$ rpki-client -vvf rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft File: bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft (raw, json) Hash identifier: kq6cBB2ETEp4lfLLL8IaUxh3DrKPmas+v4WJhpdWqNc= Subject key identifier: D7:F6:38:A1:82:AF:67:F9:0A:63:54:6C:24:A9:87:62:1F:6E:1E:69 Authority key identifier: 6D:8A:B6:FD:E5:21:DC:10:6F:94:82:92:B5:02:FD:5A:07:34:83:7C Certificate issuer: /CN=A917877E/serialNumber=6D8AB6FDE521DC106F948292B502FD5A0734837C Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bYq2_eUh3BBvlIKStQL9Wgc0g3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft Manifest number: 36 Signing time: Sun 19 Oct 2025 11:02:20 +0000 Manifest this update: Sun 19 Oct 2025 11:02:19 +0000 Manifest next update: Sun 26 Oct 2025 11:02:19 +0000 Files and hashes: 1: bYq2_eUh3BBvlIKStQL9Wgc0g3w.crl (hash: IPrYJrKcSb02VYf4Fp0vX91hO/aSbStLUfNzGH6IiII=) 2: 9EA96DF25D5D11F08A574048C4F9AE02.roa (hash: q6ZblRMV0uyhkappWvL+RGy5XexsiemwGej/lfgL9RI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.crl rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bYq2_eUh3BBvlIKStQL9Wgc0g3w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917877E, serialNumber=6D8AB6FDE521DC106F948292B502FD5A0734837C Validity Not Before: Oct 19 11:02:19 2025 GMT Not After : Oct 26 11:02:19 2025 GMT Subject: CN=68f4c53c-6dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:64:31:b3:af:c1:67:2b:48:8d:86:30:2b:d2: 7d:7b:15:d3:95:1e:74:0f:2c:07:95:f8:e8:bc:c8: 4d:34:66:92:4a:5a:74:2c:80:8f:fa:d5:78:55:62: 32:89:22:d0:36:c9:75:fa:1c:56:70:a5:46:c1:85: 2e:a8:2e:4c:eb:60:91:88:da:ef:7d:cc:f8:4b:05: 25:06:c7:67:14:1f:d7:15:77:d6:2a:d0:b0:59:11: 6f:b3:2d:71:c7:18:4a:4d:a0:a1:25:4d:b2:0d:03: f1:25:81:a5:02:09:62:89:07:89:fe:29:b0:a6:f8: 3a:18:28:3c:9e:55:dd:5b:72:7b:36:1b:73:30:b0: 33:73:9e:87:d1:da:76:0d:46:19:c4:6d:d2:b0:81: 34:a5:0d:54:57:a7:90:70:52:77:59:bb:87:b6:48: cc:09:28:e9:74:a8:9a:0f:99:99:2d:cf:48:18:28: 61:6e:a3:1e:8d:cc:39:e9:4a:bf:98:3a:90:63:bc: 5f:20:07:c2:37:26:bf:e8:4e:26:2f:d7:ef:05:c7: e2:ab:5d:58:4e:74:fc:39:80:4f:20:92:c4:e9:5f: b6:ec:7d:cb:ec:65:c2:59:67:02:22:7b:5a:92:2d: e6:c9:d9:cf:83:da:f0:cb:7c:9b:4a:66:c8:9b:0e: 95:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F6:38:A1:82:AF:67:F9:0A:63:54:6C:24:A9:87:62:1F:6E:1E:69 X509v3 Authority Key Identifier: keyid:6D:8A:B6:FD:E5:21:DC:10:6F:94:82:92:B5:02:FD:5A:07:34:83:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bYq2_eUh3BBvlIKStQL9Wgc0g3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:05:b0:1d:fb:5c:a3:24:a7:b7:5a:be:17:84:73:f9:d7:36: 18:92:cc:b6:0a:af:1b:80:d6:6c:b1:b6:1d:f2:3e:62:17:be: 17:36:a7:b2:6f:d2:f9:e0:c9:d4:de:96:a4:e2:82:14:03:17: 93:37:c8:8f:fc:41:12:9a:f8:76:58:09:be:e7:fc:fd:76:00: a8:e8:e9:b6:40:e7:9c:0b:40:18:c5:ac:8a:21:b8:59:07:78: e0:d6:1a:ec:3d:4b:67:53:56:ec:3d:25:3e:9a:23:51:7e:16: 15:8e:07:8f:19:a8:d1:e1:19:66:08:cc:da:1e:c9:a5:d6:d2: 5b:a1:cb:a1:13:bf:07:03:30:05:5a:64:41:82:6b:c5:4d:27: 66:4a:64:80:1e:6f:26:71:5c:8f:d1:05:0e:7d:59:c1:66:fa: 16:41:06:c0:f5:2c:e1:4c:8f:23:0e:3d:48:b5:0d:74:0e:2b: ce:f4:de:52:3b:c9:40:78:34:f1:5b:26:47:57:3d:3b:97:9c: 42:30:47:e9:68:c4:ba:c3:30:ab:34:20:3e:65:ab:ea:30:2d: a9:84:32:31:64:fd:93:1b:9b:a6:5f:e2:38:e7:38:da:bd:78: f9:05:d1:10:78:9a:04:93:47:88:b7:54:80:7b:66:79:a3:ff: 21:66:6b:ba -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 ODc3RTExMC8GA1UEBRMoNkQ4QUI2RkRFNTIxREMxMDZGOTQ4MjkyQjUwMkZENUEw NzM0ODM3QzAeFw0yNTEwMTkxMTAyMTlaFw0yNTEwMjYxMTAyMTlaMBgxFjAUBgNV BAMTDTY4ZjRjNTNjLTZkYzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9ZDGzr8FnK0iNhjAr0n17FdOVHnQPLAeV+Oi8yE00ZpJKWnQsgI/61XhVYjKJ ItA2yXX6HFZwpUbBhS6oLkzrYJGI2u99zPhLBSUGx2cUH9cVd9Yq0LBZEW+zLXHH GEpNoKElTbINA/ElgaUCCWKJB4n+KbCm+DoYKDyeVd1bcns2G3MwsDNznofR2nYN RhnEbdKwgTSlDVRXp5BwUndZu4e2SMwJKOl0qJoPmZktz0gYKGFuox6NzDnpSr+Y OpBjvF8gB8I3Jr/oTiYv1+8Fx+KrXVhOdPw5gE8gksTpX7bsfcvsZcJZZwIie1qS LebJ2c+D2vDLfJtKZsibDpUZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1/Y4oYKv Z/kKY1RsJKmHYh9uHmkwHwYDVR0jBBgwFoAUbYq2/eUh3BBvlIKStQL9Wgc0g3ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4NzdFLzM4OUE2MkQyNUQ1 RDExRjBCNDlBNzg0N0M0RjlBRTAyL2JZcTJfZVVoM0JCdmxJS1N0UUw5V2djMGcz dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYllxMl9lVWgzQkJ2bElLU3RRTDlXZ2MwZzN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4 NzdFLzM4OUE2MkQyNUQ1RDExRjBCNDlBNzg0N0M0RjlBRTAyL2JZcTJfZVVoM0JC dmxJS1N0UUw5V2djMGczdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ0FsB37XKMkp7davheEc/nXNhiSzLYKrxuA1myxth3yPmIXvhc2p7Jv 0vngydTelqTighQDF5M3yI/8QRKa+HZYCb7n/P12AKjo6bZA55wLQBjFrIohuFkH eODWGuw9S2dTVuw9JT6aI1F+FhWOB48ZqNHhGWYIzNoeyaXW0luhy6ETvwcDMAVa ZEGCa8VNJ2ZKZIAebyZxXI/RBQ59WcFm+hZBBsD1LOFMjyMOPUi1DXQOK8703lI7 yUB4NPFbJkdXPTuXnEIwR+loxLrDMKs0ID5lq+owLamEMjFk/ZMbm6Zf4jjnONq9 ePkF0RB4mgSTR4i3VIB7Znmj/yFma7o= -----END CERTIFICATE-----Generated at Mon Oct 20 21:26:28 2025 by rpki-client