$ rpki-client -vvf rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.mft File: AVyC748X910B8qMGeGhd_cJeH3w.mft (raw, json) Hash identifier: IWTzYHHpP11N9QqrTCyLx2mDFE8wViAL57KyDlUSwIs= Subject key identifier: 55:9D:0F:2F:F6:5C:6B:D3:9A:51:C7:99:1A:6F:D0:B9:3B:6F:4C:E6 Authority key identifier: 01:5C:82:EF:8F:17:F7:5D:01:F2:A3:06:78:68:5D:FD:C2:5E:1F:7C Certificate issuer: /CN=A9193EEE/serialNumber=015C82EF8F17F75D01F2A30678685DFDC25E1F7C Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AVyC748X910B8qMGeGhd_cJeH3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.mft Manifest number: 66 Signing time: Sun 19 Oct 2025 10:25:38 +0000 Manifest this update: Sun 19 Oct 2025 10:25:37 +0000 Manifest next update: Sun 26 Oct 2025 10:25:37 +0000 Files and hashes: 1: AVyC748X910B8qMGeGhd_cJeH3w.crl (hash: xNDs3uNYZfOXFlNwAzdZ6yN17zstVWM6wQlppMjHFN8=) 2: 39A906E8152C11F08DC35116C4F9AE02.roa (hash: LpZGZLncTzWOvQxmXibbHB08wMwsFC9T1sCL9HoJGDA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.crl rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AVyC748X910B8qMGeGhd_cJeH3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:25:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193EEE, serialNumber=015C82EF8F17F75D01F2A30678685DFDC25E1F7C Validity Not Before: Oct 19 10:25:37 2025 GMT Not After : Oct 26 10:25:37 2025 GMT Subject: CN=68f4bca1-2f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2e:c6:7f:4f:22:b3:f8:b9:b9:82:43:f3:27: ab:01:f6:cf:c6:ea:c1:cf:d8:a6:02:8d:b4:11:42: 42:af:aa:20:97:b7:39:1f:d3:e4:54:1a:60:06:e6: 53:10:e7:21:54:70:97:4e:0d:f6:23:c8:f9:ea:32: 40:91:03:6a:ee:03:30:e9:b1:34:63:bf:ca:19:c9: a3:ad:1e:32:65:a5:e8:06:07:6c:b0:21:07:34:c7: b0:a8:27:36:6a:8c:60:4e:27:71:41:b7:0c:d7:35: e8:46:7d:d0:cd:67:14:ca:a3:f1:12:e1:9e:fc:9e: 9d:9a:ae:9f:71:f4:fd:2a:31:de:8b:0a:cd:98:a8: 34:66:43:db:40:6f:bd:8b:fc:c7:2f:da:ea:36:65: bc:7a:19:f3:fa:03:e9:b9:21:90:09:95:9c:14:32: 08:27:69:21:01:a0:08:3a:05:60:02:76:48:af:fb: f2:f0:1b:12:4f:95:2c:e3:40:c1:2b:6c:60:cc:2d: 0f:cc:40:cb:9c:38:81:4c:66:fa:66:3f:3c:08:75: 1c:8f:90:6c:cb:e4:de:dd:1b:61:0a:cb:27:8d:19: 64:b2:f0:59:74:25:bb:9f:dd:85:ba:64:82:60:70: 2c:39:5a:e5:80:d4:4c:7e:e6:15:2f:79:0c:95:ca: e0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:9D:0F:2F:F6:5C:6B:D3:9A:51:C7:99:1A:6F:D0:B9:3B:6F:4C:E6 X509v3 Authority Key Identifier: keyid:01:5C:82:EF:8F:17:F7:5D:01:F2:A3:06:78:68:5D:FD:C2:5E:1F:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AVyC748X910B8qMGeGhd_cJeH3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:9e:ef:be:28:03:d0:82:0f:3a:1b:30:fe:38:ff:b9:57:da: c5:48:c7:f3:c2:b1:f7:e4:84:2f:6a:5b:a3:d1:dc:c2:f9:03: 13:a5:2c:d2:ee:2c:c3:a4:32:40:0b:7c:cd:57:6b:39:d0:21: 1b:dc:d2:d1:af:d7:cd:03:a3:4b:b2:a5:c0:f0:83:bb:88:8a: 40:36:a6:30:d1:87:0b:2b:bb:38:d7:05:b9:f3:ee:ba:08:44: 4c:55:e3:7a:78:f6:e0:7d:3b:06:3f:ce:7f:ff:c2:4d:c3:53: 83:4a:62:5a:e2:67:a9:41:68:f7:7a:c8:fd:c2:a1:21:9b:46: 71:ce:a8:71:c6:53:84:10:59:8b:7c:5d:f6:4c:a0:14:69:dc: 8c:66:7f:59:b4:f5:12:a9:16:27:e1:61:80:0f:b4:8a:fa:07: e5:57:b1:54:27:b2:ce:18:5c:c9:cb:d2:a8:de:c7:1b:46:10: 80:cc:90:f2:a1:62:ec:0c:85:4a:e4:08:3f:6e:4b:0f:11:d4: 72:04:b1:04:c7:cd:c2:7e:d1:95:de:2b:12:11:a1:02:11:90: 0d:b0:ff:6b:f4:79:5e:cc:7a:e7:fa:3e:f9:83:c2:a1:e7:de: b6:69:39:e9:66:77:51:01:cd:ac:1f:be:a7:3f:d6:88:07:8f: 06:30:99:c3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 M0VFRTExMC8GA1UEBRMoMDE1QzgyRUY4RjE3Rjc1RDAxRjJBMzA2Nzg2ODVERkRD MjVFMUY3QzAeFw0yNTEwMTkxMDI1MzdaFw0yNTEwMjYxMDI1MzdaMBgxFjAUBgNV BAMTDTY4ZjRiY2ExLTJmMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3LsZ/TyKz+Lm5gkPzJ6sB9s/G6sHP2KYCjbQRQkKvqiCXtzkf0+RUGmAG5lMQ 5yFUcJdODfYjyPnqMkCRA2ruAzDpsTRjv8oZyaOtHjJlpegGB2ywIQc0x7CoJzZq jGBOJ3FBtwzXNehGfdDNZxTKo/ES4Z78np2arp9x9P0qMd6LCs2YqDRmQ9tAb72L /Mcv2uo2Zbx6GfP6A+m5IZAJlZwUMggnaSEBoAg6BWACdkiv+/LwGxJPlSzjQMEr bGDMLQ/MQMucOIFMZvpmPzwIdRyPkGzL5N7dG2EKyyeNGWSy8Fl0Jbuf3YW6ZIJg cCw5WuWA1Ex+5hUveQyVyuBZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVZ0PL/Zc a9OaUceZGm/QuTtvTOYwHwYDVR0jBBgwFoAUAVyC748X910B8qMGeGhd/cJeH3ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzRUVFL0RCQjg5RjlFMTUy QjExRjA4OTJGRDQ4MUM0RjlBRTAyL0FWeUM3NDhYOTEwQjhxTUdlR2hkX2NKZUgz dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQVZ5Qzc0OFg5MTBCOHFNR2VHaGRfY0plSDN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz RUVFL0RCQjg5RjlFMTUyQjExRjA4OTJGRDQ4MUM0RjlBRTAyL0FWeUM3NDhYOTEw QjhxTUdlR2hkX2NKZUgzdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAECe774oA9CCDzobMP44/7lX2sVIx/PCsffkhC9qW6PR3ML5AxOlLNLu LMOkMkALfM1XaznQIRvc0tGv180Do0uypcDwg7uIikA2pjDRhwsruzjXBbnz7roI RExV43p49uB9OwY/zn//wk3DU4NKYlriZ6lBaPd6yP3CoSGbRnHOqHHGU4QQWYt8 XfZMoBRp3Ixmf1m09RKpFifhYYAPtIr6B+VXsVQnss4YXMnL0qjexxtGEIDMkPKh YuwMhUrkCD9uSw8R1HIEsQTHzcJ+0ZXeKxIRoQIRkA2w/2v0eV7Meuf6PvmDwqHn 3rZpOelmd1EBzawfvqc/1ogHjwYwmcM= -----END CERTIFICATE-----Generated at Mon Oct 20 04:11:22 2025 by rpki-client