$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.mft File: y1McHsaSJfDcrkTOyl41mAzpwPI.mft (raw, json) Hash identifier: gEsJ4OicoSSvY6EviMYYosbyo34OQqREqz93dqpWOlU= Subject key identifier: 02:25:91:23:BC:53:77:AE:5F:2A:87:7E:1E:08:08:44:90:0D:14:76 Authority key identifier: CB:53:1C:1E:C6:92:25:F0:DC:AE:44:CE:CA:5E:35:98:0C:E9:C0:F2 Certificate issuer: /CN=A91CFFCB/serialNumber=CB531C1EC69225F0DCAE44CECA5E35980CE9C0F2 Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1McHsaSJfDcrkTOyl41mAzpwPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.mft Manifest number: 4F Signing time: Mon 03 Nov 2025 07:17:04 +0000 Manifest this update: Mon 03 Nov 2025 07:17:03 +0000 Manifest next update: Mon 10 Nov 2025 07:17:03 +0000 Files and hashes: 1: y1McHsaSJfDcrkTOyl41mAzpwPI.crl (hash: SNcMbjwvzZUY4rfzU9+kXOMU40qA0zCPRRtBpDmkuqs=) 2: BB8F3118497B11F096DCA14EC4F9AE02.roa (hash: n0pGyYXueEy9F7Jw89IAbICySxf38MqDCZugETeFEBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.crl rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1McHsaSJfDcrkTOyl41mAzpwPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:17:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFCB, serialNumber=CB531C1EC69225F0DCAE44CECA5E35980CE9C0F2 Validity Not Before: Nov 3 07:17:03 2025 GMT Not After : Nov 10 07:17:03 2025 GMT Subject: CN=690856ef-2835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:78:db:2e:0f:af:f9:07:48:42:05:c6:03:07: 9f:e0:8f:7e:90:06:af:e3:56:b2:b6:17:56:68:1e: 9a:5e:e0:29:0b:d1:50:d7:83:6d:55:76:67:43:d7: a3:a2:c8:35:eb:e9:16:2e:c9:f0:c5:39:a0:ca:90: 19:bb:c6:5c:77:70:b5:ef:4f:02:8f:f1:d7:20:8e: a8:fc:8b:c3:75:47:71:ce:87:42:49:d4:bc:ac:2c: 31:79:6f:34:8a:38:94:72:cf:43:fd:b5:9c:7e:f1: 3a:99:63:9a:ce:41:09:cb:b8:49:ed:02:c3:c9:66: 1b:43:ff:10:15:e0:de:2a:9c:6b:18:d1:b7:97:a2: 52:5a:8e:8e:da:24:fb:bc:a6:d7:98:96:8c:00:64: 5b:03:2e:22:43:a4:76:25:42:18:39:56:f3:11:87: 8b:e8:cd:b7:53:fd:14:44:b4:d9:39:9c:ee:58:c6: 0c:00:52:2b:61:a0:24:c3:46:3b:df:cb:5e:a4:a5: 9b:21:b5:ae:1f:47:e8:d6:4e:8b:4a:6d:be:f5:f9: ba:f8:84:6c:e9:05:00:f8:fa:9a:3d:d5:ec:2c:da: 0e:b1:70:2d:b0:50:65:8d:00:d8:d6:7e:a7:b1:c4: 11:3f:44:0e:b9:90:e2:1c:cf:93:e7:2f:27:3b:46: fe:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:25:91:23:BC:53:77:AE:5F:2A:87:7E:1E:08:08:44:90:0D:14:76 X509v3 Authority Key Identifier: