$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft File: ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft (raw, json) Hash identifier: h6Iegzoj5eRtwaMh+beAR55RMytsnnf4ZS+Ojkn+9tk= Subject key identifier: 8A:8E:12:67:19:F0:AB:A2:23:04:AF:74:24:17:B2:D1:05:69:45:6B Authority key identifier: AF:2E:E0:44:12:35:6A:BF:D8:E1:9A:E2:C1:B2:2A:73:7C:DF:5E:9E Certificate issuer: /CN=A9128C33/serialNumber=AF2EE04412356ABFD8E19AE2C1B22A737CDF5E9E Certificate serial: 016D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft Manifest number: 0163 Signing time: Sun 19 Oct 2025 06:48:18 +0000 Manifest this update: Sun 19 Oct 2025 06:48:18 +0000 Manifest next update: Sun 26 Oct 2025 06:48:18 +0000 Files and hashes: 1: ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl (hash: EPsbjLroSQyTED4dupiFJJlDwX9bNyN4UynHXleeBUw=) 2: 813EDCA4137E11EF9969A86BC4F9AE02.roa (hash: YgNQfKH2j9vPQAWdAUFYDmXhZo5ythnv/oTPT+Ay1+4=) 3: 210A4EBAC0F211EE99FFBA21C4F9AE02.roa (hash: fOjJ/Gc3Xo61GkkgaAWGTG7vIfdk8OnS5/7uboXrlc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:48:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128C33, serialNumber=AF2EE04412356ABFD8E19AE2C1B22A737CDF5E9E Validity Not Before: Oct 19 06:48:18 2025 GMT Not After : Oct 26 06:48:18 2025 GMT Subject: CN=68f489b2-41bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:86:41:2a:7a:fc:4f:46:0b:bf:1a:7b:44:56: d0:98:94:1a:72:12:2c:bf:ce:3f:84:96:36:e9:8a: 85:2c:ba:4b:96:89:6d:33:37:69:ac:22:20:a0:dc: d2:b3:be:ec:c7:d3:d7:3c:7b:b7:cd:f6:0d:53:62: a7:a0:80:16:01:43:65:da:df:ce:18:ac:13:f2:91: 3b:81:24:7a:a3:2a:6b:61:f9:7e:d9:8b:cf:5d:d1: 1c:9e:e1:28:3f:47:0f:97:6e:9c:fc:6a:88:33:0d: 34:78:39:d7:90:46:86:90:6d:4a:d8:96:6f:c7:54: 7c:cf:1a:80:e9:b8:a9:2b:e0:7a:90:5e:30:f5:26: c0:a0:13:e8:ac:44:20:d1:9d:23:a6:8a:ec:e3:d6: c5:78:df:77:34:58:32:7e:41:0f:33:38:b1:bc:8e: 65:0a:14:3c:83:43:e3:ac:b4:8b:94:e5:e8:1b:c1: e9:18:b5:b7:21:7b:44:df:aa:c0:f1:20:7d:90:8b: 1e:b9:22:50:c6:93:72:63:e5:f5:f7:fc:26:8b:b9: 71:63:e0:e6:e1:29:ff:3e:c0:65:a1:52:15:c1:d3: c1:ac:7d:f6:f8:fb:6a:45:18:d1:ff:6a:74:db:57: 3c:93:01:de:d8:72:c1:4a:1a:95:53:0f:8f:81:cf: bc:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8E:12:67:19:F0:AB:A2:23:04:AF:74:24:17:B2:D1:05:69:45:6B X509v3 Authority Key Identifier: keyid:AF:2E:E0:44:12:35:6A:BF:D8:E1:9A:E2:C1:B2:2A:73:7C:DF:5E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:0d:12:6f:fa:ca:23:61:0e:87:f4:b4:02:2e:18:f4:c6:ed: