$ rpki-client -vvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft File: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft (raw, json) Hash identifier: pGwaJIBBE0pNk2hCimn3SP6lPlHaT58YkIseXROfzjg= Subject key identifier: 1F:88:CB:B2:A9:FC:7F:6D:AC:A8:10:CF:16:DC:69:FA:D4:23:CC:D7 Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C Certificate issuer: /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Certificate serial: 0242 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft Manifest number: 0221 Signing time: Mon 03 Nov 2025 02:08:54 +0000 Manifest this update: Mon 03 Nov 2025 02:08:53 +0000 Manifest next update: Mon 10 Nov 2025 02:08:53 +0000 Files and hashes: 1: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl (hash: Bd83IjHgnWHjK/O6Evm/TlEFzi6wHpeWOpoIL70XsQY=) 2: E260EBC4914011EDABD5F778C4F9AE02.roa (hash: ieGx5NwyYQJ4P+cWYrdmLdfua1T4xQkG1QlYm44YGuI=) 3: E1D3A69C914011EDABD5F778C4F9AE02.roa (hash: l7RVqMwsQP+9xoPqxUjrdLeHKAHmKPEPtw0sLICnu70=) 4: 7606086E914611ED8DE00A16C4F9AE02.roa (hash: hpbgzGpeyu8RgvOZ/gDqbosdneW/3yUsLvzIbPJJbgI=) 5: C3E640EE917811ED904ACF83C4F9AE02.roa (hash: U1JZUMbZcbonZCdC7TOrqHH67lPPcra0baMZ+HxHTq0=) 6: E07C4E34914011EDABD5F778C4F9AE02.roa (hash: yq9F1kGLoVyjrkyUECiqJ2bBsjfNg/O48zntGXKXjfA=) 7: E137AAE4914011EDABD5F778C4F9AE02.roa (hash: 7GFXCtaT3I6JbgFcVp9k1/EsFIeLns+26mNrxLbyEic=) 8: C3481400917811ED904ACF83C4F9AE02.roa (hash: AsDGm3VcGz1RYmwwFN/U13xvQEyWavpIqYrnGKd5AJQ=) 9: 18498E84AA4911F0909AC335C4F9AE02.roa (hash: NJcFMzzhVnORdTmRL0FyfpGdYHwoBdJ6pEPPAOVism8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:08:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 578 (0x242) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E9B6, serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Validity Not Before: Nov 3 02:08:53 2025 GMT Not After : Nov 10 02:08:53 2025 GMT Subject: CN=69080eb5-cca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:50:66:01:d3:51:83:fb:b8:7d:1c:1e:8f:5b: 9c:7a:7b:95:7c:4a:0d:7d:12:94:7e:3e:83:b9:bd: 51:c0:f1:1c:c7:e0:6b:01:d9:0e:9d:8f:66:b4:1d: 18:45:df:ba:88:3e:51:c3:52:8b:b7:90:e7:94:28: ff:c9:eb:ed:0d:b5:65:91:6c:21:ab:7d:8c:29:5a: 08:c8:4f:59:27:98:96:66:92:9d:0f:df:75:64:f0: 83:03:a6:75:22:2b:4c:3c:f2:14:ec:86:2f:64:35: 0d:ac:57:c1:27:12:2b:12:e9:69:df:da:ec:43:5e: 8d:4e:f7:84:49:66:69:2f:72:b1:5c:db:19:0b:2a: ae:71:e0:46:e1:3b:e4:c9:c0:73:43:1b:3a:08:aa: a6:55:f2:0b:a4:4b:60:b8:dd:3b:07:ca:7e:27:ce: 1e:b4:51:80:ee:f0:ff:88:a5:f2:88:d8:a2:69:f4: 59:44:00:dd:91:b7:c8:6a:c2:79:40:6c:7e:a8:1d: ea:20:6e:81:ab:4a:32:8c:e4:9f:25:21:9f:06:e2: ec:13:e7:93:08:5c:4c:9e:aa:77:00:c5:77:9c:22: 