$ rpki-client -vvf rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft File: aMIYjATCDkkjq7YttIckmDVLSv0.mft (raw, json) Hash identifier: psgg7lRgt7V7981bejK45YyQ+WtYRJmlTSQ7c5dFfrg= Subject key identifier: 3E:C1:C4:AC:A8:C9:94:8F:A8:8E:FA:07:9D:36:3B:5F:91:C6:DA:1B Authority key identifier: 68:C2:18:8C:04:C2:0E:49:23:AB:B6:2D:B4:87:24:98:35:4B:4A:FD Certificate issuer: /CN=A911750B/serialNumber=68C2188C04C20E4923ABB62DB4872498354B4AFD Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft Manifest number: 44 Signing time: Sun 19 Oct 2025 10:51:30 +0000 Manifest this update: Sun 19 Oct 2025 10:51:29 +0000 Manifest next update: Sun 26 Oct 2025 10:51:29 +0000 Files and hashes: 1: aMIYjATCDkkjq7YttIckmDVLSv0.crl (hash: DzNo/w0J+3nhgQvgaek1PT1AZJqClyfFn+WxxMFGWOY=) 2: CC9D872A468D11F0A82C5E5EC4F9AE02.roa (hash: WRJujiiFl5+2lSEzqzn6bhm3g2H9MHSY7ug8yl3Oc8g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.crl rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:51:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911750B, serialNumber=68C2188C04C20E4923ABB62DB4872498354B4AFD Validity Not Before: Oct 19 10:51:29 2025 GMT Not After : Oct 26 10:51:29 2025 GMT Subject: CN=68f4c2b2-f259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:05:5c:16:04:50:61:a7:ca:4a:de:60:3c:ba: ee:3c:08:41:28:ae:31:26:76:03:8b:1e:0e:af:b1: c2:7e:b3:fe:92:14:5e:a4:6e:db:10:57:b2:41:a9: 05:61:cb:b4:bf:2a:0f:ed:7d:ab:1e:64:11:4d:f4: 64:3c:12:26:f1:16:3d:43:b7:d2:2f:6c:0e:14:5d: 6e:02:76:24:13:74:26:2c:8f:af:db:19:fc:c3:31: 7e:6b:24:d2:7e:9a:9a:85:89:69:cf:1c:2f:5f:6a: 66:2b:dd:a5:30:28:54:2d:cd:ce:dc:48:bb:90:54: 93:0f:55:7a:ba:2a:ba:80:42:52:8d:f8:ad:3c:3d: 54:99:ef:c8:b0:ba:97:bc:4f:b8:70:3c:a0:bb:f1: 44:f7:f4:d6:28:f4:a9:29:74:25:9d:5e:87:46:6e: 0b:0e:43:81:f5:6d:41:07:9b:d8:33:c2:74:be:b8: 56:ba:c5:29:60:f2:a6:de:2a:53:33:32:15:dd:a9: ff:13:48:3e:d5:31:35:55:70:a1:a6:e1:9f:59:35: 0e:62:20:f5:23:84:73:0e:56:08:7a:15:dc:00:8a: b4:b8:a5:7f:b7:58:6a:6e:3d:b7:d3:be:4b:32:10: f7:f2:e9:63:a6:7f:b2:6c:f6:7d:46:cf:3a:3f:c9: 63:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C1:C4:AC:A8:C9:94:8F:A8:8E:FA:07:9D:36:3B:5F:91:C6:DA:1B X509v3 Authority Key Identifier: keyid:68:C2:18:8C:04:C2:0E:49:23:AB:B6:2D:B4:87:24:98:35:4B:4A:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:85:74:95:83:84:07:88:fb:22:c8:78:1e:96:f9:f6:30:3d: