$ rpki-client -vvf rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft File: AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft (raw, json) Hash identifier: 57Fy2B0eot1x9wK3ng96Gx9g7FZyPPkkHpEWRIYxYTA= Subject key identifier: 68:E4:A7:D3:8E:DE:81:B6:6F:62:F3:DB:0A:47:12:6D:EE:3F:EF:B6 Authority key identifier: 00:96:1B:8F:63:AD:E9:D1:9F:3A:CF:42:83:3A:C5:D9:C9:C7:27:8F Certificate issuer: /CN=A912216A/serialNumber=00961B8F63ADE9D19F3ACF42833AC5D9C9C7278F Certificate serial: 10C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft Manifest number: 10C1 Signing time: Sat 18 Oct 2025 17:51:18 +0000 Manifest this update: Sat 18 Oct 2025 17:51:17 +0000 Manifest next update: Sat 25 Oct 2025 17:51:17 +0000 Files and hashes: 1: AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl (hash: kPxPAz8XCjAoOjFoVRB9cfzjMYTo0XiTAqTGQbrrb2g=) 2: 2A44CEFE311111E98C69B181C4F9AE02.roa (hash: 0SVk2cOfikrAvRDDJgb5TANBAXNNynzVUWZgXY+3hcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:51:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4297 (0x10c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912216A, serialNumber=00961B8F63ADE9D19F3ACF42833AC5D9C9C7278F Validity Not Before: Oct 18 17:51:17 2025 GMT Not After : Oct 25 17:51:17 2025 GMT Subject: CN=68f3d395-f09b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4d:d8:76:f8:34:2b:c6:f8:3d:98:7c:5c:ee: 67:d6:b7:63:a2:2c:e6:26:41:0d:be:41:7e:eb:6d: 8b:6b:07:4a:28:dd:6d:5f:e1:c3:9e:90:07:a5:3f: 93:d0:f7:57:9b:02:30:67:22:b8:62:63:a3:9e:70: e0:49:1b:39:7d:ea:8a:07:88:bf:52:f1:60:b2:5f: 2b:1e:3f:19:ac:3c:21:7b:00:1f:40:4c:f9:89:49: ae:d3:5a:39:42:2e:a1:8c:2a:61:76:02:d4:61:d3: 4c:b8:aa:b7:e6:26:a4:b7:14:1d:51:8c:50:ad:d7: e5:b5:3f:f5:87:98:0e:26:6a:f0:c7:1c:b5:4c:9f: cd:0f:a4:ed:df:99:43:2f:f7:c3:a1:82:a9:8f:c9: c1:7e:8d:ac:aa:e1:5d:fa:de:59:61:8e:01:23:0d: 42:23:f0:45:0b:03:b0:78:81:39:00:bf:92:c3:57: f6:ca:ea:3a:39:bb:ff:73:5f:c3:02:95:56:70:8c: 6f:ed:ba:53:cb:8c:4e:be:30:01:d0:a9:45:2f:1d: 72:44:ac:6a:36:6d:16:b6:60:cd:a2:ba:98:9d:0a: 1f:41:23:c2:54:54:da:fd:b2:a8:f2:31:2c:5f:69: 51:17:e6:38:f7:58:24:86:a7:85:2c:ac:00:7b:0f: 9d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E4:A7:D3:8E:DE:81:B6:6F:62:F3:DB:0A:47:12:6D:EE:3F:EF:B6 X509v3 Authority Key Identifier: keyid:00:96:1B:8F:63:AD:E9:D1:9F:3A:CF:42:83:3A:C5:D9:C9:C7:27:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:79:11:b7:a8:03:57:88:12:a4:4a:e9:9d:b1:54:fa:7a:e4: