$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft File: -Y6-IGkPLysjShVIfdCVIfPUdTw.mft (raw, json) Hash identifier: x1kX9unlUqXqnd7v3dlT6voOdJSPpNA3koKLFuNxn0U= Subject key identifier: FA:58:36:04:58:57:B7:F2:E2:0A:13:E2:F9:70:B3:72:29:B7:49:0D Authority key identifier: F9:8E:BE:20:69:0F:2F:2B:23:4A:15:48:7D:D0:95:21:F3:D4:75:3C Certificate issuer: /CN=A91BCC44/serialNumber=F98EBE20690F2F2B234A15487DD09521F3D4753C Certificate serial: 0B3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft Manifest number: 0B38 Signing time: Tue 04 Nov 2025 19:20:46 +0000 Manifest this update: Tue 04 Nov 2025 19:20:45 +0000 Manifest next update: Tue 11 Nov 2025 19:20:45 +0000 Files and hashes: 1: -Y6-IGkPLysjShVIfdCVIfPUdTw.crl (hash: K6z7J/zzlfiZ1qW0+g7Vu5ZUQAdG1eGh3IfHKG5uvQ4=) 2: B69F45F6480C11EAA7171874C4F9AE02.roa (hash: gMyJ+7eXQOz2lZ7oRn13QHvOh0RqD5UbZBYLXAXV9no=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.crl rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:20:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2879 (0xb3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCC44, serialNumber=F98EBE20690F2F2B234A15487DD09521F3D4753C Validity Not Before: Nov 4 19:20:45 2025 GMT Not After : Nov 11 19:20:45 2025 GMT Subject: CN=690a520e-e489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:16:60:02:98:df:cb:6f:4f:04:1f:3a:19:1a: 20:30:e8:e6:f9:c3:93:33:33:58:20:06:7c:aa:3f: 07:e0:a5:aa:63:79:f7:71:0c:2a:0c:4d:ee:14:fc: 0e:99:5b:f3:86:a4:f8:ba:0a:bf:18:e2:5f:e5:b6: 3e:1a:05:fe:8a:da:2d:da:3c:0a:18:6f:41:05:04: 79:c8:5f:94:a9:99:c7:f7:49:75:81:06:d5:7a:52: a5:d8:2d:9f:40:e2:b5:15:c2:4a:67:d0:93:d3:da: 2b:67:a1:80:d5:f5:21:91:f3:c0:45:3d:ba:af:d2: 26:28:82:4c:47:c7:15:ea:14:d0:18:06:03:77:10: 0f:7a:8e:82:03:47:56:94:25:be:24:6d:16:94:91: 6e:a6:b5:61:bb:53:94:16:d0:0b:aa:71:15:43:1b: de:20:a6:79:08:85:97:5f:72:6e:29:67:1e:bd:90: 3b:2e:c4:a2:aa:9a:40:ac:b4:ed:99:f9:e1:2b:38: a0:a3:5a:28:dd:72:9a:52:83:a2:bb:43:b7:bd:d0: 37:f7:78:14:c3:89:08:48:85:8b:36:c1:a7:d9:42: 11:cb:16:6f:c5:6d:74:43:52:28:79:0f:55:81:d1: 1b:25:ec:1b:3c:82:07:33:ce:03:ff:c8:71:f4:74: 30:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:58:36:04:58:57:B7:F2:E2:0A:13:E2:F9:70:B3:72:29:B7:49:0D X509v3 Authority Key Identifier: keyid:F9:8E:BE:20:69:0F:2F:2B:23:4A:15:48:7D:D0:95:21:F3:D4:75:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:80:ba:7c:78:d1:e6:48:bb:cd:c7:c9:0b:7a:07:01:3f:69: 