$ rpki-client -vvf rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.mft File: y7Nb36Nai-snCaTbsy49IWLsH6g.mft (raw, json) Hash identifier: 5FPIHn89l7led97VS50z98YcI4u20XA+f2ILpmzh4Fo= Subject key identifier: 1D:96:A6:5F:36:D3:63:A2:BA:06:5D:98:A3:AB:A0:0D:1A:0B:D7:3C Authority key identifier: CB:B3:5B:DF:A3:5A:8B:EB:27:09:A4:DB:B3:2E:3D:21:62:EC:1F:A8 Certificate issuer: /CN=A919130F/serialNumber=CBB35BDFA35A8BEB2709A4DBB32E3D2162EC1FA8 Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7Nb36Nai-snCaTbsy49IWLsH6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.mft Manifest number: 55 Signing time: Sun 19 Oct 2025 10:34:56 +0000 Manifest this update: Sun 19 Oct 2025 10:34:55 +0000 Manifest next update: Sun 26 Oct 2025 10:34:55 +0000 Files and hashes: 1: y7Nb36Nai-snCaTbsy49IWLsH6g.crl (hash: HRDcMVWBcPWoHtPnSMl9dtQAwS80jAC+LeioCOJ8JEI=) 2: 26B1D24C2A4211F08783A40EC4F9AE02.roa (hash: 3bcDVvnCHw6LlppchOqrgSyXHliARmZhxXNaF8dSpvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.crl rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7Nb36Nai-snCaTbsy49IWLsH6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:34:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919130F, serialNumber=CBB35BDFA35A8BEB2709A4DBB32E3D2162EC1FA8 Validity Not Before: Oct 19 10:34:55 2025 GMT Not After : Oct 26 10:34:55 2025 GMT Subject: CN=68f4becf-5342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:04:f2:cd:6e:a3:97:84:8b:0d:00:87:2e:b0: 7d:b6:00:1c:54:e2:e7:b4:8c:53:bb:66:63:bc:73: db:da:ad:e7:65:d1:bc:2f:35:f2:84:7b:83:43:43: 55:10:ff:71:23:4e:4f:6a:3e:4a:ed:61:4b:95:95: af:d8:f0:1f:6a:f7:d0:f9:91:e5:bd:af:b0:0e:36: 4e:5d:27:e1:e1:26:8f:97:b1:c8:4c:cc:db:19:7d: 0f:ea:17:28:27:d6:4f:fe:b8:4a:b3:ce:df:0e:89: 02:20:4c:87:4f:92:81:f1:0d:3d:5d:16:fb:31:44: 49:60:9a:df:aa:96:5f:eb:00:05:9f:da:82:8d:84: 54:15:85:1f:a5:f8:7a:22:f7:59:a7:9e:cc:e6:50: d2:35:d9:ed:0e:76:70:1f:33:fa:80:b0:27:a2:16: 50:a3:bc:b7:bc:ae:0b:0b:3b:c4:dd:11:c9:ea:92: 8e:bd:61:cf:31:3a:0e:81:3e:48:e8:b5:81:bc:92: 16:7e:7b:a7:75:cc:de:05:c1:26:01:1e:fb:74:59: ae:b7:aa:d9:80:78:5c:27:11:24:0a:4c:a3:cd:aa: 14:fc:81:e5:74:35:c1:5d:9c:70:b3:bb:e7:8a:ea: 00:1c:ae:16:7f:d0:c2:49:7f:60:b4:e4:11:be:07: 5a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:96:A6:5F:36:D3:63:A2:BA:06:5D:98:A3:AB:A0:0D:1A:0B:D7:3C X509v3 Authority Key Identifier: keyid:CB:B3:5B:DF:A3:5A:8B:EB:27:09:A4:DB:B3:2E:3D:21:62:EC:1F:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7Nb36Nai-snCaTbsy49IWLsH6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:64:19:02:a9:b6:8f:a6:73:d9:59:4f:ec:59:8a:a4:a2:cd: 24:58:be:e7:a6:e6:c7:98:08:4a:3f:07:03:58:d8:f5:ba:b7: 69:32:ce:36:ba:11:3d:93:7e:64:72:7f:d8:3c:7c:bb:27:f9: 81:b7:f5:4f:bd:58:d0:ba:33:fd:80:ca:4a:a3:2f:52:25:57: 6b:41:4c:63:a5:72:1b:2b:62:ca:ba:c2:73:bb:05:d7:dc:5b: 73:4c:9b:69:08:81:4e:81:f1:2d:da:eb:01:e0:58:63:70:9d: 48:4c:30:31:a7:72:52:af:f1:74:6b:bb:56:51:8f:15:35:8c: c0:9a:a5:24:0e:45:c4:bf:b3:1f:f2:21:02:88:8f:28:4a:86: bd:1a:d4:82:c5:5b:a8:ce:75:07:46:09:73:26:d2:ea:2c:aa: 4e:a2:77:6f:5f:00:39:09:a7:80:f4:23:3c:02:fe:93:d2:91: b3:8f:1f:fa:2c:0b:77:6f:e1:7c:a0:4f:e4:20:4a:58:ca:c7: 86:18:0a:86:07:5f:15:63:86:f2:b4:44:f6:ec:a6:47:dd:ca: 35:fe:22:43:d0:f4:65:d9:6f:68:55:de:e5:63:2b:b0:73:c6: 45:d5:78:14:e8:9d:09:72:08:b0:2e:26:07:80:f6:8c:18:eb: a4:a5:03:b5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MTMwRjExMC8GA1UEBRMoQ0JCMzVCREZBMzVBOEJFQjI3MDlBNERCQjMyRTNEMjE2 MkVDMUZBODAeFw0yNTEwMTkxMDM0NTVaFw0yNTEwMjYxMDM0NTVaMBgxFjAUBgNV BAMTDTY4ZjRiZWNmLTUzNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDBPLNbqOXhIsNAIcusH22ABxU4ue0jFO7ZmO8c9varedl0bwvNfKEe4NDQ1UQ /3EjTk9qPkrtYUuVla/Y8B9q99D5keW9r7AONk5dJ+HhJo+XschMzNsZfQ/qFygn 1k/+uEqzzt8OiQIgTIdPkoHxDT1dFvsxRElgmt+qll/rAAWf2oKNhFQVhR+l+Hoi 91mnnszmUNI12e0OdnAfM/qAsCeiFlCjvLe8rgsLO8TdEcnqko69Yc8xOg6BPkjo tYG8khZ+e6d1zN4FwSYBHvt0Wa63qtmAeFwnESQKTKPNqhT8geV0NcFdnHCzu+eK 6gAcrhZ/0MJJf2C05BG+B1obAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHZamXzbT Y6K6Bl2Yo6ugDRoL1zwwHwYDVR0jBBgwFoAUy7Nb36Nai+snCaTbsy49IWLsH6gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxMzBGLzcyRTJDNDI0MkE0 MTExRjA4MzIxOTM0Q0M0RjlBRTAyL3k3TmIzNk5haS1zbkNhVGJzeTQ5SVdMc0g2 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveTdOYjM2TmFpLXNuQ2FUYnN5NDlJV0xzSDZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkx MzBGLzcyRTJDNDI0MkE0MTExRjA4MzIxOTM0Q0M0RjlBRTAyL3k3TmIzNk5haS1z bkNhVGJzeTQ5SVdMc0g2Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACZkGQKpto+mc9lZT+xZiqSizSRYvuem5seYCEo/BwNY2PW6t2kyzja6 ET2TfmRyf9g8fLsn+YG39U+9WNC6M/2AykqjL1IlV2tBTGOlchsrYsq6wnO7Bdfc W3NMm2kIgU6B8S3a6wHgWGNwnUhMMDGnclKv8XRru1ZRjxU1jMCapSQORcS/sx/y IQKIjyhKhr0a1ILFW6jOdQdGCXMm0uosqk6id29fADkJp4D0IzwC/pPSkbOPH/os C3dv4XygT+QgSljKx4YYCoYHXxVjhvK0RPbspkfdyjX+IkPQ9GXZb2hV3uVjK7Bz xkXVeBTonQlyCLAuJgeA9owY66SlA7U= -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:58 2025 by rpki-client