$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft File: 67t1Ysakn7ft5XQSvB_61I4a-0k.mft (raw, json) Hash identifier: zk+rGvjBUCkijtd1e0FfXOyyhJCQX1nyfOjNlEmds2U= Subject key identifier: D1:82:5F:20:11:55:80:10:06:A9:C2:18:2C:7B:7A:2F:51:6C:9B:7E Authority key identifier: EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49 Certificate issuer: /CN=A914FE87/serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49 Certificate serial: 0492 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft Manifest number: 048B Signing time: Sun 19 Oct 2025 01:55:18 +0000 Manifest this update: Sun 19 Oct 2025 01:55:17 +0000 Manifest next update: Sun 26 Oct 2025 01:55:17 +0000 Files and hashes: 1: 67t1Ysakn7ft5XQSvB_61I4a-0k.crl (hash: n/7syomNJbKmTzr0mc9PzpmussYOJKiH79UbxHldIoA=) 2: 9F9CEB425CB911ECAEF7AE14C4F9AE02.roa (hash: 6uFvpip5xKUGRghNdeTpeBy3R93KivQ5uvgIzsfjzEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:55:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1170 (0x492) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FE87, serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49 Validity Not Before: Oct 19 01:55:17 2025 GMT Not After : Oct 26 01:55:17 2025 GMT Subject: CN=68f44505-6068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:97:4c:c2:4f:7e:2e:29:02:a5:52:7c:bb:29: 21:dd:1b:10:ae:be:c2:af:f0:35:65:cf:e8:d8:ca: 54:14:43:49:a1:eb:77:4c:10:c6:69:66:f0:fc:f9: 22:ef:2a:f4:e2:04:86:a4:82:0a:53:6c:ce:85:79: 1d:7f:40:72:b4:59:a6:b0:aa:70:60:d7:e5:3a:78: 04:1c:e7:65:91:8e:b8:0c:77:e9:f8:1b:c6:6b:fa: 84:1c:3c:b0:c9:c2:d2:65:39:c6:56:cf:93:8a:38: f9:3f:df:dc:00:89:da:76:17:1c:cf:31:3c:cd:82: 94:9a:54:89:c4:ae:57:05:1a:1c:fc:c8:bf:32:e0: 63:05:c9:35:a8:44:60:7d:58:c8:96:8b:46:72:21: 7d:e5:66:17:8f:06:6f:e7:e7:8e:af:97:7f:8d:0e: 90:c0:eb:af:79:e7:dc:29:e3:c9:d4:c4:86:79:07: 51:f2:3b:c2:cc:1c:b0:27:5c:d1:b0:99:ac:ee:3c: 28:ae:6d:02:db:9c:80:a2:c2:d1:f3:a8:38:3b:c9: c8:a3:17:07:86:9b:e5:4e:2c:f9:0c:10:03:c8:7d: 11:fc:8e:4b:35:e0:1c:f2:99:f0:43:44:9d:15:4c: 5f:90:12:ca:9c:43:eb:36:57:17:83:c6:fd:74:31: fa:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:82:5F:20:11:55:80:10:06:A9:C2:18:2C:7B:7A:2F:51:6C:9B:7E X509v3 Authority Key Identifier: keyid:EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:52:79:28:e1:30:a7:96:45:5b:83:b9:31:fe:f2:1b:c0:a9: fa:9d:8d:d8:7d:b1:0a:f7:8e:49:49:35:0c:44:87:d2:e1:22: aa:9d:96:20:21:76:4c:c8:f4:17:16:7f:05:b3:fe:57:56:5a: 08:f3:90:1f:a5:22:37:07:0e:0b:58:eb:54:2a:14:2d:d9:79: d1:d5:df:7e:3f:f2:89:fd:31:94:7c:a0:00:bc:06:10:f5:48: df:23:93:b2:9d:46:c6:7e:81:46:5c:4a:a4:1a:58:fa:c0:27: 16:04:e6:05:66:db:f2:a1:f6:d8:ac:cf:c6:ce:9c:96:f3:61: 3e:eb:9e:9c:36:af:ce:fc:8e:2d:47:31:3e:7c:39:61:1e:5b: b4:2c:50:f9:3c:01:42:3f:c2:37:58:79:a1:25:b4:29:ec:da: 20:c5:0e:8d:e2:99:93:a6:ca:82:ff:60:8c:fd:93:1b:4f:e4: a7:80:9f:d5:1f:7a:dd:e4:e1:f0:ff:4e:4e:71:df:31:05:7b: 4d:ef:c7:9e:75:e5:fc:94:50:90:cb:c3:d0:47:3a:be:f9:ec: f5:ac:1f:a2:3f:e8:7d:c8:cd:61:af:04:76:dd:19:86:3b:0e: 65:2a:6b:65:8d:4f:2b:c1:e0:c0:86:f3:e3:0f:03:34:36:eb: dc:bf:d7:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZFODcxMTAvBgNVBAUTKEVCQkI3NTYyQzZBNDlGQjdFREU1NzQxMkJDMUZGQUQ0 OEUxQUZCNDkwHhcNMjUxMDE5MDE1NTE3WhcNMjUxMDI2MDE1NTE3WjAYMRYwFAYD VQQDEw02OGY0NDUwNS02MDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJdMwk9+LikCpVJ8uykh3RsQrr7Cr/A1Zc/o2MpUFENJoet3TBDGaWbw/Pki 7yr04gSGpIIKU2zOhXkdf0BytFmmsKpwYNflOngEHOdlkY64DHfp+BvGa/qEHDyw ycLSZTnGVs+Tijj5P9/cAInadhcczzE8zYKUmlSJxK5XBRoc/Mi/MuBjBck1qERg fVjIlotGciF95WYXjwZv5+eOr5d/jQ6QwOuveefcKePJ1MSGeQdR8jvCzBywJ1zR sJms7jworm0C25yAosLR86g4O8nIoxcHhpvlTiz5DBADyH0R/I5LNeAc8pnwQ0Sd FUxfkBLKnEPrNlcXg8b9dDH6XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNGCXyAR VYAQBqnCGCx7ei9RbJt+MB8GA1UdIwQYMBaAFOu7dWLGpJ+37eV0Erwf+tSOGvtJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkU4Ny80RTE0MDFFNjVD QjYxMUVDQTc3MTE4MEVDNEY5QUUwMi82N3QxWXNha243ZnQ1WFFTdkJfNjFJNGEt MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3dDFZc2FrbjdmdDVYUVN2Ql82MUk0YS0way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkU4Ny80RTE0MDFFNjVDQjYxMUVDQTc3MTE4MEVDNEY5QUUwMi82N3QxWXNha243 ZnQ1WFFTdkJfNjFJNGEtMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlUnko4TCnlkVbg7kx/vIbwKn6nY3YfbEK945JSTUMRIfS4SKqnZYg IXZMyPQXFn8Fs/5XVloI85AfpSI3Bw4LWOtUKhQt2XnR1d9+P/KJ/TGUfKAAvAYQ 9UjfI5OynUbGfoFGXEqkGlj6wCcWBOYFZtvyofbYrM/GzpyW82E+656cNq/O/I4t RzE+fDlhHlu0LFD5PAFCP8I3WHmhJbQp7NogxQ6N4pmTpsqC/2CM/ZMbT+SngJ/V H3rd5OHw/05Ocd8xBXtN78eedeX8lFCQy8PQRzq++ez1rB+iP+h9yM1hrwR23RmG Ow5lKmtljU8rweDAhvPjDwM0Nuvcv9cw -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:16 2025 by rpki-client