$ rpki-client -vvf rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft File: vY9TgeGI5FgPskcsJxoFQp4tXCI.mft (raw, json) Hash identifier: 1o2h5XvSzhwc2u6MksEycvX5xi3q5vU/s/8pSO7pxUs= Subject key identifier: A2:5E:07:A2:5B:8A:71:4E:A5:72:B4:55:E5:A1:7A:20:E2:00:9A:A3 Authority key identifier: BD:8F:53:81:E1:88:E4:58:0F:B2:47:2C:27:1A:05:42:9E:2D:5C:22 Certificate issuer: /CN=A915D66D/serialNumber=BD8F5381E188E4580FB2472C271A05429E2D5C22 Certificate serial: 1B46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft Manifest number: 1B3B Signing time: Sat 18 Oct 2025 16:37:24 +0000 Manifest this update: Sat 18 Oct 2025 16:37:23 +0000 Manifest next update: Sat 25 Oct 2025 16:37:23 +0000 Files and hashes: 1: vY9TgeGI5FgPskcsJxoFQp4tXCI.crl (hash: EtY+MjbI7l27IfHypUUrqkA31uBat6SfNmLi00nCXaY=) 2: 59029A32233A11E78D48837AC4F9AE02.roa (hash: XfYeKxfatX6id5bBv2XHc88RkA9A8XtPbM07HmC0bY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.crl rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:37:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6982 (0x1b46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D66D, serialNumber=BD8F5381E188E4580FB2472C271A05429E2D5C22 Validity Not Before: Oct 18 16:37:23 2025 GMT Not After : Oct 25 16:37:23 2025 GMT Subject: CN=68f3c244-089f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:36:ca:b7:36:c4:f9:dc:2c:56:8f:91:8f:7a: 99:75:a0:27:71:76:52:4d:ef:30:0a:7d:3e:85:12: 70:36:e7:d9:10:5c:f5:b0:a1:40:91:46:ed:68:07: a0:14:5c:c8:80:d9:ab:3c:7a:0d:eb:8b:1d:92:33: e1:8b:72:ac:98:8f:e0:2a:2f:59:9c:03:5f:5b:ac: fc:3a:28:c1:5e:fc:0f:ce:04:28:af:09:db:41:4d: c9:72:61:b1:4b:ec:0a:e4:1a:5b:2d:79:86:2c:bc: 9a:03:94:e1:fc:37:f7:12:9e:ec:2a:88:42:5c:cd: d4:e8:91:72:35:ab:20:5f:4e:03:45:6e:27:73:c3: ea:9d:8f:78:ca:19:35:b3:15:d3:55:7b:85:60:de: 71:86:02:3e:97:88:77:3b:ae:f3:36:c3:bc:b9:9b: a2:81:f6:b1:66:3c:6d:55:1b:f9:ba:a8:eb:16:c5: 1e:b5:75:8f:0d:32:b7:ce:80:e6:f0:af:a7:05:40: 29:07:df:0d:8a:65:e1:20:b1:aa:68:7a:52:d7:1a: a8:da:2d:0d:dc:b4:86:8c:76:70:96:db:48:1f:26: 12:cc:bb:f2:96:32:79:70:27:5d:9e:6c:c9:ab:22: d0:d0:5e:21:c1:e9:a1:83:f4:b3:cd:6c:5c:1f:03: 57:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:5E:07:A2:5B:8A:71:4E:A5:72:B4:55:E5:A1:7A:20:E2:00:9A:A3 X509v3 Authority Key Identifier: keyid:BD:8F:53:81:E1:88:E4:58:0F:B2:47:2C:27:1A:05:42:9E:2D:5C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:61:90:7e:b4:c4:1d:85:0a:69:83:9c:a4:af:f1:1b:4f:d6: 