$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft File: yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft (raw, json) Hash identifier: P5QBrNKmqnzI7IAGZfUYx/aYR9+Mo07ccqfNqi4SBp4= Subject key identifier: E0:8B:E8:51:D4:43:33:00:A3:11:EF:37:5B:91:F9:66:73:BD:9C:1A Authority key identifier: C9:12:B0:54:CA:43:A9:34:C1:77:57:33:D8:4B:F1:6E:48:56:BE:F0 Certificate issuer: /CN=A917E1FA/serialNumber=C912B054CA43A934C1775733D84BF16E4856BEF0 Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRKwVMpDqTTBd1cz2EvxbkhWvvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft Manifest number: 47 Signing time: Sun 19 Oct 2025 10:50:14 +0000 Manifest this update: Sun 19 Oct 2025 10:50:14 +0000 Manifest next update: Sun 26 Oct 2025 10:50:14 +0000 Files and hashes: 1: yRKwVMpDqTTBd1cz2EvxbkhWvvA.crl (hash: 4pnWYAHrkti1c4yYnAkgrPfuPTQR/ZX7m6x26JuDCEY=) 2: 7354ACC0472811F0ADE2D44BC4F9AE02.roa (hash: wcclgPl4R6E/Zzr/USbPvSIER4uFng9U6618g1EWkBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.crl rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRKwVMpDqTTBd1cz2EvxbkhWvvA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1FA, serialNumber=C912B054CA43A934C1775733D84BF16E4856BEF0 Validity Not Before: Oct 19 10:50:14 2025 GMT Not After : Oct 26 10:50:14 2025 GMT Subject: CN=68f4c266-a188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:74:cd:87:9e:b5:ab:85:10:6d:48:30:a8:2e: f1:ec:36:a6:ba:da:6e:82:b0:04:77:7c:dd:56:0d: 9c:21:13:a3:2c:a9:23:85:7d:ef:a5:6e:59:c1:a7: 2f:51:df:92:d0:8d:84:6d:15:2e:5d:33:13:47:b2: 32:2e:1f:54:f7:65:79:cb:15:d4:02:18:58:0e:3d: e2:ea:7e:8a:ee:87:b2:3c:32:97:fe:fa:e0:94:21: 24:cf:3d:2c:ed:2d:73:7b:c6:ed:50:c7:57:1e:6e: 7e:d0:e6:8f:a3:c3:c3:0e:5b:a2:69:f3:45:d0:e4: 13:34:32:91:79:0a:5e:71:00:c9:56:6b:5d:2c:44: fc:43:09:bb:94:1a:63:b6:f3:0e:1e:16:cd:a5:a0: 0f:21:61:f6:5e:66:7e:02:1a:53:85:c7:5a:c9:36: f9:71:03:f4:17:f8:d0:bf:d2:50:dc:c9:54:d8:80: b0:71:87:5b:6e:c7:00:16:c3:2a:1f:7c:1f:d7:88: 10:53:7b:6a:62:9d:14:f9:10:c4:6b:46:7f:b2:1b: 70:2d:15:3b:29:4d:df:ca:3b:63:65:46:67:ec:9b: 2c:bb:7d:24:04:f4:b8:b5:43:66:ad:e0:16:4c:48: f3:67:d2:80:d9:da:a6:ea:a4:66:df:6c:28:05:94: 7f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:8B:E8:51:D4:43:33:00:A3:11:EF:37:5B:91:F9:66:73:BD:9C:1A X509v3 Authority Key Identifier: keyid:C9:12:B0:54:CA:43:A9:34:C1:77:57:33:D8:4B:F1:6E:48:56:BE:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRKwVMpDqTTBd1cz2EvxbkhWvvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:02:cb:0b:b3:8b:df:19:6a:66:a2:77:af:72:36:28:d3:90: