$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft File: y2yF51LVad_PHekEycvnHkg-9fI.mft (raw, json) Hash identifier: UgS535SK6TwTyhDwUhhjSFM+Xz7fGJvy/LoCh86fqQQ= Subject key identifier: E3:62:BC:E7:59:27:03:C9:96:C3:AB:CD:35:06:EE:CB:96:44:4C:48 Authority key identifier: CB:6C:85:E7:52:D5:69:DF:CF:1D:E9:04:C9:CB:E7:1E:48:3E:F5:F2 Certificate issuer: /CN=A91BC039/serialNumber=CB6C85E752D569DFCF1DE904C9CBE71E483EF5F2 Certificate serial: 0522 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft Manifest number: 051C Signing time: Sun 02 Nov 2025 23:32:54 +0000 Manifest this update: Sun 02 Nov 2025 23:32:54 +0000 Manifest next update: Sun 09 Nov 2025 23:32:54 +0000 Files and hashes: 1: y2yF51LVad_PHekEycvnHkg-9fI.crl (hash: DChkOYpdNWaNiE79N9kmt1KSelQdv4DeYEGcdrJwXso=) 2: B0A2E01225C411EC88466E59C4F9AE02.roa (hash: 8z4FQ3P4ffexi4IqxjF16x9Xr0QlwFMb8TffrA8dnxw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.crl rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:32:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1314 (0x522) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC039, serialNumber=CB6C85E752D569DFCF1DE904C9CBE71E483EF5F2 Validity Not Before: Nov 2 23:32:54 2025 GMT Not After : Nov 9 23:32:54 2025 GMT Subject: CN=6907ea26-1564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2a:94:14:ae:04:94:5f:44:7b:8c:43:32:9a: cf:16:2b:3a:1b:03:12:30:1b:a0:08:dc:37:d5:42: b9:7d:4e:a6:91:b8:46:ff:15:e5:13:a9:b6:f4:7e: 8d:9c:85:65:d5:2c:d0:8b:a2:94:62:51:ac:17:1b: b0:80:a4:3b:98:88:ff:08:9f:8f:cd:89:5d:14:dd: 26:b1:77:87:21:40:68:0f:85:ee:bb:ff:25:30:f1: 51:0b:27:6a:9f:2f:08:16:c5:57:63:b5:21:a8:44: 4f:20:10:e7:50:95:95:60:df:05:c7:7d:8c:c8:20: de:27:cf:b0:0d:0b:10:03:2c:a2:13:e5:11:6a:1e: 2f:3a:9f:cc:6d:7b:41:41:46:7a:23:fc:52:99:e7: 9e:3f:36:26:88:f8:56:61:9b:80:a4:6c:99:cc:09: f3:90:bf:89:0b:1d:3c:c4:36:1d:cb:45:2d:eb:a1: 5f:75:a9:6e:e0:45:9e:af:4c:da:10:f3:fb:21:6e: 0f:1e:e0:53:5c:bb:dd:f7:10:03:10:6b:b7:b1:6c: e6:fc:af:57:b3:8e:0e:c0:3f:c6:2a:1c:79:ea:8f: 3c:6e:cd:2b:3e:ea:7a:54:ec:e5:87:cf:a4:af:14: a9:6c:ff:72:24:6f:11:a9:a2:a3:6d:8b:8e:39:1a: 0e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:62:BC:E7:59:27:03:C9:96:C3:AB:CD:35:06:EE:CB:96:44:4C:48 X509v3 Authority Key Identifier: keyid:CB:6C:85:E7:52:D5:69:DF:CF:1D:E9:04:C9:CB:E7:1E:48:3E:F5:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:c7:9f:ba:06:ee:a2:ae:33:74:ec:64:7b:a9:15:d7:d9:50: 