$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft File: C-AoY1W14laYjORU35P8D8p_YEA.mft (raw, json) Hash identifier: 4W8ka9kFO0ElHAtzLCh8Bxm5nY9i/4xumqO+e048Yws= Subject key identifier: 7C:06:F6:AC:59:2C:8F:C9:D6:27:AE:CC:DB:2D:2E:38:6C:B4:D2:8F Authority key identifier: 0B:E0:28:63:55:B5:E2:56:98:8C:E4:54:DF:93:FC:0F:CA:7F:60:40 Certificate issuer: /CN=A91A1D43/serialNumber=0BE0286355B5E256988CE454DF93FC0FCA7F6040 Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft Manifest number: 01CD Signing time: Sun 19 Oct 2025 05:17:36 +0000 Manifest this update: Sun 19 Oct 2025 05:17:36 +0000 Manifest next update: Sun 26 Oct 2025 05:17:36 +0000 Files and hashes: 1: C-AoY1W14laYjORU35P8D8p_YEA.crl (hash: onfdCX997tMuK9iWmf/4+rhNKoCv9v+sp/bfiPJ1/Pc=) 2: 8BCB2CFAEA3911EDB91E190BC4F9AE02.roa (hash: Gn3bl+JlcAfK7NlSkgTYoj+Bsl8m7KISn3HM2ix+w34=) 3: 8B1BDC14EA3911EDB91E190BC4F9AE02.roa (hash: +iPaNHR0I7CGA19//oU6de8PSF7FBlMHBTXC8ZhTdUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.crl rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:17:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1D43, serialNumber=0BE0286355B5E256988CE454DF93FC0FCA7F6040 Validity Not Before: Oct 19 05:17:36 2025 GMT Not After : Oct 26 05:17:36 2025 GMT Subject: CN=68f47470-c2e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3a:a9:76:1d:25:75:c0:94:31:4f:41:b4:38: 98:0e:ca:b3:57:33:0c:6f:44:6a:bd:f4:2c:f4:6f: db:1e:7b:a3:65:88:57:4b:9f:fd:cf:c5:51:da:3a: 30:d4:00:06:9d:0f:35:5b:e6:30:43:d3:fa:2b:2e: ab:16:06:8a:d9:71:a2:92:09:86:d7:d8:70:01:8d: c5:08:54:1a:45:5c:4f:ea:a9:cc:e4:20:0f:9f:09: 21:01:19:be:75:a0:49:e6:be:9a:7a:31:2e:f7:e2: 68:61:7a:33:79:c3:fe:66:e9:35:4a:d5:c7:b8:5c: f1:10:ba:b4:d7:4c:1f:fd:51:67:14:ee:21:fe:bc: 4c:f2:d6:30:ba:2c:00:c0:52:a7:a2:b9:5b:fb:74: c0:82:7c:8c:56:a9:67:d0:ce:9c:95:28:cb:84:ec: 53:01:ad:e5:55:65:3b:95:12:aa:2f:e9:f2:ce:4d: b8:2c:a2:aa:93:e4:52:b1:0b:11:54:30:6c:27:47: df:f8:28:87:ef:3a:39:34:87:d8:91:13:17:76:e8: 59:2c:12:aa:af:ca:f9:9f:30:06:d3:33:1c:c2:39: 31:69:52:c2:bf:05:81:7f:52:af:99:fa:f5:c5:c9: c4:ee:98:3c:84:8a:2c:1a:35:7c:c7:a3:66:a9:92: 34:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:06:F6:AC:59:2C:8F:C9:D6:27:AE:CC:DB:2D:2E:38:6C:B4:D2:8F X509v3 Authority Key Identifier: keyid:0B:E0:28:63:55:B5:E2:56:98:8C:E4:54:DF:93:FC:0F:CA:7F:60:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:e8:09:92:36:67:96:46:df:6f:86:1c:d4:cb:34:c8:1b:3a: 