$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft File: Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft (raw, json) Hash identifier: zn+i3MGKUS6lz7fvwqrohuHD6NmfJuSWq4VaKnlab2A= Subject key identifier: 86:A8:B1:7E:AF:47:F0:C4:C0:43:23:0C:2B:5D:86:85:DD:BA:0B:32 Authority key identifier: 63:B7:01:B7:27:06:F3:19:0B:EF:8B:FB:FA:34:FF:A3:3F:4F:6B:D6 Certificate issuer: /CN=A914D0AF/serialNumber=63B701B72706F3190BEF8BFBFA34FFA33F4F6BD6 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft Manifest number: 046B Signing time: Sun 19 Oct 2025 02:19:49 +0000 Manifest this update: Sun 19 Oct 2025 02:19:49 +0000 Manifest next update: Sun 26 Oct 2025 02:19:49 +0000 Files and hashes: 1: Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl (hash: PA/hCPxZJfXAo0d3tny91W+Z6LNcaK9qITrJd9ohJ6o=) 2: F83346DA410211F097F43F85C4F9AE02.roa (hash: EnqZyVfj3TKzoAvrOL6tNqUILt/NgCo/Yq0hgyekdPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:19:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D0AF, serialNumber=63B701B72706F3190BEF8BFBFA34FFA33F4F6BD6 Validity Not Before: Oct 19 02:19:49 2025 GMT Not After : Oct 26 02:19:49 2025 GMT Subject: CN=68f44ac5-9b31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f9:56:4e:14:31:93:28:73:a3:38:1b:9b:a0: 0a:51:aa:06:76:c3:6c:5b:e8:95:af:13:c6:37:4d: 50:78:74:7c:77:01:36:7a:c1:53:ff:f7:eb:e4:e6: 32:26:c6:44:32:d0:73:6a:b6:d9:89:c8:8b:1f:84: d1:fa:6b:76:a0:58:0a:c7:c5:cd:37:a0:32:db:8c: 66:30:9f:a7:b4:bc:e4:22:85:b6:e7:41:73:84:ac: 00:30:7f:67:cf:41:c6:78:64:8f:6d:3a:ef:c4:62: 8a:42:6d:68:0b:1b:59:da:52:18:a0:72:f4:68:25: 18:a1:0d:03:bf:18:23:f8:b1:f6:f3:1c:8c:29:03: 48:fd:ce:d0:f9:42:30:4f:2c:b9:20:93:70:25:57: 01:b4:c2:39:4d:0d:8f:5a:05:73:90:6c:1f:07:c1: d7:86:49:21:d8:1c:34:5b:f3:02:5b:0f:eb:8f:a5: 4b:0e:47:14:fc:f4:b3:a8:6f:8a:fe:1a:d8:af:80: 78:1e:a6:39:77:13:0f:93:a4:b1:ab:89:f0:98:46: ce:6b:9f:ca:9e:d1:83:3f:f2:14:6e:a7:55:02:c0: 12:7a:04:33:67:18:c1:ab:60:2f:b4:23:1c:01:43: 4c:94:db:d9:26:e3:81:2b:22:a2:7d:40:b2:ac:91: 78:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A8:B1:7E:AF:47:F0:C4:C0:43:23:0C:2B:5D:86:85:DD:BA:0B:32 X509v3 Authority Key Identifier: keyid:63:B7:01:B7:27:06:F3:19:0B:EF:8B:FB:FA:34:FF:A3:3F:4F:6B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:2d:58:fc:ca:f7:42:e8:65:31:22:4d:fb:58:bf:46:64:7f: 