$ rpki-client -vvf rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft File: ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft (raw, json) Hash identifier: 37td7BdYoiS+gowNLmJkE52O0C09NmNR9HldOem/NdU= Subject key identifier: FD:B2:97:81:EC:17:95:90:E7:85:06:CD:FC:46:FF:17:DA:0B:3F:D0 Authority key identifier: CB:0C:33:0E:38:37:94:8F:E5:DD:FA:60:47:32:77:5D:4B:0C:F8:14 Certificate issuer: /CN=A915C645/serialNumber=CB0C330E3837948FE5DDFA604732775D4B0CF814 Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft Manifest number: CB Signing time: Sun 19 Oct 2025 08:54:47 +0000 Manifest this update: Sun 19 Oct 2025 08:54:47 +0000 Manifest next update: Sun 26 Oct 2025 08:54:47 +0000 Files and hashes: 1: ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.crl (hash: GUXYdERbdbZNEmtbsTMJe6Lx00YCor8GMgglFJIpX0U=) 2: 86998830806F11EF91F9E57CC4F9AE02.roa (hash: zuZnWcJxNflnoIsWXIqoUOj1sGwHZyfS7R+rQUgHs48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.crl rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:54:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C645, serialNumber=CB0C330E3837948FE5DDFA604732775D4B0CF814 Validity Not Before: Oct 19 08:54:47 2025 GMT Not After : Oct 26 08:54:47 2025 GMT Subject: CN=68f4a757-105e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5d:05:96:bc:5f:4f:14:c7:ce:95:5a:4c:d4: d4:5a:10:68:b3:e7:41:1a:99:74:25:88:36:19:e8: 5c:e4:65:90:b6:89:bc:44:2b:5a:4c:73:4c:48:39: bf:96:57:36:cd:f7:4a:63:31:55:ef:5c:56:01:ed: 18:f9:a4:1b:50:dd:1b:28:f2:43:cd:cf:5c:fe:f5: 9c:95:53:22:70:c5:ff:64:6b:ce:5b:c7:68:d1:2f: 24:dd:42:24:c8:0d:5c:f4:ca:16:9e:86:93:c8:29: dc:2a:5d:26:86:ae:27:50:3b:63:f9:a1:b2:94:2f: f9:ad:a3:2b:81:34:df:02:69:16:7d:3f:3e:f1:7a: 72:58:47:a8:1a:36:45:9c:6d:00:69:7c:af:73:87: dc:4d:43:99:80:5e:22:7d:71:b6:21:14:1c:a6:4e: 6a:f5:24:96:bb:43:fa:ee:9e:10:9b:4d:26:fd:c3: 1c:55:fc:68:8e:60:bd:ff:02:3e:83:72:f6:70:8d: 0a:d8:ed:3b:52:e6:01:5f:b4:89:0f:91:9b:30:8e: 64:ef:45:6a:4c:e8:ef:c3:fb:92:0c:1a:0f:ba:79: f9:30:36:e6:7c:0a:59:be:43:71:7c:03:2c:d2:c9: 39:4e:18:22:dc:2d:39:97:fa:72:39:70:40:29:37: f7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B2:97:81:EC:17:95:90:E7:85:06:CD:FC:46:FF:17:DA:0B:3F:D0 X509v3 Authority Key Identifier: keyid:CB:0C:33:0E:38:37:94:8F:E5:DD:FA:60:47:32:77:5D:4B:0C:F8:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:f1:77:3c:0b:13:40:17:96:86:df:fc:6d:37:ec:ba:b8:20: 