$ rpki-client -vvf rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft File: 03yc1lDAIKNQDtybQKVGqEw_Jgs.mft (raw, json) Hash identifier: cRGPfkWN4oxhPycOnDLyjRUxTkeg469lq9umqv7gvtA= Subject key identifier: B3:5D:0C:B2:81:DD:BE:70:A2:FC:C9:27:8C:03:2A:4B:E1:FA:E6:80 Authority key identifier: D3:7C:9C:D6:50:C0:20:A3:50:0E:DC:9B:40:A5:46:A8:4C:3F:26:0B Certificate issuer: /CN=A9153C50/serialNumber=D37C9CD650C020A3500EDC9B40A546A84C3F260B Certificate serial: 050F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft Manifest number: 0509 Signing time: Tue 04 Nov 2025 23:42:51 +0000 Manifest this update: Tue 04 Nov 2025 23:42:50 +0000 Manifest next update: Tue 11 Nov 2025 23:42:50 +0000 Files and hashes: 1: 03yc1lDAIKNQDtybQKVGqEw_Jgs.crl (hash: x0+F6iRuDNxvF1su6QlPztLopXhJdVJQkrOBD6GD2SI=) 2: 8B97D7A22CD911ECA528B744C4F9AE02.roa (hash: ejQetAzLgqVtDolBJZWz4Zc5LEXRfg3VkvX111clMEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.crl rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:42:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1295 (0x50f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153C50, serialNumber=D37C9CD650C020A3500EDC9B40A546A84C3F260B Validity Not Before: Nov 4 23:42:50 2025 GMT Not After : Nov 11 23:42:50 2025 GMT Subject: CN=690a8f7b-f7ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b1:84:04:4b:0e:df:21:53:32:c0:08:31:5d: 56:7e:fe:30:cc:ab:35:3e:e1:1c:8c:0d:99:cf:52: 7b:38:90:ac:eb:81:bd:3f:15:f0:f8:34:7e:48:ad: b1:a6:cb:9a:08:35:b4:ab:79:32:a5:cc:3f:3b:b4: 93:3d:c0:cd:11:73:cc:60:5a:d6:73:28:aa:e9:21: 2c:1f:44:02:b1:f6:3e:18:0e:c2:4e:d0:61:1c:8b: 86:65:ad:9e:dd:3f:e1:b2:26:62:0f:0d:28:9c:0a: 97:78:cb:a5:4e:84:e5:bd:ad:a1:38:da:4c:19:e6: f2:13:e7:0f:b1:a0:90:48:cd:86:a3:f8:19:2b:d0: aa:c0:52:e1:65:a2:13:6c:0d:ca:4d:90:17:a6:a3: 4c:60:71:71:f6:92:13:45:a6:db:8f:03:9f:6f:4e: de:db:3a:eb:00:8b:7a:fd:83:e6:1c:cb:d7:bf:fe: 0b:1e:76:87:b8:5b:19:d9:f5:98:e3:7f:6b:22:64: c6:6c:ef:4c:6b:24:9d:96:23:51:69:c5:c7:d5:06: c6:12:81:0f:95:ed:24:53:21:cb:b1:3d:80:5d:eb: 44:d7:55:91:7d:bb:0c:f6:39:27:46:fc:e1:5f:2c: 64:5d:7f:68:90:18:6b:1e:5e:dc:1f:dd:0c:79:c0: fe:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:5D:0C:B2:81:DD:BE:70:A2:FC:C9:27:8C:03:2A:4B:E1:FA:E6:80 X509v3 Authority Key Identifier: keyid:D3:7C:9C:D6:50:C0:20:A3:50:0E:DC:9B:40:A5:46:A8:4C:3F:26:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:16:ac:fe:ec:56:8f:f7:54:9b:31:03:d4:49:aa:42:41:3b: a9:bd:d7:dd:7d:a5:99:49:37:ba:2e:fe:43:e5:f5:e3:fa:5f: 75:47:c1:c8:31:3e:e4:84:6f:fd:09:15:06:54:93:24:dc:08: 53:e7:83:3d:a9:4e:ad:aa:be:d7:a5:d2:cc:42:bf:f8:a3:aa: 91:66:7d:01:7e:e6:9b:e3:a6:28:1a:76:db:0a:de:7e:db:78: de:f1:ed:da:09:60:d6:08:ef:17:6a:6f:6a:72:0a:15:38:14: ac:dd:cb:85:e0:50:89:74:f3:3e:99:1a:81:eb:23:7e:93:32: 88:47:4a:48:f5:b3:d7:86:57:58:eb:68:14:ba:77:df:29:b1: 83:e7:7b:8a:7e:9c:17:f7:fa:26:d6:25:fd:54:66:b2:5b:55: 24:2d:23:b7:b2:b9:ac:9a:07:28:af:3f:ec:36:c1:ed:d9:ed: 82:41:8a:79:49:f7:30:79:a0:47:9f:72:0d:51:b2:e9:d5:62: 62:8e:ba:fb:b0:41:0e:5f:91:72:a2:b0:72:ab:4a:3f:0b:e5: f8:f0:21:71:fb:0b:a7:3e:97:db:79:60:ce:ea:f6:71:cb:50: ae:d1:27:df:9d:ea:f7:71:ec:2d:8b:1c:16:75:02:a1:04:8d: 17:b4:ab:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNDNTAxMTAvBgNVBAUTKEQzN0M5Q0Q2NTBDMDIwQTM1MDBFREM5QjQwQTU0NkE4 NEMzRjI2MEIwHhcNMjUxMTA0MjM0MjUwWhcNMjUxMTExMjM0MjUwWjAYMRYwFAYD VQQDEw02OTBhOGY3Yi1mN2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlrGEBEsO3yFTMsAIMV1Wfv4wzKs1PuEcjA2Zz1J7OJCs64G9PxXw+DR+SK2x psuaCDW0q3kypcw/O7STPcDNEXPMYFrWcyiq6SEsH0QCsfY+GA7CTtBhHIuGZa2e 3T/hsiZiDw0onAqXeMulToTlva2hONpMGebyE+cPsaCQSM2Go/gZK9CqwFLhZaIT bA3KTZAXpqNMYHFx9pITRabbjwOfb07e2zrrAIt6/YPmHMvXv/4LHnaHuFsZ2fWY 439rImTGbO9MaySdliNRacXH1QbGEoEPle0kUyHLsT2AXetE11WRfbsM9jknRvzh XyxkXX9okBhrHl7cH90MecD+uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLNdDLKB 3b5wovzJJ4wDKkvh+uaAMB8GA1UdIwQYMBaAFNN8nNZQwCCjUA7cm0ClRqhMPyYL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0M1MC80QjkwNjMwMjJD RDYxMUVDQTVEQTM1MzRDNEY5QUUwMi8wM3ljMWxEQUlLTlFEdHliUUtWR3FFd19K Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzAzeWMxbERBSUtOUUR0eWJRS1ZHcUV3X0pncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0M1MC80QjkwNjMwMjJDRDYxMUVDQTVEQTM1MzRDNEY5QUUwMi8wM3ljMWxEQUlL TlFEdHliUUtWR3FFd19KZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNFqz+7FaP91SbMQPUSapCQTupvdfdfaWZSTe6Lv5D5fXj+l91R8HI MT7khG/9CRUGVJMk3AhT54M9qU6tqr7XpdLMQr/4o6qRZn0Bfuab46YoGnbbCt5+ 23je8e3aCWDWCO8Xam9qcgoVOBSs3cuF4FCJdPM+mRqB6yN+kzKIR0pI9bPXhldY 62gUunffKbGD53uKfpwX9/om1iX9VGayW1UkLSO3srmsmgcorz/sNsHt2e2CQYp5 SfcweaBHn3INUbLp1WJijrr7sEEOX5FyorByq0o/C+X48CFx+wunPpfbeWDO6vZx y1Cu0Sffner3cewtixwWdQKhBI0XtKuD -----END CERTIFICATE-----Generated at Wed Nov 5 15:03:38 2025 by rpki-client