$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft File: y78mA3JNeFZrHBLDLVxIH10w8fI.mft (raw, json) Hash identifier: wXvdcesi8mBhrWdIXRsq4UZ3Qz5HU35R+TJL0+ZF0iw= Subject key identifier: 00:FE:C5:FB:4B:1F:92:9A:78:FD:35:35:96:A1:0B:6E:0B:31:CA:E3 Authority key identifier: CB:BF:26:03:72:4D:78:56:6B:1C:12:C3:2D:5C:48:1F:5D:30:F1:F2 Certificate issuer: /CN=A91B7700/serialNumber=CBBF2603724D78566B1C12C32D5C481F5D30F1F2 Certificate serial: 03BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft Manifest number: 03BA Signing time: Wed 05 Nov 2025 00:45:31 +0000 Manifest this update: Wed 05 Nov 2025 00:45:30 +0000 Manifest next update: Wed 12 Nov 2025 00:45:30 +0000 Files and hashes: 1: y78mA3JNeFZrHBLDLVxIH10w8fI.crl (hash: sC0bcjTvSkjRsjq6Lw6/XfXnJKCjP2grKWaxu41/CFg=) 2: 93D60566AE5B11ECB19C1569C4F9AE02.roa (hash: mfWKFm3R9Zz1cfvfe7gZWjinbVCRooVyIR4rmFi/Bec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.crl rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 958 (0x3be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7700, serialNumber=CBBF2603724D78566B1C12C32D5C481F5D30F1F2 Validity Not Before: Nov 5 00:45:30 2025 GMT Not After : Nov 12 00:45:30 2025 GMT Subject: CN=690a9e2a-26eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:6a:cc:f4:9c:dc:9a:1b:1a:16:29:8b:27:88: 95:47:16:8b:c1:76:74:93:9b:e1:61:e1:fd:1b:af: 01:c7:17:dd:f9:3b:c6:81:87:27:51:e4:07:86:6c: 9f:6a:47:c3:8e:78:ff:33:7b:94:73:0b:af:98:d5: a6:c2:8f:00:d0:34:0c:1a:9f:87:da:c9:59:e1:8a: 00:19:f2:12:68:62:63:a1:be:4b:e2:a8:b3:e6:04: ee:e7:bd:dc:70:b1:0a:3c:41:b2:52:24:61:1e:62: b3:60:07:65:b2:90:f7:e8:31:c2:ac:39:d8:b1:b5: e8:42:44:87:07:c1:b4:7b:a6:c1:5c:11:a0:1c:44: 0f:bc:e4:c0:48:97:6d:ed:76:22:5b:db:65:fd:6e: c4:87:e5:43:fb:fb:a5:e5:1b:6a:67:a8:9b:29:82: 44:0d:d5:92:2f:72:3a:15:35:b3:ef:5d:d0:37:ff: fe:ef:be:99:a6:b8:87:ff:a7:e4:ab:44:b4:81:bd: 36:89:32:4e:14:1e:37:2d:11:02:4d:b1:8b:a5:69: fb:8f:ba:21:a7:92:70:8c:ea:4f:fe:f8:b2:8e:1e: 76:34:b2:b2:e5:62:af:62:ec:48:aa:ad:de:3a:9e: 99:7c:24:47:a3:e0:ae:2e:23:5f:f1:e1:35:bd:e8: 77:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FE:C5:FB:4B:1F:92:9A:78:FD:35:35:96:A1:0B:6E:0B:31:CA:E3 X509v3 Authority Key Identifier: keyid:CB:BF:26:03:72:4D:78:56:6B:1C:12:C3:2D:5C:48:1F:5D:30:F1:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:f0:93:d6:02:2a:d2:69:59:fb:5e:70:88:d2:23:e8:c3:14: