$ rpki-client -vvf rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft File: fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft (raw, json) Hash identifier: mCfJ7W8rRHBr70tpEwdqE0BQMOJ3Wm44epCjNhd9elQ= Subject key identifier: 7B:81:77:80:13:BE:15:16:98:58:2F:53:50:23:B4:FB:25:A6:AF:64 Authority key identifier: 7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77 Certificate issuer: /CN=A9159309/serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft Manifest number: 34 Signing time: Sun 19 Oct 2025 11:06:40 +0000 Manifest this update: Sun 19 Oct 2025 11:06:40 +0000 Manifest next update: Sun 26 Oct 2025 11:06:40 +0000 Files and hashes: 1: fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl (hash: hHldzhgmQVTZ5TOyhhhZizlBMUjecRgtMqk2cFrNWL0=) 2: 21C5B04263A311F096468248C4F9AE02.roa (hash: Xzb62xLJbAMEkevYXMmuNbI1IlT4POMgC4Yy3OA8C7k=) 3: B32DFBA0613E11F0807A9A39C4F9AE02.roa (hash: OVSbJE+Pd0/Klp/U7r6paIfqVvKQjdcHWMz7l5HkgE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159309, serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777 Validity Not Before: Oct 19 11:06:40 2025 GMT Not After : Oct 26 11:06:40 2025 GMT Subject: CN=68f4c640-93d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:44:e5:a0:b2:7b:3d:49:3c:7c:7c:4f:c4:58: b5:3e:00:97:ab:d8:83:58:6e:06:ff:34:13:a7:16: 92:ac:87:25:b6:82:77:51:64:c9:08:dd:e3:5d:b3: 3e:34:6f:e0:63:e6:ac:58:a5:49:ee:1b:9c:fc:d4: 86:9e:d0:4f:b8:14:ed:fe:89:72:70:16:ab:fb:02: d6:10:cb:e5:e3:eb:76:bb:3d:ba:40:69:58:17:45: e5:1d:12:c2:b7:97:1c:bc:ae:2c:1c:08:1c:51:c9: 90:91:70:bd:17:d8:19:f7:86:30:d3:27:af:4c:5a: ab:67:88:3d:4b:aa:4b:d1:0b:02:58:c1:87:73:f2: 6f:14:62:99:5a:71:ff:26:6c:8b:13:af:da:ad:04: ce:ac:3f:f8:c5:cb:0f:4c:da:52:5a:3b:6e:e6:43: 7b:b5:72:6a:98:36:fa:8c:98:73:23:aa:d4:8d:fb: e0:79:4a:bb:f1:25:1d:3b:e7:7b:0d:ac:21:ca:69: 11:d1:0f:bd:19:9f:00:ed:ae:a1:0b:5c:cc:f8:bc: c4:62:1a:9e:7c:b4:0d:17:32:c3:0b:bf:69:c8:b8: 27:64:c7:31:d6:bd:19:ec:40:a5:4a:e7:79:5f:2a: ad:f4:79:c4:75:74:4f:01:22:9b:b2:8c:92:f4:f6: b1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:81:77:80:13:BE:15:16:98:58:2F:53:50:23:B4:FB:25:A6:AF:64 X509v3 Authority Key Identifier: keyid:7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:cf:25:65:71:3f:75:48:1c:30:cf:2c:17:64:aa:fd:b2:11: e0:cc:25:1a:51:a1:7b:83:17:77:ef:c8:af:60:9a:e3:84:aa: 9f:1b:4f:a6:6c:6c:38:97:a1:15:e2:42:0b:ca:1e:38:23:3d: 5a:5a:dd:ca:77:01:1a:fe:85:0f:59:ba:3c:c7:7a:af:26:b4: eb:67:70:80:ca:0e:ed:88:91:1b:a8:69:ce:5d:35:a6:1c:47: 2c:52:7b:31:93:c3:d6:37:3d:32:8e:3b:24:ed:83:2d:08:3b: 7f:09:7b:12:1e:08:37:17:c3:eb:61:db:ae:51:a3:ef:56:6d: 9a:67:54:44:26:c0:e5:1f:83:3f:c1:49:98:2c:b1:81:e9:1c: a3:94:49:76:93:e3:94:30:e2:2c:62:c8:87:4e:f7:67:f5:98: fd:bb:3c:52:a1:52:e2:77:02:8f:8a:3d:fd:9b:81:2e:fa:c2: d5:3f:f5:80:39:a4:c0:b8:0a:d1:2a:30:86:be:db:58:a8:aa: 42:ca:83:28:87:95:3e:0e:6e:56:cd:38:a4:10:8e:0b:77:f6: ae:2a:05:3a:ed:3d:60:e2:bf:bc:b3:b8:cf:ef:3d:43:7e:96: 6d:48:a1:91:48:14:04:ad:c4:10:c6:f4:85:e8:f1:b1:2d:8d: 09:6f:e4:31 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OTMwOTExMC8GA1UEBRMoN0Q4RkEwQkVGNkFFRjcxQkRGODgzODU4RjczNjE5RDNC NTlFMjc3NzAeFw0yNTEwMTkxMTA2NDBaFw0yNTEwMjYxMTA2NDBaMBgxFjAUBgNV BAMTDTY4ZjRjNjQwLTkzZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMROWgsns9STx8fE/EWLU+AJer2INYbgb/NBOnFpKshyW2gndRZMkI3eNdsz40 b+Bj5qxYpUnuG5z81Iae0E+4FO3+iXJwFqv7AtYQy+Xj63a7PbpAaVgXReUdEsK3 lxy8riwcCBxRyZCRcL0X2Bn3hjDTJ69MWqtniD1LqkvRCwJYwYdz8m8UYplacf8m bIsTr9qtBM6sP/jFyw9M2lJaO27mQ3u1cmqYNvqMmHMjqtSN++B5SrvxJR0753sN rCHKaRHRD70ZnwDtrqELXMz4vMRiGp58tA0XMsMLv2nIuCdkxzHWvRnsQKVK53lf Kq30ecR1dE8BIpuyjJL09rGxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUe4F3gBO+ FRaYWC9TUCO0+yWmr2QwHwYDVR0jBBgwFoAUfY+gvvau9xvfiDhY9zYZ07WeJ3cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5MzA5Lzk4OTFFOTJFNjEz RDExRjBCMDM2QjgzNkM0RjlBRTAyL2ZZLWd2dmF1OXh2ZmlEaFk5ellaMDdXZUoz Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZlktZ3Z2YXU5eHZmaURoWTl6WVowN1dlSjNjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5 MzA5Lzk4OTFFOTJFNjEzRDExRjBCMDM2QjgzNkM0RjlBRTAyL2ZZLWd2dmF1OXh2 ZmlEaFk5ellaMDdXZUozYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAArPJWVxP3VIHDDPLBdkqv2yEeDMJRpRoXuDF3fvyK9gmuOEqp8bT6Zs bDiXoRXiQgvKHjgjPVpa3cp3ARr+hQ9ZujzHeq8mtOtncIDKDu2IkRuoac5dNaYc RyxSezGTw9Y3PTKOOyTtgy0IO38JexIeCDcXw+th265Ro+9WbZpnVEQmwOUfgz/B SZgssYHpHKOUSXaT45Qw4ixiyIdO92f1mP27PFKhUuJ3Ao+KPf2bgS76wtU/9YA5 pMC4CtEqMIa+21ioqkLKgyiHlT4OblbNOKQQjgt39q4qBTrtPWDiv7yzuM/vPUN+ lm1IoZFIFAStxBDG9IXo8bEtjQlv5DE= -----END CERTIFICATE-----Generated at Mon Oct 20 21:26:28 2025 by rpki-client