$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft File: sD57-ytL2vouqlCreZD3T_y8rdc.mft (raw, json) Hash identifier: bMKgBtAWE0PMVuVgp13dGYkoDwi+qIx0g3ZfJMO4ydM= Subject key identifier: D0:72:2F:0D:C2:7B:88:EE:84:77:77:12:5B:95:1E:D4:60:F5:BA:31 Authority key identifier: B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 Certificate issuer: /CN=A9150CF2/serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Certificate serial: 0D19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft Manifest number: 0CFC Signing time: Tue 04 Nov 2025 18:12:35 +0000 Manifest this update: Tue 04 Nov 2025 18:12:34 +0000 Manifest next update: Tue 11 Nov 2025 18:12:34 +0000 Files and hashes: 1: sD57-ytL2vouqlCreZD3T_y8rdc.crl (hash: XxsL78buo9jsmE4HXFbY7Dzt/aUIz/jtLL970RrqY7Q=) 2: 34060B22C2B311EE97B0B776C4F9AE02.roa (hash: wRhoUuLabNYzTY9DDaSK06ADTxBJOvjSTEtu7/sVqes=) 3: 029E3ED44ADF11EEB17F2D4CC4F9AE02.roa (hash: oryogDp90ntm5yVUpzztlYtF7rrid4whBN5vK7HfINE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3353 (0xd19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150CF2, serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Validity Not Before: Nov 4 18:12:34 2025 GMT Not After : Nov 11 18:12:34 2025 GMT Subject: CN=690a4213-1196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:90:72:e2:9d:45:f9:e8:1c:4e:77:2f:9c:d0: d4:65:4f:52:e4:54:88:ca:1c:dc:bc:e8:dd:66:8f: e8:8b:76:5f:be:a9:fb:05:6a:b4:f4:03:16:a6:d2: c8:d0:a8:5e:79:b8:86:fb:2e:21:95:0e:d6:3d:07: 8d:01:ba:34:cf:5c:bd:d9:e3:2e:08:74:87:c3:12: 15:79:14:15:54:d6:fe:59:75:5a:30:0c:17:f8:05: f8:08:8d:e0:79:0a:37:ae:f8:68:c8:1d:c3:c2:de: a0:c2:8b:46:44:9e:ee:96:68:bf:b7:38:b7:86:3d: 5f:03:f2:89:60:c2:5c:3a:b2:33:a9:a5:6f:b0:e0: c7:5a:22:8b:c0:0e:de:89:bc:2a:a0:0e:f0:ca:8d: 1a:11:23:35:92:c1:96:4c:4c:13:94:ec:a7:d6:73: b6:7c:6e:a8:2f:3f:b1:96:5e:e4:db:2c:51:73:67: 41:b7:1e:d7:8c:00:ff:63:ee:78:d5:f7:3b:42:d4: 2f:33:e0:aa:a9:16:be:8d:69:26:0f:04:af:13:c8: 09:2f:b5:de:6c:fb:97:77:78:55:ab:a9:7c:7e:74: f5:20:cf:0b:6a:5c:f0:5f:b8:4c:67:e9:88:dd:70: ad:88:22:e2:92:3e:1a:49:df:dd:a9:88:ba:48:db: 8d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:72:2F:0D:C2:7B:88:EE:84:77:77:12:5B:95:1E:D4:60:F5:BA:31 X509v3 Authority Key Identifier: keyid:B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:90:b5:04:c9:5e:b9:e4:d3:c3:45:61:00:a3:ef:9c:f3:e4: df:e1:f7:57:d1:c6:43:32:53:f6:36:9f:0e:02:07:c2:e2:18: b0:9c:7c:d5:5f:79:94:2e:dd:5f:ca:a6:fd:0e:5a:38:59:83: f7:2c:30:0a:2d:4e:ec:72:d2:c9:54:0e:1c:e7:f7:9d:51:26: 25:b8:70:c5:61:f9:59:c8:f3:57:5d:c5:87:2a:be:1f:10:47: 82:7c:84:d9:de:33:46:25:f3:3e:ea:be:d1:c6:db:c6:6b:57: 35:db:f6:e0:4f:24:9a:fc:6f:af:c1:af:41:24:87:ac:1e:be: 22:e7:a1:6e:7a:6d:f0:c9:a2:be:41:2b:b9:5f:bd:ed:44:4a: 2b:ff:f2:ac:63:51:ec:24:f1:28:a2:18:9d:65:b8:99:a1:8f: 02:d9:d6:2c:39:2e:a3:2e:8c:cf:b8:d0:a7:67:bc:61:fc:e8: 13:7d:3c:3d:00:62:f6:49:10:39:9d:83:87:0c:72:87:3b:f2: b3:35:c6:3a:58:49:80:c6:f8:ec:5d:5c:e8:dd:fd:bf:89:6d: 82:cc:ff:21:f6:37:89:d1:2c:65:fc:34:34:52:48:91:55:97: e4:47:ef:99:66:de:fb:0c:4c:6c:82:b6:9e:2a:28:b8:4a:79: f2:76:3c:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBDRjIxMTAvBgNVBAUTKEIwM0U3QkZCMkI0QkRBRkEyRUFBNTBBQjc5OTBGNzRG RkNCQ0FERDcwHhcNMjUxMTA0MTgxMjM0WhcNMjUxMTExMTgxMjM0WjAYMRYwFAYD VQQDEw02OTBhNDIxMy0xMTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJBy4p1F+egcTncvnNDUZU9S5FSIyhzcvOjdZo/oi3Zfvqn7BWq09AMWptLI 0KheebiG+y4hlQ7WPQeNAbo0z1y92eMuCHSHwxIVeRQVVNb+WXVaMAwX+AX4CI3g eQo3rvhoyB3Dwt6gwotGRJ7ulmi/tzi3hj1fA/KJYMJcOrIzqaVvsODHWiKLwA7e ibwqoA7wyo0aESM1ksGWTEwTlOyn1nO2fG6oLz+xll7k2yxRc2dBtx7XjAD/Y+54 1fc7QtQvM+CqqRa+jWkmDwSvE8gJL7XebPuXd3hVq6l8fnT1IM8LalzwX7hMZ+mI 3XCtiCLikj4aSd/dqYi6SNuNAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNByLw3C e4juhHd3EluVHtRg9boxMB8GA1UdIwQYMBaAFLA+e/srS9r6LqpQq3mQ90/8vK3X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MENGMi9EMDBEQjc2RUY0 RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2b3VxbENyZVpEM1RfeThy ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NENTcteXRMMnZvdXFsQ3JlWkQzVF95OHJkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MENGMi9EMDBEQjc2RUY0RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2 b3VxbENyZVpEM1RfeThyZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHkLUEyV655NPDRWEAo++c8+Tf4fdX0cZDMlP2Np8OAgfC4hiwnHzV X3mULt1fyqb9Dlo4WYP3LDAKLU7sctLJVA4c5/edUSYluHDFYflZyPNXXcWHKr4f EEeCfITZ3jNGJfM+6r7RxtvGa1c12/bgTySa/G+vwa9BJIesHr4i56Fuem3wyaK+ QSu5X73tREor//KsY1HsJPEoohidZbiZoY8C2dYsOS6jLozPuNCnZ7xh/OgTfTw9 AGL2SRA5nYOHDHKHO/KzNcY6WEmAxvjsXVzo3f2/iW2CzP8h9jeJ0Sxl/DQ0UkiR VZfkR++ZZt77DExsgraeKii4Snnydjxp -----END CERTIFICATE-----Generated at Wed Nov 5 12:22:44 2025 by rpki-client