4f:24:74:ce:78:1d:52:25:82:a3:84:d1:d0:49:99:0c:53:dc: 43:1d:1e:25:5f:66:f1:40:0c:0b:03:71:5c:10:51:ff:38:ee: e2:20:64:46:41:a8:19:dc:12:d6:73:9a:5c:a0:ca:90:00:af: 7d:73:7a:62:5d:e1:14:54:59:c2:e6:ba:59:b0:bd:33:bd:4d: 29:ab:d8:72:57:ff:14:0e:aa:4b:8d:8e:ac:1b:c3:ac:44:cc: 97:3d:cc:e2:b9:d7:75:a4:5f:10:ff:8b:55:12:ac:b7:9f:49: 0d:f9:58:4d:62:7e:57:fc:26:15:92:6c:78:a4:e5:5b:4a:15: 14:46:f2:78:63:d3:9e:49:6d:a7:44:05:04:2d:ee:5c:27:83: f9:37:b8:2c:01:3e:29:6e:d5:f5:0d:59:b1:d5:58:9b:73:91: 47:98:bc:85:69:d8:2a:5e:49:6d:42:19:16:ea:ca:e3:8e:57: 11:6e:7a:8a:97:c9:0d:00:09:e5:19:e8:c1:03:81:da:ba:84: d3:05:ea:db:1c:7f:0f:75:14:f2:cd:22:e4:d6:26:8f:0d:b6: 49:05:bd:b0:9a:4d:db:e0:31:5f:74:c4:03:ea:74:d2:00:bc: 3c:8e:c3:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG0YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2NkQxMTAvBgNVBAUTKEJEOEY1MzgxRTE4OEU0NTgwRkIyNDcyQzI3MUEwNTQy OUUyRDVDMjIwHhcNMjUxMDE4MTYzNzIzWhcNMjUxMDI1MTYzNzIzWjAYMRYwFAYD VQQDEw02OGYzYzI0NC0wODlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3zbKtzbE+dwsVo+Rj3qZdaAncXZSTe8wCn0+hRJwNufZEFz1sKFAkUbtaAeg FFzIgNmrPHoN64sdkjPhi3KsmI/gKi9ZnANfW6z8OijBXvwPzgQorwnbQU3JcmGx S+wK5BpbLXmGLLyaA5Th/Df3Ep7sKohCXM3U6JFyNasgX04DRW4nc8PqnY94yhk1 sxXTVXuFYN5xhgI+l4h3O67zNsO8uZuigfaxZjxtVRv5uqjrFsUetXWPDTK3zoDm 8K+nBUApB98NimXhILGqaHpS1xqo2i0N3LSGjHZwlttIHyYSzLvyljJ5cCddnmzJ qyLQ0F4hwemhg/SzzWxcHwNXCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJeB6Jb inFOpXK0VeWheiDiAJqjMB8GA1UdIwQYMBaAFL2PU4HhiORYD7JHLCcaBUKeLVwi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDY2RC8xRUIwOTI1NDIz MzkxMUU3QTA2QjI1NzlDNEY5QUUwMi92WTlUZ2VHSTVGZ1Bza2NzSnhvRlFwNHRY Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZZOVRnZUdJNUZnUHNrY3NKeG9GUXA0dFhDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDY2RC8xRUIwOTI1NDIzMzkxMUU3QTA2QjI1NzlDNEY5QUUwMi92WTlUZ2VHSTVG Z1Bza2NzSnhvRlFwNHRYQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5YZB+tMQdhQppg5ykr/EbT9ZPJHTOeB1SJYKjhNHQSZkMU9xDHR4l X2bxQAwLA3FcEFH/OO7iIGRGQagZ3BLWc5pcoMqQAK99c3piXeEUVFnC5rpZsL0z vU0pq9hyV/8UDqpLjY6sG8OsRMyXPcziudd1pF8Q/4tVEqy3n0kN+VhNYn5X/CYV kmx4pOVbShUURvJ4Y9OeSW2nRAUELe5cJ4P5N7gsAT4pbtX1DVmx1Vibc5FHmLyF adgqXkltQhkW6srjjlcRbnqKl8kNAAnlGejBA4HauoTTBerbHH8PdRTyzSLk1iaP DbZJBb2wmk3b4DFfdMQD6nTSALw8jsNM -----END CERTIFICATE-----Generated at Sun Oct 19 23:29:19 2025 by rpki-client