$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft File: y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft (raw, json) Hash identifier: tUNLpZwdr/A3RYZqTIqf6wfZRDma/U6dEjp23/mzYCo= Subject key identifier: E1:13:53:FF:9E:B2:B7:53:BC:D7:E7:7E:37:4B:DA:61:80:D0:13:DD Authority key identifier: CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63 Certificate issuer: /CN=A91C3A74/serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363 Certificate serial: 2662 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft Manifest number: 264B Signing time: Tue 04 Nov 2025 15:46:52 +0000 Manifest this update: Tue 04 Nov 2025 15:46:51 +0000 Manifest next update: Tue 11 Nov 2025 15:46:51 +0000 Files and hashes: 1: y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl (hash: KLxnUM0YLL1X7vbe9Ku/x4twUKEmLK88QO4qFTdFz00=) 2: 767655BE561A11E79F98831DC4F9AE02.roa (hash: bf73yAvc50YmZ9DwhowT9EQ5/Cgl8VLGPJbD30MABw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:46:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9826 (0x2662) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3A74, serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363 Validity Not Before: Nov 4 15:46:51 2025 GMT Not After : Nov 11 15:46:51 2025 GMT Subject: CN=690a1fec-0d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:20:af:13:c0:2e:17:4d:f9:d4:58:71:b6:8a: c2:d3:1f:3e:68:9e:10:32:65:b3:f7:0b:f1:a9:9c: 07:ca:5a:5e:1c:27:98:28:97:51:de:ae:f4:87:8b: d8:c3:58:f2:29:f9:46:d4:d9:c5:0c:d6:04:7b:fa: d0:51:4c:ad:35:78:41:03:96:02:e7:fe:d3:9f:78: 46:50:b0:45:92:0f:16:00:e2:71:6a:57:33:a2:ce: c3:3b:ce:5f:84:1e:c5:ac:84:6b:ce:48:61:ce:0d: 19:f8:11:c7:05:4e:b6:a9:2d:58:3b:e5:5e:aa:5d: 73:82:1f:6e:e1:3e:63:cf:8b:22:e7:35:68:d7:70: db:14:83:b5:7a:1b:77:db:e6:b7:e2:95:11:b9:d6: f1:b2:e1:23:6f:7e:81:6b:95:5b:0f:17:3a:ba:79: 42:de:9a:5b:b9:c2:26:50:f0:8a:02:d3:d0:52:fe: 4b:39:01:f5:5b:cf:78:17:c9:a7:af:29:f7:88:17: a8:96:c9:82:70:10:e9:b8:2f:70:09:15:b1:0b:1d: d0:a3:51:3d:83:f9:89:68:c2:a1:eb:67:f4:5a:b0: 05:d6:b4:de:24:c1:dc:14:e3:f7:39:46:55:cb:19: 02:57:39:c0:e5:96:a7:28:96:59:86:6d:4a:43:ec: 87:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:13:53:FF:9E:B2:B7:53:BC:D7:E7:7E:37:4B:DA:61:80:D0:13:DD X509v3 Authority Key Identifier: keyid:CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:45:ec:7f:00:24:6f:3b:4b:23:2b:69:b1:19:97:8b:20:1d: 68:8e:b6:96:8b:4b:e3:6b:98:32:e0:c0:c6:fa:86:18:ce:31: 56:bc:cb:cf:7c:b1:0f:da:4f:5f:96:62:92:9a:e3:3f:d8:0c: d4:ce:f3:b5:45:b9:4a:ae:d2:3f:52:51:03:9f:f6:17:f3:bd: 88:73:0d:af:e3:33:82:2e:f6:4e:d1:3b:3b:37:8c:66:9d:28: 57:89:d2:57:41:61:28:07:84:2e:29:fa:7a:72:1b:fe:f9:6f: fc:f3:37:c9:32:49:6f:41:b9:d5:02:dd:dd:65:0b:12:2f:49: d7:4c:cf:15:0f:f1:92:fb:f1:3b:d0:8f:f3:6f:da:e6:40:ef: 9e:c2:ea:a1:c0:3f:9f:da:14:94:1b:cf:3b:3e:23:fd:e5:67: aa:93:b8:39:3e:9c:14:6e:27:2f:8b:7f:4e:23:7b:d8:bb:4b: cf:2b:dd:d5:4f:d0:9e:4f:b3:be:70:86:c7:d0:10:e5:32:99: c4:95:36:00:57:50:b5:ca:b4:2c:b6:4d:22:5a:72:77:d3:3b: c1:51:d7:41:9d:e5:33:7b:02:c7:b2:0e:ab:3b:c7:ef:15:52: d9:07:c2:5f:da:02:84:a9:6a:a1:14:e9:1d:57:f6:20:29:e0: be:47:dd:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNBNzQxMTAvBgNVBAUTKENCN0I4REI0MjQ4MjRDNzFBODcwM0JCRkI5NDJBMzE1 MjkxNTQzNjMwHhcNMjUxMTA0MTU0NjUxWhcNMjUxMTExMTU0NjUxWjAYMRYwFAYD VQQDEw02OTBhMWZlYy0wZDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuiCvE8AuF0351FhxtorC0x8+aJ4QMmWz9wvxqZwHylpeHCeYKJdR3q70h4vY w1jyKflG1NnFDNYEe/rQUUytNXhBA5YC5/7Tn3hGULBFkg8WAOJxalczos7DO85f hB7FrIRrzkhhzg0Z+BHHBU62qS1YO+Veql1zgh9u4T5jz4si5zVo13DbFIO1eht3 2+a34pURudbxsuEjb36Ba5VbDxc6unlC3ppbucImUPCKAtPQUv5LOQH1W894F8mn ryn3iBeolsmCcBDpuC9wCRWxCx3Qo1E9g/mJaMKh62f0WrAF1rTeJMHcFOP3OUZV yxkCVznA5ZanKJZZhm1KQ+yH7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOETU/+e srdTvNfnfjdL2mGA0BPdMB8GA1UdIwQYMBaAFMt7jbQkgkxxqHA7v7lCoxUpFUNj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0E3NC83Q0I0QTA1NkZE M0ExMUU0ODZGODY3NUZDNEY5QUUwMi95M3VOdENTQ1RIR29jRHVfdVVLakZTa1ZR Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kzdU50Q1NDVEhHb2NEdV91VUtqRlNrVlEyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0E3NC83Q0I0QTA1NkZEM0ExMUU0ODZGODY3NUZDNEY5QUUwMi95M3VOdENTQ1RI R29jRHVfdVVLakZTa1ZRMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0Rex/ACRvO0sjK2mxGZeLIB1ojraWi0vja5gy4MDG+oYYzjFWvMvP fLEP2k9flmKSmuM/2AzUzvO1RblKrtI/UlEDn/YX872Icw2v4zOCLvZO0Ts7N4xm nShXidJXQWEoB4QuKfp6chv++W/88zfJMklvQbnVAt3dZQsSL0nXTM8VD/GS+/E7 0I/zb9rmQO+ewuqhwD+f2hSUG887PiP95Weqk7g5PpwUbicvi39OI3vYu0vPK93V T9CeT7O+cIbH0BDlMpnElTYAV1C1yrQstk0iWnJ30zvBUddBneUzewLHsg6rO8fv FVLZB8Jf2gKEqWqhFOkdV/YgKeC+R91/ -----END CERTIFICATE-----Generated at Tue Nov 4 23:09:34 2025 by rpki-client