$ rpki-client -vvf rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft File: y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft (raw, json) Hash identifier: s9VpZKpiGErL1m3Pn9EQpSDiU3naVBRI9AITxVb0L7Q= Subject key identifier: 0F:CD:21:98:37:F2:0A:F3:7B:B5:76:DA:39:13:B6:A6:78:42:09:5C Authority key identifier: CB:93:F5:99:B0:5E:3F:CB:7B:21:24:B6:FC:3F:99:CC:36:20:F8:47 Certificate issuer: /CN=A913406B/serialNumber=CB93F599B05E3FCB7B2124B6FC3F99CC3620F847 Certificate serial: 043D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft Manifest number: 0437 Signing time: Sun 19 Oct 2025 02:10:21 +0000 Manifest this update: Sun 19 Oct 2025 02:10:20 +0000 Manifest next update: Sun 26 Oct 2025 02:10:20 +0000 Files and hashes: 1: y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl (hash: qAF97XWmeuLfJzmZ6g6Eq6VNPO5S1nrlIMC/sQJKcE4=) 2: ECE5D72C7C2D11EC8CAD9662C4F9AE02.roa (hash: QmVKtjuHtyLrViuDr1AXIV5G+8O7wZgZ1wAX25Be+OQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1085 (0x43d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913406B, serialNumber=CB93F599B05E3FCB7B2124B6FC3F99CC3620F847 Validity Not Before: Oct 19 02:10:20 2025 GMT Not After : Oct 26 02:10:20 2025 GMT Subject: CN=68f4488d-1bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:19:53:48:af:41:e3:e0:5b:26:c7:c3:2e:38: 55:e4:2f:85:82:ca:48:5a:3c:01:b6:b4:43:13:ea: 7e:f1:aa:86:31:b8:98:99:7d:41:ed:5c:55:12:33: 79:7f:78:d3:f2:e5:d9:45:54:02:24:78:de:04:3e: ac:e0:f8:21:70:e6:71:35:e3:62:4b:05:3d:07:42: db:34:8b:b9:ea:6b:0c:ac:22:84:39:2d:14:29:c9: ff:e1:ac:6d:8d:c8:fe:30:6e:ce:ac:80:e8:d0:59: 56:cf:b5:47:8d:b8:73:65:4d:39:00:4a:b5:62:b2: b0:d0:8c:f9:61:48:61:ff:4b:67:f5:76:3c:f1:ee: d5:79:a8:d5:2c:d8:c1:65:eb:bd:bb:96:a3:89:4f: bd:b3:e5:2a:09:49:42:97:59:11:ad:41:b7:57:21: 3a:4a:fb:67:37:04:a5:70:69:30:ed:e3:72:93:4c: a4:be:e5:ea:53:1b:e7:0a:28:2d:e6:a6:a7:ad:2d: ca:a3:09:b4:7c:b3:b1:e3:1e:c0:ab:1e:04:61:96: fe:63:b8:e3:a7:e7:e2:8f:17:a7:77:76:af:90:a1: 3d:ba:a5:ab:33:49:16:d8:18:54:d6:71:d8:a5:54: 97:31:e0:7f:1b:58:7f:64:c6:d8:60:7b:5f:57:65: b9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:CD:21:98:37:F2:0A:F3:7B:B5:76:DA:39:13:B6:A6:78:42:09:5C X509v3 Authority Key Identifier: keyid:CB:93:F5:99:B0:5E:3F:CB:7B:21:24:B6:FC:3F:99:CC:36:20:F8:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:85:26:04:96:60:de:3d:b6:b6:e7:a7:17:b9:f8:7a:79:54: 