NDI2NDU1RTQwHhcNMjUxMTAzMDEyMTQzWhcNMjUxMTEwMDEyMTQzWjAYMRYwFAYD VQQDEw02OTA4MDNhOC1hYTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApCPtNM5cecvg0BCIt6eos2v8pT7iPg/vWF+E4oAACSqFIc2Teg3rPie5wIow /xHhGm+69SXnW2htcCA5Drx/W1FCQ4PVcaUbKQ6PuU7RTHRAzbUSYovddWY3Mo7M vH01el7SwL1J/7bb1ObxM8NcxdK6b44xyOVj4/7E8xh+wEXgJejnpaynnhxnq/Kr ZQBkfWsrxL+QYB9dNJa1pe8K1DcBUOBkscMD15QUjOfVYM5x86oBVlsdKg6BQKSr 0eEQha9ciFe4qtpmEzOmsbcm5MdRmbuFzI8My7RWzYRnUWaYRWvWUzUXQfn76HoD LVRECstoRrckEjWvwcw0Hp4c/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7GvVJH CPx/NiSBaK6JXeRt6tUNMB8GA1UdIwQYMBaAFIMv5WFOAtNQ+IZ5DeS9yZ9CZFXk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTY2OS9CNTU4QkEwNjBE OTQxMUVEQTVENEUwNTFDNEY5QUUwMi9neV9sWVU0QzAxRDRobmtONUwzSm4wSmtW ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d5X2xZVTRDMDFENGhua041TDNKbjBKa1ZlUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTY2OS9CNTU4QkEwNjBEOTQxMUVEQTVENEUwNTFDNEY5QUUwMi9neV9sWVU0QzAx RDRobmtONUwzSm4wSmtWZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXhEvMxjBQGwfM29MT9i+j9LIbc9W2oLsrxjfBR62ownddrOcXm2E5 lfDquHxi3uGrLqJd0sFQpJii5xeEzzC3WY2dIrWjGo0y697aCkBYz19QsjW/yAAY RsOzDvBW67tvbyrJeYbI2T3phtsTzVrT23Qqyy/0C1uqPyi5+3BLwii7+X1D7RQd EelgWgcLqGciWydVCFGNRxjWzdxbZqOiXQPtwtsh3xn1VB2H8DKa7jptSS3jcWbe SVMnmmXjgxvxNDsxXYxYfnlKvo1kuwo32G63ZyqLQiE3dhAv2CXcJjDk9gXOpw4r pTxN5erK8xQX2ay5Gtwq4VbFRwNyI+8l -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:25 2025 by rpki-client