$ rpki-client -vvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft File: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft (raw, json) Hash identifier: INGlbRwcvpoFdttNau/XkELx9nAqITcFXFfHPdJD1NA= Subject key identifier: A3:F1:10:21:7C:C0:87:82:21:5E:7F:18:D3:CE:81:FB:C4:DD:B7:87 Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C Certificate issuer: /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Certificate serial: 023B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft Manifest number: 021A Signing time: Sun 19 Oct 2025 04:31:52 +0000 Manifest this update: Sun 19 Oct 2025 04:31:52 +0000 Manifest next update: Sun 26 Oct 2025 04:31:52 +0000 Files and hashes: 1: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl (hash: dhysEv8D8NEgRW5rMu8nT4cSEe1ihS2S3/IXlRpQQlA=) 2: E260EBC4914011EDABD5F778C4F9AE02.roa (hash: ieGx5NwyYQJ4P+cWYrdmLdfua1T4xQkG1QlYm44YGuI=) 3: E1D3A69C914011EDABD5F778C4F9AE02.roa (hash: l7RVqMwsQP+9xoPqxUjrdLeHKAHmKPEPtw0sLICnu70=) 4: 7606086E914611ED8DE00A16C4F9AE02.roa (hash: hpbgzGpeyu8RgvOZ/gDqbosdneW/3yUsLvzIbPJJbgI=) 5: C3E640EE917811ED904ACF83C4F9AE02.roa (hash: U1JZUMbZcbonZCdC7TOrqHH67lPPcra0baMZ+HxHTq0=) 6: E07C4E34914011EDABD5F778C4F9AE02.roa (hash: yq9F1kGLoVyjrkyUECiqJ2bBsjfNg/O48zntGXKXjfA=) 7: E137AAE4914011EDABD5F778C4F9AE02.roa (hash: 7GFXCtaT3I6JbgFcVp9k1/EsFIeLns+26mNrxLbyEic=) 8: C3481400917811ED904ACF83C4F9AE02.roa (hash: AsDGm3VcGz1RYmwwFN/U13xvQEyWavpIqYrnGKd5AJQ=) 9: 18498E84AA4911F0909AC335C4F9AE02.roa (hash: NJcFMzzhVnORdTmRL0FyfpGdYHwoBdJ6pEPPAOVism8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 571 (0x23b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E9B6, serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Validity Not Before: Oct 19 04:31:52 2025 GMT Not After : Oct 26 04:31:52 2025 GMT Subject: CN=68f469b8-aad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e4:40:da:74:ab:fe:22:5b:22:15:7c:78:2a: 3b:d2:7d:d1:8e:28:3f:e6:f5:32:00:c5:de:d7:df: 28:13:81:07:de:51:c8:11:6a:77:c9:4e:85:2e:e1: e2:e3:a1:8d:48:8d:67:3a:ae:a0:81:2b:74:cd:cf: d8:63:a3:a2:79:57:1b:e8:ff:07:af:6e:37:77:8a: b0:f7:f7:ec:b4:05:91:93:33:ac:81:98:0f:86:bd: f6:be:3f:25:6b:be:bc:52:e3:26:7b:ff:12:0d:56: c2:34:fb:59:4e:11:e5:98:9c:0d:c9:7a:5f:c5:1e: 65:03:11:9d:b5:fe:5e:1b:8b:46:20:97:87:c1:25: 4c:4c:ec:d1:73:cf:a4:45:58:1d:c5:ea:04:8c:47: 9e:4b:b3:2e:64:60:69:e4:d0:d0:25:ba:b4:88:03: c5:c8:54:b4:5f:1e:11:f8:42:17:b6:5f:54:11:61: 00:5c:c2:8a:d9:c8:95:5b:6f:91:7f:e8:cc:87:7e: 89:08:a4:75:8f:e4:0d:d9:4a:37:4b:9d:14:de:2a: eb:27:03:ff:3b:3c:56:70:f4:56:c3:65:11:8a:66: 82:b2:75:4a:21:24:97:8f:70:cc:ad:dd:5b:97:eb: 