$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft File: ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft (raw, json) Hash identifier: 6/rdxunhK80CYTTBShFQ3ZlLuOYqkWZme5L6rflkWoc= Subject key identifier: C9:42:66:BB:3D:FC:99:6E:19:C0:75:52:0F:9B:78:68:02:59:D9:6F Authority key identifier: 93:2E:C2:E6:E5:2B:5A:F6:C7:B0:3C:41:50:20:ED:E2:72:AA:A1:45 Certificate issuer: /CN=A91CEF3E/serialNumber=932EC2E6E52B5AF6C7B03C415020EDE272AAA145 Certificate serial: 0ED8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft Manifest number: 0EC7 Signing time: Tue 04 Nov 2025 17:44:35 +0000 Manifest this update: Tue 04 Nov 2025 17:44:34 +0000 Manifest next update: Tue 11 Nov 2025 17:44:34 +0000 Files and hashes: 1: ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl (hash: H1Ek+6GpeYMfnmYmUODzIdjRX6LO8cHFDtY4YENqrUg=) 2: 5C154406988911E991B10838C4F9AE02.roa (hash: rlBKToBwc/S7CrTJwY8L3fa6c6H9ms0SKbG322SWU2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:44:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3800 (0xed8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF3E, serialNumber=932EC2E6E52B5AF6C7B03C415020EDE272AAA145 Validity Not Before: Nov 4 17:44:34 2025 GMT Not After : Nov 11 17:44:34 2025 GMT Subject: CN=690a3b82-4877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e6:9d:c1:d4:bd:41:84:9e:c6:ea:8a:1c:9a: fa:34:fc:14:1d:f0:11:48:42:18:12:c4:be:0d:c8: 8b:7e:d1:69:9a:77:d6:f9:d2:a7:5b:4d:3e:65:5c: 67:a4:76:48:df:b2:e7:1f:b5:21:c2:f9:02:87:24: ce:2d:99:a9:1f:5d:68:f6:32:fc:20:4a:ab:b8:29: c9:0a:4a:0f:0d:ca:a9:80:8b:ad:cd:12:05:d0:55: 89:4c:66:67:1f:1b:d3:ae:c6:af:52:ea:72:f2:25: 88:df:91:cf:46:7e:93:0d:d8:f5:3a:24:cb:a9:e7: 8b:35:bc:4c:f1:8d:e6:aa:f2:89:4e:0c:9b:01:b6: b1:ff:f0:b9:e0:c1:fb:f2:ce:59:55:4a:be:aa:41: 56:57:fc:b7:18:13:f9:fc:72:01:a2:b6:f4:4d:94: f8:1c:a5:76:23:b5:54:15:55:74:d6:c5:80:46:87: c1:ef:c4:42:d7:70:24:e0:de:37:64:68:64:0f:46: 5b:b2:03:72:1e:20:6b:72:bf:52:9c:f7:43:49:bd: ab:52:67:4b:cf:cb:51:81:24:44:39:f0:d4:81:92: 29:f7:3f:0e:84:63:65:24:d1:05:f7:73:39:36:9b: c1:7f:ff:4c:80:01:da:ae:e5:ff:b7:af:74:d0:0c: 8f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:42:66:BB:3D:FC:99:6E:19:C0:75:52:0F:9B:78:68:02:59:D9:6F X509v3 Authority Key Identifier: keyid:93:2E:C2:E6:E5:2B:5A:F6:C7:B0:3C:41:50:20:ED:E2:72:AA:A1:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:2c:9b:00:8a:90:34:84:2e:16:f6:f9:36:87:36:99:52:a3: fb:60:3f:f5:7f:56:1b:9d:a5:bc:8b:17:89:ee:2a:64:36:36: 3f:ee:3a:59:e7:67:5f:f0:2d:2d:1d:15:d1:b9:f2:24:39:e9: 14:1e:7e:73:6f:75:20:3b:c4:96:6e:0f:97:b1:13:f5:34:b8: 4f:5f:b0:91:fb:1b:8b:0e:64:d0:01:d5:be:f6:1f:8d:e8:6d: 5d:b8:4e:2c:53:7c:7f:dd:fb:a5:c4:a8:01:7c:21:fa:12:e8: 83:be:e1:63:16:c8:db:d8:af:8f:5b:58:ac:79:d9:50:3c:43: f8:7b:cc:ef:29:63:b3:95:63:0e:2d:a7:9a:97:1e:db:c8:73: 15:8d:75:7f:fb:97:df:c6:33:1b:fb:c7:a0:7b:17:b7:19:d3: e1:0c:7f:11:d0:91:c2:d5:97:7d:a7:c9:69:ba:69:d1:55:8c: a1:a9:7d:eb:cb:14:82:90:d6:b7:ed:b2:94:25:fe:d9:cc:75: b2:b1:06:42:89:d6:2a:f5:0d:8e:22:27:96:cb:97:ed:79:49: 3c:fb:10:73:8b:fb:dd:0f:5f:cd:c5:74:94:7c:37:5d:19:f3: 27:19:69:d3:73:53:49:80:2e:34:ff:c5:ab:83:19:94:1d:c9: 5f:5d:9a:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGM0UxMTAvBgNVBAUTKDkzMkVDMkU2RTUyQjVBRjZDN0IwM0M0MTUwMjBFREUy NzJBQUExNDUwHhcNMjUxMTA0MTc0NDM0WhcNMjUxMTExMTc0NDM0WjAYMRYwFAYD VQQDEw02OTBhM2I4Mi00ODc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyeadwdS9QYSexuqKHJr6NPwUHfARSEIYEsS+DciLftFpmnfW+dKnW00+ZVxn pHZI37LnH7UhwvkChyTOLZmpH11o9jL8IEqruCnJCkoPDcqpgIutzRIF0FWJTGZn HxvTrsavUupy8iWI35HPRn6TDdj1OiTLqeeLNbxM8Y3mqvKJTgybAbax//C54MH7 8s5ZVUq+qkFWV/y3GBP5/HIBorb0TZT4HKV2I7VUFVV01sWARofB78RC13Ak4N43 ZGhkD0ZbsgNyHiBrcr9SnPdDSb2rUmdLz8tRgSREOfDUgZIp9z8OhGNlJNEF93M5 NpvBf/9MgAHaruX/t6900AyPLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMlCZrs9 /JluGcB1Ug+beGgCWdlvMB8GA1UdIwQYMBaAFJMuwublK1r2x7A8QVAg7eJyqqFF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYzRS9DQjc0Q0Y2RTk4 N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi9reTdDNXVVcld2YkhzRHhCVUNEdDRuS3Fv VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2t5N0M1dVVyV3ZiSHNEeEJVQ0R0NG5LcW9VVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYzRS9DQjc0Q0Y2RTk4N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi9reTdDNXVVcld2 YkhzRHhCVUNEdDRuS3FvVVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwLJsAipA0hC4W9vk2hzaZUqP7YD/1f1YbnaW8ixeJ7ipkNjY/7jpZ 52df8C0tHRXRufIkOekUHn5zb3UgO8SWbg+XsRP1NLhPX7CR+xuLDmTQAdW+9h+N 6G1duE4sU3x/3fulxKgBfCH6EuiDvuFjFsjb2K+PW1isedlQPEP4e8zvKWOzlWMO Laealx7byHMVjXV/+5ffxjMb+8egexe3GdPhDH8R0JHC1Zd9p8lpumnRVYyhqX3r yxSCkNa37bKUJf7ZzHWysQZCidYq9Q2OIieWy5fteUk8+xBzi/vdD1/NxXSUfDdd GfMnGWnTc1NJgC40/8WrgxmUHclfXZqm -----END CERTIFICATE-----Generated at Wed Nov 5 01:42:03 2025 by rpki-client