$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft File: f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft (raw, json) Hash identifier: dgGNLEeYaN+Nanf6WDc75hcBnESTwnupeERVDgD83a0= Subject key identifier: DD:00:6B:DD:69:C9:CB:9F:A2:6B:E8:82:D7:8E:CF:D0:8B:35:8E:EC Authority key identifier: 7F:FC:80:56:50:74:2C:EA:50:98:6D:11:AB:CB:73:E0:F5:50:58:F9 Certificate issuer: /CN=A91D8DD9/serialNumber=7FFC805650742CEA50986D11ABCB73E0F55058F9 Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft Manifest number: 59 Signing time: Wed 05 Nov 2025 07:19:48 +0000 Manifest this update: Wed 05 Nov 2025 07:19:47 +0000 Manifest next update: Wed 12 Nov 2025 07:19:47 +0000 Files and hashes: 1: f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl (hash: xofvkSm2H45+NhEwNrrxLcpluaC8L0ACGmitcvF8AN4=) 2: 9BCD7C8E2FD311F0A93F2250C4F9AE02.roa (hash: vDWq5W9RCH51uCc7RR26CZCfoA3jrfAEXK2LnEYPwlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:19:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8DD9, serialNumber=7FFC805650742CEA50986D11ABCB73E0F55058F9 Validity Not Before: Nov 5 07:19:47 2025 GMT Not After : Nov 12 07:19:47 2025 GMT Subject: CN=690afa93-0455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:06:9a:87:ab:92:84:b1:a8:33:e1:92:a1:04: 8f:7b:ad:e7:64:27:03:cf:3e:ee:8b:fd:08:21:6c: 23:c1:9b:10:50:d6:25:ee:63:e9:c3:4f:3f:9b:ac: c9:2d:cd:11:98:43:af:05:63:4e:43:e7:72:9c:41: 01:61:ad:f3:ae:ff:98:d2:e7:a1:e3:56:02:46:89: 4a:ac:8e:dd:28:17:fa:0d:b0:b4:2e:9e:1b:ed:06: d5:a3:16:fa:21:99:6d:e7:56:d8:48:f3:f0:15:3b: e5:de:21:ad:8c:70:b9:8c:36:d4:d8:cf:8c:78:a8: 59:fb:06:ce:79:2a:ca:13:f8:8a:ed:f3:fd:4d:54: c4:91:e6:02:93:97:72:67:6a:13:39:cd:64:11:a2: 3d:19:fe:2b:f6:f9:47:0c:ec:e8:bd:69:6d:87:7c: 2a:6f:86:6d:dd:4b:d0:f7:f8:e5:b4:e7:05:c9:37: 47:58:fd:60:86:8e:3f:bd:27:42:0f:a3:3d:be:b0: ec:20:5d:15:ed:8f:77:1b:39:37:4b:78:02:81:83: 52:83:f2:f9:31:fe:da:46:1c:86:8a:97:b6:07:2d: 3d:d0:25:50:8b:6b:8a:a2:96:01:67:b7:3d:3b:23: da:96:ad:d9:e5:83:b5:26:8c:45:5c:1b:6c:4f:09: 69:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:00:6B:DD:69:C9:CB:9F:A2:6B:E8:82:D7:8E:CF:D0:8B:35:8E:EC X509v3 Authority Key Identifier: keyid:7F:FC:80:56:50:74:2C:EA:50:98:6D:11:AB:CB:73:E0:F5:50:58:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:30:d7:d1:86:68:70:f8:9f:7b:c4:f7:1e:db:3d:76:df:54: 