04:61:14:a8:74:e1:cd:68:11:d5:49:5e:8b:91:97: 4e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F1:10:21:7C:C0:87:82:21:5E:7F:18:D3:CE:81:FB:C4:DD:B7:87 X509v3 Authority Key Identifier: keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:05:f5:f3:5f:36:e5:46:4a:76:c1:12:0c:47:2d:eb:4b:fc: 6f:14:86:41:f5:d6:01:ec:1a:f6:e1:30:ef:1c:e0:2f:c9:e1: a4:b0:6b:80:98:73:b9:91:3f:bd:7e:07:22:c2:7c:52:ea:83: e7:5c:49:b6:4a:88:9b:19:41:77:3a:27:df:80:bd:fb:ff:03: d2:b3:85:9a:3a:69:96:ba:42:58:ff:69:af:fe:19:77:dd:20: d4:48:13:ea:14:52:9f:c2:99:70:37:a4:4b:ef:75:5c:87:cb: d2:8d:74:58:20:b5:01:e8:d8:5c:73:40:e6:44:ab:8a:39:63: 9b:c7:f1:44:de:2b:73:f8:58:e5:26:f8:42:d5:d4:c2:fa:80: cd:66:3f:79:0a:c0:2b:af:13:7f:a4:2f:c2:ce:5a:54:a2:de: 0b:6c:9a:b0:e4:10:02:a7:25:cc:e2:9a:3a:ff:6c:91:f8:6a: d8:c3:b4:5e:53:b3:65:7c:34:82:bd:5b:99:50:54:ef:1e:65: 50:ce:90:5d:08:d6:7b:a5:93:13:d1:d7:cc:54:24:8a:92:c4: 54:78:4c:c4:75:cb:a6:35:9c:b0:85:5d:77:ad:03:d5:6f:70: 6a:22:0c:cc:9e:8f:80:f2:d5:17:dc:29:27:a9:a2:b8:22:8f: d4:12:27:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU5QjYxMTAvBgNVBAUTKDJFOENCQjhDMjYwMEM2QTA5OEM5NThCOTY0QzMyRENC MThCODAzNUMwHhcNMjUxMDE5MDQzMTUyWhcNMjUxMDI2MDQzMTUyWjAYMRYwFAYD VQQDEw02OGY0NjliOC1hYWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyORA2nSr/iJbIhV8eCo70n3Rjig/5vUyAMXe198oE4EH3lHIEWp3yU6FLuHi 46GNSI1nOq6ggSt0zc/YY6OieVcb6P8Hr243d4qw9/fstAWRkzOsgZgPhr32vj8l a768UuMme/8SDVbCNPtZThHlmJwNyXpfxR5lAxGdtf5eG4tGIJeHwSVMTOzRc8+k RVgdxeoEjEeeS7MuZGBp5NDQJbq0iAPFyFS0Xx4R+EIXtl9UEWEAXMKK2ciVW2+R f+jMh36JCKR1j+QN2Uo3S50U3irrJwP/OzxWcPRWw2URimaCsnVKISSXj3DMrd1b l+sEYRSodOHNaBHVSV6LkZdOQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKPxECF8 wIeCIV5/GNPOgfvE3beHMB8GA1UdIwQYMBaAFC6Mu4wmAMagmMlYuWTDLcsYuANc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTlCNi83OTE4Q0IwQzdG RjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhxQ1l5Vmk1Wk1NdHl4aTRB MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xveTdqQ1lBeHFDWXlWaTVaTU10eXhpNEExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTlCNi83OTE4Q0IwQzdGRjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhx Q1l5Vmk1Wk1NdHl4aTRBMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByBfXzXzblRkp2wRIMRy3rS/xvFIZB9dYB7Br24TDvHOAvyeGksGuA mHO5kT+9fgciwnxS6oPnXEm2SoibGUF3OiffgL37/wPSs4WaOmmWukJY/2mv/hl3 3SDUSBPqFFKfwplwN6RL73Vch8vSjXRYILUB6Nhcc0DmRKuKOWObx/FE3itz+Fjl JvhC1dTC+oDNZj95CsArrxN/pC/CzlpUot4LbJqw5BACpyXM4po6/2yR+GrYw7Re U7NlfDSCvVuZUFTvHmVQzpBdCNZ7pZMT0dfMVCSKksRUeEzEdcumNZywhV13rQPV b3BqIgzMno+A8tUX3CknqaK4Io/UEiey -----END CERTIFICATE-----Generated at Tue Oct 21 01:01:17 2025 by rpki-client