$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft File: _RYHGGNz6B9E0TeyoOlpV-YquKE.mft (raw, json) Hash identifier: D6kj7dMEU8mAOG13pNScEKuwKYG0Rg7mJD8zbXIz2xk= Subject key identifier: DE:BA:8C:72:4A:CC:12:2F:7E:40:24:3E:F0:91:C3:59:2A:1B:C5:C4 Authority key identifier: FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1 Certificate issuer: /CN=A91EA958/serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1 Certificate serial: 351B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft Manifest number: 34FB Signing time: Sun 02 Nov 2025 15:02:14 +0000 Manifest this update: Sun 02 Nov 2025 15:02:13 +0000 Manifest next update: Sun 09 Nov 2025 15:02:13 +0000 Files and hashes: 1: _RYHGGNz6B9E0TeyoOlpV-YquKE.crl (hash: uDyl6MFiR3Qbp5YULIWHtbUb2k3pftd4YmRiuVF4SoQ=) 2: 5A7BB752BD2F11EBB84EE532C4F9AE02.roa (hash: LB+KlOsPvF4imD5dH4Y/7ETYXLpR1TopuFn08dtZ6UQ=) 3: D347187A7E9511ECA9132A0BC4F9AE02.roa (hash: kxrZR2YgejKdZw2KSRqTPBaBWQsbx9P5F4vQ2qVIgKA=) 4: 59F4A758BD2F11EBB84EE532C4F9AE02.roa (hash: uAMH22czrWhCVXR1Yh4Gb924YIN0PWuUVG5CCQ0T0QI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.crl rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13595 (0x351b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA958, serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1 Validity Not Before: Nov 2 15:02:13 2025 GMT Not After : Nov 9 15:02:13 2025 GMT Subject: CN=69077275-48c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a2:dc:62:fd:29:8a:4f:a3:1e:dc:5c:2e:28: cd:6c:45:69:74:0d:7c:db:59:6a:b6:60:b1:ca:f0: a8:2b:e4:ff:4e:41:18:f0:9c:5e:4f:5c:52:12:0a: 1e:1e:4e:10:ed:21:3d:60:3f:7c:cf:7a:21:9d:f8: 14:d4:24:6f:30:ea:cd:22:77:d5:77:c9:99:aa:56: 0a:3f:1a:88:ec:ce:f3:17:2f:94:14:4c:c0:7f:01: 68:fb:c2:eb:15:e4:7b:7d:1b:45:b2:6e:6d:4b:37: 4e:af:cd:a1:a0:fd:4f:4d:29:0b:9f:6a:eb:b5:d1: 0c:d8:ce:e3:fd:14:a3:42:68:80:d6:20:fb:7c:b5: b4:2a:6e:b0:b9:01:37:d1:8a:39:9f:c7:94:f9:1b: 63:7a:09:94:e9:86:6c:52:89:12:0e:58:11:20:51: fc:77:e0:0b:ef:f9:8f:fb:5b:56:7d:2e:ae:34:f0: b3:19:01:ce:de:a9:a2:32:1c:94:2f:74:df:cb:15: c4:9e:ba:63:50:b1:4d:6d:33:c6:34:5f:b3:35:b7: 02:67:b0:3d:1e:d2:d5:f5:2d:e8:be:53:06:15:8d: 5f:51:f2:de:be:f2:a1:61:40:0b:e9:3c:23:29:c1: 09:5c:d2:f4:c7:1e:79:02:ae:20:39:41:c7:88:34: 50:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:BA:8C:72:4A:CC:12:2F:7E:40:24:3E:F0:91:C3:59:2A:1B:C5:C4 X509v3 Authority Key Identifier: