$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft File: _YxfSHdCyyBRsoaXKbRmEkzfXms.mft (raw, json) Hash identifier: Ssulr92K8cnQfbRX9eXkamg+gEzylqMfszngeO9xUsY= Subject key identifier: BA:8C:82:B7:BF:E6:A7:07:0D:3E:5C:2F:24:C7:63:9A:B5:BA:DD:23 Authority key identifier: FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B Certificate issuer: /CN=A91EBA46/serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft Manifest number: BC Signing time: Mon 03 Nov 2025 05:58:48 +0000 Manifest this update: Mon 03 Nov 2025 05:58:47 +0000 Manifest next update: Mon 10 Nov 2025 05:58:47 +0000 Files and hashes: 1: _YxfSHdCyyBRsoaXKbRmEkzfXms.crl (hash: NO8Y4J5Y+B1EKd03uHzyUMScxMlizZUn/6mA/tZcQmM=) 2: DDA167929E5111EF94F71013C4F9AE02.roa (hash: ayuReQbwZQyyFifWvSerspyTPQuIIk708kpChRAJhtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA46, serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B Validity Not Before: Nov 3 05:58:47 2025 GMT Not After : Nov 10 05:58:47 2025 GMT Subject: CN=69084497-8c3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:90:89:44:d4:5f:bd:89:e6:22:d8:74:d3:ff: d9:78:d4:47:77:24:e9:e1:8d:08:93:84:e4:f1:a3: bc:39:5f:e0:61:1b:b0:f4:7b:19:1f:dd:e9:e0:0d: 4d:69:7e:24:a5:49:64:01:2f:18:a0:33:26:f2:46: be:aa:97:be:ca:a9:2e:36:fe:43:ee:62:d9:51:8d: 2a:0d:4c:0c:07:be:a6:bf:30:37:f2:60:da:b7:4e: c8:01:3d:87:ff:6f:49:84:e3:74:ab:b5:6f:1c:78: b8:a9:55:49:2d:db:f8:83:d9:22:47:a3:28:6f:cc: e1:f0:8c:cd:2f:0d:5e:85:96:d3:ce:be:13:75:9f: 1f:5f:e0:b5:16:41:89:74:9f:82:83:e5:b4:a3:f2: fc:25:34:c1:e2:2e:30:4b:61:0c:eb:3a:1f:b4:28: 3d:d9:78:3c:24:2b:d4:06:00:1a:3a:a1:94:78:f4: 01:af:04:f3:2c:fb:28:bb:46:74:0a:b7:2c:9a:41: 0b:6d:7f:7b:7e:46:3c:fb:29:16:2d:49:14:9f:fc: 21:79:ca:56:64:b8:f6:7a:59:ce:6b:5d:99:66:41: 89:86:ea:fc:29:36:f2:53:91:0b:23:40:c8:24:a0: c4:53:05:27:79:6f:4e:d7:7b:d3:c1:53:8c:c2:bf: 81:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:8C:82:B7:BF:E6:A7:07:0D:3E:5C:2F:24:C7:63:9A:B5:BA:DD:23 X509v3 Authority Key Identifier: keyid:FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:cd:a6:df:b3:b4:16:7a:4a:40:d5:d5:f6:4b:a2:7a:ce:4a: f1:3a:ff:51:cf:ed:1d:4f:a8:68:82:52:0e:8a:e5:39:6b:46: 4c:27:02:4a:09:b3:62:1f:5a:d6:26:cd:3f:cd:db:5b:85:75: c0:d3:bb:ce:d8:06:b7:0f:04:79:c4:f4:de:29:11:61:45:fa: f9:f1:27:ea:88:10:8b:98:a8:e4:1e:be:a9:f0:4f:7c:ba:86: 6a:cf:f6:30:04:aa:10:ba:7c:69:5f:29:8b:73:d4:d7:c5:b3: ea:84:86:c6:59:8c:c5:39:1f:3e:86:84:1e:ab:6a:20:4a:50: 77:71:95:35:7c:3f:42:01:89:8e:be:c7:97:ef:09:57:64:19: 92:8a:7a:41:40:8b:f7:28:0a:09:f5:8f:23:34:c3:49:e1:11: d6:52:0c:56:ed:53:dd:da:13:51:3a:f7:e2:77:c5:45:8e:ac: eb:7f:5a:fb:59:57:23:ca:4b:26:0e:9f:e1:4f:84:08:33:4a: 36:0f:05:da:30:a0:ff:df:07:a6:46:87:a9:5c:f4:15:a9:24: 3e:aa:bd:9f:f2:89:e1:08:aa:9d:a0:ed:27:d6:f5:84:46:34: 24:a3:0a:94:c2:e4:2d:a3:75:3a:cb:3e:7f:6e:b0:e5:28:e0: 30:81:6a:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBNDYxMTAvBgNVBAUTKEZEOEM1RjQ4Nzc0MkNCMjA1MUIyODY5NzI5QjQ2NjEy NENERjVFNkIwHhcNMjUxMTAzMDU1ODQ3WhcNMjUxMTEwMDU1ODQ3WjAYMRYwFAYD VQQDEw02OTA4NDQ5Ny04YzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5CJRNRfvYnmIth00//ZeNRHdyTp4Y0Ik4Tk8aO8OV/gYRuw9HsZH93p4A1N aX4kpUlkAS8YoDMm8ka+qpe+yqkuNv5D7mLZUY0qDUwMB76mvzA38mDat07IAT2H /29JhON0q7VvHHi4qVVJLdv4g9kiR6Mob8zh8IzNLw1ehZbTzr4TdZ8fX+C1FkGJ dJ+Cg+W0o/L8JTTB4i4wS2EM6zoftCg92Xg8JCvUBgAaOqGUePQBrwTzLPsou0Z0 CrcsmkELbX97fkY8+ykWLUkUn/whecpWZLj2elnOa12ZZkGJhur8KTbyU5ELI0DI JKDEUwUneW9O13vTwVOMwr+BjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqMgre/ 5qcHDT5cLyTHY5q1ut0jMB8GA1UdIwQYMBaAFP2MX0h3QssgUbKGlym0ZhJM315r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkE0Ni9GRjhBQTI0QTlD RjUxMUVGOEE2Qzg1ODFDNEY5QUUwMi9fWXhmU0hkQ3l5QlJzb2FYS2JSbUVremZY bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19ZeGZTSGRDeXlCUnNvYVhLYlJtRWt6Zlhtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkE0Ni9GRjhBQTI0QTlDRjUxMUVGOEE2Qzg1ODFDNEY5QUUwMi9fWXhmU0hkQ3l5 QlJzb2FYS2JSbUVremZYbXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTzabfs7QWekpA1dX2S6J6zkrxOv9Rz+0dT6hoglIOiuU5a0ZMJwJK CbNiH1rWJs0/zdtbhXXA07vO2Aa3DwR5xPTeKRFhRfr58SfqiBCLmKjkHr6p8E98 uoZqz/YwBKoQunxpXymLc9TXxbPqhIbGWYzFOR8+hoQeq2ogSlB3cZU1fD9CAYmO vseX7wlXZBmSinpBQIv3KAoJ9Y8jNMNJ4RHWUgxW7VPd2hNROvfid8VFjqzrf1r7 WVcjyksmDp/hT4QIM0o2DwXaMKD/3wemRoepXPQVqSQ+qr2f8onhCKqdoO0n1vWE RjQkowqUwuQto3U6yz5/brDlKOAwgWrM -----END CERTIFICATE-----Generated at Wed Nov 5 04:49:20 2025 by rpki-client