$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft File: pYrazvnSRVOlVka1puvM6rGfL7w.mft (raw, json) Hash identifier: qVbxzl/QyCehq5xyCMNZxE9WbF5PLJdRqpCr7htFgno= Subject key identifier: 01:12:DA:91:C6:D2:9D:56:88:A6:5B:9A:A0:21:D6:D3:F2:0F:DD:F1 Authority key identifier: A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC Certificate issuer: /CN=A9174C7A/serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft Manifest number: 50 Signing time: Mon 03 Nov 2025 07:16:07 +0000 Manifest this update: Mon 03 Nov 2025 07:16:07 +0000 Manifest next update: Mon 10 Nov 2025 07:16:07 +0000 Files and hashes: 1: pYrazvnSRVOlVka1puvM6rGfL7w.crl (hash: WYJk2G0kwNpoc8cAjhu3iUfF2DY93Fg+OmY03/s4gu4=) 2: 5B118C12986011F0A5423187C4F9AE02.roa (hash: OXXb1y44b21RuXCm0yOOerFNyOFngqcHwK/xrGzNLmQ=) 3: 8D052914404911F0A4BD357BC4F9AE02.roa (hash: WkC734Z9YLqp46ED9zzrP9DX1ES2VdVVIimzvDKW6/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:16:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C7A, serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC Validity Not Before: Nov 3 07:16:07 2025 GMT Not After : Nov 10 07:16:07 2025 GMT Subject: CN=690856b7-ccad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:10:96:dc:39:75:35:96:d2:d4:2f:dd:33:bb: 3d:ca:59:67:b0:8f:5c:d4:43:3f:83:40:ee:16:ef: 2f:79:88:46:af:6d:83:86:3c:48:e0:98:63:94:24: 19:cd:44:67:e9:a7:a9:b5:1c:f8:d9:f7:6b:a5:f4: 92:dd:61:8a:30:fa:5a:83:c5:02:61:da:b3:17:e8: 52:2b:68:6f:74:8e:05:d1:c0:73:de:e6:6e:17:ae: 2c:e4:c1:ce:2b:01:ee:21:e7:42:3f:df:b7:48:d3: 21:2d:a5:37:62:a2:58:80:7f:75:76:94:a4:e4:d7: 14:26:0a:2c:f4:0a:83:40:e2:3c:11:d2:a5:27:ee: 98:0a:69:45:93:2f:fd:6c:d1:39:01:f0:d4:cb:1f: d0:7c:03:fe:cb:4c:25:b8:ef:c5:6b:83:a9:55:4b: a4:59:37:5d:a5:b0:04:a3:74:5e:4f:4f:9c:a0:cd: 98:a4:12:ef:e6:ad:80:85:c9:7f:08:ab:b8:53:03: 44:2a:45:92:a8:1b:f8:7d:34:20:5b:32:9e:e0:10: 97:dd:25:68:f1:43:12:c4:1f:21:db:01:4a:cd:f5: 08:13:de:bc:6e:55:d3:f9:00:8f:8d:4c:68:5d:32: 2b:28:e3:a5:db:d6:21:7b:52:f7:2e:9b:06:19:d3: 99:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:12:DA:91:C6:D2:9D:56:88:A6:5B:9A:A0:21:D6:D3:F2:0F:DD:F1 X509v3 Authority Key Identifier: keyid:A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:3e:4b:31:3b:f1:c5:d9:05:c6:97:41:42:0e:f5:0d:2a:a3: 