$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft File: ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft (raw, json) Hash identifier: m5OIH5JskKQL7MQMlqKbA2JIDVwFeabHhnKXSO56CKw= Subject key identifier: 8C:D3:7C:E8:B3:9C:1F:DB:64:08:EE:85:9B:80:A5:C0:06:48:F6:EC Authority key identifier: 21:26:1B:89:74:98:93:C3:B3:18:41:B9:6F:E3:FB:63:23:03:2F:18 Certificate issuer: /CN=A913F2E2/serialNumber=21261B89749893C3B31841B96FE3FB6323032F18 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft Manifest number: F6 Signing time: Mon 03 Nov 2025 05:13:37 +0000 Manifest this update: Mon 03 Nov 2025 05:13:36 +0000 Manifest next update: Mon 10 Nov 2025 05:13:36 +0000 Files and hashes: 1: ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl (hash: 2s4HM8Gkh996gZaR0pPBtEpoUGDYdDHPjmKwH9olJec=) 2: A8051CC4508011EF81053074C4F9AE02.roa (hash: cDS5FdTBOYoVAs3WZmJDzExZ2RFGAHrfOHhqQyrBupo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F2E2, serialNumber=21261B89749893C3B31841B96FE3FB6323032F18 Validity Not Before: Nov 3 05:13:36 2025 GMT Not After : Nov 10 05:13:36 2025 GMT Subject: CN=69083a01-79e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:47:3b:ab:e2:98:2a:ba:00:16:18:f3:9b:d7: ad:5f:dd:af:15:d0:76:f5:1f:04:5f:51:3d:75:ed: 2f:5f:11:ac:74:4d:f5:72:67:bc:c9:41:d7:ea:17: 4e:56:6c:1e:ce:20:10:2b:d0:f4:42:88:df:78:58: 5a:fc:94:9e:af:37:59:9b:7f:65:89:e9:c4:3e:a0: 84:00:53:98:31:19:7b:91:2c:1b:89:58:c8:f3:af: 06:52:cb:71:b6:18:d8:89:6d:03:99:4f:19:6c:98: e8:c1:6b:25:c4:8c:fd:ce:49:46:c8:96:55:30:8b: c3:9a:dc:9a:94:78:4d:f8:81:dc:51:1f:36:09:19: 4e:8b:f0:b1:a2:4c:15:c1:d3:9c:88:5d:ce:c2:5b: 04:f0:d5:4a:3a:86:55:e8:83:84:dd:03:bc:b4:2e: c6:ff:ac:11:8d:ca:78:5d:d6:e5:bb:8b:ca:76:7b: ae:c0:f2:5b:60:2a:85:c8:86:30:f2:50:3c:8e:bc: 32:a6:d0:64:ef:1d:b9:d2:eb:9c:fc:7e:f5:67:6a: a7:e8:4c:11:42:02:3f:d0:a3:fd:a1:44:07:ce:b7: 65:b7:77:f4:dd:91:54:9b:8e:65:84:56:74:7a:50: be:38:e6:87:7d:d3:53:ef:2f:75:b4:5a:4b:20:f8: e8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D3:7C:E8:B3:9C:1F:DB:64:08:EE:85:9B:80:A5:C0:06:48:F6:EC X509v3 Authority Key Identifier: keyid:21:26:1B:89:74:98:93:C3:B3:18:41:B9:6F:E3:FB:63:23:03:2F:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:58:4e:09:d4:01:bb:c3:b8:46:04:5a:b0:b3:05:71:3f:0e: 