29:fb:5b:b9:dd:74:c5:94:bf:c6:90:68:5a:50:ff:4a:d7:25: b4:03:de:5a:dc:1b:99:1d:12:55:31:e1:f4:83:ca:37:4f:7a: df:35:9c:fc:f0:d8:5b:d6:93:10:92:e7:50:9a:2a:0d:8c:63: 0f:c3:48:37:86:72:37:21:8f:aa:07:56:5e:d8:a4:6c:93:fb: 23:38:cc:f4:d1:80:15:73:b9:a0:98:c1:ff:8a:de:45:95:41: 51:6d:34:0b:e4:9e:aa:e3:5f:3a:10:63:8a:ef:54:d4:72:c0: c9:85:ed:83:50:d1:77:87:43:fc:a5:fa:7c:96:91:21:90:79: 3e:e0:16:c6:a4:c9:19:3b:2a:0e:c2:5f:f7:3c:9e:e3:4d:3c: 7a:a1:3a:ce:38:a6:e1:c3:98:b0:1e:92:ca:09:96:28:3b:35: 10:91:e4:44:d0:bb:9a:9f:3d:bf:6d:fc:b8:ae:e3:43:88:7b: 76:b5:54:0e:0d:b4:47:61:8e:50:62:b0:d5:c6:f6:6e:9d:12: d3:11:da:ce:93:9c:30:85:09:a8:34:4f:1f:f6:69:4a:fe:6d: db:31:51:17:8f:a7:d4:f8:54:96:6d:e0:b8:b3:d6:80:87:9c: 13:1a:61:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNDNDQxMTAvBgNVBAUTKEY5OEVCRTIwNjkwRjJGMkIyMzRBMTU0ODdERDA5NTIx RjNENDc1M0MwHhcNMjUxMTA0MTkyMDQ1WhcNMjUxMTExMTkyMDQ1WjAYMRYwFAYD VQQDEw02OTBhNTIwZS1lNDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthZgApjfy29PBB86GRogMOjm+cOTMzNYIAZ8qj8H4KWqY3n3cQwqDE3uFPwO mVvzhqT4ugq/GOJf5bY+GgX+itot2jwKGG9BBQR5yF+UqZnH90l1gQbVelKl2C2f QOK1FcJKZ9CT09orZ6GA1fUhkfPART26r9ImKIJMR8cV6hTQGAYDdxAPeo6CA0dW lCW+JG0WlJFuprVhu1OUFtALqnEVQxveIKZ5CIWXX3JuKWcevZA7LsSiqppArLTt mfnhKzigo1oo3XKaUoOiu0O3vdA393gUw4kISIWLNsGn2UIRyxZvxW10Q1IoeQ9V gdEbJewbPIIHM84D/8hx9HQwNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPpYNgRY V7fy4goT4vlws3Ipt0kNMB8GA1UdIwQYMBaAFPmOviBpDy8rI0oVSH3QlSHz1HU8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0M0NC9DMTYwRkNBQzQ4 MEExMUVBOTgxMTkwNkRDNEY5QUUwMi8tWTYtSUdrUEx5c2pTaFZJZmRDVklmUFVk VHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1ZNi1JR2tQTHlzalNoVklmZENWSWZQVWRUdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0M0NC9DMTYwRkNBQzQ4MEExMUVBOTgxMTkwNkRDNEY5QUUwMi8tWTYtSUdrUEx5 c2pTaFZJZmRDVklmUFVkVHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEgLp8eNHmSLvNx8kLegcBP2kp+1u53XTFlL/GkGhaUP9K1yW0A95a 3BuZHRJVMeH0g8o3T3rfNZz88Nhb1pMQkudQmioNjGMPw0g3hnI3IY+qB1Ze2KRs k/sjOMz00YAVc7mgmMH/it5FlUFRbTQL5J6q4186EGOK71TUcsDJhe2DUNF3h0P8 pfp8lpEhkHk+4BbGpMkZOyoOwl/3PJ7jTTx6oTrOOKbhw5iwHpLKCZYoOzUQkeRE 0Luanz2/bfy4ruNDiHt2tVQODbRHYY5QYrDVxvZunRLTEdrOk5wwhQmoNE8f9mlK /m3bMVEXj6fU+FSWbeC4s9aAh5wTGmGm -----END CERTIFICATE-----Generated at Wed Nov 5 03:16:03 2025 by rpki-client