$ rpki-client -vvf rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.mft File: L1yb73Dl0CO3HEbLZs_iof20g1s.mft (raw, json) Hash identifier: uJv4elvbIvS1j/tDrIHqYE6wkeRWKkA7WoERtRST3Vg= Subject key identifier: EF:4D:D2:ED:A6:0A:4D:C0:31:7B:4B:12:6F:01:A7:55:A3:86:3F:EC Authority key identifier: 2F:5C:9B:EF:70:E5:D0:23:B7:1C:46:CB:66:CF:E2:A1:FD:B4:83:5B Certificate issuer: /CN=A915D55E/serialNumber=2F5C9BEF70E5D023B71C46CB66CFE2A1FDB4835B Certificate serial: 07B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1yb73Dl0CO3HEbLZs_iof20g1s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.mft Manifest number: 07AB Signing time: Sat 18 Oct 2025 22:41:47 +0000 Manifest this update: Sat 18 Oct 2025 22:41:47 +0000 Manifest next update: Sat 25 Oct 2025 22:41:47 +0000 Files and hashes: 1: L1yb73Dl0CO3HEbLZs_iof20g1s.crl (hash: t3X95Re0eR3Kko50z2R5IjODkjVxJMVsVopXkujWWMI=) 2: 2323F9621D5D11EBA3A7E71CC4F9AE02.roa (hash: V6nVYtxgABEEx59pXAhW4JauDnfyhwDJHmUDG1nlXFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.crl rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1yb73Dl0CO3HEbLZs_iof20g1s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:41:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1969 (0x7b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D55E, serialNumber=2F5C9BEF70E5D023B71C46CB66CFE2A1FDB4835B Validity Not Before: Oct 18 22:41:47 2025 GMT Not After : Oct 25 22:41:47 2025 GMT Subject: CN=68f417ab-f15e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0b:d5:c0:4b:53:4f:5e:ee:00:c7:20:7d:60: bb:e9:65:ff:dc:13:22:a5:58:81:d1:75:97:14:78: c6:7f:ca:70:cf:15:8f:0f:06:5e:44:98:ac:36:30: c5:5a:6f:69:0f:e2:e7:ad:e5:8a:e6:3f:fa:f2:5b: 0c:d5:0c:06:0b:72:4d:3b:14:e3:a3:cb:07:03:26: f2:f5:29:17:11:cd:a0:0f:16:fd:e2:8d:2e:59:19: 49:1c:df:e7:27:88:8f:8b:e4:b1:3d:cd:06:08:e0: 40:f4:00:64:60:00:34:b9:83:f2:4e:ce:6d:fb:c5: 21:4a:71:45:e3:ee:05:68:57:d8:b1:c6:f6:cb:07: fa:7c:3c:06:69:e4:65:99:e7:b4:e6:2a:8b:11:91: 07:c4:ae:33:3a:ce:c5:b1:6e:c6:ef:e6:d8:53:c1: 02:fc:d7:e1:d5:6f:a1:72:bb:a9:b7:62:eb:34:73: 8f:04:44:19:1a:5a:d5:cc:b5:19:06:2c:ae:51:75: 77:a0:f2:52:24:54:ba:34:02:04:ab:a8:2b:2f:61: f3:f0:f2:d5:d8:7d:ec:6d:e9:19:9a:07:19:a0:2e: 40:9b:5e:03:d6:f0:9f:5a:64:10:e5:ad:35:b7:16: d7:df:76:7e:f1:f4:a5:e1:40:89:ca:28:1d:57:1e: 4f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:4D:D2:ED:A6:0A:4D:C0:31:7B:4B:12:6F:01:A7:55:A3:86:3F:EC X509v3 Authority Key Identifier: keyid:2F:5C:9B:EF:70:E5:D0:23:B7:1C:46:CB:66:CF:E2:A1:FD:B4:83:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1yb73Dl0CO3HEbLZs_iof20g1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:c9:4b:1c:c2:e1:cc:ab:31:b6:f1:04:b2:60:6b:e2:90:ad: 15:bc:bb:34:2d:04:a5:d7:a9:78:04:b5:b6:63:22:e8:34:d7: 84:39:b4:3a:04:2d:bc:a9:de:7c:98:ff:01:df:21:51:a1:be: 99:49:4b:04:f0:60:6c:c3:86:81:f4:6b:7f:fc:38:42:36:07: fb:3a:7d:42:ac:1f:0e:8c:b2:4a:8c:ec:90:89:b5:56:a5:f3: 82:bc:b0:86:38:39:8e:d4:3a:4b:08:0b:d3:f2:63:b2:06:71: 0f:61:2b:44:51:e1:6b:99:bc:2d:d3:4c:e5:63:31:57:27:c5: 4a:2c:c8:12:a0:f1:9c:43:d7:88:55:d0:39:c1:3e:b3:9f:29: a5:2e:dc:b6:48:4f:cc:8c:3d:ca:0b:2b:02:b4:00:90:14:c2: 3f:60:b9:f8:38:84:5f:d1:db:6a:b6:a4:21:7e:93:c0:cf:32: 3e:8c:27:c1:d2:66:17:76:f7:e7:0e:f2:e0:f1:24:88:64:56: 5b:fd:de:2b:05:5b:74:63:ba:aa:22:65:d5:dd:42:19:ad:88: fe:dd:1d:f7:0f:48:f7:90:f7:e8:25:e6:1c:66:a1:d5:0b:e6: 89:03:47:1b:1f:da:7f:e9:7d:71:83:1a:0a:f6:68:23:c9:98: 1f:ec:59:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ1NUUxMTAvBgNVBAUTKDJGNUM5QkVGNzBFNUQwMjNCNzFDNDZDQjY2Q0ZFMkEx RkRCNDgzNUIwHhcNMjUxMDE4MjI0MTQ3WhcNMjUxMDI1MjI0MTQ3WjAYMRYwFAYD VQQDEw02OGY0MTdhYi1mMTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAngvVwEtTT17uAMcgfWC76WX/3BMipViB0XWXFHjGf8pwzxWPDwZeRJisNjDF Wm9pD+LnreWK5j/68lsM1QwGC3JNOxTjo8sHAyby9SkXEc2gDxb94o0uWRlJHN/n J4iPi+SxPc0GCOBA9ABkYAA0uYPyTs5t+8UhSnFF4+4FaFfYscb2ywf6fDwGaeRl mee05iqLEZEHxK4zOs7FsW7G7+bYU8EC/Nfh1W+hcrupt2LrNHOPBEQZGlrVzLUZ BiyuUXV3oPJSJFS6NAIEq6grL2Hz8PLV2H3sbekZmgcZoC5Am14D1vCfWmQQ5a01 txbX33Z+8fSl4UCJyigdVx5PHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO9N0u2m Ck3AMXtLEm8Bp1Wjhj/sMB8GA1UdIwQYMBaAFC9cm+9w5dAjtxxGy2bP4qH9tINb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDU1RS82MkE1RUI2QTFE NUIxMUVCODNBQzg3MUFDNEY5QUUwMi9MMXliNzNEbDBDTzNIRWJMWnNfaW9mMjBn MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wxeWI3M0RsMENPM0hFYkxac19pb2YyMGcxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDU1RS82MkE1RUI2QTFENUIxMUVCODNBQzg3MUFDNEY5QUUwMi9MMXliNzNEbDBD TzNIRWJMWnNfaW9mMjBnMXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARyUscwuHMqzG28QSyYGvikK0VvLs0LQSl16l4BLW2YyLoNNeEObQ6 BC28qd58mP8B3yFRob6ZSUsE8GBsw4aB9Gt//DhCNgf7On1CrB8OjLJKjOyQibVW pfOCvLCGODmO1DpLCAvT8mOyBnEPYStEUeFrmbwt00zlYzFXJ8VKLMgSoPGcQ9eI VdA5wT6znymlLty2SE/MjD3KCysCtACQFMI/YLn4OIRf0dtqtqQhfpPAzzI+jCfB 0mYXdvfnDvLg8SSIZFZb/d4rBVt0Y7qqImXV3UIZrYj+3R33D0j3kPfoJeYcZqHV C+aJA0cbH9p/6X1xgxoK9mgjyZgf7FmN -----END CERTIFICATE-----Generated at Mon Oct 20 08:22:58 2025 by rpki-client