5b:d0:aa:4e:fb:c9:7c:9e:5f:31:98:4d:a0:1f:f9:a8:1b:df: 59:67:f6:9a:b8:1e:28:12:ed:9a:1e:dc:f8:71:6e:48:bf:c8: c7:32:50:0d:3c:bd:cc:e9:0e:94:69:24:24:ac:e4:24:53:30: 20:ff:1f:cb:fe:5f:c1:63:fd:ff:ed:87:9a:db:a8:2c:51:9e: d0:4b:fc:cc:a0:6f:1f:22:c2:1a:02:8d:55:39:2c:13:0e:35: 02:4a:92:a0:f6:80:38:55:8e:75:a7:39:9a:8d:4a:ca:0a:10: b5:37:dd:7d:96:ae:c3:08:12:76:14:d9:ad:c7:f5:d5:1b:cd: 4a:ea:20:87:47:28:cf:c6:97:7d:70:91:a1:e6:bf:87:f1:9e: a9:df:c6:ad:a8:78:39:9f:06:84:c4:0a:80:2b:96:4f:ea:a3: ab:a9:3d:90:2d:d8:98:b3:6a:1b:3b:d1:5c:57:1a:39:3c:41: d6:9f:78:20:9a:00:70:20:ad:18:a1:2a:c2:ac:e8:71:e5:79: ba:1a:f9:cf:c4:41:96:74:04:55:04:a0:9f:fe:26:fe:2b:62: 6b:fe:ad:67:51:d3:67:5d:35:46:ce:1a:a4:81:8e:68:3e:dc: c8:66:3f:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMwMzkxMTAvBgNVBAUTKENCNkM4NUU3NTJENTY5REZDRjFERTkwNEM5Q0JFNzFF NDgzRUY1RjIwHhcNMjUxMTAyMjMzMjU0WhcNMjUxMTA5MjMzMjU0WjAYMRYwFAYD VQQDEw02OTA3ZWEyNi0xNTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1yqUFK4ElF9Ee4xDMprPFis6GwMSMBugCNw31UK5fU6mkbhG/xXlE6m29H6N nIVl1SzQi6KUYlGsFxuwgKQ7mIj/CJ+PzYldFN0msXeHIUBoD4Xuu/8lMPFRCydq ny8IFsVXY7UhqERPIBDnUJWVYN8Fx32MyCDeJ8+wDQsQAyyiE+URah4vOp/MbXtB QUZ6I/xSmeeePzYmiPhWYZuApGyZzAnzkL+JCx08xDYdy0Ut66Ffdalu4EWer0za EPP7IW4PHuBTXLvd9xADEGu3sWzm/K9Xs44OwD/GKhx56o88bs0rPup6VOzlh8+k rxSpbP9yJG8RqaKjbYuOORoOcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFONivOdZ JwPJlsOrzTUG7suWRExIMB8GA1UdIwQYMBaAFMtshedS1Wnfzx3pBMnL5x5IPvXy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzAzOS9CQjUzMjNFODI1 QzIxMUVDQjQ5OUQxNThDNEY5QUUwMi95MnlGNTFMVmFkX1BIZWtFeWN2bkhrZy05 ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kyeUY1MUxWYWRfUEhla0V5Y3ZuSGtnLTlmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzAzOS9CQjUzMjNFODI1QzIxMUVDQjQ5OUQxNThDNEY5QUUwMi95MnlGNTFMVmFk X1BIZWtFeWN2bkhrZy05ZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzx5+6Bu6irjN07GR7qRXX2VBb0KpO+8l8nl8xmE2gH/moG99ZZ/aa uB4oEu2aHtz4cW5Iv8jHMlANPL3M6Q6UaSQkrOQkUzAg/x/L/l/BY/3/7Yea26gs UZ7QS/zMoG8fIsIaAo1VOSwTDjUCSpKg9oA4VY51pzmajUrKChC1N919lq7DCBJ2 FNmtx/XVG81K6iCHRyjPxpd9cJGh5r+H8Z6p38atqHg5nwaExAqAK5ZP6qOrqT2Q LdiYs2obO9FcVxo5PEHWn3ggmgBwIK0YoSrCrOhx5Xm6GvnPxEGWdARVBKCf/ib+ K2Jr/q1nUdNnXTVGzhqkgY5oPtzIZj+g -----END CERTIFICATE-----Generated at Tue Nov 4 21:37:07 2025 by rpki-client