53:40:a8:8c:2e:00:c8:49:d8:43:48:33:31:f8:c0: 95:84:8d:02:60:73:6a:c9:84:5e:1b:40:0c:1a:8f: d2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:88:CB:B2:A9:FC:7F:6D:AC:A8:10:CF:16:DC:69:FA:D4:23:CC:D7 X509v3 Authority Key Identifier: keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:ae:88:ad:2f:74:c9:f7:d2:04:e3:3b:3c:27:9c:2e:f5:43: 77:88:14:9f:ce:ab:2d:81:92:58:dd:7a:49:2c:49:d2:9a:29: 03:72:ce:72:61:27:af:82:71:37:e7:f6:40:55:7d:6c:53:8a: 80:f4:b9:2f:75:9e:1c:64:f7:a4:de:5a:1c:68:01:0b:d4:d0: fc:34:21:23:0d:bf:e2:d5:04:6c:68:b1:47:57:a7:dd:0a:ca: 88:48:5b:13:16:e3:02:2f:a0:df:12:47:d0:c0:61:e6:a7:fc: 77:28:fd:b8:b6:e0:91:26:cb:95:61:84:d2:0a:5f:71:82:e7: e2:94:52:b1:9f:7a:4d:82:6c:fc:24:e9:e9:43:01:74:46:dc: 0d:22:4a:60:32:4e:1b:4f:02:43:3c:74:07:ac:86:7d:76:2b: a7:79:6c:c4:75:e5:d6:35:13:75:7a:23:5f:17:db:fd:93:bd: f3:f6:50:19:11:11:54:d9:b1:09:3b:64:55:6c:28:ee:a7:e8: 0b:e5:8a:b5:00:bf:7f:6b:15:3a:35:f7:df:08:ae:95:4d:34: 3f:c7:84:38:1a:cb:32:0f:a8:71:40:fd:f9:21:3b:f6:a3:25: cd:8b:12:f8:f5:57:1a:83:f4:72:d4:db:fe:2f:df:f8:3d:d6: 84:50:25:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU5QjYxMTAvBgNVBAUTKDJFOENCQjhDMjYwMEM2QTA5OEM5NThCOTY0QzMyRENC MThCODAzNUMwHhcNMjUxMTAzMDIwODUzWhcNMjUxMTEwMDIwODUzWjAYMRYwFAYD VQQDEw02OTA4MGViNS1jY2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1BmAdNRg/u4fRwej1ucenuVfEoNfRKUfj6Dub1RwPEcx+BrAdkOnY9mtB0Y Rd+6iD5Rw1KLt5DnlCj/yevtDbVlkWwhq32MKVoIyE9ZJ5iWZpKdD991ZPCDA6Z1 IitMPPIU7IYvZDUNrFfBJxIrEulp39rsQ16NTveESWZpL3KxXNsZCyquceBG4Tvk ycBzQxs6CKqmVfILpEtguN07B8p+J84etFGA7vD/iKXyiNiiafRZRADdkbfIasJ5 QGx+qB3qIG6Bq0oyjOSfJSGfBuLsE+eTCFxMnqp3AMV3nCJTQKiMLgDISdhDSDMx +MCVhI0CYHNqyYReG0AMGo/SxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+Iy7Kp /H9trKgQzxbcafrUI8zXMB8GA1UdIwQYMBaAFC6Mu4wmAMagmMlYuWTDLcsYuANc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTlCNi83OTE4Q0IwQzdG RjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhxQ1l5Vmk1Wk1NdHl4aTRB MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xveTdqQ1lBeHFDWXlWaTVaTU10eXhpNEExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTlCNi83OTE4Q0IwQzdGRjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhx Q1l5Vmk1Wk1NdHl4aTRBMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzroitL3TJ99IE4zs8J5wu9UN3iBSfzqstgZJY3XpJLEnSmikDcs5y YSevgnE35/ZAVX1sU4qA9LkvdZ4cZPek3locaAEL1ND8NCEjDb/i1QRsaLFHV6fd CsqISFsTFuMCL6DfEkfQwGHmp/x3KP24tuCRJsuVYYTSCl9xgufilFKxn3pNgmz8 JOnpQwF0RtwNIkpgMk4bTwJDPHQHrIZ9diuneWzEdeXWNRN1eiNfF9v9k73z9lAZ ERFU2bEJO2RVbCjup+gL5Yq1AL9/axU6NfffCK6VTTQ/x4Q4GssyD6hxQP35ITv2 oyXNixL49Vcag/Ry1Nv+L9/4PdaEUCWe -----END CERTIFICATE-----Generated at Tue Nov 4 20:21:56 2025 by rpki-client