dc:b1:45:bb:4f:e8:b0:16:14:bb:44:92:bf:ea:f9:5a:ed:e9: c0:a1:fb:89:10:98:05:c9:d0:32:84:5f:de:2e:4c:a8:34:b8: 08:ff:23:43:c1:67:50:3e:3f:4c:c0:24:9d:61:84:3a:f0:7e: 6d:45:bd:7c:40:26:51:c9:4c:0f:11:4e:05:40:df:a4:b1:bd: 4b:5b:30:10:aa:ba:ed:44:8f:75:07:3f:03:21:66:e7:37:5d: b8:46:f6:8a:1d:6e:a5:ad:94:f0:0c:fe:62:5e:51:53:81:58: f3:3d:5d:2c:72:75:65:1d:2e:f3:2c:8a:8a:a9:8f:9e:3e:ff: 3b:73:15:57:a6:db:4d:a7:c5:a2:c1:f8:10:64:0b:0e:02:a1: 5b:88:cd:8c:bf:74:71:44:fc:38:5d:3e:87:7d:53:9e:e9:4f: 54:4e:de:83:a6:fc:12:2f:8f:ed:33:73:aa:39:80:1a:2f:a9: d2:78:31:87:8d:89:34:8c:d8:de:dd:82:00:ce:5c:83:e4:fd: ab:4a:56:2b:7f:8a:b7:88:4f:f4:60:7a:5e:8d:69:6a:93:96: 48:4e:89:f4:a3:f2:47:61:67:3a:2a:93:d2:71:c7:70:1b:b8: 56:0e:cd:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIxNkExMTAvBgNVBAUTKDAwOTYxQjhGNjNBREU5RDE5RjNBQ0Y0MjgzM0FDNUQ5 QzlDNzI3OEYwHhcNMjUxMDE4MTc1MTE3WhcNMjUxMDI1MTc1MTE3WjAYMRYwFAYD VQQDEw02OGYzZDM5NS1mMDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyE3Ydvg0K8b4PZh8XO5n1rdjoizmJkENvkF+622LawdKKN1tX+HDnpAHpT+T 0PdXmwIwZyK4YmOjnnDgSRs5feqKB4i/UvFgsl8rHj8ZrDwhewAfQEz5iUmu01o5 Qi6hjCphdgLUYdNMuKq35iaktxQdUYxQrdfltT/1h5gOJmrwxxy1TJ/ND6Tt35lD L/fDoYKpj8nBfo2squFd+t5ZYY4BIw1CI/BFCwOweIE5AL+Sw1f2yuo6Obv/c1/D ApVWcIxv7bpTy4xOvjAB0KlFLx1yRKxqNm0WtmDNorqYnQofQSPCVFTa/bKo8jEs X2lRF+Y491gkhqeFLKwAew+d0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjkp9OO 3oG2b2Lz2wpHEm3uP++2MB8GA1UdIwQYMBaAFACWG49jrenRnzrPQoM6xdnJxyeP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjE2QS9GQzUxQzlFODMx MEIxMUU5QkI4MkZFNzJDNEY5QUUwMi9BSlliajJPdDZkR2ZPczlDZ3pyRjJjbkhK NDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FKWWJqMk90NmRHZk9zOUNnenJGMmNuSEo0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjE2QS9GQzUxQzlFODMxMEIxMUU5QkI4MkZFNzJDNEY5QUUwMi9BSlliajJPdDZk R2ZPczlDZ3pyRjJjbkhKNDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMeRG3qANXiBKkSumdsVT6euTcsUW7T+iwFhS7RJK/6vla7enAofuJ EJgFydAyhF/eLkyoNLgI/yNDwWdQPj9MwCSdYYQ68H5tRb18QCZRyUwPEU4FQN+k sb1LWzAQqrrtRI91Bz8DIWbnN124RvaKHW6lrZTwDP5iXlFTgVjzPV0scnVlHS7z LIqKqY+ePv87cxVXpttNp8WiwfgQZAsOAqFbiM2Mv3RxRPw4XT6HfVOe6U9UTt6D pvwSL4/tM3OqOYAaL6nSeDGHjYk0jNje3YIAzlyD5P2rSlYrf4q3iE/0YHpejWlq k5ZITon0o/JHYWc6KpPSccdwG7hWDs1y -----END CERTIFICATE-----Generated at Mon Oct 20 17:55:06 2025 by rpki-client