$ rpki-client -vvf rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft File: AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft (raw, json) Hash identifier: wdGcLs4m5Qc955anJO7TcIJvtb50DllX9EjN5zvgs+8= Subject key identifier: 2E:DA:D2:46:5B:8D:B5:3F:DA:89:23:E1:7C:16:6E:76:A8:7B:D0:9E Authority key identifier: 03:2A:C2:24:1D:18:CF:BB:C1:C3:3C:AD:F5:E8:F6:55:41:2D:4A:8B Certificate issuer: /CN=A9144BAD/serialNumber=032AC2241D18CFBBC1C33CADF5E8F655412D4A8B Certificate serial: 07F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AyrCJB0Yz7vBwzyt9ej2VUEtSos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft Manifest number: 07EC Signing time: Sat 18 Oct 2025 22:19:12 +0000 Manifest this update: Sat 18 Oct 2025 22:19:12 +0000 Manifest next update: Sat 25 Oct 2025 22:19:12 +0000 Files and hashes: 1: AyrCJB0Yz7vBwzyt9ej2VUEtSos.crl (hash: zWsVmF6TAK5lAKGwuVwaQxQusTjt2pUYRegBAjqZFww=) 2: D3D1C19E0F2111EBBC6E5028C4F9AE02.roa (hash: MXW87fZ4qznNog7Mqv1dybumPTtWHlhfVDxRXuxWlk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.crl rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AyrCJB0Yz7vBwzyt9ej2VUEtSos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2033 (0x7f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144BAD, serialNumber=032AC2241D18CFBBC1C33CADF5E8F655412D4A8B Validity Not Before: Oct 18 22:19:12 2025 GMT Not After : Oct 25 22:19:12 2025 GMT Subject: CN=68f41260-3c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f2:63:e2:d3:ce:2d:31:6f:4f:3f:3c:ed:4c: d1:a9:97:3a:03:d6:31:f0:02:7f:46:44:f6:1d:fe: f3:bb:cb:9e:d0:f6:12:db:83:24:be:28:d1:d5:1e: 8f:06:85:a3:e7:08:54:7a:c0:7e:fc:9c:05:a7:0a: 24:26:b7:da:94:6f:1b:f1:11:7f:db:97:8d:b6:73: e8:68:b1:0c:07:c9:e5:37:c7:9f:cf:ff:cc:fc:06: b8:2a:1d:a9:13:9f:a2:c0:60:23:b4:eb:bf:83:0f: ef:b6:cd:96:ce:d1:af:08:3c:32:38:ef:20:fe:a6: 59:37:17:2c:1b:04:cc:5d:13:f5:3c:fc:25:6c:6d: c3:36:8b:26:28:f0:c0:7c:59:28:1a:72:e9:bc:61: 4e:9a:e1:9f:70:cc:19:7d:55:c9:05:6b:9b:7b:cf: 87:90:f8:43:34:67:38:d2:a5:05:8b:72:18:66:31: be:2e:13:58:b0:42:af:21:39:26:5e:a7:89:e6:14: fa:60:cc:25:4b:3d:05:c3:a2:f3:f9:a5:79:a4:eb: cc:15:b4:8f:41:58:65:11:f8:89:9c:8d:bd:a5:03: 62:18:48:5f:4b:7b:6b:3d:9e:80:1f:43:a2:7c:50: 6d:9e:35:55:0b:68:5f:e9:c8:a9:1d:0a:58:34:d8: 18:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DA:D2:46:5B:8D:B5:3F:DA:89:23:E1:7C:16:6E:76:A8:7B:D0:9E X509v3 Authority Key Identifier: keyid:03:2A:C2:24:1D:18:CF:BB:C1:C3:3C:AD:F5:E8:F6:55:41:2D:4A:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AyrCJB0Yz7vBwzyt9ej2VUEtSos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:6c:b1:e4:6c:6f:2b:9f:6a:74:83:ac:04:27:5d:e3:23:db: 00:be:a2:85:58:be:36:e9:ec:4e:c0:95:c3:64:98:c6:c6:0a: ad:d9:88:bb:39:40:b5:49:ee:80:f3:d3:0d:67:f5:b0:17:0f: e5:06:37:56:90:18:57:b0:1f:ae:90:1a:0a:f9:9b:04:bc:b1: 7b:1b:7a:4c:1d:6f:ab:30:e2:57:d4:43:44:dd:45:6a:c2:7f: 66:fe:12:03:71:a7:64:9a:14:a2:7a:45:b7:f1:3e:53:a3:e4: 6e:5f:8b:82:14:ca:ac:6a:88:e8:08:ad:34:ce:08:11:f3:4e: 03:6e:1f:11:c4:0d:6e:72:1c:04:9f:2c:9e:c4:0e:ed:83:06: 4d:9f:e7:9e:0d:6f:25:de:ec:c2:c1:de:2e:7f:51:5d:74:93: dd:de:61:a6:e4:2a:0c:4c:9f:bf:6d:a9:f6:58:96:05:ec:8b: 47:f7:fb:e1:8a:11:0f:ef:bc:10:5d:ee:45:48:3c:a5:4e:b4: 13:40:e5:18:83:2a:68:db:20:2a:c4:19:35:4a:14:31:e8:83: 08:9f:9f:38:b8:fa:69:6e:f4:b7:8e:39:12:09:16:14:d4:bd: 98:4f:8c:7b:f0:38:76:4e:f8:75:10:61:b1:4d:49:77:d8:6a: cb:58:a6:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRCQUQxMTAvBgNVBAUTKDAzMkFDMjI0MUQxOENGQkJDMUMzM0NBREY1RThGNjU1 NDEyRDRBOEIwHhcNMjUxMDE4MjIxOTEyWhcNMjUxMDI1MjIxOTEyWjAYMRYwFAYD VQQDEw02OGY0MTI2MC0zYzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqvJj4tPOLTFvTz887UzRqZc6A9Yx8AJ/RkT2Hf7zu8ue0PYS24MkvijR1R6P BoWj5whUesB+/JwFpwokJrfalG8b8RF/25eNtnPoaLEMB8nlN8efz//M/Aa4Kh2p E5+iwGAjtOu/gw/vts2WztGvCDwyOO8g/qZZNxcsGwTMXRP1PPwlbG3DNosmKPDA fFkoGnLpvGFOmuGfcMwZfVXJBWube8+HkPhDNGc40qUFi3IYZjG+LhNYsEKvITkm XqeJ5hT6YMwlSz0Fw6Lz+aV5pOvMFbSPQVhlEfiJnI29pQNiGEhfS3trPZ6AH0Oi fFBtnjVVC2hf6cipHQpYNNgYhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC7a0kZb jbU/2okj4XwWbnaoe9CeMB8GA1UdIwQYMBaAFAMqwiQdGM+7wcM8rfXo9lVBLUqL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEJBRC9ENUQ3NDM0NjA0 NzgxMUVCQTdCRDNBNDhDNEY5QUUwMi9BeXJDSkIwWXo3dkJ3enl0OWVqMlZVRXRT b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F5ckNKQjBZejd2Qnd6eXQ5ZWoyVlVFdFNvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEJBRC9ENUQ3NDM0NjA0NzgxMUVCQTdCRDNBNDhDNEY5QUUwMi9BeXJDSkIwWXo3 dkJ3enl0OWVqMlZVRXRTb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGbLHkbG8rn2p0g6wEJ13jI9sAvqKFWL426exOwJXDZJjGxgqt2Yi7 OUC1Se6A89MNZ/WwFw/lBjdWkBhXsB+ukBoK+ZsEvLF7G3pMHW+rMOJX1ENE3UVq wn9m/hIDcadkmhSiekW38T5To+RuX4uCFMqsaojoCK00zggR804Dbh8RxA1uchwE nyyexA7tgwZNn+eeDW8l3uzCwd4uf1FddJPd3mGm5CoMTJ+/ban2WJYF7ItH9/vh ihEP77wQXe5FSDylTrQTQOUYgypo2yAqxBk1ShQx6IMIn584uPppbvS3jjkSCRYU 1L2YT4x78Dh2Tvh1EGGxTUl32GrLWKZx -----END CERTIFICATE-----Generated at Mon Oct 20 04:17:49 2025 by rpki-client