43:53:88:18:20:62:29:2e:3f:ff:1c:7a:3d:2a:d8:d5:54:6b: d9:8a:d6:3b:50:64:21:81:cc:69:f5:8d:09:d1:72:a8:22:cf: 67:74:e4:52:95:95:36:13:7d:46:52:ca:1f:4a:98:eb:60:b4: 1a:bc:63:9d:8d:73:77:b4:31:5a:a5:f1:a7:69:e5:88:dc:b9: 19:ae:d4:a9:dc:8e:2d:2e:64:d9:23:40:1c:98:11:5e:49:df: ba:8b:4f:3f:27:68:2c:53:c2:3b:54:e0:cc:16:5a:01:bf:89: 10:25:05:87:9d:c7:88:fe:92:b7:f0:81:f2:a2:59:8a:bb:64: e7:a0:e8:ce:bf:ca:f3:fb:23:55:48:d3:27:44:c2:6e:24:8a: 82:80:bb:67:99:b4:f0:ff:f6:84:a9:3e:fd:d6:5b:7d:3a:4d: 26:f4:5a:75:b7:5d:0a:dd:bf:fc:f8:8a:cc:c3:a9:e4:96:46: bf:f8:af:ad:8a:d0:88:17:f3:03:85:e4:4d:c3:a6:ed:eb:e1: 05:15:28:0c:6e:6b:b0:9e:93:0b:ef:0d:d2:11:b7:42:b9:82: f0:47:14:41:25:40:33:ca:30:34:83:0c:e4:32:c1:98:05:f1: f2:49:7b:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM2NDUxMTAvBgNVBAUTKENCMEMzMzBFMzgzNzk0OEZFNURERkE2MDQ3MzI3NzVE NEIwQ0Y4MTQwHhcNMjUxMDE5MDg1NDQ3WhcNMjUxMDI2MDg1NDQ3WjAYMRYwFAYD VQQDEw02OGY0YTc1Ny0xMDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3l0FlrxfTxTHzpVaTNTUWhBos+dBGpl0JYg2Gehc5GWQtom8RCtaTHNMSDm/ llc2zfdKYzFV71xWAe0Y+aQbUN0bKPJDzc9c/vWclVMicMX/ZGvOW8do0S8k3UIk yA1c9MoWnoaTyCncKl0mhq4nUDtj+aGylC/5raMrgTTfAmkWfT8+8XpyWEeoGjZF nG0AaXyvc4fcTUOZgF4ifXG2IRQcpk5q9SSWu0P67p4Qm00m/cMcVfxojmC9/wI+ g3L2cI0K2O07UuYBX7SJD5GbMI5k70VqTOjvw/uSDBoPunn5MDbmfApZvkNxfAMs 0sk5Thgi3C05l/pyOXBAKTf32QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP2yl4Hs F5WQ54UGzfxG/xfaCz/QMB8GA1UdIwQYMBaAFMsMMw44N5SP5d36YEcyd11LDPgU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzY0NS8xRUVFQkQyMjgw NkYxMUVGOEI0NUQ3NzlDNEY5QUUwMi95d3d6RGpnM2xJX2wzZnBnUnpKM1hVc00t QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l3d3pEamczbElfbDNmcGdSekozWFVzTS1CUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzY0NS8xRUVFQkQyMjgwNkYxMUVGOEI0NUQ3NzlDNEY5QUUwMi95d3d6RGpnM2xJ X2wzZnBnUnpKM1hVc00tQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAd8Xc8CxNAF5aG3/xtN+y6uCBDU4gYIGIpLj//HHo9KtjVVGvZitY7 UGQhgcxp9Y0J0XKoIs9ndORSlZU2E31GUsofSpjrYLQavGOdjXN3tDFapfGnaeWI 3LkZrtSp3I4tLmTZI0AcmBFeSd+6i08/J2gsU8I7VODMFloBv4kQJQWHnceI/pK3 8IHyolmKu2TnoOjOv8rz+yNVSNMnRMJuJIqCgLtnmbTw//aEqT791lt9Ok0m9Fp1 t10K3b/8+IrMw6nklka/+K+titCIF/MDheRNw6bt6+EFFSgMbmuwnpML7w3SEbdC uYLwRxRBJUAzyjA0gwzkMsGYBfHySXs4 -----END CERTIFICATE-----Generated at Tue Oct 21 02:04:22 2025 by rpki-client