6a:0e:ef:de:30:9c:02:f0:70:1d:30:9e:be:92:26:13:6d:77: 28:81:8e:fd:99:f3:8b:9a:b2:7b:7c:3e:e2:af:f7:f8:1d:6a: 2b:de:28:2b:03:77:50:4a:a7:ca:4e:da:d8:b0:4d:a7:cb:d7: 73:48:2c:7e:6a:de:3a:58:a7:33:31:53:a0:ef:00:0b:6b:cc: c4:b1:5f:05:c5:0b:c2:59:96:85:f2:99:2f:51:c4:b1:6b:69: d2:df:24:64:f4:a5:99:0b:62:0b:12:df:a5:49:7a:8f:5f:67: c7:05:cd:92:82:ab:0a:29:fd:aa:1b:d6:b9:40:cf:39:ae:b4: 13:f1:c6:0c:a5:ee:1b:bf:ad:dc:4d:8a:a7:fb:4f:aa:b3:2a: a7:01:14:6a:f9:7c:d4:ca:56:ee:91:d3:1c:aa:8c:8e:8a:69: 8b:5d:5c:d3:51:cb:8b:95:78:0c:7b:79:b2:5d:b0:f6:74:75: 3e:24:23:b5:fe:30:33:76:ce:b0:06:23:7c:49:3c:4c:d0:d1: a6:be:e4:ba:05:17:48:9b:44:ed:24:63:3e:65:c2:08:ca:61: 34:3e:87:83:36:f8:59:e2:c4:2d:1e:5b:5b:b3:9d:38:6e:35: 95:20:9e:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YyRTIxMTAvBgNVBAUTKDIxMjYxQjg5NzQ5ODkzQzNCMzE4NDFCOTZGRTNGQjYz MjMwMzJGMTgwHhcNMjUxMTAzMDUxMzM2WhcNMjUxMTEwMDUxMzM2WjAYMRYwFAYD VQQDEw02OTA4M2EwMS03OWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUc7q+KYKroAFhjzm9etX92vFdB29R8EX1E9de0vXxGsdE31cme8yUHX6hdO VmweziAQK9D0QojfeFha/JSerzdZm39lienEPqCEAFOYMRl7kSwbiVjI868GUstx thjYiW0DmU8ZbJjowWslxIz9zklGyJZVMIvDmtyalHhN+IHcUR82CRlOi/CxokwV wdOciF3OwlsE8NVKOoZV6IOE3QO8tC7G/6wRjcp4Xdblu4vKdnuuwPJbYCqFyIYw 8lA8jrwyptBk7x250uuc/H71Z2qn6EwRQgI/0KP9oUQHzrdlt3f03ZFUm45lhFZ0 elC+OOaHfdNT7y91tFpLIPjouQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzTfOiz nB/bZAjuhZuApcAGSPbsMB8GA1UdIwQYMBaAFCEmG4l0mJPDsxhBuW/j+2MjAy8Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjJFMi9DNUI2QjkzNjQ0 MDQxMUVGQjlBNjJDMERDNEY5QUUwMi9JU1liaVhTWWs4T3pHRUc1Yi1QN1l5TURM eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lTWWJpWFNZazhPekdFRzViLVA3WXlNREx4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjJFMi9DNUI2QjkzNjQ0MDQxMUVGQjlBNjJDMERDNEY5QUUwMi9JU1liaVhTWWs4 T3pHRUc1Yi1QN1l5TURMeGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvWE4J1AG7w7hGBFqwswVxPw5qDu/eMJwC8HAdMJ6+kiYTbXcogY79 mfOLmrJ7fD7ir/f4HWor3igrA3dQSqfKTtrYsE2ny9dzSCx+at46WKczMVOg7wAL a8zEsV8FxQvCWZaF8pkvUcSxa2nS3yRk9KWZC2ILEt+lSXqPX2fHBc2SgqsKKf2q G9a5QM85rrQT8cYMpe4bv63cTYqn+0+qsyqnARRq+XzUylbukdMcqoyOimmLXVzT UcuLlXgMe3myXbD2dHU+JCO1/jAzds6wBiN8STxM0NGmvuS6BRdIm0TtJGM+ZcII ymE0PoeDNvhZ4sQtHltbs504bjWVIJ5d -----END CERTIFICATE-----Generated at Tue Nov 4 08:18:25 2025 by rpki-client