$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft File: 0y2jboghgi5r08gs_6mE56kJw_Y.mft (raw, json) Hash identifier: ZFtVHLZYp4c1d596vl/6q12De0nu99wngzvnUBe2rBg= Subject key identifier: BB:A1:96:1D:36:FA:7E:CA:38:3F:44:DA:DD:EE:F9:08:CB:A1:69:D9 Authority key identifier: D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6 Certificate issuer: /CN=A91B8EF9/serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6 Certificate serial: 3420 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft Manifest number: 3412 Signing time: Tue 04 Nov 2025 15:23:01 +0000 Manifest this update: Tue 04 Nov 2025 15:23:00 +0000 Manifest next update: Tue 11 Nov 2025 15:23:00 +0000 Files and hashes: 1: 0y2jboghgi5r08gs_6mE56kJw_Y.crl (hash: IL1yCXbJxOb2Q26Uipcp3p3J/PcROLGENSS9B4Oz3j8=) 2: A1C2C79680FE11E985D53F55C4F9AE02.roa (hash: Ko3Luk3NXRMVTdrKjxB+T1Aq5Rz7BTBaPzcxuwLSdz4=) 3: A30DC17880FE11E985D53F55C4F9AE02.roa (hash: FAySI2su8cL3vKBRY/mDcgCBdpz6IW+fV0g4HW92eb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13344 (0x3420) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8EF9, serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6 Validity Not Before: Nov 4 15:23:00 2025 GMT Not After : Nov 11 15:23:00 2025 GMT Subject: CN=690a1a54-a4d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:91:53:ea:28:86:93:83:12:44:af:5d:0d:2e: f1:37:ef:39:14:3a:cb:d9:07:5a:dd:63:18:5d:9d: 48:d4:e0:24:c5:3a:2f:aa:b2:8c:f0:84:b7:a1:16: f2:fa:cd:3d:54:28:0f:ac:b1:64:b2:6e:d7:f3:80: b5:78:f7:ab:49:5f:34:bf:54:82:0a:ac:88:be:09: ca:7c:64:d3:36:49:44:fa:42:43:57:fa:b8:c5:e3: 82:92:fa:06:3c:39:a9:da:57:5f:a6:c8:57:2e:ec: d8:53:0c:e1:b1:16:6c:fc:92:02:c9:ae:b6:12:59: ee:98:88:52:df:43:f8:68:f0:49:1f:85:30:e8:d8: 18:22:cc:d3:45:c1:83:0f:34:4f:a9:38:cb:7d:92: e8:3b:83:13:7b:40:2d:19:a8:c9:81:30:07:ce:30: 0e:95:d4:eb:e6:65:fa:30:66:9e:17:f9:65:9b:a4: 6c:d0:6e:50:47:58:12:07:54:a3:6c:61:68:e4:c3: 46:d3:ab:c1:a3:98:4b:b2:a8:39:03:de:56:51:ab: 42:7f:ba:a4:14:a1:9c:88:d2:63:b0:03:e7:28:09: 98:65:14:8b:80:1d:b9:c6:b0:7f:93:36:6d:55:e1: d6:50:aa:e7:30:03:cd:79:0b:7b:d9:a7:58:5e:90: 88:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A1:96:1D:36:FA:7E:CA:38:3F:44:DA:DD:EE:F9:08:CB:A1:69:D9 X509v3 Authority Key Identifier: keyid:D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:46:66:af:d8:52:c5:b3:69:bc:b6:25:99:4b:1f:58:67:2e: 