af:a6:47:07:a3:10:ce:91:43:6f:69:48:49:e8:8f:99:ae:f1: 29:e1:c4:40:66:bc:75:53:10:1a:48:9b:61:3a:28:d2:71:50: 0e:36:52:12:5c:f8:b3:21:2b:f5:21:c5:8e:f8:96:ea:c1:fa: b4:df:e6:f0:1c:8c:e9:ac:a0:5c:2a:e0:bd:61:8f:f2:f3:a2: d1:7e:cd:52:a0:e8:ab:d0:85:5a:d8:b6:15:5f:a3:ce:2d:5a: 4d:be:c2:a4:15:f3:be:ca:34:97:48:39:f5:25:d2:26:1d:bb: 5e:d5:06:b4:fb:a2:5e:af:dc:56:3a:b4:b4:fb:01:33:3a:1e: b6:99:c4:db:d8:fb:31:11:63:72:90:33:84:e9:d6:1b:e3:22: 90:07:89:0e:cc:65:88:e8:15:2a:5b:c1:31:e3:ff:d9:62:55: 73:08:bf:0c:5e:d7:1c:da:2e:e9:48:65:b1:6f:9e:5b:bf:f2: ad:98:8f:32:2c:ba:66:94:46:db:02:44:a5:bf:86:cb:a9:3a: 67:be:38:91:15:60:6e:1c:65:8f:c4:e6:43:95:30:27:42:25: 54:6d:18:5e:40:06:f2:7f:8b:55:be:62:ca:ee:6f:dd:85:cd: a1:77:c4:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3MDAxMTAvBgNVBAUTKENCQkYyNjAzNzI0RDc4NTY2QjFDMTJDMzJENUM0ODFG NUQzMEYxRjIwHhcNMjUxMTA1MDA0NTMwWhcNMjUxMTEyMDA0NTMwWjAYMRYwFAYD VQQDEw02OTBhOWUyYS0yNmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA92rM9JzcmhsaFimLJ4iVRxaLwXZ0k5vhYeH9G68Bxxfd+TvGgYcnUeQHhmyf akfDjnj/M3uUcwuvmNWmwo8A0DQMGp+H2slZ4YoAGfISaGJjob5L4qiz5gTu573c cLEKPEGyUiRhHmKzYAdlspD36DHCrDnYsbXoQkSHB8G0e6bBXBGgHEQPvOTASJdt 7XYiW9tl/W7Eh+VD+/ul5RtqZ6ibKYJEDdWSL3I6FTWz713QN//+776ZpriH/6fk q0S0gb02iTJOFB43LRECTbGLpWn7j7ohp5JwjOpP/viyjh52NLKy5WKvYuxIqq3e Op6ZfCRHo+CuLiNf8eE1veh3awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAD+xftL H5KaeP01NZahC24LMcrjMB8GA1UdIwQYMBaAFMu/JgNyTXhWaxwSwy1cSB9dMPHy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzcwMC9DQ0RCRjRGMEFF NTcxMUVDQjRBMURBNjRDNEY5QUUwMi95NzhtQTNKTmVGWnJIQkxETFZ4SUgxMHc4 ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3OG1BM0pOZUZackhCTERMVnhJSDEwdzhmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzcwMC9DQ0RCRjRGMEFFNTcxMUVDQjRBMURBNjRDNEY5QUUwMi95NzhtQTNKTmVG WnJIQkxETFZ4SUgxMHc4ZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA8JPWAirSaVn7XnCI0iPowxSvpkcHoxDOkUNvaUhJ6I+ZrvEp4cRA Zrx1UxAaSJthOijScVAONlISXPizISv1IcWO+Jbqwfq03+bwHIzprKBcKuC9YY/y 86LRfs1SoOir0IVa2LYVX6POLVpNvsKkFfO+yjSXSDn1JdImHbte1Qa0+6Jer9xW OrS0+wEzOh62mcTb2PsxEWNykDOE6dYb4yKQB4kOzGWI6BUqW8Ex4//ZYlVzCL8M Xtcc2i7pSGWxb55bv/KtmI8yLLpmlEbbAkSlv4bLqTpnvjiRFWBuHGWPxOZDlTAn QiVUbRheQAbyf4tVvmLK7m/dhc2hd8Tv -----END CERTIFICATE-----Generated at Wed Nov 5 20:50:59 2025 by rpki-client