$ rpki-client -vvf rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft File: cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft (raw, json) Hash identifier: jLFUSDGBFMHA/WjbmEqmQUheK1tcerA3B0ZI7siKBXM= Subject key identifier: BA:C2:D4:14:35:50:55:60:31:70:31:50:69:B3:D2:BD:DC:52:5E:7D Authority key identifier: 71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7 Certificate issuer: /CN=A917174E/serialNumber=718073098AF0396FD8E3309A1B9FB6F3EEB17AE7 Certificate serial: 0E50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft Manifest number: 0E4F Signing time: Sat 18 Oct 2025 18:24:17 +0000 Manifest this update: Sat 18 Oct 2025 18:24:17 +0000 Manifest next update: Sat 25 Oct 2025 18:24:17 +0000 Files and hashes: 1: cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl (hash: yoNkcvTcgJTu/VB7zYUq+Od6gzdQ2LUjL3NvxhAaUKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:24:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3664 (0xe50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917174E, serialNumber=718073098AF0396FD8E3309A1B9FB6F3EEB17AE7 Validity Not Before: Oct 18 18:24:17 2025 GMT Not After : Oct 25 18:24:17 2025 GMT Subject: CN=68f3db51-a173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:dc:77:4b:f2:de:aa:64:9d:85:cd:f8:e2:de: 93:7b:70:62:0c:81:64:45:2c:1c:02:29:f4:06:ad: e1:98:e9:9d:6b:db:a5:64:68:cc:6a:90:18:70:95: 01:b7:99:0f:00:05:c1:1f:88:45:e7:df:4b:66:83: e0:17:c5:e7:14:02:20:2c:f2:2d:76:16:e3:7a:44: 1c:fc:64:70:f9:5b:14:40:0b:33:47:42:e8:ca:18: 3a:80:8f:39:7b:07:31:61:c2:fe:70:37:90:01:3e: 95:a1:d7:75:ba:9f:f0:1b:b8:d9:73:62:a8:d0:0f: ec:ae:39:5b:df:eb:a5:9b:0c:50:8a:46:b0:8c:28: ca:dd:e9:6c:21:33:b0:60:96:f1:20:88:2c:3c:53: 78:65:fd:ef:0a:9d:78:26:02:27:4f:b7:8f:a6:c1: 6e:92:ce:b0:f7:1e:52:49:29:85:be:67:89:d9:29: 16:7f:e4:93:f9:98:c1:7f:5a:ee:19:b5:65:77:e0: 93:ca:77:73:2d:ed:30:56:67:e2:fa:24:9e:6d:6f: 68:5a:4e:a0:35:1b:60:a2:e6:06:a5:a8:59:04:4b: f9:42:85:1f:17:2d:ac:a1:d6:51:13:2f:32:b3:39: 70:bf:53:9c:29:b8:0c:d7:4d:5f:5e:79:95:35:4a: f6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C2:D4:14:35:50:55:60:31:70:31:50:69:B3:D2:BD:DC:52:5E:7D X509v3 Authority Key Identifier: keyid:71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:44:29:90:ea:0c:dd:db:e0:93:45:2a:ad:5a:92:1a:61:94: 3f:aa:29:f8:87:98:dc:23:15:32:cf:6a:e9:1e:7f:78:d0:a7: a9:29:84:ae:45:d3:2e:c4:3c:80:32:da:12:2d:9c:12:17:b6: 13:d7:80:0a:06:33:b3:6f:e1:90:56:b1:04:6e:20:b9:32:c9: 66:41:cd:d7:f8:f2:c3:79:4b:3a:17:70:7e:59:fa:d8:54:67: e3:6f:cf:ae:f7:e5:6e:bd:ca:ff:33:05:b0:f2:bd:97:43:ff: 54:83:07:68:d3:ec:7f:14:7c:60:a6:87:8c:d1:7d:44:37:c1: 5c:18:65:90:49:6e:bc:be:3b:b1:3a:62:64:86:94:88:1d:03: 0a:b2:79:34:ef:34:ba:c1:07:42:2c:3e:fa:80:7d:fa:d3:70: fe:8b:53:d5:57:7d:1c:e0:8d:25:f5:b6:27:49:88:de:ed:2b: 2f:df:54:2f:60:d0:33:10:6c:6c:e5:12:a9:c1:b8:c4:e0:73: 6a:6f:d7:b4:f7:03:b4:77:cb:73:d0:68:3b:dc:ea:a9:08:f2: 89:5f:9c:fc:3e:a8:d7:23:77:85:fe:98:a8:10:09:84:29:c8: 8b:06:25:2c:66:35:d2:e1:66:c5:62:a4:97:5b:87:a5:2c:a7: ad:17:7f:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE3NEUxMTAvBgNVBAUTKDcxODA3MzA5OEFGMDM5NkZEOEUzMzA5QTFCOUZCNkYz RUVCMTdBRTcwHhcNMjUxMDE4MTgyNDE3WhcNMjUxMDI1MTgyNDE3WjAYMRYwFAYD VQQDEw02OGYzZGI1MS1hMTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0dx3S/LeqmSdhc344t6Te3BiDIFkRSwcAin0Bq3hmOmda9ulZGjMapAYcJUB t5kPAAXBH4hF599LZoPgF8XnFAIgLPItdhbjekQc/GRw+VsUQAszR0Loyhg6gI85 ewcxYcL+cDeQAT6Vodd1up/wG7jZc2Ko0A/srjlb3+ulmwxQikawjCjK3elsITOw YJbxIIgsPFN4Zf3vCp14JgInT7ePpsFuks6w9x5SSSmFvmeJ2SkWf+ST+ZjBf1ru GbVld+CTyndzLe0wVmfi+iSebW9oWk6gNRtgouYGpahZBEv5QoUfFy2sodZREy8y szlwv1OcKbgM101fXnmVNUr2jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrC1BQ1 UFVgMXAxUGmz0r3cUl59MB8GA1UdIwQYMBaAFHGAcwmK8Dlv2OMwmhuftvPusXrn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTc0RS81NEFBMTQ5Q0FB RjYxMUU5OUM1RUUyNTlDNEY5QUUwMi9jWUJ6Q1lyd09XX1k0ekNhRzUtMjgtNnhl dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NZQnpDWXJ3T1dfWTR6Q2FHNS0yOC02eGV1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTc0RS81NEFBMTQ5Q0FBRjYxMUU5OUM1RUUyNTlDNEY5QUUwMi9jWUJ6Q1lyd09X X1k0ekNhRzUtMjgtNnhldWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeRCmQ6gzd2+CTRSqtWpIaYZQ/qin4h5jcIxUyz2rpHn940KepKYSu RdMuxDyAMtoSLZwSF7YT14AKBjOzb+GQVrEEbiC5MslmQc3X+PLDeUs6F3B+WfrY VGfjb8+u9+Vuvcr/MwWw8r2XQ/9Ugwdo0+x/FHxgpoeM0X1EN8FcGGWQSW68vjux OmJkhpSIHQMKsnk07zS6wQdCLD76gH3603D+i1PVV30c4I0l9bYnSYje7Ssv31Qv YNAzEGxs5RKpwbjE4HNqb9e09wO0d8tz0Gg73OqpCPKJX5z8PqjXI3eF/pioEAmE KciLBiUsZjXS4WbFYqSXW4elLKetF3+Y -----END CERTIFICATE-----Generated at Mon Oct 20 18:37:27 2025 by rpki-client