30:e1:9c:ab:91:55:e3:04:fe:71:ed:7d:36:e0:dc:1e:a1:26: 28:79:22:fd:68:f3:01:51:b1:3c:b6:60:d3:5c:1e:25:07:ef: 9f:08:ba:e9:4f:7a:77:66:05:da:77:7e:b0:84:4e:52:2f:0d: 32:3a:aa:cc:1f:3c:04:62:ab:2d:49:7d:16:bd:4a:31:a3:63: 97:d8:96:58:b4:b4:85:38:b0:cb:6e:21:7b:39:f1:48:4f:31: 10:56:87:49:f3:65:ec:f6:96:45:41:5f:56:9c:56:51:f8:92: f7:4c:12:62:28:7e:c0:7f:ea:28:ee:7d:35:a1:76:ec:cf:66: 65:d2:0c:92:f2:6d:31:d8:f2:17:09:df:91:04:87:ff:78:8d: 2c:21:61:a4:94:95:70:01:1e:ff:86:15:da:81:89:86:c4:b3: 80:f3:2c:d3:c1:cd:be:38:6e:fa:2f:81:f5:bd:9b:7b:f7:b5: 6f:2e:c2:3e:9a:c3:c3:c8:4a:4a:0f:58:c6:38:68:11:e0:a7: 97:5c:ab:a0:9b:46:bb:a3:18:43:17:cd:62:db:c1:04:26:4b: fb:fd:f5:b5:18:af:51:1b:6a:6f:dc:c1:b4:d9:13:4d:a7:c7: f2:0d:e3:41 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RDBBRjExMC8GA1UEBRMoNjNCNzAxQjcyNzA2RjMxOTBCRUY4QkZCRkEzNEZGQTMz RjRGNkJENjAeFw0yNTEwMTkwMjE5NDlaFw0yNTEwMjYwMjE5NDlaMBgxFjAUBgNV BAMTDTY4ZjQ0YWM1LTliMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCv+VZOFDGTKHOjOBuboApRqgZ2w2xb6JWvE8Y3TVB4dHx3ATZ6wVP/9+vk5jIm xkQy0HNqttmJyIsfhNH6a3agWArHxc03oDLbjGYwn6e0vOQihbbnQXOErAAwf2fP QcZ4ZI9tOu/EYopCbWgLG1naUhigcvRoJRihDQO/GCP4sfbzHIwpA0j9ztD5QjBP LLkgk3AlVwG0wjlNDY9aBXOQbB8HwdeGSSHYHDRb8wJbD+uPpUsORxT89LOob4r+ GtivgHgepjl3Ew+TpLGrifCYRs5rn8qe0YM/8hRup1UCwBJ6BDNnGMGrYC+0IxwB Q0yU29km44ErIqJ9QLKskXijAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhqixfq9H 8MTAQyMMK12Ghd26CzIwHwYDVR0jBBgwFoAUY7cBtycG8xkL74v7+jT/oz9Pa9Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREMEFGLzFFMzM5QjM2ODhE RTExRUM4QThCMTYyOEM0RjlBRTAyL1k3Y0J0eWNHOHhrTDc0djctalRfb3o5UGE5 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWTdjQnR5Y0c4eGtMNzR2Ny1qVF9vejlQYTlZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE MEFGLzFFMzM5QjM2ODhERTExRUM4QThCMTYyOEM0RjlBRTAyL1k3Y0J0eWNHOHhr TDc0djctalRfb3o5UGE5WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADMtWPzK90LoZTEiTftYv0ZkfzDhnKuRVeME/nHtfTbg3B6hJih5Iv1o 8wFRsTy2YNNcHiUH758IuulPendmBdp3frCETlIvDTI6qswfPARiqy1JfRa9SjGj Y5fYlli0tIU4sMtuIXs58UhPMRBWh0nzZez2lkVBX1acVlH4kvdMEmIofsB/6iju fTWhduzPZmXSDJLybTHY8hcJ35EEh/94jSwhYaSUlXABHv+GFdqBiYbEs4DzLNPB zb44bvovgfW9m3v3tW8uwj6aw8PISkoPWMY4aBHgp5dcq6CbRrujGEMXzWLbwQQm S/v99bUYr1Ebam/cwbTZE02nx/IN40E= -----END CERTIFICATE-----Generated at Mon Oct 20 01:48:22 2025 by rpki-client