$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft File: rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft (raw, json) Hash identifier: XvPr50a0Zg6Leg416YgMoiJGIBVUiL/n6GgnxLj9/mI= Subject key identifier: D3:5E:37:71:1C:FD:32:68:6F:8E:B2:F4:4C:98:59:73:8A:D8:45:4A Authority key identifier: AD:84:F4:BC:BE:B3:C9:36:5F:28:27:15:3B:A6:9C:ED:2A:99:12:E2 Certificate issuer: /CN=A91EF8B6/serialNumber=AD84F4BCBEB3C9365F2827153BA69CED2A9912E2 Certificate serial: 0B95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft Manifest number: 0B89 Signing time: Tue 04 Nov 2025 19:08:23 +0000 Manifest this update: Tue 04 Nov 2025 19:08:22 +0000 Manifest next update: Tue 11 Nov 2025 19:08:22 +0000 Files and hashes: 1: rYT0vL6zyTZfKCcVO6ac7SqZEuI.crl (hash: 8GXr8rXpFq0o58I02mmiSWo/XOceZb/slMahr/pLO0E=) 2: FB6D5292263C11EEB9F5DB43C4F9AE02.roa (hash: G0XDicBivTci9J26AZ/2/duDqrP/HgCJvt3Hf4+FoMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.crl rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:08:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2965 (0xb95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF8B6, serialNumber=AD84F4BCBEB3C9365F2827153BA69CED2A9912E2 Validity Not Before: Nov 4 19:08:22 2025 GMT Not After : Nov 11 19:08:22 2025 GMT Subject: CN=690a4f27-a512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:86:9a:0a:5a:e1:7b:44:96:35:7e:e8:4e:3b: 3f:05:69:60:a6:47:f5:14:e6:eb:ce:db:1a:e5:72: 0c:08:34:ad:88:67:f4:dc:0f:2f:c8:7e:b2:8f:a4: 07:3b:a4:7d:44:9c:5b:9e:0d:f5:7a:11:d8:63:5c: 33:d1:81:5a:a9:79:e4:19:0a:10:b9:3a:25:ca:af: 5f:77:02:7b:02:ee:e5:60:26:9a:e6:1b:54:3e:2f: f2:6b:33:cc:fe:de:64:27:68:03:ba:95:4a:7e:1a: 3b:3b:b1:eb:52:49:32:cc:7c:0c:63:3a:07:49:30: a3:13:36:2c:c5:76:2d:05:7a:82:a8:83:cb:12:93: f3:f7:a1:42:d9:74:24:ce:95:4c:2b:91:69:f7:5c: 74:49:29:8d:ac:4f:29:8f:59:cf:8a:54:09:75:42: c6:45:a9:f3:a8:f6:17:a0:0c:6f:27:5e:6b:f7:71: 7b:b1:3a:a0:c8:6d:e5:b6:4a:6e:9a:bd:c9:0b:eb: 0b:7d:a4:f6:17:c0:b5:f0:e9:12:09:70:cb:ea:cc: 6e:b8:ab:7d:18:df:56:ac:69:7d:3e:52:b7:7a:ea: 70:eb:3f:a4:4b:38:ac:4f:3f:42:2a:cd:df:d0:fd: 7a:da:88:29:24:15:41:da:41:88:36:13:97:e2:de: 13:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:5E:37:71:1C:FD:32:68:6F:8E:B2:F4:4C:98:59:73:8A:D8:45:4A X509v3 Authority Key Identifier: keyid:AD:84:F4:BC:BE:B3:C9:36:5F:28:27:15:3B:A6:9C:ED:2A:99:12:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:96:25:26:13:02:c5:c6:ba:06:bb:c8:4c:9f:0c:5f:59:a8: 