17:28:36:64:a8:a6:cd:40:3f:99:a5:d9:19:ee:f2:0f:39:75: e0:5b:b1:33:cc:3b:48:0f:15:b7:5d:4c:e3:74:ee:98:72:eb: 31:84:92:6d:a3:b3:27:db:5e:20:d7:3c:2f:d2:9a:25:14:7f: 47:44:b3:0c:7d:a4:cf:52:bf:70:34:f0:fd:2e:d2:f9:e4:22: 41:90:3b:54:31:39:f3:48:f5:3e:40:88:10:58:be:19:2b:92: 70:bc:01:03:60:7c:91:8c:bf:9c:f2:84:b3:81:da:40:9c:f0: bc:6e:e4:01:83:ff:e0:2b:d0:fb:b8:aa:29:70:0a:01:40:99: c3:48:11:58:c6:79:91:ac:46:95:6b:e0:f1:93:e9:a9:06:67: 0f:a2:74:72:3b:9b:9e:a3:c3:5c:c6:0f:46:6f:9e:08:fc:c3: 65:a3:97:a4:8b:00:bf:94:3d:07:40:f5:c2:8c:30:14:22:a5: 12:75:c2:a8:d4:94:13:1d:e9:e4:a1:47:86:77:72:f6:8f:ef: 8a:af:32:0b:60:f2:56:b6:e1:a1:5d:20:f2:2e:20:bb:b3:fb: ce:44:3b:6c:aa:69:1f:77:5a:b8:05:c1:8c:f5:2b:7f:09:70: b2:6a:b5:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQwNkIxMTAvBgNVBAUTKENCOTNGNTk5QjA1RTNGQ0I3QjIxMjRCNkZDM0Y5OUND MzYyMEY4NDcwHhcNMjUxMDE5MDIxMDIwWhcNMjUxMDI2MDIxMDIwWjAYMRYwFAYD VQQDEw02OGY0NDg4ZC0xYmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6BlTSK9B4+BbJsfDLjhV5C+FgspIWjwBtrRDE+p+8aqGMbiYmX1B7VxVEjN5 f3jT8uXZRVQCJHjeBD6s4PghcOZxNeNiSwU9B0LbNIu56msMrCKEOS0UKcn/4axt jcj+MG7OrIDo0FlWz7VHjbhzZU05AEq1YrKw0Iz5YUhh/0tn9XY88e7VeajVLNjB Zeu9u5ajiU+9s+UqCUlCl1kRrUG3VyE6SvtnNwSlcGkw7eNyk0ykvuXqUxvnCigt 5qanrS3Kowm0fLOx4x7Aqx4EYZb+Y7jjp+fijxend3avkKE9uqWrM0kW2BhU1nHY pVSXMeB/G1h/ZMbYYHtfV2W5fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/NIZg3 8grze7V22jkTtqZ4QglcMB8GA1UdIwQYMBaAFMuT9ZmwXj/LeyEktvw/mcw2IPhH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDA2Qi9ENjM4MjdBRTdD MjkxMUVDOEVFMzYxMERDNEY5QUUwMi95NVAxbWJCZVA4dDdJU1MyX0QtWnpEWWct RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k1UDFtYkJlUDh0N0lTUzJfRC1aekRZZy1FYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDA2Qi9ENjM4MjdBRTdDMjkxMUVDOEVFMzYxMERDNEY5QUUwMi95NVAxbWJCZVA4 dDdJU1MyX0QtWnpEWWctRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBchSYElmDePba256cXufh6eVQXKDZkqKbNQD+ZpdkZ7vIPOXXgW7Ez zDtIDxW3XUzjdO6YcusxhJJto7Mn214g1zwv0polFH9HRLMMfaTPUr9wNPD9LtL5 5CJBkDtUMTnzSPU+QIgQWL4ZK5JwvAEDYHyRjL+c8oSzgdpAnPC8buQBg//gK9D7 uKopcAoBQJnDSBFYxnmRrEaVa+Dxk+mpBmcPonRyO5ueo8Ncxg9Gb54I/MNlo5ek iwC/lD0HQPXCjDAUIqUSdcKo1JQTHenkoUeGd3L2j++KrzILYPJWtuGhXSDyLiC7 s/vORDtsqmkfd1q4BcGM9St/CXCyarWj -----END CERTIFICATE-----Generated at Mon Oct 20 13:51:23 2025 by rpki-client