$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft File: CyVhxLV9qB1w85cksN4scQF0n10.mft (raw, json) Hash identifier: fiZb60gwRlRYm0/9tViYzKqt/HO8UAlLRqKCWZY9Nns= Subject key identifier: F5:28:BF:AF:45:6D:97:6D:7E:6F:30:40:98:4B:F7:BD:BA:AC:C6:C9 Authority key identifier: 0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D Certificate issuer: /CN=A91E1155/serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D Certificate serial: 0F57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft Manifest number: 0F48 Signing time: Tue 04 Nov 2025 18:06:40 +0000 Manifest this update: Tue 04 Nov 2025 18:06:40 +0000 Manifest next update: Tue 11 Nov 2025 18:06:40 +0000 Files and hashes: 1: CyVhxLV9qB1w85cksN4scQF0n10.crl (hash: x+2Ac3rcq5yH+mZmp/COikKlneDY27o3BGSNyezTNtk=) 2: 4B1E3E947EB411E994ED5B25C4F9AE02.roa (hash: UyCHDG2qAGPzolKitsZ8J2AXElrKooslUCGA3T3LeQ0=) 3: AC8695B8A60611EE8FEB2160C4F9AE02.roa (hash: ib8nYaY5edetahLOziP3ND06MsQfzy3ex3w6zAk8k2E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3927 (0xf57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1155, serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D Validity Not Before: Nov 4 18:06:40 2025 GMT Not After : Nov 11 18:06:40 2025 GMT Subject: CN=690a40b0-5811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:b5:4c:48:64:30:7a:35:23:42:bc:d9:01:ce: ac:64:c1:72:f3:a5:8c:db:f0:f9:00:54:4a:62:c5: 32:a0:94:1c:0e:c2:0f:5f:0d:d8:e4:3d:12:59:df: 63:4d:53:2d:e8:1c:5a:ed:29:31:e7:78:a9:ea:fe: a3:50:03:07:33:d1:69:d3:d3:ac:d4:d4:51:ac:91: 38:5c:82:46:53:9e:16:be:51:b0:d9:a7:ac:b9:f0: 18:00:0e:86:0a:cf:15:47:a8:30:78:b5:fe:ff:52: ce:17:72:20:63:b4:11:b8:c1:6e:8d:58:a9:6b:2e: ac:40:e9:29:33:0f:61:d0:56:e1:a0:c1:91:88:6e: 51:5f:93:c3:79:3d:ab:b3:a3:d0:40:62:40:4d:e5: 8d:82:a0:80:b8:22:e3:09:38:22:3c:c6:73:6f:86: 22:73:ae:33:46:6f:68:70:a7:c3:34:2b:bc:7a:ed: 0a:07:8c:cf:a8:6d:dd:05:8d:c0:78:12:fd:a0:d9: 2f:19:6e:53:f7:2d:41:65:0a:3b:1e:ee:bc:04:7b: b5:24:b2:ac:35:22:05:18:e2:a3:5b:a6:fa:03:27: 93:b6:e1:6a:d2:38:49:60:54:e2:86:bb:79:b4:16: 20:69:25:75:01:a5:00:77:c5:6f:a3:d5:2c:b5:fc: be:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:28:BF:AF:45:6D:97:6D:7E:6F:30:40:98:4B:F7:BD:BA:AC:C6:C9 X509v3 Authority Key Identifier: keyid:0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:32:7d:b8:1c:f4:74:9a:38:ad:a2:1b:4c:3a:f9:09:f9:10: b5:b7:a0:5d:14:cc:89:77:8b:6e:cc:4c:ed:82:bf:30:aa:e1: e8:39:a6:ec:e9:b0:a9:91:1d:70:6b:9a:db:ea:d4:ad:2c:47: f8:63:5a:a9:a2:32:e9:a4:25:06:15:9c:88:bd:6c:8a:91:3c: 21:17:ed:5d:0b:24:26:4f:18:b9:59:8d:9e:76:7d:44:e0:8c: 90:b9:94:22:89:8b:b0:0d:91:88:a8:f0:c6:bc:b9:d5:f8:d5: c0:30:1d:f1:e1:bf:52:dc:3d:6e:b9:69:33:eb:cc:8d:c5:a6: ba:c5:14:e8:d0:c7:96:24:cd:f3:58:f7:25:2b:7d:76:33:8d: 73:94:a0:73:ae:dc:07:eb:bb:26:de:b6:fc:2b:9d:f2:81:28: fd:29:79:00:a8:aa:12:6b:5a:15:88:e7:96:d1:6e:7f:e3:2e: 21:17:2c:02:94:cc:7f:af:73:a4:a1:b7:0f:db:a4:af:b1:54: 61:c5:f5:ca:e5:53:27:d3:17:94:b4:1d:81:8b:2b:d9:61:5e: 2b:47:d1:55:6e:3b:68:e6:06:5c:fb:a6:45:ec:3f:0a:21:5e: cb:b5:d7:82:3e:28:53:6a:99:bb:e8:52:e2:8c:3e:13:7f:5a: 2b:6f:2b:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTExNTUxMTAvBgNVBAUTKDBCMjU2MUM0QjU3REE4MUQ3MEYzOTcyNEIwREUyQzcx MDE3NDlGNUQwHhcNMjUxMTA0MTgwNjQwWhcNMjUxMTExMTgwNjQwWjAYMRYwFAYD VQQDEw02OTBhNDBiMC01ODExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7rVMSGQwejUjQrzZAc6sZMFy86WM2/D5AFRKYsUyoJQcDsIPXw3Y5D0SWd9j TVMt6Bxa7Skx53ip6v6jUAMHM9Fp09Os1NRRrJE4XIJGU54WvlGw2aesufAYAA6G Cs8VR6gweLX+/1LOF3IgY7QRuMFujVipay6sQOkpMw9h0FbhoMGRiG5RX5PDeT2r s6PQQGJATeWNgqCAuCLjCTgiPMZzb4Yic64zRm9ocKfDNCu8eu0KB4zPqG3dBY3A eBL9oNkvGW5T9y1BZQo7Hu68BHu1JLKsNSIFGOKjW6b6AyeTtuFq0jhJYFTihrt5 tBYgaSV1AaUAd8Vvo9Ustfy+TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPUov69F bZdtfm8wQJhL9726rMbJMB8GA1UdIwQYMBaAFAslYcS1fagdcPOXJLDeLHEBdJ9d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTE1NS81Mzk5OEEzNDdF QjMxMUU5QUI5QzdCMjRDNEY5QUUwMi9DeVZoeExWOXFCMXc4NWNrc040c2NRRjBu MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N5Vmh4TFY5cUIxdzg1Y2tzTjRzY1FGMG4xMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTE1NS81Mzk5OEEzNDdFQjMxMUU5QUI5QzdCMjRDNEY5QUUwMi9DeVZoeExWOXFC MXc4NWNrc040c2NRRjBuMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCMn24HPR0mjitohtMOvkJ+RC1t6BdFMyJd4tuzEztgr8wquHoOabs 6bCpkR1wa5rb6tStLEf4Y1qpojLppCUGFZyIvWyKkTwhF+1dCyQmTxi5WY2edn1E 4IyQuZQiiYuwDZGIqPDGvLnV+NXAMB3x4b9S3D1uuWkz68yNxaa6xRTo0MeWJM3z WPclK312M41zlKBzrtwH67sm3rb8K53ygSj9KXkAqKoSa1oViOeW0W5/4y4hFywC lMx/r3OkobcP26SvsVRhxfXK5VMn0xeUtB2BiyvZYV4rR9FVbjto5gZc+6ZF7D8K IV7LtdeCPihTapm76FLijD4Tf1orbyvS -----END CERTIFICATE-----Generated at Wed Nov 5 16:44:25 2025 by rpki-client