d4:bb:e6:85:a5:06:c5:53:b0:01:41:cf:a4:c5:37:fb:54:be: 25:bf:ca:66:7e:b8:ef:89:17:62:70:ac:11:68:d2:fa:51:c5: 8d:e2:10:4f:7b:b8:af:88:52:69:45:ce:3f:aa:12:7c:3b:53: 58:af:ae:6e:4a:3e:08:ea:1e:02:be:6a:1d:61:97:a4:cf:c2: 6b:ed:c3:8b:d3:ed:54:73:cf:fc:ee:86:67:c4:35:d6:e6:8b: b9:c7:a0:a4:0a:7b:ad:d8:30:74:18:3b:9a:e2:35:1a:3c:95: d5:a7:47:de:bf:44:30:94:54:02:51:b0:b6:0c:ae:e6:c5:9e: 1e:f1:34:7e:80:1d:be:22:72:0d:48:97:80:a0:9b:d1:a6:fe: be:21:01:b3:b4:1b:77:9c:e2:71:f0:4a:b1:5e:3f:26:42:cf: 1c:4d:e4:e4:da:cb:ac:5a:1e:c7:96:ef:51:a5:27:1b:98:18: 00:0c:fc:67:ba:b9:ee:b7:a2:f0:d6:bd:9e:27:aa:12:ec:bd: 96:65:32:65:4e:61:cf:ef:89:9b:af:44:a7:aa:49:05:18:13: 54:e7:4b:e6:fe:7f:4c:1b:83:7f:85:5c:ce:e7:11:9f:b0:34: 20:b5:03:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhDMzMxMTAvBgNVBAUTKEFGMkVFMDQ0MTIzNTZBQkZEOEUxOUFFMkMxQjIyQTcz N0NERjVFOUUwHhcNMjUxMDE5MDY0ODE4WhcNMjUxMDI2MDY0ODE4WjAYMRYwFAYD VQQDEw02OGY0ODliMi00MWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA04ZBKnr8T0YLvxp7RFbQmJQachIsv84/hJY26YqFLLpLloltMzdprCIgoNzS s77sx9PXPHu3zfYNU2KnoIAWAUNl2t/OGKwT8pE7gSR6oyprYfl+2YvPXdEcnuEo P0cPl26c/GqIMw00eDnXkEaGkG1K2JZvx1R8zxqA6bipK+B6kF4w9SbAoBPorEQg 0Z0jpors49bFeN93NFgyfkEPMzixvI5lChQ8g0PjrLSLlOXoG8HpGLW3IXtE36rA 8SB9kIseuSJQxpNyY+X19/wmi7lxY+Dm4Sn/PsBloVIVwdPBrH32+PtqRRjR/2p0 21c8kwHe2HLBShqVUw+Pgc+8EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqOEmcZ 8KuiIwSvdCQXstEFaUVrMB8GA1UdIwQYMBaAFK8u4EQSNWq/2OGa4sGyKnN8316e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEMzMy85NTZDQjA4Njk4 MUIxMUVFQUIwRkM5MjJDNEY5QUUwMi9yeTdnUkJJMWFyX1k0WnJpd2JJcWMzemZY cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J5N2dSQkkxYXJfWTRacml3YklxYzN6ZlhwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEMzMy85NTZDQjA4Njk4MUIxMUVFQUIwRkM5MjJDNEY5QUUwMi9yeTdnUkJJMWFy X1k0WnJpd2JJcWMzemZYcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLDRJv+sojYQ6H9LQCLhj0xu3Uu+aFpQbFU7ABQc+kxTf7VL4lv8pm frjviRdicKwRaNL6UcWN4hBPe7iviFJpRc4/qhJ8O1NYr65uSj4I6h4CvmodYZek z8Jr7cOL0+1Uc8/87oZnxDXW5ou5x6CkCnut2DB0GDua4jUaPJXVp0fev0QwlFQC UbC2DK7mxZ4e8TR+gB2+InINSJeAoJvRpv6+IQGztBt3nOJx8EqxXj8mQs8cTeTk 2susWh7Hlu9RpScbmBgADPxnurnut6Lw1r2eJ6oS7L2WZTJlTmHP74mbr0SnqkkF GBNU50vm/n9MG4N/hVzO5xGfsDQgtQMC -----END CERTIFICATE-----Generated at Tue Oct 21 00:38:28 2025 by rpki-client