$ rpki-client -vvf rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft File: bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft (raw, json) Hash identifier: QHjUDVHBOWbE2XZ99fjUwuCNMmvqnSJr4bisiuFVm3c= Subject key identifier: 17:39:10:2D:80:DD:17:C8:64:23:BD:EA:84:BA:77:E3:2C:98:CC:ED Authority key identifier: 6D:84:17:61:72:58:03:92:BA:2A:32:5F:71:7B:1E:CA:4F:0D:87:93 Certificate issuer: /CN=A913695E/serialNumber=6D84176172580392BA2A325F717B1ECA4F0D8793 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYQXYXJYA5K6KjJfcXseyk8Nh5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft Manifest number: 3C Signing time: Sun 19 Oct 2025 10:57:01 +0000 Manifest this update: Sun 19 Oct 2025 10:57:01 +0000 Manifest next update: Sun 26 Oct 2025 10:57:01 +0000 Files and hashes: 1: bYQXYXJYA5K6KjJfcXseyk8Nh5M.crl (hash: X6MsQQT427HCPQ+pGxaH2kGNjbe96q5/e7YY7DdVtyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.crl rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYQXYXJYA5K6KjJfcXseyk8Nh5M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913695E, serialNumber=6D84176172580392BA2A325F717B1ECA4F0D8793 Validity Not Before: Oct 19 10:57:01 2025 GMT Not After : Oct 26 10:57:01 2025 GMT Subject: CN=68f4c3fd-5fae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e1:50:d7:81:27:d1:42:a3:89:80:8d:87:f6: 85:72:cc:a7:ae:70:db:33:cc:f8:19:b8:f0:75:f7: fe:8c:66:11:96:79:6f:3d:3a:8f:d5:5f:6a:a2:8e: 8f:89:17:93:2f:8b:43:7a:45:cc:20:e6:b8:34:37: 4b:60:a9:d7:e4:20:9a:aa:4d:f8:2d:7b:8c:fe:10: df:44:a6:14:3f:68:5c:78:7c:ab:81:97:c2:1e:cf: 82:b9:4d:63:c3:6f:9a:3d:d1:1a:38:6f:64:12:7d: 79:50:89:d3:74:a3:0c:66:98:bb:cc:4a:f5:c0:50: 64:41:2a:5d:a5:18:eb:f3:1a:68:7f:c3:d6:0f:0a: 38:9c:39:56:10:90:a6:81:a7:62:60:80:79:c5:ad: c2:d8:00:5b:0a:e7:6a:6b:92:45:8d:d6:f2:90:e7: 89:9b:48:5f:89:28:5f:8a:98:c1:9e:1d:0f:33:ed: 19:f0:86:ca:d2:79:71:12:03:c1:67:83:af:de:a8: 50:a3:58:fd:7e:76:8a:c8:d0:7f:78:ba:eb:e4:03: 17:e1:4c:09:16:2c:34:6c:9d:ab:22:fa:48:0f:ef: c1:68:cc:9d:e0:12:55:d1:d8:e0:bd:ac:69:83:9f: a4:13:45:aa:e0:a4:ad:a7:22:dc:41:84:47:f1:c3: 0e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:39:10:2D:80:DD:17:C8:64:23:BD:EA:84:BA:77:E3:2C:98:CC:ED X509v3 Authority Key Identifier: keyid:6D:84:17:61:72:58:03:92:BA:2A:32:5F:71:7B:1E:CA:4F:0D:87:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYQXYXJYA5K6KjJfcXseyk8Nh5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:4b:de:0d:c5:49:e9:d0:51:6a:f5:2c:25:9f:0e:94:ec:5e: 