$ rpki-client -vvf rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft File: 73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft (raw, json) Hash identifier: XDGn8Pfvjkt6fPqG82JupO/Yn6I/nCbIREKnftMCTNA= Subject key identifier: A7:21:7A:4C:50:A2:5C:AD:40:4B:B4:8B:E3:36:45:9C:03:DE:0D:13 Authority key identifier: EF:76:2C:C9:42:19:E0:99:23:A1:1B:0D:3C:43:0E:7F:35:C8:D8:64 Certificate issuer: /CN=A917E458/serialNumber=EF762CC94219E09923A11B0D3C430E7F35C8D864 Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft Manifest number: 5A Signing time: Wed 05 Nov 2025 07:20:29 +0000 Manifest this update: Wed 05 Nov 2025 07:20:28 +0000 Manifest next update: Wed 12 Nov 2025 07:20:28 +0000 Files and hashes: 1: 73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl (hash: 3GSs6T3UC/SvaZB9le0nVXR9tVRVhhU21HwkSfDMchg=) 2: 0E6E2FF4590A11F0B7FD292DC4F9AE02.roa (hash: 7soTZ6EDnpP6A/A05OpE2en3043bE7DF3odg+8Ew9cU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E458, serialNumber=EF762CC94219E09923A11B0D3C430E7F35C8D864 Validity Not Before: Nov 5 07:20:28 2025 GMT Not After : Nov 12 07:20:28 2025 GMT Subject: CN=690afabd-3a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ea:95:85:2d:d7:a5:c1:ff:b0:e5:85:3b:7f: fd:30:55:40:df:8b:62:9a:d4:ec:30:54:c9:bf:ff: d7:7d:20:fa:89:75:11:9f:90:17:4b:74:41:a3:79: 20:e3:83:08:86:86:5b:3f:5e:a9:50:89:85:b4:44: db:21:ad:ef:a8:3b:0c:61:b4:20:68:e4:9f:9b:85: 4f:3f:77:29:31:52:7e:a0:26:4a:c4:64:56:28:10: cd:00:09:7c:61:b8:56:3e:81:be:4c:5b:1e:d6:64: 83:25:21:1f:d2:c2:1e:03:59:99:5f:02:b1:85:71: c6:6c:32:74:b5:43:87:22:d1:9e:e1:23:66:06:6e: d5:b7:97:7c:9b:02:b5:e9:45:f4:53:0b:2f:7a:71: 95:63:2e:bc:ce:b2:47:ba:bf:51:bc:1b:61:90:e1: 86:a1:7a:9e:ad:c6:4a:a1:74:41:d4:8c:a3:d9:7f: dc:b4:3f:4f:ef:8a:ba:1b:f3:c3:27:67:26:61:c7: 5c:ba:fc:7f:1b:fb:b4:62:cc:22:bc:bf:7f:fa:ec: 05:a6:30:1d:bc:8e:65:0f:a2:bb:5e:96:26:4c:1b: c3:bb:41:a9:43:8f:36:2d:5a:29:68:be:3e:47:77: 94:93:1b:f2:33:f1:81:09:6e:a3:01:90:d0:f6:e6: ff:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:21:7A:4C:50:A2:5C:AD:40:4B:B4:8B:E3:36:45:9C:03:DE:0D:13 X509v3 Authority Key Identifier: keyid:EF:76:2C:C9:42:19:E0:99:23:A1:1B:0D:3C:43:0E:7F:35:C8:D8:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:b3:9c:38:71:79:11:3d:03:12:1f:06:01:ef:1a:d5:95:06: d3:2b:03:35:9e:b3:74:08:77:76:24:94:91:f4:1a:10:10:60: 6b:09:3a:a3:ad:27:1b:16:99:74:89:80:3a:b0:0e:72:64:09: 06:b8:32:cc:39:04:af:7e:21:a9:8e:8b:1d:d1:5c:22:91:7a: 00:ef:5a:12:96:22:50:24:da:79:42:aa:70:9c:f9:69:de:3f: 02:56:9e:d1:7d:44:ea:1c:a3:ac:70:9e:84:2e:d6:fb:c0:fd: 2c:9b:5c:63:d8:97:21:12:49:2a:d5:09:6a:28:5f:ed:80:56: c2:5d:f1:2b:40:ed:ed:ae:d9:f7:24:ea:95:6d:71:fe:81:99: 20:90:ad:ab:4b:08:24:49:d0:ca:6d:4c:ab:54:0b:17:de:11: 45:b4:66:34:35:92:5a:b3:6a:be:e9:75:57:86:67:78:e9:e4: bb:dc:30:e9:6d:fe:c1:55:4f:a0:db:99:f0:72:de:79:d4:2a: 0a:12:99:cb:30:04:9b:75:42:90:59:87:dc:fb:b1:4b:c0:de: 23:9c:d0:43:2f:43:68:92:c3:3d:63:68:5d:24:48:5c:5b:15: 63:3f:95:78:3a:ba:a4:e8:06:4e:bd:99:4c:0d:de:41:84:f7: c6:ce:27:3c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTQ1ODExMC8GA1UEBRMoRUY3NjJDQzk0MjE5RTA5OTIzQTExQjBEM0M0MzBFN0Yz NUM4RDg2NDAeFw0yNTExMDUwNzIwMjhaFw0yNTExMTIwNzIwMjhaMBgxFjAUBgNV BAMTDTY5MGFmYWJkLTNhMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDT6pWFLdelwf+w5YU7f/0wVUDfi2Ka1OwwVMm//9d9IPqJdRGfkBdLdEGjeSDj gwiGhls/XqlQiYW0RNshre+oOwxhtCBo5J+bhU8/dykxUn6gJkrEZFYoEM0ACXxh uFY+gb5MWx7WZIMlIR/Swh4DWZlfArGFccZsMnS1Q4ci0Z7hI2YGbtW3l3ybArXp RfRTCy96cZVjLrzOske6v1G8G2GQ4Yahep6txkqhdEHUjKPZf9y0P0/virob88Mn ZyZhx1y6/H8b+7RizCK8v3/67AWmMB28jmUPorteliZMG8O7QalDjzYtWilovj5H d5STG/Iz8YEJbqMBkND25v9JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpyF6TFCi XK1AS7SL4zZFnAPeDRMwHwYDVR0jBBgwFoAU73YsyUIZ4JkjoRsNPEMOfzXI2GQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFNDU4LzI3QkU4NDBFMzBE ODExRjBBN0JFMkU0RkM0RjlBRTAyLzczWXN5VUlaNEpram9Sc05QRU1PZnpYSTJH US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNzNZc3lVSVo0Smtqb1JzTlBFTU9melhJMkdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF NDU4LzI3QkU4NDBFMzBEODExRjBBN0JFMkU0RkM0RjlBRTAyLzczWXN5VUlaNEpr am9Sc05QRU1PZnpYSTJHUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGCznDhxeRE9AxIfBgHvGtWVBtMrAzWes3QId3YklJH0GhAQYGsJOqOt JxsWmXSJgDqwDnJkCQa4Msw5BK9+IamOix3RXCKRegDvWhKWIlAk2nlCqnCc+Wne PwJWntF9ROoco6xwnoQu1vvA/SybXGPYlyESSSrVCWooX+2AVsJd8StA7e2u2fck 6pVtcf6BmSCQratLCCRJ0MptTKtUCxfeEUW0ZjQ1klqzar7pdVeGZ3jp5LvcMOlt /sFVT6DbmfBy3nnUKgoSmcswBJt1QpBZh9z7sUvA3iOc0EMvQ2iSwz1jaF0kSFxb FWM/lXg6uqToBk69mUwN3kGE98bOJzw= -----END CERTIFICATE-----Generated at Wed Nov 5 19:25:48 2025 by rpki-client