$ rpki-client -vvf rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft File: CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft (raw, json) Hash identifier: Oaj1D2sLUOs3EuciWNeiYlOpiNrRHzcdlwvH3WIY8A0= Subject key identifier: 2D:00:43:3F:76:76:A6:A8:55:56:4B:ED:BB:AE:C6:DD:41:E6:4E:A9 Authority key identifier: 09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77 Certificate issuer: /CN=A913806E/serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477 Certificate serial: 07F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft Manifest number: 07F1 Signing time: Sat 18 Oct 2025 22:15:34 +0000 Manifest this update: Sat 18 Oct 2025 22:15:33 +0000 Manifest next update: Sat 25 Oct 2025 22:15:33 +0000 Files and hashes: 1: CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl (hash: DgSp9uJllZ8YR5tAqe1cRKFQBekD/asszv15hsNCiCI=) 2: 1AC2369A010911ECB732340DC4F9AE02.roa (hash: FLJlO0/U5xnVZ/RuP3SLCUdb/l/zTCs0DDA6x0gKds8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2040 (0x7f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913806E, serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477 Validity Not Before: Oct 18 22:15:33 2025 GMT Not After : Oct 25 22:15:33 2025 GMT Subject: CN=68f41186-ff10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b8:d9:10:ce:40:21:11:da:1e:4a:75:af:88: 12:b7:c4:6b:28:52:20:58:15:45:c9:5e:c4:f9:38: e1:b3:d9:1c:1f:f6:50:6d:3c:f0:b2:68:72:c0:48: 88:56:66:95:ff:95:bf:e9:f3:75:b2:31:54:07:3b: 3e:fd:2d:73:f0:db:86:fc:76:26:c7:69:c3:3e:41: ef:48:47:7e:0e:14:54:eb:7e:74:e3:cd:c8:35:d6: 50:95:60:76:8b:c6:07:c2:47:41:c1:32:30:ed:36: 9a:cc:33:ed:1e:c6:7d:8e:78:4d:ef:38:06:48:09: 76:20:c5:84:60:04:dd:a5:99:8a:a7:5b:a0:c9:dd: b3:9a:b0:29:77:4e:58:a8:76:c4:88:2e:e2:e5:0c: 3f:d7:8d:d0:11:62:c8:41:22:32:8b:86:d0:84:3d: 30:f9:67:99:da:ba:1d:93:3b:ad:6a:d7:4a:93:33: 6c:3a:d1:b6:f9:66:74:46:69:23:60:8f:e5:26:dd: 92:4a:c8:0d:9d:ff:65:24:db:ec:fa:3a:88:2e:d6: 98:ec:10:d2:21:6f:4b:ff:dc:5e:75:9a:2d:89:5e: 60:93:24:ad:d3:45:fd:7d:b7:13:07:1a:57:74:7b: 0f:e1:ce:35:fe:07:46:ee:00:81:25:f4:cc:7c:f1: ce:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:00:43:3F:76:76:A6:A8:55:56:4B:ED:BB:AE:C6:DD:41:E6:4E:A9 X509v3 Authority Key Identifier: keyid:09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:3e:58:e7:0d:65:13:a9:86:96:f3:d7:11:24:3c:77:24:e3: 4c:4e:7e:3c:7e:e7:c7:fd:90:b6:38:89:7a:c4:74:a3:0a:13: db:08:00:79:d0:15:6b:53:a0:56:39:47:a4:f7:0b:7d:76:8a: fa:fd:ff:0f:3a:67:fa:49:5a:eb:f9:ad:51:53:79:b9:e3:56: 8a:e0:c0:65:c2:0b:42:a9:e9:93:28:b9:1c:aa:9c:4c:02:f8: fd:76:cd:46:22:3f:6e:24:a0:24:90:84:0b:55:4f:6b:ca:6e: 3b:c8:19:46:5c:dc:0f:1e:93:64:1f:e5:a0:31:07:79:c1:77: cd:78:60:5b:0b:a5:eb:a6:b6:05:f2:38:7e:1a:08:9e:0a:5e: 2a:90:89:23:0e:ab:1a:3e:54:73:2d:9b:5e:74:3e:e1:1a:94: 4a:c1:8c:85:e2:b7:10:2d:d2:84:4f:ef:66:9d:cc:1d:63:13: 9a:f2:53:20:1e:a5:58:7e:f1:9e:cd:03:cd:4f:21:e2:e4:4b: aa:84:b1:56:4e:e8:81:2e:cc:80:ff:2a:b2:bc:72:ba:2e:1f: 9b:8c:0e:5a:3a:fc:90:fb:03:a8:1d:6a:37:6c:b0:a9:1f:97: 00:c7:d4:8e:fe:d1:51:6c:8a:b0:68:88:06:77:6f:3c:7a:33: 93:89:14:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgwNkUxMTAvBgNVBAUTKDA5ODlFMTkxNTU4QkJDRTQ2RkFCN0I1M0U0QTczNUVF QURBOEQ0NzcwHhcNMjUxMDE4MjIxNTMzWhcNMjUxMDI1MjIxNTMzWjAYMRYwFAYD VQQDEw02OGY0MTE4Ni1mZjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnLjZEM5AIRHaHkp1r4gSt8RrKFIgWBVFyV7E+Tjhs9kcH/ZQbTzwsmhywEiI VmaV/5W/6fN1sjFUBzs+/S1z8NuG/HYmx2nDPkHvSEd+DhRU6350483INdZQlWB2 i8YHwkdBwTIw7TaazDPtHsZ9jnhN7zgGSAl2IMWEYATdpZmKp1ugyd2zmrApd05Y qHbEiC7i5Qw/143QEWLIQSIyi4bQhD0w+WeZ2rodkzutatdKkzNsOtG2+WZ0Rmkj YI/lJt2SSsgNnf9lJNvs+jqILtaY7BDSIW9L/9xedZotiV5gkySt00X9fbcTBxpX dHsP4c41/gdG7gCBJfTMfPHOhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0AQz92 dqaoVVZL7buuxt1B5k6pMB8GA1UdIwQYMBaAFAmJ4ZFVi7zkb6t7U+SnNe6tqNR3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODA2RS85REJGQUIzODAy MkYxMUVCOTMzMzE4M0NDNEY5QUUwMi9DWW5oa1ZXTHZPUnZxM3RUNUtjMTdxMm8x SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NZbmhrVldMdk9SdnEzdFQ1S2MxN3EybzFIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODA2RS85REJGQUIzODAyMkYxMUVCOTMzMzE4M0NDNEY5QUUwMi9DWW5oa1ZXTHZP UnZxM3RUNUtjMTdxMm8xSGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3PljnDWUTqYaW89cRJDx3JONMTn48fufH/ZC2OIl6xHSjChPbCAB5 0BVrU6BWOUek9wt9dor6/f8POmf6SVrr+a1RU3m541aK4MBlwgtCqemTKLkcqpxM Avj9ds1GIj9uJKAkkIQLVU9rym47yBlGXNwPHpNkH+WgMQd5wXfNeGBbC6XrprYF 8jh+GgieCl4qkIkjDqsaPlRzLZtedD7hGpRKwYyF4rcQLdKET+9mncwdYxOa8lMg HqVYfvGezQPNTyHi5EuqhLFWTuiBLsyA/yqyvHK6Lh+bjA5aOvyQ+wOoHWo3bLCp H5cAx9SO/tFRbIqwaIgGd288ejOTiRQL -----END CERTIFICATE-----Generated at Mon Oct 20 04:23:49 2025 by rpki-client