$ rpki-client -vvf rpki.apnic.net/member_repository/A91C430B/8D03A43AA7CE11F097894528C4F9AE02/Py6661HMOPlbMj3QyF7oMK_jN7M.mft File: Py6661HMOPlbMj3QyF7oMK_jN7M.mft (raw, json) Hash identifier: lzQop1VWMsFVWS+Ge/1gbtUAgIJBdvZmnbwtN8DmtxE= Subject key identifier: 85:D1:05:1D:10:DB:0B:58:96:58:02:E6:1A:33:E5:DE:3A:FD:BE:AE Authority key identifier: 3F:2E:BA:EB:51:CC:38:F9:5B:32:3D:D0:C8:5E:E8:30:AF:E3:37:B3 Certificate issuer: /CN=A91C430B/serialNumber=3F2EBAEB51CC38F95B323DD0C85EE830AFE337B3 Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Py6661HMOPlbMj3QyF7oMK_jN7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C430B/8D03A43AA7CE11F097894528C4F9AE02/Py6661HMOPlbMj3QyF7oMK_jN7M.mft Manifest number: 0D Signing time: Wed 05 Nov 2025 08:09:39 +0000 Manifest this update: Wed 05 Nov 2025 08:09:39 +0000 Manifest next update: Wed 12 Nov 2025 08:09:39 +0000 Files and hashes: 1: Py6661HMOPlbMj3QyF7oMK_jN7M.crl (hash: eilfRPpxbz9vtFVa0XtTgeGFnIRI/MtnNBsMjEmdX18=) 2: B32AFC52A7CF11F0923B7A2BC4F9AE02.roa (hash: 1T9AoDGEXF0ooXdUIU1R51E1ZLMSnltdHdoWX3h7RIY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C430B/8D03A43AA7CE11F097894528C4F9AE02/Py6661HMOPlbMj3QyF7oMK_jN7M.crl rsync://rpki.apnic.net/member_repository/A91C430B/8D03A43AA7CE11F097894528C4F9AE02/Py6661HMOPlbMj3QyF7oMK_jN7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Py6661HMOPlbMj3QyF7oMK_jN7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:09:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C430B, serialNumber=3F2EBAEB51CC38F95B323DD0C85EE830AFE337B3 Validity Not Before: Nov 5 08:09:39 2025 GMT Not After : Nov 12 08:09:39 2025 GMT Subject: CN=690b0643-0963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:70:f8:ca:e4:2b:9e:25:91:33:44:82:e6:cd: ed:db:1e:f9:ba:e4:e4:73:64:77:53:a2:b6:1f:08: 48:a7:26:f0:3e:1b:03:ec:1d:2e:e9:a7:71:b4:5a: d4:38:f9:ee:1a:b7:06:dd:81:31:8f:ba:0c:ee:63: 7b:49:19:0e:ce:cd:fd:03:37:c9:0c:0d:02:31:3c: 6b:89:5f:e7:2c:95:63:25:f5:0f:13:03:36:6a:81: c0:5c:ea:ac:04:42:c7:1d:36:1f:f3:18:a1:26:a5: 0b:db:2d:37:a2:85:c6:81:ec:21:9c:ba:4f:53:d2: 0e:56:ed:e8:9f:59:b4:7b:ae:56:23:56:28:60:ec: 0c:da:de:b5:d2:57:1c:9b:8f:dc:bc:fb:f1:46:f3: 15:54:e4:dd:10:d3:26:5e:90:f7:fa:f5:a4:d3:b6: 2a:b3:f6:bc:52:6b:88:06:20:7e:fd:11:27:38:4f: 43:10:a7:ba:55:e5:b9:10:90:02:9e:7a:38:71:6f: 64:db:5c:aa:f2:26:40:6f:83:96:44:64:2d:81:f6: 5f:f1:77:e4:2f:1e:88:22:66:5f:70:93:60:dc:73: f5:86:83:c1:2b:f2:ab:28:d9:1a:e8:f8:22:54:86: f0:31:57:3e:9e:59:1a:b8:21:20:b4:31:24:6f:ff: 89:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D1:05:1D:10:DB:0B:58:96:58:02:E6:1A:33:E5:DE:3A:FD:BE:AE X509v3 Authority Key Identifier: keyid:3F:2E:BA:EB:51:CC:38:F9:5B:32:3D:D0:C8:5E:E8:30:AF:E3:37:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C430B/8D03A43AA7CE11F097894528C4F9AE02/Py6661HMOPlbMj3QyF7oMK_jN7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Py6661HMOPlbMj3QyF7oMK_jN7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C430B/8D03A43AA7CE11F097894528C4F9AE02/Py6661HMOPlbMj3QyF7oMK_jN7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:ce:67:55:fd:99:13:4a:c2:55:fc:b3:67:0f:7c:7e:36:bb: 58:6d:44:42:93:34:bd:84:c2:84:55:ea:f3:2f:8b:9d:b0:e3: 40:bc:f6:de:3c:45:bc:da:a0:57:e9:89:86:cc:c0:95:c1:e8: eb:3d:2c:c1:b9:af:8e:e3:8b:1e:66:75:02:63:97:03:c4:fd: 24:d0:4f:a5:ad:39:a4:0a:c6:c5:d5:6c:90:5b:f5:39:78:4a: 4e:2a:21:d4:1d:63:5b:a1:1d:f5:94:e0:c5:7d:58:ea:6d:5b: 51:ab:d5:b8:51:5f:d4:58:b2:77:cc:52:e1:fd:4b:38:8e:31: 26:c5:da:c0:ee:04:ea:23:f5:5e:94:bc:88:6b:51:9b:c9:c1: 2a:fd:6e:d6:3f:65:ec:df:67:3c:50:fe:06:a6:80:4d:42:a7: e3:e8:17:e0:9e:54:c6:e3:14:35:59:2c:f8:d2:b0:c0:c1:12: 95:eb:e1:70:03:ca:48:7e:8a:aa:6a:23:df:db:37:f4:43:b0: 1e:e8:0e:bf:12:ce:69:89:d3:3a:36:c9:1b:9c:f1:3b:a0:5f: ab:d6:f2:00:a7:9d:bc:75:79:c9:d2:4a:01:21:a6:2a:91:1e: 4e:ab:5a:66:67:c5:45:c5:2b:4b:b8:81:db:4a:66:ab:5f:c1: 8b:c0:86:96 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NDMwQjExMC8GA1UEBRMoM0YyRUJBRUI1MUNDMzhGOTVCMzIzREQwQzg1RUU4MzBB RkUzMzdCMzAeFw0yNTExMDUwODA5MzlaFw0yNTExMTIwODA5MzlaMBgxFjAUBgNV BAMTDTY5MGIwNjQzLTA5NjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9cPjK5CueJZEzRILmze3bHvm65ORzZHdTorYfCEinJvA+GwPsHS7pp3G0WtQ4 +e4atwbdgTGPugzuY3tJGQ7Ozf0DN8kMDQIxPGuJX+cslWMl9Q8TAzZqgcBc6qwE QscdNh/zGKEmpQvbLTeihcaB7CGcuk9T0g5W7eifWbR7rlYjVihg7Aza3rXSVxyb j9y8+/FG8xVU5N0Q0yZekPf69aTTtiqz9rxSa4gGIH79ESc4T0MQp7pV5bkQkAKe ejhxb2TbXKryJkBvg5ZEZC2B9l/xd+QvHogiZl9wk2Dcc/WGg8Er8qso2Rro+CJU hvAxVz6eWRq4ISC0MSRv/4mtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhdEFHRDb C1iWWALmGjPl3jr9vq4wHwYDVR0jBBgwFoAUPy6661HMOPlbMj3QyF7oMK/jN7Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0MzBCLzhEMDNBNDNBQTdD RTExRjA5Nzg5NDUyOEM0RjlBRTAyL1B5NjY2MUhNT1BsYk1qM1F5RjdvTUtfak43 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUHk2NjYxSE1PUGxiTWozUXlGN29NS19qTjdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0 MzBCLzhEMDNBNDNBQTdDRTExRjA5Nzg5NDUyOEM0RjlBRTAyL1B5NjY2MUhNT1Bs Yk1qM1F5RjdvTUtfak43TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJnOZ1X9mRNKwlX8s2cPfH42u1htREKTNL2EwoRV6vMvi52w40C89t48 RbzaoFfpiYbMwJXB6Os9LMG5r47jix5mdQJjlwPE/STQT6WtOaQKxsXVbJBb9Tl4 Sk4qIdQdY1uhHfWU4MV9WOptW1Gr1bhRX9RYsnfMUuH9SziOMSbF2sDuBOoj9V6U vIhrUZvJwSr9btY/ZezfZzxQ/gamgE1Cp+PoF+CeVMbjFDVZLPjSsMDBEpXr4XAD ykh+iqpqI9/bN/RDsB7oDr8SzmmJ0zo2yRuc8TugX6vW8gCnnbx1ecnSSgEhpiqR Hk6rWmZnxUXFK0u4gdtKZqtfwYvAhpY= -----END CERTIFICATE-----Generated at Wed Nov 5 15:28:33 2025 by rpki-client