$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft File: ApuM4ulfRYWEYukHCxtRU6yRP-g.mft (raw, json) Hash identifier: s2ZXllFMxHQVme1sp3kwBy+L9XBS653ggEPvEPLwvoE= Subject key identifier: 0F:13:B9:B3:D2:A5:EC:FB:FC:49:C7:76:65:B9:3E:F0:C1:54:AB:D4 Authority key identifier: 02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8 Certificate issuer: /CN=A9157D67/serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8 Certificate serial: 0769 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft Manifest number: 075C Signing time: Sat 18 Oct 2025 23:06:30 +0000 Manifest this update: Sat 18 Oct 2025 23:06:29 +0000 Manifest next update: Sat 25 Oct 2025 23:06:29 +0000 Files and hashes: 1: ApuM4ulfRYWEYukHCxtRU6yRP-g.crl (hash: G4sSkdMyiWxIE4dvg586nl1QKkHrpE4QW5ULd15CLus=) 2: AA3A944A27EA11ECB1EBEA82C4F9AE02.roa (hash: 2jsCymQavrx92Kq4v6h75mDYqdyK8XpnNBvpUzJpvhE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1897 (0x769) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D67, serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8 Validity Not Before: Oct 18 23:06:29 2025 GMT Not After : Oct 25 23:06:29 2025 GMT Subject: CN=68f41d75-8be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:55:ec:93:9b:f8:67:6a:b0:ec:eb:00:a3:5d: a3:dc:62:0e:7e:35:e4:9d:82:a9:ea:6e:f4:e0:0c: d5:01:1b:ef:cc:2c:ed:e4:1d:04:c5:c8:0e:34:9f: b8:01:a6:72:48:51:9a:56:d9:08:6e:3a:4d:74:32: 8b:ce:e7:74:cd:d8:53:d8:8e:4a:7e:57:a7:7f:36: e7:13:88:89:de:c8:ba:3f:8b:00:4f:04:c5:a2:ea: 0c:ec:17:c5:4d:56:b7:1e:e9:ce:b4:af:0a:c4:f7: 30:f4:e4:3e:11:c6:e9:ad:f8:dc:c3:d0:61:55:59: 23:fa:18:00:f7:c8:d8:a1:1d:cb:6c:a6:0f:a1:33: 34:21:2b:97:01:b3:8a:ff:5e:7d:97:43:da:40:74: 5a:37:e1:e0:5e:f7:98:fe:fc:d5:d7:e6:4c:d8:02: e4:eb:6a:18:d4:8a:e9:d1:cf:c1:b0:cd:1f:36:44: df:61:00:2c:fd:99:bb:52:87:7a:a6:9f:27:1d:80: 34:8a:2f:26:0d:77:f7:15:5b:35:e6:c2:2c:cc:ab: 2c:a9:83:31:37:d1:e3:f4:59:8c:40:5c:9d:a0:64: 12:f9:ed:47:55:82:99:74:ec:79:be:07:dd:09:ce: c9:14:c5:30:4f:76:a8:92:dd:95:d0:b2:26:47:37: 2c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:13:B9:B3:D2:A5:EC:FB:FC:49:C7:76:65:B9:3E:F0:C1:54:AB:D4 X509v3 Authority Key Identifier: keyid:02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:12:53:ee:a3:e5:af:d9:6c:d1:2b:89:92:18:9c:4d:a8:cd: 38:38:5c:07:cb:ab:08:a3:d6:fb:5a:03:2d:dc:5c:cc:9a:55: 11:27:f3:c4:1c:9c:3d:f7:58:5b:69:be:cd:37:6f:66:cd:1e: ce:74:ef:d7:97:15:9a:57:d8:4d:15:c0:65:67:49:9f:49:a6: 17:9d:c0:a0:6a:b5:8e:3b:93:d7:ea:0c:72:16:79:b9:8b:b3: a1:29:0c:59:92:9b:16:d9:ad:5c:89:a2:a5:58:52:4d:88:55: b1:c6:8f:c3:e0:94:c7:0a:f5:6b:2b:88:89:bc:9d:90:d4:6a: 8c:99:d2:c4:8c:4e:86:ce:64:ab:41:db:9d:65:70:7d:f9:e0: ca:d1:6f:4e:ca:e5:65:f1:a8:96:ba:61:ed:89:69:58:39:5a: d4:bf:e7:21:07:04:fa:10:c5:e5:de:08:c5:2a:97:71:a5:5f: b0:07:b1:b6:72:16:3c:5b:ff:1a:08:75:16:98:05:b1:e0:cc: 09:99:64:54:85:09:90:57:dd:c4:f0:20:19:b0:46:3d:e2:bf: 95:9b:96:e2:6d:35:82:0c:24:c4:d7:af:12:9f:85:cc:f0:54: 4c:e6:34:fd:28:f6:f1:c6:7b:9a:c0:a8:c3:cd:ab:7d:01:f8: 21:bd:ce:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjcxMTAvBgNVBAUTKDAyOUI4Q0UyRTk1RjQ1ODU4NDYyRTkwNzBCMUI1MTUz QUM5MTNGRTgwHhcNMjUxMDE4MjMwNjI5WhcNMjUxMDI1MjMwNjI5WjAYMRYwFAYD VQQDEw02OGY0MWQ3NS04YmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1FXsk5v4Z2qw7OsAo12j3GIOfjXknYKp6m704AzVARvvzCzt5B0ExcgONJ+4 AaZySFGaVtkIbjpNdDKLzud0zdhT2I5KflenfzbnE4iJ3si6P4sATwTFouoM7BfF TVa3HunOtK8KxPcw9OQ+Ecbprfjcw9BhVVkj+hgA98jYoR3LbKYPoTM0ISuXAbOK /159l0PaQHRaN+HgXveY/vzV1+ZM2ALk62oY1Irp0c/BsM0fNkTfYQAs/Zm7Uod6 pp8nHYA0ii8mDXf3FVs15sIszKssqYMxN9Hj9FmMQFydoGQS+e1HVYKZdOx5vgfd Cc7JFMUwT3aokt2V0LImRzcsNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8TubPS pez7/EnHdmW5PvDBVKvUMB8GA1UdIwQYMBaAFAKbjOLpX0WFhGLpBwsbUVOskT/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82MDI4NjYzODQ0 MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9BcHVNNHVsZlJZV0VZdWtIQ3h0UlU2eVJQ LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0FwdU00dWxmUllXRVl1a0hDeHRSVTZ5UlAtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q2Ny82MDI4NjYzODQ0MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9BcHVNNHVsZlJZ V0VZdWtIQ3h0UlU2eVJQLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARElPuo+Wv2WzRK4mSGJxNqM04OFwHy6sIo9b7WgMt3FzMmlURJ/PE HJw991hbab7NN29mzR7OdO/XlxWaV9hNFcBlZ0mfSaYXncCgarWOO5PX6gxyFnm5 i7OhKQxZkpsW2a1ciaKlWFJNiFWxxo/D4JTHCvVrK4iJvJ2Q1GqMmdLEjE6GzmSr QdudZXB9+eDK0W9OyuVl8aiWumHtiWlYOVrUv+chBwT6EMXl3gjFKpdxpV+wB7G2 chY8W/8aCHUWmAWx4MwJmWRUhQmQV93E8CAZsEY94r+Vm5bibTWCDCTE168Sn4XM 8FRM5jT9KPbxxnuawKjDzat9Afghvc42 -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:51 2025 by rpki-client