$ rpki-client -vvf rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft File: cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft (raw, json) Hash identifier: Rio1LuG0JH1WHIlcDKh+nJVjUfOTAG6V+rv56thyVjM= Subject key identifier: 27:03:81:83:73:2B:B9:6C:7D:DC:91:2B:EF:A4:24:5C:63:88:A7:AC Authority key identifier: 71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7 Certificate issuer: /CN=A917174E/serialNumber=718073098AF0396FD8E3309A1B9FB6F3EEB17AE7 Certificate serial: 0E59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft Manifest number: 0E58 Signing time: Tue 04 Nov 2025 17:50:13 +0000 Manifest this update: Tue 04 Nov 2025 17:50:12 +0000 Manifest next update: Tue 11 Nov 2025 17:50:12 +0000 Files and hashes: 1: cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl (hash: VIN3BDQjE27ZMAaX9tzh95/Yu72nloBKfBzqCIIZ4xU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3673 (0xe59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917174E, serialNumber=718073098AF0396FD8E3309A1B9FB6F3EEB17AE7 Validity Not Before: Nov 4 17:50:12 2025 GMT Not After : Nov 11 17:50:12 2025 GMT Subject: CN=690a3cd5-61af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:90:5f:89:e3:f6:24:c6:88:a0:84:55:6f:92: e0:e2:dc:54:21:ad:8a:1b:e6:d4:28:a4:4e:84:5c: 60:88:a5:ec:bd:92:6b:9b:b5:33:f8:2e:b7:1f:29: 27:be:98:2c:07:a0:63:a2:1a:57:53:e7:33:d0:bb: 1e:b8:7d:ad:94:89:d5:7e:3b:48:a8:71:c1:f4:7b: 75:77:d2:a8:4b:6c:75:21:7d:bf:6a:99:7a:e0:b8: b1:dd:59:8c:b8:14:21:48:79:80:8c:af:32:ea:4c: 9d:ac:17:99:8b:5b:3f:68:39:9d:10:16:d6:fd:0a: ba:bc:7c:47:11:04:6c:b5:a0:0d:b3:d5:7e:25:35: 77:d1:36:cd:c8:2b:ec:4f:46:1d:eb:28:99:07:77: 18:e3:9a:de:77:01:a4:5c:88:33:eb:0b:73:91:2a: d3:a5:f0:0f:a6:2d:b7:f6:57:de:e9:df:03:0f:0b: 2a:4c:6d:9b:15:46:59:45:01:fd:24:b4:df:f8:84: 2d:23:56:1c:83:0a:31:56:91:b3:a6:22:de:46:d4: c2:47:78:9e:ba:f0:7d:41:1e:91:71:5c:bb:09:8e: eb:20:c4:7a:3f:69:d2:a7:f2:2f:56:c8:24:a3:a2: 09:7f:aa:fa:11:1d:37:da:0c:cf:24:67:10:87:2d: 5e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:03:81:83:73:2B:B9:6C:7D:DC:91:2B:EF:A4:24:5C:63:88:A7:AC X509v3 Authority Key Identifier: keyid:71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:46:e8:d8:60:4b:41:3b:a4:63:5c:1f:a1:b5:3e:bd:d9:23: fb:3d:42:3a:16:22:03:79:53:43:38:25:68:e0:7c:ac:1f:4c: 36:06:09:b0:5c:32:66:8d:05:ed:1c:79:58:05:4d:18:92:1a: 04:8e:72:33:87:d1:cb:6b:aa:8b:17:34:c0:59:20:50:8b:cf: b1:c7:c2:92:de:af:2b:e9:89:ee:d7:4d:b4:52:0c:1e:37:37: 63:7a:fa:a2:20:01:ad:1b:c0:ee:59:f7:1f:0b:b6:0e:0d:20: 3e:41:e9:48:2c:2a:d8:8d:08:e8:15:e2:1b:49:72:69:00:80: c1:6b:6c:41:70:38:64:82:30:a6:5a:63:ef:27:43:34:2b:5b: f5:61:fb:df:66:b5:10:84:5f:9f:c4:54:ac:98:ed:29:d5:11: d0:8b:56:e2:7b:67:41:89:c6:ca:66:ac:01:6b:b0:7c:c4:3c: f2:50:f9:3b:9a:6f:d0:5e:77:4d:8f:86:1d:4c:19:50:fb:6b: 5f:b0:87:ec:01:8f:d8:4d:71:05:22:4f:c1:9b:48:ee:72:fa: aa:40:1b:f3:5b:bf:c5:e1:f7:4f:5f:29:c8:8e:64:d0:c0:e9: f0:ac:32:bc:85:44:e7:94:b1:e4:b9:36:5a:ca:71:46:2b:fd: 69:1c:41:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE3NEUxMTAvBgNVBAUTKDcxODA3MzA5OEFGMDM5NkZEOEUzMzA5QTFCOUZCNkYz RUVCMTdBRTcwHhcNMjUxMTA0MTc1MDEyWhcNMjUxMTExMTc1MDEyWjAYMRYwFAYD VQQDEw02OTBhM2NkNS02MWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ZBfieP2JMaIoIRVb5Lg4txUIa2KG+bUKKROhFxgiKXsvZJrm7Uz+C63Hykn vpgsB6BjohpXU+cz0LseuH2tlInVfjtIqHHB9Ht1d9KoS2x1IX2/apl64Lix3VmM uBQhSHmAjK8y6kydrBeZi1s/aDmdEBbW/Qq6vHxHEQRstaANs9V+JTV30TbNyCvs T0Yd6yiZB3cY45redwGkXIgz6wtzkSrTpfAPpi239lfe6d8DDwsqTG2bFUZZRQH9 JLTf+IQtI1YcgwoxVpGzpiLeRtTCR3ieuvB9QR6RcVy7CY7rIMR6P2nSp/IvVsgk o6IJf6r6ER032gzPJGcQhy1eYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcDgYNz K7lsfdyRK++kJFxjiKesMB8GA1UdIwQYMBaAFHGAcwmK8Dlv2OMwmhuftvPusXrn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTc0RS81NEFBMTQ5Q0FB RjYxMUU5OUM1RUUyNTlDNEY5QUUwMi9jWUJ6Q1lyd09XX1k0ekNhRzUtMjgtNnhl dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NZQnpDWXJ3T1dfWTR6Q2FHNS0yOC02eGV1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTc0RS81NEFBMTQ5Q0FBRjYxMUU5OUM1RUUyNTlDNEY5QUUwMi9jWUJ6Q1lyd09X X1k0ekNhRzUtMjgtNnhldWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVRujYYEtBO6RjXB+htT692SP7PUI6FiIDeVNDOCVo4HysH0w2Bgmw XDJmjQXtHHlYBU0YkhoEjnIzh9HLa6qLFzTAWSBQi8+xx8KS3q8r6Ynu1020Ugwe NzdjevqiIAGtG8DuWfcfC7YODSA+QelILCrYjQjoFeIbSXJpAIDBa2xBcDhkgjCm WmPvJ0M0K1v1YfvfZrUQhF+fxFSsmO0p1RHQi1bie2dBicbKZqwBa7B8xDzyUPk7 mm/QXndNj4YdTBlQ+2tfsIfsAY/YTXEFIk/Bm0jucvqqQBvzW7/F4fdPXynIjmTQ wOnwrDK8hUTnlLHkuTZaynFGK/1pHEH1 -----END CERTIFICATE-----Generated at Wed Nov 5 17:58:31 2025 by rpki-client