$ rpki-client -vvf rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft File: dYrCvtrcujrXOBafs4nVCLVNdL8.mft (raw, json) Hash identifier: Y1ptNrt/XrWs4uRtsmQiykmr8/Cvntj1iU/0mJVPkHk= Subject key identifier: 50:18:3A:5D:52:54:B4:0D:4C:87:63:76:0C:1F:DC:4C:B6:99:F4:44 Authority key identifier: 75:8A:C2:BE:DA:DC:BA:3A:D7:38:16:9F:B3:89:D5:08:B5:4D:74:BF Certificate issuer: /CN=A915479A/serialNumber=758AC2BEDADCBA3AD738169FB389D508B54D74BF Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft Manifest number: 8B Signing time: Wed 05 Nov 2025 06:44:46 +0000 Manifest this update: Wed 05 Nov 2025 06:44:45 +0000 Manifest next update: Wed 12 Nov 2025 06:44:45 +0000 Files and hashes: 1: dYrCvtrcujrXOBafs4nVCLVNdL8.crl (hash: u2U9JYoMaOXJqTzQEPORPOnL26e7oanu9Emq1Qs0ydo=) 2: 88A1F6DEE37B11EFB4D75458C4F9AE02.roa (hash: cprKT/vfUwI6vjvLZuHXw1YhqI0bQrhQTc7WaG1olUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.crl rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:44:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915479A, serialNumber=758AC2BEDADCBA3AD738169FB389D508B54D74BF Validity Not Before: Nov 5 06:44:45 2025 GMT Not After : Nov 12 06:44:45 2025 GMT Subject: CN=690af25e-f10d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b6:50:c0:1f:81:62:bb:87:d3:ef:f5:22:ff: 9d:4d:f2:ba:e5:72:ef:36:58:22:79:f6:ca:75:cd: 0c:c4:18:dc:96:5c:a3:65:b3:69:a1:a8:11:92:46: 41:9f:f5:96:c4:a7:8d:c0:7f:72:15:2e:4c:fa:87: 11:8e:a5:3d:b4:3d:39:8d:1c:d7:7d:0f:38:95:82: 53:d3:42:0a:37:83:8a:37:04:c3:ec:6e:f6:b8:e8: 2c:68:23:4f:bd:e2:b0:6f:cf:8f:bd:f3:ea:a4:15: 0d:90:52:67:d7:bc:ed:9b:7a:e5:50:e1:fd:84:1d: 94:71:3f:ec:6d:4a:9f:73:1b:3a:a2:10:66:45:e5: c1:1c:96:6a:a5:3d:0b:a9:52:f5:ed:1e:a3:d2:93: e7:b1:94:37:56:92:5d:08:61:e8:bb:42:2f:f8:ba: 6f:76:c9:7a:59:07:67:1e:2e:53:1f:23:da:22:65: ae:dd:19:a6:f5:19:bc:ad:4f:70:8e:9d:2c:49:c2: 32:28:ec:c1:07:44:05:eb:bc:19:c6:18:e7:ca:4f: ff:0f:1f:04:a1:a5:b6:fe:fa:14:a3:ae:45:85:9e: 6e:f7:22:06:9e:8c:b8:66:01:67:ae:8f:2b:71:87: d6:90:7a:77:d7:b2:69:79:e8:8a:28:39:98:70:08: 53:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:18:3A:5D:52:54:B4:0D:4C:87:63:76:0C:1F:DC:4C:B6:99:F4:44 X509v3 Authority Key Identifier: keyid:75:8A:C2:BE:DA:DC:BA:3A:D7:38:16:9F:B3:89:D5:08:B5:4D:74:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:c1:2c:5d:8c:e0:3b:80:a8:05:00:20:3d:fd:85:47:f0:de: f6:e8:23:4d:8d:4f:05:64:00:43:8c:3f:fe:74:51:d7:f4:5d: 30:69:01:42:e9:12:b7:05:ba:04:3e:fb:ac:ca:7b:cb:ef:63: b3:51:6d:dd:78:10:fd:ba:b7:d8:c9:2d:7d:19:c2:4d:10:b8: 7e:c8:9a:68:e5:03:6e:c4:65:fc:2c:65:8d:dc:6a:78:7c:93: ca:26:e9:a7:90:e1:dd:be:48:12:3f:62:4a:25:e4:05:2a:35: 3e:13:85:9b:f3:7b:36:ec:91:7b:34:6b:1c:35:aa:9f:01:6e: 6a:79:93:66:8f:4e:f6:7a:58:ce:b2:68:0c:0a:c6:b4:ac:d7: 40:f3:b5:54:69:ed:5e:47:02:b3:c3:e1:12:86:18:aa:4a:f9: 97:6a:2b:c2:a8:50:46:b6:db:c5:fb:ec:b6:45:02:62:39:8e: 2a:aa:00:43:e1:61:0f:74:9f:eb:c8:f3:84:76:ca:b6:6b:87: 00:d4:8a:31:ff:51:81:81:b0:a5:a9:ad:71:3a:72:db:df:27: 99:7e:25:2d:f1:fb:0e:a3:b8:6e:5e:41:a0:47:9d:af:71:9d: a3:f0:d6:e2:b9:4a:d2:5c:13:60:cb:4c:da:c6:88:be:5a:cb: cb:fd:62:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ3OUExMTAvBgNVBAUTKDc1OEFDMkJFREFEQ0JBM0FENzM4MTY5RkIzODlENTA4 QjU0RDc0QkYwHhcNMjUxMTA1MDY0NDQ1WhcNMjUxMTEyMDY0NDQ1WjAYMRYwFAYD VQQDEw02OTBhZjI1ZS1mMTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLZQwB+BYruH0+/1Iv+dTfK65XLvNlgiefbKdc0MxBjcllyjZbNpoagRkkZB n/WWxKeNwH9yFS5M+ocRjqU9tD05jRzXfQ84lYJT00IKN4OKNwTD7G72uOgsaCNP veKwb8+PvfPqpBUNkFJn17ztm3rlUOH9hB2UcT/sbUqfcxs6ohBmReXBHJZqpT0L qVL17R6j0pPnsZQ3VpJdCGHou0Iv+Lpvdsl6WQdnHi5THyPaImWu3Rmm9Rm8rU9w jp0sScIyKOzBB0QF67wZxhjnyk//Dx8EoaW2/voUo65FhZ5u9yIGnoy4ZgFnro8r cYfWkHp317JpeeiKKDmYcAhTbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFAYOl1S VLQNTIdjdgwf3Ey2mfREMB8GA1UdIwQYMBaAFHWKwr7a3Lo61zgWn7OJ1Qi1TXS/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDc5QS8yRTEwRURCMkUz NzkxMUVGQjQ2NjZCMzFDNEY5QUUwMi9kWXJDdnRyY3VqclhPQmFmczRuVkNMVk5k TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RZckN2dHJjdWpyWE9CYWZzNG5WQ0xWTmRMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDc5QS8yRTEwRURCMkUzNzkxMUVGQjQ2NjZCMzFDNEY5QUUwMi9kWXJDdnRyY3Vq clhPQmFmczRuVkNMVk5kTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4wSxdjOA7gKgFACA9/YVH8N726CNNjU8FZABDjD/+dFHX9F0waQFC 6RK3BboEPvusynvL72OzUW3deBD9urfYyS19GcJNELh+yJpo5QNuxGX8LGWN3Gp4 fJPKJumnkOHdvkgSP2JKJeQFKjU+E4Wb83s27JF7NGscNaqfAW5qeZNmj072eljO smgMCsa0rNdA87VUae1eRwKzw+EShhiqSvmXaivCqFBGttvF++y2RQJiOY4qqgBD 4WEPdJ/ryPOEdsq2a4cA1Iox/1GBgbClqa1xOnLb3yeZfiUt8fsOo7huXkGgR52v cZ2j8NbiuUrSXBNgy0zaxoi+WsvL/WL+ -----END CERTIFICATE-----Generated at Wed Nov 5 15:03:16 2025 by rpki-client