$ rpki-client -vvf rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft File: 73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft (raw, json) Hash identifier: zmIUSKiyjUFCrGehIdqwaG9WTrXfBI/YjzZM4XEIkxM= Subject key identifier: 75:85:65:AC:3C:47:9C:A0:29:DC:35:1F:C5:F4:C9:E7:55:D3:A8:7B Authority key identifier: EF:76:2C:C9:42:19:E0:99:23:A1:1B:0D:3C:43:0E:7F:35:C8:D8:64 Certificate issuer: /CN=A917E458/serialNumber=EF762CC94219E09923A11B0D3C430E7F35C8D864 Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft Manifest number: 52 Signing time: Sun 19 Oct 2025 10:38:42 +0000 Manifest this update: Sun 19 Oct 2025 10:38:41 +0000 Manifest next update: Sun 26 Oct 2025 10:38:41 +0000 Files and hashes: 1: 73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl (hash: /CYJDdID22Qd38waJF3CZ8efYwb6p6FxATRfeN4ezG4=) 2: 0E6E2FF4590A11F0B7FD292DC4F9AE02.roa (hash: 7soTZ6EDnpP6A/A05OpE2en3043bE7DF3odg+8Ew9cU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E458, serialNumber=EF762CC94219E09923A11B0D3C430E7F35C8D864 Validity Not Before: Oct 19 10:38:41 2025 GMT Not After : Oct 26 10:38:41 2025 GMT Subject: CN=68f4bfb1-0af8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:29:00:dc:20:3c:af:e7:ac:82:be:bf:64:6c: e0:2d:e8:3c:ac:96:fc:a0:4c:54:2c:db:72:16:1f: 12:35:39:5b:04:67:11:75:fb:80:8d:eb:d8:2e:b2: fc:76:7c:9f:f5:1f:1d:ab:e6:6c:db:16:c7:7a:47: 0f:b0:44:41:05:a5:52:44:76:32:53:10:9e:73:1a: 47:1d:df:07:95:da:cf:16:b2:32:26:dd:2e:cf:5a: f3:6d:88:f7:cc:5b:bf:ba:af:82:65:0d:13:df:c5: fe:3d:e8:61:1f:a5:3c:5e:67:71:8c:85:06:1d:87: fe:07:5d:26:8e:2a:a5:8a:65:d4:85:58:5e:0e:ee: c4:03:da:3b:03:d2:d4:94:99:45:ab:3a:40:9f:5c: 13:e7:66:1c:08:58:7e:16:e1:38:d8:81:b3:44:47: 3e:0b:27:64:7e:7c:ec:39:a1:af:5b:35:fb:3f:f7: 66:2a:40:9d:d4:b0:cf:83:b2:9a:8a:d4:ed:78:a1: 53:d5:e0:51:f3:49:c7:47:71:a8:72:bf:bc:f4:c4: ca:08:b8:65:d8:4a:31:54:80:90:e3:ea:33:b8:b5: 29:e8:3a:ab:10:a0:d7:db:40:c7:19:69:bb:a5:e6: 2d:5b:3d:50:7e:5b:df:57:33:6c:c6:94:1a:41:55: e9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:85:65:AC:3C:47:9C:A0:29:DC:35:1F:C5:F4:C9:E7:55:D3:A8:7B X509v3 Authority Key Identifier: keyid:EF:76:2C:C9:42:19:E0:99:23:A1:1B:0D:3C:43:0E:7F:35:C8:D8:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:0d:39:e0:26:01:44:58:0f:a5:a6:c7:5d:ee:bc:99:cd:cb: