$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft File: pYh4bi_YjPqvU6qilsNkRg7m6m0.mft (raw, json) Hash identifier: tuIf3WEXV+qRxipOKMi0dBkUoH5TmCUkWFyZ4ygPVFM= Subject key identifier: 6D:B6:9C:8E:08:50:C7:75:F2:CA:B6:7B:D7:73:7C:80:38:C4:32:6F Authority key identifier: A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D Certificate issuer: /CN=A91C8485/serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft Manifest number: AD Signing time: Mon 03 Nov 2025 06:11:40 +0000 Manifest this update: Mon 03 Nov 2025 06:11:40 +0000 Manifest next update: Mon 10 Nov 2025 06:11:40 +0000 Files and hashes: 1: pYh4bi_YjPqvU6qilsNkRg7m6m0.crl (hash: wy2/uOZcl0dPj97sRfaR0oHiQDBL+bA7Kb9YY3hIgKM=) 2: 5B4A5E7EB7CF11EF860F535AC4F9AE02.roa (hash: Z9DYBfabGIxHjUBLevu5KvPw0ydtYOqQMGpRrWOIWpg=) 3: A59FFB3EB7D711EF9ED0C324C4F9AE02.roa (hash: qXU62xBJEhF8s34iW9kLJHW6sq1BX3PHBxT3tX/weaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:11:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8485, serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Validity Not Before: Nov 3 06:11:40 2025 GMT Not After : Nov 10 06:11:40 2025 GMT Subject: CN=6908479c-8c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8c:07:e7:29:04:68:60:f7:b6:6d:35:1b:e0: 4a:98:2a:f1:b9:fe:7e:1d:92:24:c0:02:ff:5d:32: 60:5a:cf:97:e4:aa:25:74:2b:70:a8:d1:b6:73:93: c0:ee:95:22:b4:89:f5:ff:ee:14:c4:97:34:aa:21: 8b:72:28:01:f9:72:99:79:05:1b:c9:52:80:fa:22: 5a:ca:8e:f9:f4:f5:57:ca:42:b1:e1:31:d4:cb:17: 9d:cb:e8:72:bb:18:9d:df:f3:3a:23:0d:21:7a:52: a3:c7:81:09:ef:3f:e6:d1:01:68:5a:19:fa:46:08: 88:f8:e4:7c:66:af:ba:9d:9c:bc:f1:81:6c:aa:92: c1:55:ae:77:75:4f:6e:df:13:2a:6c:0f:71:5e:9d: 4c:02:3a:cd:6c:6a:9f:11:2e:44:99:8e:bc:e2:c8: 46:02:46:17:96:46:d6:41:e6:8d:f4:b1:32:e7:32: e2:7f:4d:95:7b:1b:a2:b6:ea:d6:f2:03:0e:48:0a: a2:ae:56:cc:0e:01:67:c2:1c:79:b5:d3:8d:5f:0a: 80:e0:c4:7e:0e:aa:4d:6c:89:1a:45:08:25:1f:fb: 4e:77:33:d7:5d:df:a9:88:ee:76:d3:d0:3c:d7:ad: 4d:40:3d:c9:c0:7d:56:7e:59:41:6f:1a:28:37:10: e2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B6:9C:8E:08:50:C7:75:F2:CA:B6:7B:D7:73:7C:80:38:C4:32:6F X509v3 Authority Key Identifier: keyid:A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:92:5c:e6:be:fa:f8:0a:80:5f:f9:d7:f4:42:5a:4b:9e:a5: c8:92:83:2c:c9:f8:d0:48:9d:be:af:62:2e:e8:71:a0:52:44: b3:68:2d:9c:a6:6f:be:6d:f5:c6:db:1d:f7:74:bb:24:ed:b5: 9c:78:51:4a:07:a0:45:7f:e0:08:e8:11:01:73:4b:9f:02:af: 26:45:fb:e2:7a:29:d1:b9:0c:f3:4d:d6:97:ca:89:15:11:c0: 2a:48:c6:f2:9f:af:45:8d:3a:28:85:b8:0c:6a:ba:7a:8f:04: d9:ae:ea:1c:0b:56:2e:e6:da:c8:3b:a6:42:9c:54:3e:db:c2: 5a:c8:1f:70:d3:e3:a5:c6:c7:bb:48:37:b4:c8:e0:73:93:10: d8:8e:83:e0:a2:bf:f9:af:d8:7c:67:c2:1c:90:ad:62:97:97: 15:6a:cb:97:77:28:d7:82:12:60:c5:f1:93:3c:f7:fb:15:c6: f8:45:6e:ef:3a:e1:f7:2f:3d:21:1f:e5:68:02:83:d7:8d:7d: 90:b8:3d:13:c8:82:56:2d:b8:8c:a7:2e:72:e7:79:7a:2c:2f: d8:24:f9:6b:d4:d6:3d:e7:1e:a3:f4:51:86:95:40:03:65:ec: f0:88:52:c5:21:46:ef:cc:d7:f1:f0:2f:a9:e7:1a:ce:02:da: 2b:74:6d:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg0ODUxMTAvBgNVBAUTKEE1ODg3ODZFMkZEODhDRkFBRjUzQUFBMjk2QzM2NDQ2 MEVFNkVBNkQwHhcNMjUxMTAzMDYxMTQwWhcNMjUxMTEwMDYxMTQwWjAYMRYwFAYD VQQDEw02OTA4NDc5Yy04YzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxowH5ykEaGD3tm01G+BKmCrxuf5+HZIkwAL/XTJgWs+X5KoldCtwqNG2c5PA 7pUitIn1/+4UxJc0qiGLcigB+XKZeQUbyVKA+iJayo759PVXykKx4THUyxedy+hy uxid3/M6Iw0helKjx4EJ7z/m0QFoWhn6RgiI+OR8Zq+6nZy88YFsqpLBVa53dU9u 3xMqbA9xXp1MAjrNbGqfES5EmY684shGAkYXlkbWQeaN9LEy5zLif02VexuiturW 8gMOSAqirlbMDgFnwhx5tdONXwqA4MR+DqpNbIkaRQglH/tOdzPXXd+piO5209A8 161NQD3JwH1WfllBbxooNxDiPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG22nI4I UMd18sq2e9dzfIA4xDJvMB8GA1UdIwQYMBaAFKWIeG4v2Iz6r1OqopbDZEYO5upt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODQ4NS8yREJDRUY0NkI0 MTIxMUVGQjhFNkU3NzNDNEY5QUUwMi9wWWg0YmlfWWpQcXZVNnFpbHNOa1JnN202 bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BZaDRiaV9ZalBxdlU2cWlsc05rUmc3bTZtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODQ4NS8yREJDRUY0NkI0MTIxMUVGQjhFNkU3NzNDNEY5QUUwMi9wWWg0YmlfWWpQ cXZVNnFpbHNOa1JnN202bTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnklzmvvr4CoBf+df0QlpLnqXIkoMsyfjQSJ2+r2Iu6HGgUkSzaC2c pm++bfXG2x33dLsk7bWceFFKB6BFf+AI6BEBc0ufAq8mRfvieinRuQzzTdaXyokV EcAqSMbyn69FjToohbgMarp6jwTZruocC1Yu5trIO6ZCnFQ+28JayB9w0+Olxse7 SDe0yOBzkxDYjoPgor/5r9h8Z8IckK1il5cVasuXdyjXghJgxfGTPPf7Fcb4RW7v OuH3Lz0hH+VoAoPXjX2QuD0TyIJWLbiMpy5y53l6LC/YJPlr1NY95x6j9FGGlUAD ZezwiFLFIUbvzNfx8C+p5xrOAtordG1E -----END CERTIFICATE-----Generated at Tue Nov 4 16:04:35 2025 by rpki-client