17:83:55:f2:48:23:28:bd:58:0f:ff:7b:59:7a:e0:21:1a:92: 7c:48:46:a1:00:b9:48:8b:3b:b2:e7:69:54:e5:f5:8f:17:48: c7:9d:ac:34:53:3d:ad:32:bc:9d:4a:db:c6:76:32:22:f0:d2: e0:5f:1a:b6:56:2d:82:e4:ac:1e:ba:f5:12:4e:25:46:6c:9a: cc:72:0b:4a:81:4c:c8:a2:c1:46:b0:4d:5d:cd:26:ed:79:de: 64:f2:2f:44:8d:28:ae:71:5c:dd:ad:db:ed:df:ef:ad:d1:a7: 2e:82:40:75:4d:9a:03:73:9e:e0:b7:0c:a0:20:da:d7:2e:6d: e9:b9:16:5e:d5:15:b1:0b:dc:d0:46:47:f4:cc:09:93:59:5a: d4:1b:23:04:fd:17:ed:f1:3a:3a:bf:f4:f9:74:6a:25:da:2a: 4a:96:e1:fc:73:b6:74:fb:2a:71:10:a0:73:ec:b8:56:b3:1b: ad:67:6a:94:61:0d:08:f3:6c:ef:7e:57:15:24:15:3e:d8:fe: b0:f5:bf:64:8a:d9:00:8f:c3:0c:9d:3c:06:fb:44:00:77:bf: ce:28:79:a3:a0:a9:ee:39:18:93:7b:a2:98:74:0e:48:c3:06: c2:60:ad:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhFRjkxMTAvBgNVBAUTKEQzMkRBMzZFODgyMTgyMkU2QkQzQzgyQ0ZGQTk4NEU3 QTkwOUMzRjYwHhcNMjUxMTA0MTUyMzAwWhcNMjUxMTExMTUyMzAwWjAYMRYwFAYD VQQDEw02OTBhMWE1NC1hNGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJFT6iiGk4MSRK9dDS7xN+85FDrL2Qda3WMYXZ1I1OAkxTovqrKM8IS3oRby +s09VCgPrLFksm7X84C1ePerSV80v1SCCqyIvgnKfGTTNklE+kJDV/q4xeOCkvoG PDmp2ldfpshXLuzYUwzhsRZs/JICya62ElnumIhS30P4aPBJH4Uw6NgYIszTRcGD DzRPqTjLfZLoO4MTe0AtGajJgTAHzjAOldTr5mX6MGaeF/llm6Rs0G5QR1gSB1Sj bGFo5MNG06vBo5hLsqg5A95WUatCf7qkFKGciNJjsAPnKAmYZRSLgB25xrB/kzZt VeHWUKrnMAPNeQt72adYXpCIdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLuhlh02 +n7KOD9E2t3u+QjLoWnZMB8GA1UdIwQYMBaAFNMto26IIYIua9PILP+phOepCcP2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEVGOS80NEE4MDVFRTQ0 QzkxMUUyQjM1QUM0ODQyOTc5QkIyMC8weTJqYm9naGdpNXIwOGdzXzZtRTU2a0p3 X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB5Mmpib2doZ2k1cjA4Z3NfNm1FNTZrSndfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEVGOS80NEE4MDVFRTQ0QzkxMUUyQjM1QUM0ODQyOTc5QkIyMC8weTJqYm9naGdp NXIwOGdzXzZtRTU2a0p3X1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABRmav2FLFs2m8tiWZSx9YZy4Xg1XySCMovVgP/3tZeuAhGpJ8SEah ALlIizuy52lU5fWPF0jHnaw0Uz2tMrydStvGdjIi8NLgXxq2Vi2C5KweuvUSTiVG bJrMcgtKgUzIosFGsE1dzSbted5k8i9EjSiucVzdrdvt3++t0acugkB1TZoDc57g twygINrXLm3puRZe1RWxC9zQRkf0zAmTWVrUGyME/Rft8To6v/T5dGol2ipKluH8 c7Z0+ypxEKBz7LhWsxutZ2qUYQ0I82zvflcVJBU+2P6w9b9kitkAj8MMnTwG+0QA d7/OKHmjoKnuORiTe6KYdA5IwwbCYK2+ -----END CERTIFICATE-----Generated at Wed Nov 5 05:14:33 2025 by rpki-client