a5:2a:b7:27:71:64:96:1b:b3:82:53:be:8c:45:e5:30:18:af: ad:73:2a:bf:70:68:53:2b:44:36:4a:16:94:30:94:01:c7:53: 2c:93:09:bb:04:65:1a:b4:0f:8a:95:58:0f:a5:a8:d8:4c:30: c9:e9:62:4f:07:47:a9:e7:02:f9:8e:64:3b:51:73:c5:cd:99: a4:a9:ee:5c:87:a7:fb:2b:60:3b:41:d8:d3:22:e5:73:69:d4: e1:19:19:be:4b:c1:7d:66:30:8f:cf:f8:42:0d:dd:c6:50:83: 76:eb:e9:3c:6a:ad:f5:c5:40:8d:e3:db:08:c8:26:3f:99:28: ba:54:88:8d:33:99:ef:74:3a:e7:82:ae:58:e8:bc:3b:91:c7: 26:e1:70:94:71:22:33:6a:fc:81:88:fc:2d:88:cb:23:ca:4e: f8:f1:d2:8f:94:37:5d:e0:ba:4c:32:1c:1f:56:c3:6e:78:cb: 8a:86:42:ef:12:44:11:f6:64:75:c6:70:c2:bb:4b:d6:77:e8: bd:55:ca:db:f0:f9:eb:c0:af:cb:a0:4d:a7:b0:0b:e6:87:08: 5b:aa:ae:a5:d0:ae:a8:e7:86:25:73:2a:76:96:33:53:88:50: 6f:8f:a4:1d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTQ1ODExMC8GA1UEBRMoRUY3NjJDQzk0MjE5RTA5OTIzQTExQjBEM0M0MzBFN0Yz NUM4RDg2NDAeFw0yNTEwMTkxMDM4NDFaFw0yNTEwMjYxMDM4NDFaMBgxFjAUBgNV BAMTDTY4ZjRiZmIxLTBhZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChKQDcIDyv56yCvr9kbOAt6DyslvygTFQs23IWHxI1OVsEZxF1+4CN69gusvx2 fJ/1Hx2r5mzbFsd6Rw+wREEFpVJEdjJTEJ5zGkcd3weV2s8WsjIm3S7PWvNtiPfM W7+6r4JlDRPfxf496GEfpTxeZ3GMhQYdh/4HXSaOKqWKZdSFWF4O7sQD2jsD0tSU mUWrOkCfXBPnZhwIWH4W4TjYgbNERz4LJ2R+fOw5oa9bNfs/92YqQJ3UsM+DspqK 1O14oVPV4FHzScdHcahyv7z0xMoIuGXYSjFUgJDj6jO4tSnoOqsQoNfbQMcZabul 5i1bPVB+W99XM2zGlBpBVenbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdYVlrDxH nKAp3DUfxfTJ51XTqHswHwYDVR0jBBgwFoAU73YsyUIZ4JkjoRsNPEMOfzXI2GQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFNDU4LzI3QkU4NDBFMzBE ODExRjBBN0JFMkU0RkM0RjlBRTAyLzczWXN5VUlaNEpram9Sc05QRU1PZnpYSTJH US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNzNZc3lVSVo0Smtqb1JzTlBFTU9melhJMkdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF NDU4LzI3QkU4NDBFMzBEODExRjBBN0JFMkU0RkM0RjlBRTAyLzczWXN5VUlaNEpr am9Sc05QRU1PZnpYSTJHUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJANOeAmAURYD6Wmx13uvJnNy6UqtydxZJYbs4JTvoxF5TAYr61zKr9w aFMrRDZKFpQwlAHHUyyTCbsEZRq0D4qVWA+lqNhMMMnpYk8HR6nnAvmOZDtRc8XN maSp7lyHp/srYDtB2NMi5XNp1OEZGb5LwX1mMI/P+EIN3cZQg3br6TxqrfXFQI3j 2wjIJj+ZKLpUiI0zme90OueCrljovDuRxybhcJRxIjNq/IGI/C2IyyPKTvjx0o+U N13gukwyHB9Ww254y4qGQu8SRBH2ZHXGcMK7S9Z36L1Vytvw+evAr8ugTaewC+aH CFuqrqXQrqjnhiVzKnaWM1OIUG+PpB0= -----END CERTIFICATE-----Generated at Mon Oct 20 09:37:15 2025 by rpki-client