keyid:CB:53:1C:1E:C6:92:25:F0:DC:AE:44:CE:CA:5E:35:98:0C:E9:C0:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1McHsaSJfDcrkTOyl41mAzpwPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:0f:df:0f:6f:97:8d:12:ea:62:f2:2c:1e:cb:8c:52:59:a5: 31:4d:03:5b:fa:0c:36:ba:a4:e8:68:66:cd:7c:a9:cb:19:34: 75:3d:a2:75:e7:fe:ee:9c:8a:f0:48:b1:e8:20:6d:0b:3c:97: 47:ef:4f:9c:31:08:85:e1:7c:12:a6:86:c2:05:51:8c:f6:01: ce:50:71:d2:aa:e2:f6:33:27:80:14:d8:35:b7:ba:1f:66:94: 43:d7:c5:6f:b6:7b:b6:25:94:7a:fc:8b:2b:d5:94:c4:e7:f2: 52:7a:69:23:f0:d6:06:70:10:37:fc:1e:64:c9:c8:17:0b:3b: 0a:11:bf:33:e1:15:ec:74:2c:65:a4:0d:31:00:13:a6:c3:c1: 44:32:1e:57:5e:17:3e:bb:80:70:d6:86:f3:50:7f:68:1b:39: 1c:d2:d7:85:c0:39:c4:d5:b1:1d:c7:c9:31:9f:5a:b4:5f:6b: 74:07:8f:55:2d:41:17:33:45:31:a5:c8:28:8c:71:db:38:e8: b4:e9:6e:ba:60:eb:29:68:8b:a9:8e:15:6a:2c:7d:40:0e:6e: 2d:ea:c1:d6:14:d8:01:40:23:bc:b3:03:0f:d7:ea:ae:51:19: 48:b9:3a:9f:da:ac:fa:5f:36:ba:e6:f4:1b:ec:a7:db:3c:68: 19:25:d6:03 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkZDQjExMC8GA1UEBRMoQ0I1MzFDMUVDNjkyMjVGMERDQUU0NENFQ0E1RTM1OTgw Q0U5QzBGMjAeFw0yNTExMDMwNzE3MDNaFw0yNTExMTAwNzE3MDNaMBgxFjAUBgNV BAMTDTY5MDg1NmVmLTI4MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDleNsuD6/5B0hCBcYDB5/gj36QBq/jVrK2F1ZoHppe4CkL0VDXg21VdmdD16Oi yDXr6RYuyfDFOaDKkBm7xlx3cLXvTwKP8dcgjqj8i8N1R3HOh0JJ1LysLDF5bzSK OJRyz0P9tZx+8TqZY5rOQQnLuEntAsPJZhtD/xAV4N4qnGsY0beXolJajo7aJPu8 pteYlowAZFsDLiJDpHYlQhg5VvMRh4vozbdT/RREtNk5nO5YxgwAUithoCTDRjvf y16kpZshta4fR+jWTotKbb71+br4hGzpBQD4+po91ews2g6xcC2wUGWNANjWfqex xBE/RA65kOIcz5PnLyc7Rv4xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAiWRI7xT d65fKod+HggIRJANFHYwHwYDVR0jBBgwFoAUy1McHsaSJfDcrkTOyl41mAzpwPIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGRkNCL0Y1REI3QTE2NDIw NTExRjBCRjdBODcxMUM0RjlBRTAyL3kxTWNIc2FTSmZEY3JrVE95bDQxbUF6cHdQ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveTFNY0hzYVNKZkRjcmtUT3lsNDFtQXpwd1BJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG RkNCL0Y1REI3QTE2NDIwNTExRjBCRjdBODcxMUM0RjlBRTAyL3kxTWNIc2FTSmZE Y3JrVE95bDQxbUF6cHdQSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA8P3w9vl40S6mLyLB7LjFJZpTFNA1v6DDa6pOhoZs18qcsZNHU9onXn /u6civBIseggbQs8l0fvT5wxCIXhfBKmhsIFUYz2Ac5QcdKq4vYzJ4AU2DW3uh9m lEPXxW+2e7YllHr8iyvVlMTn8lJ6aSPw1gZwEDf8HmTJyBcLOwoRvzPhFex0LGWk DTEAE6bDwUQyHldeFz67gHDWhvNQf2gbORzS14XAOcTVsR3HyTGfWrRfa3QHj1Ut QRczRTGlyCiMcds46LTpbrpg6yloi6mOFWosfUAObi3qwdYU2AFAI7yzAw/X6q5R GUi5Op/arPpfNrrm9Bvsp9s8aBkl1gM= -----END CERTIFICATE-----Generated at Wed Nov 5 05:41:57 2025 by rpki-client