7c:6b:95:c1:50:3c:1c:28:75:8a:3c:63:d6:bc:7b:92:34:29: fc:29:f0:db:62:37:81:6c:c1:33:d6:d2:1a:e2:8f:f2:b4:fa: c6:77:22:99:cd:99:75:93:c2:27:ba:c5:da:1d:c3:5e:1f:5b: 94:19:e3:d8:c4:45:77:d3:8a:ab:88:8e:6b:b4:66:bf:0c:5e: 19:64:47:6e:12:03:22:aa:b5:6e:50:c3:15:ab:24:a9:a2:0d: d6:f1:7b:c4:31:90:f0:de:e4:ca:78:0e:3f:b0:92:2f:e4:32: 54:ce:6f:91:b3:5a:22:ec:05:f3:6f:65:69:16:7d:a6:35:2d: e8:18:47:0b:e4:f5:88:8a:32:19:ce:a5:a4:77:8d:7d:c0:9e: 87:74:1b:44:0c:d7:93:b5:63:79:a4:3e:7b:4c:03:7e:b0:11: d5:47:70:b9:2e:f6:a4:c5:c5:a2:86:f5:05:5c:b4:8d:cf:8f: 7c:b4:ec:0b:44:b4:98:d3:e2:a6:9f:31:69:8e:01:ee:1c:3e: f6:c5:3c:f9:b8:30:fb:31:1f:4b:27:25:1b:8b:94:c7:64:06: 6a:d8:b0:50:95:24:fe:6a:47:2b:b0:db:ef:27:a8:04:37:e6: 9c:09:c0:a6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz Njk1RTExMC8GA1UEBRMoNkQ4NDE3NjE3MjU4MDM5MkJBMkEzMjVGNzE3QjFFQ0E0 RjBEODc5MzAeFw0yNTEwMTkxMDU3MDFaFw0yNTEwMjYxMDU3MDFaMBgxFjAUBgNV BAMTDTY4ZjRjM2ZkLTVmYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJ4VDXgSfRQqOJgI2H9oVyzKeucNszzPgZuPB19/6MZhGWeW89Oo/VX2qijo+J F5Mvi0N6Rcwg5rg0N0tgqdfkIJqqTfgte4z+EN9EphQ/aFx4fKuBl8Iez4K5TWPD b5o90Ro4b2QSfXlQidN0owxmmLvMSvXAUGRBKl2lGOvzGmh/w9YPCjicOVYQkKaB p2JggHnFrcLYAFsK52prkkWN1vKQ54mbSF+JKF+KmMGeHQ8z7RnwhsrSeXESA8Fn g6/eqFCjWP1+dorI0H94uuvkAxfhTAkWLDRsnasi+kgP78FozJ3gElXR2OC9rGmD n6QTRargpK2nItxBhEfxww5lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFzkQLYDd F8hkI73qhLp34yyYzO0wHwYDVR0jBBgwFoAUbYQXYXJYA5K6KjJfcXseyk8Nh5Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2OTVFL0YwQTFGRTUyNTM0 MDExRjA4Qzg2OTQ0MUM0RjlBRTAyL2JZUVhZWEpZQTVLNktqSmZjWHNleWs4Tmg1 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYllRWFlYSllBNUs2S2pKZmNYc2V5azhOaDVNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 OTVFL0YwQTFGRTUyNTM0MDExRjA4Qzg2OTQ0MUM0RjlBRTAyL2JZUVhZWEpZQTVL NktqSmZjWHNleWs4Tmg1TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADRL3g3FSenQUWr1LCWfDpTsXnxrlcFQPBwodYo8Y9a8e5I0Kfwp8Nti N4FswTPW0hrij/K0+sZ3IpnNmXWTwie6xdodw14fW5QZ49jERXfTiquIjmu0Zr8M XhlkR24SAyKqtW5QwxWrJKmiDdbxe8QxkPDe5Mp4Dj+wki/kMlTOb5GzWiLsBfNv ZWkWfaY1LegYRwvk9YiKMhnOpaR3jX3Anod0G0QM15O1Y3mkPntMA36wEdVHcLku 9qTFxaKG9QVctI3Pj3y07AtEtJjT4qafMWmOAe4cPvbFPPm4MPsxH0snJRuLlMdk BmrYsFCVJP5qRyuw2+8nqAQ35pwJwKY= -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:07 2025 by rpki-client