$ rpki-client -vvf rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft File: k0_yOzjsbVimyqtwe3lVUcicMf0.mft (raw, json) Hash identifier: SIenLogDyAb2OT3dPYVwUEuC53rgFdWeUSQbzcSd32g= Subject key identifier: 55:F6:60:BE:27:21:3F:82:95:34:48:5A:07:1F:EF:EE:2E:CA:34:86 Authority key identifier: 93:4F:F2:3B:38:EC:6D:58:A6:CA:AB:70:7B:79:55:51:C8:9C:31:FD Certificate issuer: /CN=A917392B/serialNumber=934FF23B38EC6D58A6CAAB707B795551C89C31FD Certificate serial: 04BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft Manifest number: 04B9 Signing time: Sun 19 Oct 2025 01:42:48 +0000 Manifest this update: Sun 19 Oct 2025 01:42:47 +0000 Manifest next update: Sun 26 Oct 2025 01:42:47 +0000 Files and hashes: 1: k0_yOzjsbVimyqtwe3lVUcicMf0.crl (hash: 1qeU4mNNX2mMAjDjmwwNqMtMOrNckdyADlnBlFraYYk=) 2: B7BE1DAC482511ECA1A68F13C4F9AE02.roa (hash: QSS01Cht+60Ca3lCH+aUYEQ83cHrjHOe9Xz/oSR4PIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.crl rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1214 (0x4be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917392B, serialNumber=934FF23B38EC6D58A6CAAB707B795551C89C31FD Validity Not Before: Oct 19 01:42:47 2025 GMT Not After : Oct 26 01:42:47 2025 GMT Subject: CN=68f44218-a00d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6e:8f:75:aa:dc:05:bf:1c:7d:a1:99:fe:a4: 19:44:33:65:80:d5:9d:08:61:86:05:dc:4b:38:94: 35:70:fe:75:2d:e9:ca:b8:e5:47:53:84:f6:4e:3d: 9a:9c:c5:86:eb:e1:77:d1:58:f3:dd:a6:ac:b0:aa: 00:3f:39:ce:08:91:76:54:bf:4f:8f:9c:8d:e4:25: 87:0c:40:93:87:2a:f7:5b:31:3a:dc:7e:d2:b5:71: b2:0e:3a:70:56:27:b6:f0:22:4d:06:b9:01:af:e6: 75:eb:6c:e6:7e:cd:23:a0:21:ee:8e:62:3d:3d:a7: 18:6a:9d:9d:7a:db:1c:79:45:2d:d9:9d:3c:37:8f: a0:3f:5a:45:dd:80:d0:b5:dd:b3:ff:aa:ca:60:47: 78:dc:ae:5e:16:bd:22:d3:2e:ed:ad:b4:b3:a8:65: b2:61:26:03:2c:a8:e8:6e:d5:02:09:8e:ca:5d:11: 81:50:be:44:12:91:50:77:79:0b:72:6a:b5:08:1c: 70:4b:03:d6:fe:85:91:ba:0f:4c:f6:12:d1:18:e2: 3b:15:57:dc:6c:3e:17:76:bc:6c:d9:10:1b:e3:d8: c1:43:6e:29:f1:96:ef:46:79:ed:3b:21:96:bd:4d: 5b:3b:e3:a8:f3:3f:5f:58:13:6a:17:94:4a:4a:45: 84:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F6:60:BE:27:21:3F:82:95:34:48:5A:07:1F:EF:EE:2E:CA:34:86 X509v3 Authority Key Identifier: keyid:93:4F:F2:3B:38:EC:6D:58:A6:CA:AB:70:7B:79:55:51:C8:9C:31:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:2d:d2:a7:d0:b4:6a:36:e2:07:c3:cd:dd:99:f9:08:b9:2b: 