a5:e9:14:6d:cf:76:ce:d7:5c:c0:7a:49:1a:98:3e:e1:59:5c: e4:10:4b:6b:f6:2e:b3:95:bb:91:05:1d:0b:f2:2e:24:02:f1: 46:1c:b0:94:13:d1:a3:cd:54:45:99:a5:49:b2:24:1c:34:4f: 81:6d:82:89:bb:1d:72:1a:72:5f:82:0c:e5:56:fd:ed:14:37: 4c:94:d7:7e:22:f2:da:01:38:ad:fe:0a:91:e3:b1:d5:ea:60: 59:65:08:e6:d1:14:6a:96:0e:ab:35:cb:db:e6:7f:2e:a8:8b: da:3d:72:9c:da:71:dc:49:b5:cc:66:2d:eb:b2:5d:a2:84:f0: 33:44:d8:08:06:87:a7:63:dd:8c:42:57:9e:0a:32:d6:51:f1: 07:da:38:4c:0e:da:a3:d3:81:f4:a8:bc:39:84:0c:2d:2f:14: 54:bb:c6:8b:5b:9e:5e:3c:1f:b5:43:84:0c:59:bf:27:b6:19: 74:a1:76:29:ef:8e:96:81:0b:35:41:0c:55:99:63:a3:1b:2d: 4f:8c:d1:d4:ce:52:12:3e:0d:61:ff:0f:15:00:08:fa:3c:b0: 6e:da:01:34:8d:2b:b3:2d:74:b0:67:41:75:68:62:be:ae:f0: cc:b4:fb:3c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NzUwQjExMC8GA1UEBRMoNjhDMjE4OEMwNEMyMEU0OTIzQUJCNjJEQjQ4NzI0OTgz NTRCNEFGRDAeFw0yNTEwMTkxMDUxMjlaFw0yNTEwMjYxMDUxMjlaMBgxFjAUBgNV BAMTDTY4ZjRjMmIyLWYyNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2BVwWBFBhp8pK3mA8uu48CEEorjEmdgOLHg6vscJ+s/6SFF6kbtsQV7JBqQVh y7S/Kg/tfaseZBFN9GQ8EibxFj1Dt9IvbA4UXW4CdiQTdCYsj6/bGfzDMX5rJNJ+ mpqFiWnPHC9famYr3aUwKFQtzc7cSLuQVJMPVXq6KrqAQlKN+K08PVSZ78iwupe8 T7hwPKC78UT39NYo9KkpdCWdXodGbgsOQ4H1bUEHm9gzwnS+uFa6xSlg8qbeKlMz MhXdqf8TSD7VMTVVcKGm4Z9ZNQ5iIPUjhHMOVgh6FdwAirS4pX+3WGpuPbfTvksy EPfy6WOmf7Js9n1Gzzo/yWPlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPsHErKjJ lI+ojvoHnTY7X5HG2hswHwYDVR0jBBgwFoAUaMIYjATCDkkjq7YttIckmDVLSv0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3NTBCLzVCMUMxRkFFNDY4 QzExRjA4NEI2QTUzOUM0RjlBRTAyL2FNSVlqQVRDRGtranE3WXR0SWNrbURWTFN2 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYU1JWWpBVENEa2tqcTdZdHRJY2ttRFZMU3YwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 NTBCLzVCMUMxRkFFNDY4QzExRjA4NEI2QTUzOUM0RjlBRTAyL2FNSVlqQVRDRGtr anE3WXR0SWNrbURWTFN2MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKKFdJWDhAeI+yLIeB6W+fYwPaXpFG3Pds7XXMB6SRqYPuFZXOQQS2v2 LrOVu5EFHQvyLiQC8UYcsJQT0aPNVEWZpUmyJBw0T4Ftgom7HXIacl+CDOVW/e0U N0yU134i8toBOK3+CpHjsdXqYFllCObRFGqWDqs1y9vmfy6oi9o9cpzacdxJtcxm LeuyXaKE8DNE2AgGh6dj3YxCV54KMtZR8QfaOEwO2qPTgfSovDmEDC0vFFS7xotb nl48H7VDhAxZvye2GXShdinvjpaBCzVBDFWZY6MbLU+M0dTOUhI+DWH/DxUACPo8 sG7aATSNK7MtdLBnQXVoYr6u8My0+zw= -----END CERTIFICATE-----Generated at Mon Oct 20 18:26:03 2025 by rpki-client