$ rpki-client -vvf rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft File: cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft (raw, json) Hash identifier: Ecqv8C2rzynCaY6frGxuFiH5ogQaQ1DhHM+rUVd4QH4= Subject key identifier: 38:6B:BD:5C:22:AE:E9:05:26:B0:2C:87:27:CA:0D:A8:7B:5B:6A:C5 Authority key identifier: 71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7 Certificate issuer: /CN=A917174E/serialNumber=718073098AF0396FD8E3309A1B9FB6F3EEB17AE7 Certificate serial: 0E58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft Manifest number: 0E57 Signing time: Sun 02 Nov 2025 17:45:48 +0000 Manifest this update: Sun 02 Nov 2025 17:45:47 +0000 Manifest next update: Sun 09 Nov 2025 17:45:47 +0000 Files and hashes: 1: cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl (hash: fjPakEwLOzzK1OMZU2iTm75K5lRuA+bnzDNqr2Aaq4s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:45:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3672 (0xe58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917174E, serialNumber=718073098AF0396FD8E3309A1B9FB6F3EEB17AE7 Validity Not Before: Nov 2 17:45:47 2025 GMT Not After : Nov 9 17:45:47 2025 GMT Subject: CN=690798cb-22d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:02:b3:0a:9e:6f:76:67:79:69:ea:a4:7e:0e: 78:6f:66:e6:3c:a8:f1:e7:51:af:b9:23:d1:bb:f6: f5:fa:79:71:a7:25:69:1e:8a:91:3d:f3:5e:2b:29: 43:e8:57:80:a3:c2:21:3e:d7:a4:4e:47:62:36:67: 38:d4:99:d3:24:66:03:b2:da:08:56:53:31:f5:1a: be:13:35:70:22:5e:6e:2a:18:8b:7a:1a:5f:38:b8: 60:43:41:87:55:b8:20:9e:77:75:00:fd:79:29:4a: 03:76:ff:b0:dc:14:be:b3:31:9b:66:fb:58:02:4e: a5:33:aa:58:92:d8:3e:d4:b5:1b:3e:99:34:01:29: 64:97:ca:56:e0:11:d2:83:df:38:76:c9:76:57:8d: 09:ce:fc:8c:c6:f1:2f:6b:16:fc:30:02:3e:c0:25: eb:24:1c:b9:72:45:b8:25:39:af:d4:97:92:cb:39: dc:d3:da:2e:3e:d2:5d:cc:49:6a:82:44:63:f2:2b: 05:c4:7e:e6:6c:ed:42:09:b0:11:f6:bd:13:89:28: 6c:d4:81:77:62:a0:a5:86:d7:09:3b:7b:74:47:23: a6:dc:c9:71:9b:f1:8d:7c:6c:09:29:c6:73:13:fc: 2f:6a:c9:db:b4:aa:35:8c:05:64:23:ca:88:86:29: 3e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:6B:BD:5C:22:AE:E9:05:26:B0:2C:87:27:CA:0D:A8:7B:5B:6A:C5 X509v3 Authority Key Identifier: keyid:71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:a9:34:47:d7:c6:5a:9a:f1:3d:24:fc:06:d8:ba:8e:e8:c2: a5:1c:58:a3:88:6c:72:82:3d:87:42:db:ca:ff:bc:de:2b:7d: 8b:6a:bb:12:b1:8c:45:77:d9:6d:ca:bd:91:25:a4:fb:5a:d0: c0:31:1a:39:45:5a:ee:95:aa:f3:2b:10:b2:3f:27:18:b3:8a: cb:c7:e8:ea:00:68:01:c6:1f:ae:37:57:f6:b3:c6:ba:a4:da: bf:86:1a:d6:18:f9:c9:a5:97:cf:eb:2b:66:04:2f:4b:48:b0: ac:76:5b:44:df:1c:82:a3:23:61:44:34:bb:9b:1f:d4:43:a4: a9:a4:d5:9c:74:14:bc:43:9f:9c:10:82:f4:b0:8d:63:1f:24: 32:d4:88:1f:07:b4:bd:14:c4:6e:43:36:e9:fa:e3:77:ef:7d: 5d:5e:d2:d8:68:9b:ee:80:25:4e:8b:83:1c:3a:6f:df:3d:07: 36:44:d6:5a:04:3f:c3:4e:db:75:8b:d6:44:f9:44:ce:83:d3: ef:fa:8a:64:cd:5f:59:53:05:ae:43:d3:81:e4:e2:0b:f3:62: 33:17:c9:ce:f9:42:1d:96:d8:cd:2c:23:38:1e:4b:f7:2a:54: 0f:ec:9a:6e:2d:aa:82:31:31:c8:e2:dd:95:22:40:27:89:ee: 50:b9:2c:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE3NEUxMTAvBgNVBAUTKDcxODA3MzA5OEFGMDM5NkZEOEUzMzA5QTFCOUZCNkYz RUVCMTdBRTcwHhcNMjUxMTAyMTc0NTQ3WhcNMjUxMTA5MTc0NTQ3WjAYMRYwFAYD VQQDEw02OTA3OThjYi0yMmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugKzCp5vdmd5aeqkfg54b2bmPKjx51GvuSPRu/b1+nlxpyVpHoqRPfNeKylD 6FeAo8IhPtekTkdiNmc41JnTJGYDstoIVlMx9Rq+EzVwIl5uKhiLehpfOLhgQ0GH Vbggnnd1AP15KUoDdv+w3BS+szGbZvtYAk6lM6pYktg+1LUbPpk0ASlkl8pW4BHS g984dsl2V40JzvyMxvEvaxb8MAI+wCXrJBy5ckW4JTmv1JeSyznc09ouPtJdzElq gkRj8isFxH7mbO1CCbAR9r0TiShs1IF3YqClhtcJO3t0RyOm3Mlxm/GNfGwJKcZz E/wvasnbtKo1jAVkI8qIhik+dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDhrvVwi rukFJrAshyfKDah7W2rFMB8GA1UdIwQYMBaAFHGAcwmK8Dlv2OMwmhuftvPusXrn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTc0RS81NEFBMTQ5Q0FB RjYxMUU5OUM1RUUyNTlDNEY5QUUwMi9jWUJ6Q1lyd09XX1k0ekNhRzUtMjgtNnhl dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NZQnpDWXJ3T1dfWTR6Q2FHNS0yOC02eGV1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTc0RS81NEFBMTQ5Q0FBRjYxMUU5OUM1RUUyNTlDNEY5QUUwMi9jWUJ6Q1lyd09X X1k0ekNhRzUtMjgtNnhldWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJqTRH18ZamvE9JPwG2LqO6MKlHFijiGxygj2HQtvK/7zeK32LarsS sYxFd9ltyr2RJaT7WtDAMRo5RVrularzKxCyPycYs4rLx+jqAGgBxh+uN1f2s8a6 pNq/hhrWGPnJpZfP6ytmBC9LSLCsdltE3xyCoyNhRDS7mx/UQ6SppNWcdBS8Q5+c EIL0sI1jHyQy1IgfB7S9FMRuQzbp+uN3731dXtLYaJvugCVOi4McOm/fPQc2RNZa BD/DTtt1i9ZE+UTOg9Pv+opkzV9ZUwWuQ9OB5OIL82IzF8nO+UIdltjNLCM4Hkv3 KlQP7JpuLaqCMTHI4t2VIkAnie5QuSxF -----END CERTIFICATE-----Generated at Tue Nov 4 19:12:35 2025 by rpki-client