d2:51:1b:6f:31:7c:d5:3b:21:3d:5c:70:80:be:7b:e2:65:3c: 88:14:10:84:96:f1:2b:f0:f9:43:ad:05:a9:5c:fd:29:5d:92: 2a:46:60:6a:58:3b:c1:7b:c1:19:01:a8:a7:ae:06:35:b3:94: c9:ce:1f:ac:08:0b:ce:c6:51:85:1f:79:6d:42:6e:ae:97:6e: f0:b1:1d:f1:1a:4b:35:f7:91:3d:62:f9:23:4b:14:35:a2:ee: b0:56:ce:38:a5:9c:5d:ca:c5:64:58:ed:09:ec:1a:a2:7a:73: 78:9b:20:c3:42:18:bb:5d:2c:e4:f4:d3:69:78:43:37:2a:8b: 06:07:0e:cc:5c:a3:0f:90:05:d8:7e:08:42:6b:8b:58:e4:5c: 3d:f6:49:a9:c0:54:a8:68:a0:29:4b:77:12:38:e7:34:e5:d0: 64:94:95:95:89:b8:78:8c:ef:b8:74:25:e2:ac:b6:98:4d:25: 0f:2a:b7:c4:e2:56:f7:69:c0:21:8f:db:31:d0:41:c1:7c:fb: 1b:48:41:98:d8:56:50:15:5e:24:a1:d5:90:17:03:39:86:01: 02:7e:15:83:74:b0:c6:cd:14:28:e5:ff:e7:21:36:24:5a:4b: 17:5f:81:89 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTFGQTExMC8GA1UEBRMoQzkxMkIwNTRDQTQzQTkzNEMxNzc1NzMzRDg0QkYxNkU0 ODU2QkVGMDAeFw0yNTEwMTkxMDUwMTRaFw0yNTEwMjYxMDUwMTRaMBgxFjAUBgNV BAMTDTY4ZjRjMjY2LWExODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDedM2HnrWrhRBtSDCoLvHsNqa62m6CsAR3fN1WDZwhE6MsqSOFfe+lblnBpy9R 35LQjYRtFS5dMxNHsjIuH1T3ZXnLFdQCGFgOPeLqforuh7I8Mpf++uCUISTPPSzt LXN7xu1Qx1cebn7Q5o+jw8MOW6Jp80XQ5BM0MpF5Cl5xAMlWa10sRPxDCbuUGmO2 8w4eFs2loA8hYfZeZn4CGlOFx1rJNvlxA/QX+NC/0lDcyVTYgLBxh1tuxwAWwyof fB/XiBBTe2pinRT5EMRrRn+yG3AtFTspTd/KO2NlRmfsmyy7fSQE9Li1Q2at4BZM SPNn0oDZ2qbqpGbfbCgFlH/BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4IvoUdRD MwCjEe83W5H5ZnO9nBowHwYDVR0jBBgwFoAUyRKwVMpDqTTBd1cz2EvxbkhWvvAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFMUZBL0EyRDVFRTVFNDVB MzExRjA5NUVGRkQ0OEM0RjlBRTAyL3lSS3dWTXBEcVRUQmQxY3oyRXZ4YmtoV3Z2 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveVJLd1ZNcERxVFRCZDFjejJFdnhia2hXdnZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF MUZBL0EyRDVFRTVFNDVBMzExRjA5NUVGRkQ0OEM0RjlBRTAyL3lSS3dWTXBEcVRU QmQxY3oyRXZ4YmtoV3Z2QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJwCywuzi98Zamaid69yNijTkNJRG28xfNU7IT1ccIC+e+JlPIgUEISW 8Svw+UOtBalc/SldkipGYGpYO8F7wRkBqKeuBjWzlMnOH6wIC87GUYUfeW1Cbq6X bvCxHfEaSzX3kT1i+SNLFDWi7rBWzjilnF3KxWRY7QnsGqJ6c3ibIMNCGLtdLOT0 02l4QzcqiwYHDsxcow+QBdh+CEJri1jkXD32SanAVKhooClLdxI45zTl0GSUlZWJ uHiM77h0JeKstphNJQ8qt8TiVvdpwCGP2zHQQcF8+xtIQZjYVlAVXiSh1ZAXAzmG AQJ+FYN0sMbNFCjl/+chNiRaSxdfgYk= -----END CERTIFICATE-----Generated at Mon Oct 20 14:00:24 2025 by rpki-client