0c:ba:e0:32:d8:43:c6:c9:4b:b0:9d:7e:18:43:93:df:f0:59: 0e:40:47:eb:1b:e5:75:43:ed:d0:31:48:9e:73:a0:51:52:75: 88:af:42:11:f5:1c:f4:d2:03:39:8b:30:fb:a4:d2:04:3d:fe: 6b:23:53:88:30:86:4c:a0:fa:6a:6d:92:94:70:cd:db:29:51: 08:93:0d:1c:1c:5c:a6:96:f5:c6:07:2d:e8:3d:3e:a4:60:40: 28:04:6d:ee:bf:e8:9c:0c:b7:4d:ee:0a:91:cf:81:4f:26:c2: 88:60:b3:76:16:60:21:ed:8b:62:43:22:a0:80:4e:a2:0b:25: 5b:b3:10:15:df:52:29:f0:cb:81:59:2a:07:3f:0e:37:d1:bf: 44:76:e0:65:9e:d9:3c:d1:d5:02:86:ac:8a:28:a9:46:65:2a: f8:d2:68:ff:c9:b5:d6:43:2f:5b:ac:fe:54:fa:d0:d4:60:90: b0:db:72:78:ad:14:a4:d8:e0:0c:a8:f0:28:4b:dd:7b:e6:9f: 14:38:2f:cc:eb:f4:c7:13:2c:32:e9:78:86:2a:23:98:c8:21: a6:ea:68:af:f4:f3:f0:ae:77:01:f3:64:71:f1:3f:f1:5f:d3: 03:0f:34:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFENDMxMTAvBgNVBAUTKDBCRTAyODYzNTVCNUUyNTY5ODhDRTQ1NERGOTNGQzBG Q0E3RjYwNDAwHhcNMjUxMDE5MDUxNzM2WhcNMjUxMDI2MDUxNzM2WjAYMRYwFAYD VQQDEw02OGY0NzQ3MC1jMmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTqpdh0ldcCUMU9BtDiYDsqzVzMMb0RqvfQs9G/bHnujZYhXS5/9z8VR2jow 1AAGnQ81W+YwQ9P6Ky6rFgaK2XGikgmG19hwAY3FCFQaRVxP6qnM5CAPnwkhARm+ daBJ5r6aejEu9+JoYXozecP+Zuk1StXHuFzxELq010wf/VFnFO4h/rxM8tYwuiwA wFKnorlb+3TAgnyMVqln0M6clSjLhOxTAa3lVWU7lRKqL+nyzk24LKKqk+RSsQsR VDBsJ0ff+CiH7zo5NIfYkRMXduhZLBKqr8r5nzAG0zMcwjkxaVLCvwWBf1Kvmfr1 xcnE7pg8hIosGjV8x6NmqZI0MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHwG9qxZ LI/J1ieuzNstLjhstNKPMB8GA1UdIwQYMBaAFAvgKGNVteJWmIzkVN+T/A/Kf2BA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUQ0My84OTI5REZERUVB MjgxMUVEQjdERDAxMThDNEY5QUUwMi9DLUFvWTFXMTRsYVlqT1JVMzVQOEQ4cF9Z RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MtQW9ZMVcxNGxhWWpPUlUzNVA4RDhwX1lFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUQ0My84OTI5REZERUVBMjgxMUVEQjdERDAxMThDNEY5QUUwMi9DLUFvWTFXMTRs YVlqT1JVMzVQOEQ4cF9ZRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk6AmSNmeWRt9vhhzUyzTIGzoMuuAy2EPGyUuwnX4YQ5Pf8FkOQEfr G+V1Q+3QMUiec6BRUnWIr0IR9Rz00gM5izD7pNIEPf5rI1OIMIZMoPpqbZKUcM3b KVEIkw0cHFymlvXGBy3oPT6kYEAoBG3uv+icDLdN7gqRz4FPJsKIYLN2FmAh7Yti QyKggE6iCyVbsxAV31Ip8MuBWSoHPw430b9EduBlntk80dUChqyKKKlGZSr40mj/ ybXWQy9brP5U+tDUYJCw23J4rRSk2OAMqPAoS9175p8UOC/M6/THEywy6XiGKiOY yCGm6miv9PPwrncB82Rx8T/xX9MDDzR2 -----END CERTIFICATE-----Generated at Mon Oct 20 04:05:58 2025 by rpki-client