01:88:83:84:5a:2e:15:26:9e:dc:3e:48:e9:9a:9c:48:3e:5c: c6:20:2f:77:93:e8:fe:c7:7e:c9:07:d0:28:43:32:7e:19:27: a8:d0:a6:2c:fa:80:d5:8f:ac:92:5a:a1:4c:7d:72:d2:f6:2a: a3:b0:4f:ed:9a:e8:a3:8b:79:b5:fc:d1:51:d9:cf:75:3a:c3: cd:02:39:4b:01:99:d7:de:74:a5:f2:3b:da:30:24:c4:6d:36: c8:8c:c9:c4:71:d7:ed:a0:6f:1a:72:69:7e:f6:3c:53:3e:c4: 49:3d:4c:b6:65:9f:17:89:79:c2:bb:5d:64:8d:31:31:41:59: 77:a2:9b:0f:b6:a5:f0:0c:66:6b:57:e2:44:79:0d:6d:50:cb: 05:e7:11:24:ec:98:98:ee:67:60:82:75:02:f7:ae:11:21:0f: 02:9f:44:f2:3c:8b:dd:52:41:78:25:81:5d:13:3d:b3:76:c4: 6b:66:04:7c:68:c2:c3:83:c0:ea:d2:61:4b:17:04:bf:37:0f: 37:41:e3:fb:b0:85:71:25:57:ce:39:cc:bc:40:1c:e5:49:01: 4a:9e:88:25:ac:2d:50:fe:20:eb:22:54:53:54:40:43:96:58: af:ee:f4:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY4QjYxMTAvBgNVBAUTKEFEODRGNEJDQkVCM0M5MzY1RjI4MjcxNTNCQTY5Q0VE MkE5OTEyRTIwHhcNMjUxMTA0MTkwODIyWhcNMjUxMTExMTkwODIyWjAYMRYwFAYD VQQDEw02OTBhNGYyNy1hNTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4aaClrhe0SWNX7oTjs/BWlgpkf1FObrztsa5XIMCDStiGf03A8vyH6yj6QH O6R9RJxbng31ehHYY1wz0YFaqXnkGQoQuTolyq9fdwJ7Au7lYCaa5htUPi/yazPM /t5kJ2gDupVKfho7O7HrUkkyzHwMYzoHSTCjEzYsxXYtBXqCqIPLEpPz96FC2XQk zpVMK5Fp91x0SSmNrE8pj1nPilQJdULGRanzqPYXoAxvJ15r93F7sTqgyG3ltkpu mr3JC+sLfaT2F8C18OkSCXDL6sxuuKt9GN9WrGl9PlK3eupw6z+kSzisTz9CKs3f 0P162ogpJBVB2kGINhOX4t4T2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNeN3Ec /TJob46y9EyYWXOK2EVKMB8GA1UdIwQYMBaAFK2E9Ly+s8k2XygnFTumnO0qmRLi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjhCNi80MEU3RkFCQTNB QTYxMUVBQUM4RjE4NzVDNEY5QUUwMi9yWVQwdkw2enlUWmZLQ2NWTzZhYzdTcVpF dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JZVDB2TDZ6eVRaZktDY1ZPNmFjN1NxWkV1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjhCNi80MEU3RkFCQTNBQTYxMUVBQUM4RjE4NzVDNEY5QUUwMi9yWVQwdkw2enlU WmZLQ2NWTzZhYzdTcVpFdUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXliUmEwLFxroGu8hMnwxfWagBiIOEWi4VJp7cPkjpmpxIPlzGIC93 k+j+x37JB9AoQzJ+GSeo0KYs+oDVj6ySWqFMfXLS9iqjsE/tmuiji3m1/NFR2c91 OsPNAjlLAZnX3nSl8jvaMCTEbTbIjMnEcdftoG8acml+9jxTPsRJPUy2ZZ8XiXnC u11kjTExQVl3opsPtqXwDGZrV+JEeQ1tUMsF5xEk7JiY7mdggnUC964RIQ8Cn0Ty PIvdUkF4JYFdEz2zdsRrZgR8aMLDg8Dq0mFLFwS/Nw83QeP7sIVxJVfOOcy8QBzl SQFKnoglrC1Q/iDrIlRTVEBDlliv7vSU -----END CERTIFICATE-----Generated at Wed Nov 5 06:33:12 2025 by rpki-client