2a:db:38:da:95:bb:0b:d9:a8:db:0d:61:f6:15:f2:9b:2e:79: 36:68:dc:eb:8f:32:12:2b:91:76:3b:4b:a2:cf:ce:37:cf:26: 5d:e4:96:af:a3:56:77:39:16:7f:aa:79:aa:bb:4c:68:ed:c8: cc:e8:fa:75:88:ef:d5:0f:10:e4:9c:c8:55:56:0f:26:a4:54: c6:16:75:24:df:b2:bd:fc:90:0e:6b:de:fe:09:5a:31:c9:33: 60:01:48:ab:fe:59:aa:96:bb:39:ff:ee:f5:b8:8d:b3:e0:1c: 71:de:32:a6:ab:8e:91:91:d3:02:97:f7:03:51:f7:06:53:62: 2d:ff:b3:2f:17:be:59:47:6c:0e:a4:76:ea:3b:57:ae:d8:ea: a8:ef:96:0e:31:2c:62:b8:ff:4b:ce:db:8f:5d:33:6a:ec:bf: fd:1f:fd:b4:e9:a4:e4:9e:89:74:46:ae:5f:ac:ca:88:5a:dd: 04:87:15:f5:3d:c4:b0:35:fd:54:3b:73:a5:1c:bc:17:6e:dc: 32:d8:c8:7d:48:b4:63:60:58:95:62:e1:67:5f:26:85:33:b2: f3:43:fd:d0:8b:15:7c:af:94:d1:da:21:ec:b4:2d:8f:1f:33: 40:fd:60:2f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OEREOTExMC8GA1UEBRMoN0ZGQzgwNTY1MDc0MkNFQTUwOTg2RDExQUJDQjczRTBG NTUwNThGOTAeFw0yNTExMDUwNzE5NDdaFw0yNTExMTIwNzE5NDdaMBgxFjAUBgNV BAMTDTY5MGFmYTkzLTA0NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtBpqHq5KEsagz4ZKhBI97redkJwPPPu6L/QghbCPBmxBQ1iXuY+nDTz+brMkt zRGYQ68FY05D53KcQQFhrfOu/5jS56HjVgJGiUqsjt0oF/oNsLQunhvtBtWjFvoh mW3nVthI8/AVO+XeIa2McLmMNtTYz4x4qFn7Bs55KsoT+Irt8/1NVMSR5gKTl3Jn ahM5zWQRoj0Z/iv2+UcM7Oi9aW2HfCpvhm3dS9D3+OW05wXJN0dY/WCGjj+9J0IP oz2+sOwgXRXtj3cbOTdLeAKBg1KD8vkx/tpGHIaKl7YHLT3QJVCLa4qilgFntz07 I9qWrdnlg7UmjEVcG2xPCWlPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3QBr3WnJ y5+ia+iC147P0Is1juwwHwYDVR0jBBgwFoAUf/yAVlB0LOpQmG0Rq8tz4PVQWPkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4REQ5L0EzODdDRjhFMkZE MjExRjBBOUFDNUUyRkM0RjlBRTAyL2ZfeUFWbEIwTE9wUW1HMFJxOHR6NFBWUVdQ ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZl95QVZsQjBMT3BRbUcwUnE4dHo0UFZRV1BrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 REQ5L0EzODdDRjhFMkZEMjExRjBBOUFDNUUyRkM0RjlBRTAyL2ZfeUFWbEIwTE9w UW1HMFJxOHR6NFBWUVdQay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABYw19GGaHD4n3vE9x7bPXbfVCrbONqVuwvZqNsNYfYV8psueTZo3OuP MhIrkXY7S6LPzjfPJl3klq+jVnc5Fn+qeaq7TGjtyMzo+nWI79UPEOScyFVWDyak VMYWdSTfsr38kA5r3v4JWjHJM2ABSKv+WaqWuzn/7vW4jbPgHHHeMqarjpGR0wKX 9wNR9wZTYi3/sy8XvllHbA6kduo7V67Y6qjvlg4xLGK4/0vO249dM2rsv/0f/bTp pOSeiXRGrl+syoha3QSHFfU9xLA1/VQ7c6UcvBdu3DLYyH1ItGNgWJVi4WdfJoUz svND/dCLFXyvlNHaIey0LY8fM0D9YC8= -----END CERTIFICATE-----Generated at Wed Nov 5 09:50:29 2025 by rpki-client