39:e8:3b:cd:7b:14:a6:c1:91:ce:5a:b0:e4:09:1a:d1:4f:a7: 51:73:74:41:d3:b3:6c:3e:9e:03:c2:b2:a0:ad:8a:ef:d3:2e: 88:ab:f7:8a:2a:62:98:74:f6:b1:4d:09:70:fc:c7:02:d9:37: e1:de:5d:96:39:cd:9c:5e:c0:6e:1e:c2:d0:01:de:c3:4c:c9: 65:10:38:6f:e8:ad:fc:e1:73:4b:eb:24:80:dd:21:14:88:d8: cf:4c:14:13:6a:47:0a:72:63:88:e6:68:71:c9:21:86:58:ef: 5c:fd:25:f3:41:b5:a6:62:3d:4f:c8:a7:23:6a:2b:bb:56:3f: 8d:c4:fc:5c:ec:9f:69:de:56:02:cf:e7:8e:05:cf:c9:8b:b2: 75:0a:64:33:b3:32:e0:78:f0:2c:bb:97:81:7f:03:46:ab:bf: 3a:98:0a:12:cb:17:83:cf:59:9d:95:b5:6a:73:14:66:46:e6: 7e:f1:21:fe:b8:66:d9:30:6e:3f:c5:9e:a4:bb:ec:12:b3:9f: 1e:90:b9:d5:9d:bc:4e:88:5b:1d:60:31:62:0c:12:05:a9:76: b6:eb:ab:88:d4:3b:e7:9e:ec:3d:cb:3a:15:09:ff:fb:59:bc: 69:4c:dc:3f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NEM3QTExMC8GA1UEBRMoQTU4QURBQ0VGOUQyNDU1M0E1NTY0NkI1QTZFQkNDRUFC MTlGMkZCQzAeFw0yNTExMDMwNzE2MDdaFw0yNTExMTAwNzE2MDdaMBgxFjAUBgNV BAMTDTY5MDg1NmI3LWNjYWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1EJbcOXU1ltLUL90zuz3KWWewj1zUQz+DQO4W7y95iEavbYOGPEjgmGOUJBnN RGfpp6m1HPjZ92ul9JLdYYow+lqDxQJh2rMX6FIraG90jgXRwHPe5m4Xrizkwc4r Ae4h50I/37dI0yEtpTdioliAf3V2lKTk1xQmCiz0CoNA4jwR0qUn7pgKaUWTL/1s 0TkB8NTLH9B8A/7LTCW478Vrg6lVS6RZN12lsASjdF5PT5ygzZikEu/mrYCFyX8I q7hTA0QqRZKoG/h9NCBbMp7gEJfdJWjxQxLEHyHbAUrN9QgT3rxuVdP5AI+NTGhd Miso46Xb1iF7UvcumwYZ05kTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUARLakcbS nVaIpluaoCHW0/IP3fEwHwYDVR0jBBgwFoAUpYrazvnSRVOlVka1puvM6rGfL7ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0QzdBLzQ0RjE0QUZDNDA0 NjExRjA5QkYwRDg0RkM0RjlBRTAyL3BZcmF6dm5TUlZPbFZrYTFwdXZNNnJHZkw3 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcFlyYXp2blNSVk9sVmthMXB1dk02ckdmTDd3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0 QzdBLzQ0RjE0QUZDNDA0NjExRjA5QkYwRDg0RkM0RjlBRTAyL3BZcmF6dm5TUlZP bFZrYTFwdXZNNnJHZkw3dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMM+SzE78cXZBcaXQUIO9Q0qoznoO817FKbBkc5asOQJGtFPp1FzdEHT s2w+ngPCsqCtiu/TLoir94oqYph09rFNCXD8xwLZN+HeXZY5zZxewG4ewtAB3sNM yWUQOG/orfzhc0vrJIDdIRSI2M9MFBNqRwpyY4jmaHHJIYZY71z9JfNBtaZiPU/I pyNqK7tWP43E/Fzsn2neVgLP544Fz8mLsnUKZDOzMuB48Cy7l4F/A0arvzqYChLL F4PPWZ2VtWpzFGZG5n7xIf64Ztkwbj/FnqS77BKznx6QudWdvE6IWx1gMWIMEgWp drbrq4jUO+ee7D3LOhUJ//tZvGlM3D8= -----END CERTIFICATE-----Generated at Tue Nov 4 21:35:07 2025 by rpki-client