$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft File: ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft (raw, json) Hash identifier: 9E6CNcHOPHs3wDRYrowR8HmiIG7Hi8aYmO2BUASALEI= Subject key identifier: 6A:26:50:85:1D:D3:20:FB:B9:5D:C4:8C:63:CB:0D:A1:0D:28:6D:F1 Authority key identifier: 21:26:1B:89:74:98:93:C3:B3:18:41:B9:6F:E3:FB:63:23:03:2F:18 Certificate issuer: /CN=A913F2E2/serialNumber=21261B89749893C3B31841B96FE3FB6323032F18 Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft Manifest number: EF Signing time: Sun 19 Oct 2025 08:17:59 +0000 Manifest this update: Sun 19 Oct 2025 08:17:59 +0000 Manifest next update: Sun 26 Oct 2025 08:17:59 +0000 Files and hashes: 1: ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl (hash: w7ytZHG7yQKfkF0HOrdA1/LX2G9lY1fzSL4O154iXZ8=) 2: A8051CC4508011EF81053074C4F9AE02.roa (hash: cDS5FdTBOYoVAs3WZmJDzExZ2RFGAHrfOHhqQyrBupo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F2E2, serialNumber=21261B89749893C3B31841B96FE3FB6323032F18 Validity Not Before: Oct 19 08:17:59 2025 GMT Not After : Oct 26 08:17:59 2025 GMT Subject: CN=68f49eb7-a616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:82:d1:9c:aa:b4:2a:f5:a6:41:eb:e2:bf:5d: 20:e5:02:e2:f6:aa:81:fb:7a:3b:43:27:cd:53:5c: 0a:6a:d9:4d:cc:d5:42:a4:5d:56:b3:55:9c:d3:82: 5a:3e:80:37:af:f4:fb:38:b7:ed:6b:a6:1f:b3:61: d6:6a:1b:f4:3a:fa:27:d4:56:50:26:14:12:af:8c: e0:9f:2d:9d:48:01:32:41:89:84:fc:aa:93:a3:45: d5:66:3b:6a:c8:25:f2:e0:49:da:13:89:86:16:72: 76:b2:9b:c4:6e:5c:5b:92:b7:56:37:6d:c7:dc:79: c5:e7:e5:42:71:4b:1f:52:5f:da:07:d4:fc:01:8a: 12:34:17:38:55:85:a0:98:ba:e7:28:8e:d1:52:c7: cd:0c:30:cc:a4:3d:f2:d5:37:80:ed:12:b2:dc:58: 2c:72:17:3d:f9:b9:2a:64:e7:20:06:d4:64:55:a2: 17:86:7a:5f:9c:ab:89:3d:c2:6c:f2:b0:ea:31:c0: fc:b1:0d:40:3e:0b:db:59:c0:33:6e:ed:6c:90:74: 59:0d:2c:8d:d5:c9:af:7a:61:68:26:cf:d2:57:c3: 2d:bc:74:fd:2f:d9:b2:83:d5:cb:bd:36:c7:12:63: d8:08:80:94:7f:fa:70:0a:4f:15:73:a9:d1:01:be: 32:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:26:50:85:1D:D3:20:FB:B9:5D:C4:8C:63:CB:0D:A1:0D:28:6D:F1 X509v3 Authority Key Identifier: keyid:21:26:1B:89:74:98:93:C3:B3:18:41:B9:6F:E3:FB:63:23:03:2F:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:08:fb:2a:85:7d:e8:d2:95:5a:16:07:bb:70:0c:7d:23:e2: a6:24:bf:7f:23:e5:6c:3c:3c:26:5b:f8:b2:24:c6:66:d9:7b: 98:bf:b9:82:95:22:db:eb:aa:cf:78:1c:97:76:61:fc:50:44: ee:ef:88:29:1f:1f:5a:60:c5:a9:aa:3a:f1:5d:7d:bf:41:fd: a5:13:71:da:ff:29:44:cd:b9:ba:02:e7:ea:a3:14:5f:54:75: 33:3d:c1:7d:4c:f0:ec:01:ed:00:9a:9b:56:1e:db:a9:4e:d1: b3:63:18:06:29:8d:e5:72:f2:fa:f6:ed:a9:55:26:5d:6f:ce: 03:36:6e:2b:a2:eb:7d:1c:72:04:f6:0e:cb:76:da:f8:1f:d9: 5f:1c:cf:a5:8a:a6:02:ab:8f:29:5b:e8:33:ec:74:35:70:8d: 8b:4f:19:83:30:16:c3:2e:fa:74:a3:16:43:69:ad:03:18:9a: a9:08:ad:b9:1e:ff:f9:f0:35:18:22:14:01:10:56:55:38:2e: 1a:88:eb:d9:e2:1b:ad:14:9f:67:53:81:4b:0a:14:dc:b3:d3: 8b:54:28:29:6b:be:53:f6:21:9f:7c:37:e3:f2:46:e0:af:89: 0e:c8:42:6b:c1:1f:b3:c7:79:f9:65:87:d6:b1:24:e4:d7:64: 3b:30:a0:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YyRTIxMTAvBgNVBAUTKDIxMjYxQjg5NzQ5ODkzQzNCMzE4NDFCOTZGRTNGQjYz MjMwMzJGMTgwHhcNMjUxMDE5MDgxNzU5WhcNMjUxMDI2MDgxNzU5WjAYMRYwFAYD VQQDEw02OGY0OWViNy1hNjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxYLRnKq0KvWmQeviv10g5QLi9qqB+3o7QyfNU1wKatlNzNVCpF1Ws1Wc04Ja PoA3r/T7OLfta6Yfs2HWahv0Ovon1FZQJhQSr4zgny2dSAEyQYmE/KqTo0XVZjtq yCXy4EnaE4mGFnJ2spvEblxbkrdWN23H3HnF5+VCcUsfUl/aB9T8AYoSNBc4VYWg mLrnKI7RUsfNDDDMpD3y1TeA7RKy3Fgschc9+bkqZOcgBtRkVaIXhnpfnKuJPcJs 8rDqMcD8sQ1APgvbWcAzbu1skHRZDSyN1cmvemFoJs/SV8MtvHT9L9myg9XLvTbH EmPYCICUf/pwCk8Vc6nRAb4yKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGomUIUd 0yD7uV3EjGPLDaENKG3xMB8GA1UdIwQYMBaAFCEmG4l0mJPDsxhBuW/j+2MjAy8Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjJFMi9DNUI2QjkzNjQ0 MDQxMUVGQjlBNjJDMERDNEY5QUUwMi9JU1liaVhTWWs4T3pHRUc1Yi1QN1l5TURM eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lTWWJpWFNZazhPekdFRzViLVA3WXlNREx4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjJFMi9DNUI2QjkzNjQ0MDQxMUVGQjlBNjJDMERDNEY5QUUwMi9JU1liaVhTWWs4 T3pHRUc1Yi1QN1l5TURMeGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmCPsqhX3o0pVaFge7cAx9I+KmJL9/I+VsPDwmW/iyJMZm2XuYv7mC lSLb66rPeByXdmH8UETu74gpHx9aYMWpqjrxXX2/Qf2lE3Ha/ylEzbm6AufqoxRf VHUzPcF9TPDsAe0AmptWHtupTtGzYxgGKY3lcvL69u2pVSZdb84DNm4rout9HHIE 9g7Ldtr4H9lfHM+liqYCq48pW+gz7HQ1cI2LTxmDMBbDLvp0oxZDaa0DGJqpCK25 Hv/58DUYIhQBEFZVOC4aiOvZ4hutFJ9nU4FLChTcs9OLVCgpa75T9iGffDfj8kbg r4kOyEJrwR+zx3n5ZYfWsSTk12Q7MKCW -----END CERTIFICATE-----Generated at Mon Oct 20 05:22:28 2025 by rpki-client