$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft File: sD57-ytL2vouqlCreZD3T_y8rdc.mft (raw, json) Hash identifier: 13K8zE6TzpDg+cSo20b+myKzJGTTmRFtD5g2Mr6l7M0= Subject key identifier: 66:45:77:E6:4E:8A:0C:84:DB:47:AF:AD:C9:26:C7:E0:4D:52:2A:BE Authority key identifier: B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 Certificate issuer: /CN=A9150CF2/serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Certificate serial: 0D10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft Manifest number: 0CF3 Signing time: Sat 18 Oct 2025 18:49:36 +0000 Manifest this update: Sat 18 Oct 2025 18:49:36 +0000 Manifest next update: Sat 25 Oct 2025 18:49:36 +0000 Files and hashes: 1: sD57-ytL2vouqlCreZD3T_y8rdc.crl (hash: Fh69/T3vXRabcsZivjX3JKhUhTB9GZoRHZ1Lw/Mdb7M=) 2: 34060B22C2B311EE97B0B776C4F9AE02.roa (hash: wRhoUuLabNYzTY9DDaSK06ADTxBJOvjSTEtu7/sVqes=) 3: 029E3ED44ADF11EEB17F2D4CC4F9AE02.roa (hash: oryogDp90ntm5yVUpzztlYtF7rrid4whBN5vK7HfINE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:49:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3344 (0xd10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150CF2, serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Validity Not Before: Oct 18 18:49:36 2025 GMT Not After : Oct 25 18:49:36 2025 GMT Subject: CN=68f3e140-7d5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:db:0a:5b:c5:ae:e7:9e:e3:dd:80:c5:5d:aa: e5:c7:0a:4f:da:b4:31:45:56:ab:fb:25:29:cb:e9: d6:78:7f:a6:00:8d:a5:0c:69:87:87:fc:98:15:36: fb:ad:87:84:3f:bb:e9:a1:13:ec:bd:4d:ca:c4:30: 56:64:67:9c:f6:44:39:ef:c7:36:44:65:d6:b6:93: 5b:05:ba:c9:f3:0f:35:b1:79:d0:77:87:42:53:68: 97:c3:0f:fa:b4:bc:f5:a3:d6:42:19:21:27:5e:75: c2:23:3a:a4:15:41:b1:f2:dc:35:00:29:32:22:53: fe:4d:7b:84:98:85:33:7f:9f:5d:78:78:96:2d:bf: b4:06:6a:fe:23:04:a2:66:1e:22:57:cc:c6:12:f4: a4:fc:e3:f8:03:21:08:8c:8e:08:d5:5e:a8:ae:7d: b1:da:86:d1:5d:9f:b8:88:8d:45:99:6d:1d:3d:2f: 71:c0:fa:55:46:92:08:85:f3:64:a5:7c:f4:70:03: e4:ab:43:59:63:a9:9d:67:83:2d:09:5e:cc:e5:59: 35:8a:bc:93:2c:91:1e:e5:ff:25:09:6e:12:bf:fe: b7:65:88:ef:b6:00:9b:4a:5b:0f:94:30:05:86:8e: fd:8e:b7:16:19:bf:8a:7c:c6:5a:58:ae:f8:a5:b9: 00:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:45:77:E6:4E:8A:0C:84:DB:47:AF:AD:C9:26:C7:E0:4D:52:2A:BE X509v3 Authority Key Identifier: keyid:B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:13:f9:aa:f0:54:bb:3a:40:32:fc:ee:02:55:37:43:05:57: f2:f9:34:54:21:b8:ee:e2:e0:d6:be:16:89:d4:f3:0f:c3:01: 63:a4:bf:9a:08:c0:da:ea:5d:81:bd:35:85:be:32:59:11:48: fc:fb:51:f7:39:a4:61:99:83:78:c5:89:d6:e1:c2:2e:7e:01: 6b:0a:56:74:96:76:a0:0d:f6:44:e2:35:80:6d:98:1f:f3:47: 9f:66:b7:f6:95:a4:36:24:ed:49:2e:91:11:7b:83:d8:c7:a1: 2b:a9:19:0e:6e:b0:92:11:de:b4:bd:86:d4:cc:63:b8:23:9a: a2:58:cc:c7:7a:ad:4e:18:9f:f7:5f:01:2c:42:f2:a1:45:99: d6:89:9f:13:22:3f:49:9a:fe:25:a2:c3:5f:a6:3b:94:d6:c9: 21:d1:b2:79:59:80:ea:87:d8:6e:f7:9c:2d:e5:8d:4d:e6:ed: e0:bf:e1:dd:a1:96:55:09:1f:d0:2f:22:9e:2b:34:06:07:0d: df:34:b5:57:26:d2:12:dd:e1:47:57:6f:44:41:ac:a5:a1:61: 33:5b:33:da:06:ec:e5:c3:04:0e:aa:50:25:2d:cf:fa:37:40: ae:89:1d:78:3f:f4:47:7c:d6:56:1f:65:4e:da:05:4b:71:48: 0c:b4:cd:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBDRjIxMTAvBgNVBAUTKEIwM0U3QkZCMkI0QkRBRkEyRUFBNTBBQjc5OTBGNzRG RkNCQ0FERDcwHhcNMjUxMDE4MTg0OTM2WhcNMjUxMDI1MTg0OTM2WjAYMRYwFAYD VQQDEw02OGYzZTE0MC03ZDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2dsKW8Wu557j3YDFXarlxwpP2rQxRVar+yUpy+nWeH+mAI2lDGmHh/yYFTb7 rYeEP7vpoRPsvU3KxDBWZGec9kQ578c2RGXWtpNbBbrJ8w81sXnQd4dCU2iXww/6 tLz1o9ZCGSEnXnXCIzqkFUGx8tw1ACkyIlP+TXuEmIUzf59deHiWLb+0Bmr+IwSi Zh4iV8zGEvSk/OP4AyEIjI4I1V6orn2x2obRXZ+4iI1FmW0dPS9xwPpVRpIIhfNk pXz0cAPkq0NZY6mdZ4MtCV7M5Vk1iryTLJEe5f8lCW4Sv/63ZYjvtgCbSlsPlDAF ho79jrcWGb+KfMZaWK74pbkAPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZFd+ZO igyE20evrckmx+BNUiq+MB8GA1UdIwQYMBaAFLA+e/srS9r6LqpQq3mQ90/8vK3X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MENGMi9EMDBEQjc2RUY0 RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2b3VxbENyZVpEM1RfeThy ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NENTcteXRMMnZvdXFsQ3JlWkQzVF95OHJkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MENGMi9EMDBEQjc2RUY0RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2 b3VxbENyZVpEM1RfeThyZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArE/mq8FS7OkAy/O4CVTdDBVfy+TRUIbju4uDWvhaJ1PMPwwFjpL+a CMDa6l2BvTWFvjJZEUj8+1H3OaRhmYN4xYnW4cIufgFrClZ0lnagDfZE4jWAbZgf 80efZrf2laQ2JO1JLpERe4PYx6ErqRkObrCSEd60vYbUzGO4I5qiWMzHeq1OGJ/3 XwEsQvKhRZnWiZ8TIj9Jmv4losNfpjuU1skh0bJ5WYDqh9hu95wt5Y1N5u3gv+Hd oZZVCR/QLyKeKzQGBw3fNLVXJtIS3eFHV29EQayloWEzWzPaBuzlwwQOqlAlLc/6 N0CuiR14P/RHfNZWH2VO2gVLcUgMtM0U -----END CERTIFICATE-----Generated at Mon Oct 20 10:35:28 2025 by rpki-client