68:c2:81:c9:e5:ef:da:39:53:1a:14:18:67:ae:75:cb:a0:fe: 4f:f4:e3:10:b5:23:f0:58:23:8c:18:ef:14:90:5f:c8:90:b1: e7:c0:4d:c3:eb:e8:d2:42:1e:43:3d:e8:29:b3:4f:18:d5:e1: b3:ed:19:84:6f:1b:03:59:78:39:0d:41:58:14:c4:bf:59:2a: 5c:7a:6c:27:df:18:c8:0e:f3:7d:a4:a0:3c:df:97:1c:46:99: a2:20:cc:4c:0d:9a:67:01:19:73:cd:1f:1d:7c:86:45:f0:21: 15:a6:19:4b:d5:c2:a2:c5:44:84:93:58:cf:fb:4a:5d:7a:e7: 39:0e:b4:c6:11:56:ec:17:7a:01:f8:6d:e2:25:0f:05:82:a5: 44:80:2f:ed:ea:9f:5e:47:08:b4:29:3c:50:eb:29:52:2a:e5: 76:ac:1b:9a:23:19:78:52:fa:af:17:7d:f9:20:d2:12:ab:c2: 4d:d5:b1:c4:40:e2:2c:13:c1:49:80:66:ca:46:82:8c:bd:ae: 9a:53:b1:8f:a3:40:ba:51:53:39:37:16:0a:af:4d:4b:d4:67: ff:d8:89:33:5e:94:d2:62:eb:a3:76:5b:f6:f9:1f:9d:82:75: 4b:71:87:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM5MkIxMTAvBgNVBAUTKDkzNEZGMjNCMzhFQzZENThBNkNBQUI3MDdCNzk1NTUx Qzg5QzMxRkQwHhcNMjUxMDE5MDE0MjQ3WhcNMjUxMDI2MDE0MjQ3WjAYMRYwFAYD VQQDEw02OGY0NDIxOC1hMDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu26PdarcBb8cfaGZ/qQZRDNlgNWdCGGGBdxLOJQ1cP51LenKuOVHU4T2Tj2a nMWG6+F30Vjz3aassKoAPznOCJF2VL9Pj5yN5CWHDECThyr3WzE63H7StXGyDjpw Vie28CJNBrkBr+Z162zmfs0joCHujmI9PacYap2detsceUUt2Z08N4+gP1pF3YDQ td2z/6rKYEd43K5eFr0i0y7trbSzqGWyYSYDLKjobtUCCY7KXRGBUL5EEpFQd3kL cmq1CBxwSwPW/oWRug9M9hLRGOI7FVfcbD4Xdrxs2RAb49jBQ24p8ZbvRnntOyGW vU1bO+Oo8z9fWBNqF5RKSkWErQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFX2YL4n IT+ClTRIWgcf7+4uyjSGMB8GA1UdIwQYMBaAFJNP8js47G1YpsqrcHt5VVHInDH9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzkyQi9CMjBEQUQ2NjQ4 MjMxMUVDOTM3NjgzMTJDNEY5QUUwMi9rMF95T3pqc2JWaW15cXR3ZTNsVlVjaWNN ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2swX3lPempzYlZpbXlxdHdlM2xWVWNpY01mMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzkyQi9CMjBEQUQ2NjQ4MjMxMUVDOTM3NjgzMTJDNEY5QUUwMi9rMF95T3pqc2JW aW15cXR3ZTNsVlVjaWNNZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRLdKn0LRqNuIHw83dmfkIuStowoHJ5e/aOVMaFBhnrnXLoP5P9OMQ tSPwWCOMGO8UkF/IkLHnwE3D6+jSQh5DPegps08Y1eGz7RmEbxsDWXg5DUFYFMS/ WSpcemwn3xjIDvN9pKA835ccRpmiIMxMDZpnARlzzR8dfIZF8CEVphlL1cKixUSE k1jP+0pdeuc5DrTGEVbsF3oB+G3iJQ8FgqVEgC/t6p9eRwi0KTxQ6ylSKuV2rBua Ixl4UvqvF335INISq8JN1bHEQOIsE8FJgGbKRoKMva6aU7GPo0C6UVM5NxYKr01L 1Gf/2IkzXpTSYuujdlv2+R+dgnVLcYd+ -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:33 2025 by rpki-client