keyid:FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:57:33:1a:cd:e0:b7:1c:60:bb:dd:d3:43:75:94:33:74:08: 6f:d4:d1:32:d4:30:1f:96:d2:12:5a:5c:6f:20:06:ca:db:af: a0:08:09:08:90:40:83:67:92:5f:09:05:49:c1:0e:87:62:b7: 5e:c5:c2:e1:2a:dc:07:4c:52:6f:b0:64:83:42:58:f6:78:70: 37:e6:8b:d8:00:d4:c1:c0:24:81:71:23:44:9e:ee:17:0d:00: 57:4a:5b:9b:74:f5:44:bd:44:69:4a:fa:86:0a:1f:8d:71:fa: 1c:d0:64:98:85:e3:e5:11:4a:ab:2b:5e:64:e0:b1:ba:87:89: 5b:6f:84:c6:c9:a0:1d:11:29:eb:80:67:e8:2e:59:46:aa:ef: 7b:a4:da:38:e5:24:73:e7:31:a1:43:74:4c:52:93:27:bf:0d: ff:03:bd:23:fd:fe:00:11:5b:cc:53:79:25:2a:fe:e7:fb:a2: 88:2d:58:49:f1:e4:83:dc:11:68:5c:4c:85:81:0e:76:de:ac: e0:bc:84:eb:2c:53:00:1a:1e:72:48:2a:a8:a5:b8:f5:e2:36: 4d:1b:1d:35:f6:ef:c3:81:ce:31:af:8c:d9:e4:41:b1:1c:f4: 91:1d:e5:12:ec:f4:e5:83:2f:ef:a7:78:6c:67:a9:f4:ef:8d: e6:96:ad:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NTgxMTAvBgNVBAUTKEZEMTYwNzE4NjM3M0U4MUY0NEQxMzdCMkEwRTk2OTU3 RTYyQUI4QTEwHhcNMjUxMTAyMTUwMjEzWhcNMjUxMTA5MTUwMjEzWjAYMRYwFAYD VQQDEw02OTA3NzI3NS00OGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7KLcYv0pik+jHtxcLijNbEVpdA1821lqtmCxyvCoK+T/TkEY8JxeT1xSEgoe Hk4Q7SE9YD98z3ohnfgU1CRvMOrNInfVd8mZqlYKPxqI7M7zFy+UFEzAfwFo+8Lr FeR7fRtFsm5tSzdOr82hoP1PTSkLn2rrtdEM2M7j/RSjQmiA1iD7fLW0Km6wuQE3 0Yo5n8eU+RtjegmU6YZsUokSDlgRIFH8d+AL7/mP+1tWfS6uNPCzGQHO3qmiMhyU L3TfyxXEnrpjULFNbTPGNF+zNbcCZ7A9HtLV9S3ovlMGFY1fUfLevvKhYUAL6Twj KcEJXNL0xx55Aq4gOUHHiDRQlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN66jHJK zBIvfkAkPvCRw1kqG8XEMB8GA1UdIwQYMBaAFP0WBxhjc+gfRNE3sqDpaVfmKrih MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk1OC81QUUxOTdGNDFE OUYxMUUyQkNCRkY3OEYwOEIwMkNEMi9fUllIR0dOejZCOUUwVGV5b09scFYtWXF1 S0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19SWUhHR056NkI5RTBUZXlvT2xwVi1ZcXVLRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTk1OC81QUUxOTdGNDFEOUYxMUUyQkNCRkY3OEYwOEIwMkNEMi9fUllIR0dOejZC OUUwVGV5b09scFYtWXF1S0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAVzMazeC3HGC73dNDdZQzdAhv1NEy1DAfltISWlxvIAbK26+gCAkI kECDZ5JfCQVJwQ6HYrdexcLhKtwHTFJvsGSDQlj2eHA35ovYANTBwCSBcSNEnu4X DQBXSlubdPVEvURpSvqGCh+Ncfoc0GSYhePlEUqrK15k4LG6h4lbb4TGyaAdESnr gGfoLllGqu97pNo45SRz5zGhQ3RMUpMnvw3/A70j/f4AEVvMU3klKv7n+6KILVhJ 8eSD3BFoXEyFgQ523qzgvITrLFMAGh5ySCqopbj14jZNGx019u/Dgc4xr4zZ5EGx HPSRHeUS7PTlgy/vp3hsZ6n0743mlq1E -----END CERTIFICATE-----Generated at Tue Nov 4 02:16:55 2025 by rpki-client