$ rpki-client -vvf rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft File: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft (raw, json) Hash identifier: JNdHkJG1nltYq8x9xK8X1Qb6a4SXJeS6Z7VO+CyDRZs= Subject key identifier: CC:D5:2F:AE:84:B9:BD:33:C0:54:74:CC:7D:ED:EC:96:8D:21:42:97 Authority key identifier: B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD Certificate issuer: /CN=A911BE38/serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD Certificate serial: 0239 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft Manifest number: 0232 Signing time: Sun 19 Oct 2025 04:09:41 +0000 Manifest this update: Sun 19 Oct 2025 04:09:41 +0000 Manifest next update: Sun 26 Oct 2025 04:09:41 +0000 Files and hashes: 1: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl (hash: LXKo24ZvXXp5XDVWNrlYmKaooOhqlvoi4urOOHNCgyc=) 2: 59DD05DA541E11EDB324CE7DC4F9AE02.roa (hash: uRdIMNdIglfdteGkf069/isP402avOmjbNb7y/lUw5k=) 3: 417DA2566D5E11EE831C802AC4F9AE02.roa (hash: N73Qn6fYVAUW9KUPlhOzNYAivlJPaPply2UAI5lOlWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:09:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 569 (0x239) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BE38, serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD Validity Not Before: Oct 19 04:09:41 2025 GMT Not After : Oct 26 04:09:41 2025 GMT Subject: CN=68f46485-eb05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:dc:c8:83:5d:7e:67:aa:95:9d:f5:a3:7b:af: 80:7a:12:eb:87:f0:e3:cb:9e:1d:25:e6:64:74:86: 04:5c:d5:44:19:d6:3f:ef:6a:15:1d:17:8f:56:43: d2:f6:b3:e9:34:6b:1c:fd:15:f7:e2:a2:04:ba:ee: 34:ac:06:42:c5:32:b8:36:32:1b:7b:89:d3:44:d6: d9:b9:26:9f:7f:35:ca:53:03:f8:fd:58:7d:2d:3b: 5f:96:7c:92:07:28:27:0d:d3:aa:84:80:dc:8d:8e: f5:fa:a7:a0:8f:42:72:f4:26:f5:fd:cb:38:45:d8: 77:2f:e3:7f:3a:97:4e:f6:9d:ab:0e:12:a3:11:3d: 7a:f8:e1:6a:73:54:f0:60:f0:67:e5:ac:1e:af:49: b8:e3:ab:60:62:26:8d:d3:c4:f7:9f:bd:4a:1d:a1: 3c:c5:73:d9:4f:82:71:9c:8e:0a:c1:c6:c5:c3:af: 26:2e:75:7d:cb:34:21:ee:e1:b4:93:64:f6:0d:69: 8d:0c:a1:6a:8e:f0:34:99:36:39:dc:9a:eb:4a:47: eb:0d:22:13:f8:0f:3e:4e:94:a7:06:9c:4e:44:92: 35:d6:b7:0e:5a:57:12:df:7a:6e:aa:5d:11:70:bd: 48:1e:60:f9:35:13:93:f9:a0:94:ea:e6:01:2e:48: b0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D5:2F:AE:84:B9:BD:33:C0:54:74:CC:7D:ED:EC:96:8D:21:42:97 X509v3 Authority Key Identifier: keyid:B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:39:8a:95:7f:42:ac:18:20:6c:8e:78:c8:94:ba:8a:77:27: 96:45:f4:99:fa:e9:b0:67:54:b4:17:32:69:90:30:0f:eb:ac: 49:01:17:18:36:8f:c7:16:d1:50:95:77:23:ba:4e:10:d0:e1: 94:3c:2c:d0:6a:6c:44:5b:52:84:5f:b5:7c:12:2f:bf:d0:33: 03:fb:74:8c:02:8e:11:ef:2e:55:53:4f:e0:a2:5c:2c:c8:b9: 5c:13:9d:7f:84:d6:e3:f0:80:9a:b8:67:25:17:76:f1:c4:90: f7:41:21:80:8b:57:39:e5:53:d8:86:c0:c9:6e:31:ed:c1:bd: 26:7b:e9:72:32:a0:33:8a:c1:c5:03:2b:6e:cd:63:81:fd:5a: 82:56:bc:01:dc:67:2a:a1:90:6e:2b:6d:53:3e:1a:cc:56:d8: 8f:89:db:5f:ee:11:15:15:4f:b1:73:9f:f9:3f:8f:59:a9:c7: 69:69:99:b8:69:e3:fb:c5:8d:e2:74:44:bc:84:c9:43:51:ac: d0:88:27:48:81:4a:18:bd:70:5d:1b:9d:ec:bb:d2:dc:79:e0: 01:0b:91:75:fb:11:aa:06:b8:1e:35:d3:86:3b:9a:4d:b4:9e: 74:49:ae:fe:fd:59:dc:4b:1a:c5:6b:0b:40:ff:e0:6d:33:11: 0a:a9:58:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJFMzgxMTAvBgNVBAUTKEIxOEM0Mzc0MzQ2NjkyMURCMDQyNUU3MzY3RDU1QzI4 RUU0QUYxQ0QwHhcNMjUxMDE5MDQwOTQxWhcNMjUxMDI2MDQwOTQxWjAYMRYwFAYD VQQDEw02OGY0NjQ4NS1lYjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdzIg11+Z6qVnfWje6+AehLrh/Djy54dJeZkdIYEXNVEGdY/72oVHRePVkPS 9rPpNGsc/RX34qIEuu40rAZCxTK4NjIbe4nTRNbZuSaffzXKUwP4/Vh9LTtflnyS BygnDdOqhIDcjY71+qegj0Jy9Cb1/cs4Rdh3L+N/OpdO9p2rDhKjET16+OFqc1Tw YPBn5awer0m446tgYiaN08T3n71KHaE8xXPZT4JxnI4KwcbFw68mLnV9yzQh7uG0 k2T2DWmNDKFqjvA0mTY53JrrSkfrDSIT+A8+TpSnBpxORJI11rcOWlcS33puql0R cL1IHmD5NROT+aCU6uYBLkiwpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMzVL66E ub0zwFR0zH3t7JaNIUKXMB8GA1UdIwQYMBaAFLGMQ3Q0ZpIdsEJec2fVXCjuSvHN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkUzOC82REEyRDlCMjU0 MUIxMUVEQkVCQTRBNTBDNEY5QUUwMi9zWXhEZERSbWtoMndRbDV6WjlWY0tPNUs4 YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NZeERkRFJta2gyd1FsNXpaOVZjS081SzhjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkUzOC82REEyRDlCMjU0MUIxMUVEQkVCQTRBNTBDNEY5QUUwMi9zWXhEZERSbWto MndRbDV6WjlWY0tPNUs4YzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcOYqVf0KsGCBsjnjIlLqKdyeWRfSZ+umwZ1S0FzJpkDAP66xJARcY No/HFtFQlXcjuk4Q0OGUPCzQamxEW1KEX7V8Ei+/0DMD+3SMAo4R7y5VU0/golws yLlcE51/hNbj8ICauGclF3bxxJD3QSGAi1c55VPYhsDJbjHtwb0me+lyMqAzisHF AytuzWOB/VqCVrwB3GcqoZBuK21TPhrMVtiPidtf7hEVFU+xc5/5P49ZqcdpaZm4 aeP7xY3idES8hMlDUazQiCdIgUoYvXBdG53su9LceeABC5F1+xGqBrgeNdOGO5pN tJ50Sa7+/VncSxrFawtA/+BtMxEKqVgE -----END CERTIFICATE-----Generated at Tue Oct 21 05:53:07 2025 by rpki-client