$ rpki-client -vvf rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft File: MmYwanA43JsBUyfHJVZAXzn85gs.mft (raw, json) Hash identifier: rkBCUd4pG3Zw0aDkEqvosyBtjefV6o636nL4UMf497o= Subject key identifier: 63:A1:0D:B7:4E:9B:9A:76:C8:5F:6C:D3:52:7B:B0:2B:36:49:A4:A7 Authority key identifier: 32:66:30:6A:70:38:DC:9B:01:53:27:C7:25:56:40:5F:39:FC:E6:0B Certificate issuer: /CN=A91F644E/serialNumber=3266306A7038DC9B015327C72556405F39FCE60B Certificate serial: 1ABB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft Manifest number: 1AB0 Signing time: Tue 04 Nov 2025 16:25:04 +0000 Manifest this update: Tue 04 Nov 2025 16:25:04 +0000 Manifest next update: Tue 11 Nov 2025 16:25:03 +0000 Files and hashes: 1: MmYwanA43JsBUyfHJVZAXzn85gs.crl (hash: UwEw3ZsN12/4osRhosvgUqOW85w9vl0pMq1b7aD0DdA=) 2: 312DC5B8405E11E7A28FCE45C4F9AE02.roa (hash: JDbo72SPqBZERT5W0ydUMhl3jfbjfWwgaMjrsH1k1kg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.crl rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6843 (0x1abb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F644E, serialNumber=3266306A7038DC9B015327C72556405F39FCE60B Validity Not Before: Nov 4 16:25:04 2025 GMT Not After : Nov 11 16:25:03 2025 GMT Subject: CN=690a28e0-a0e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:88:d6:e9:5d:e6:30:b1:89:c9:81:19:e3:a9: e8:bf:b8:2b:46:79:e8:28:7c:a1:37:0f:b1:f6:1d: bf:02:88:dd:13:52:26:8d:19:97:22:68:68:59:14: 2d:7b:97:33:9a:c3:65:1f:fa:f8:12:3c:46:35:27: f6:fc:ef:87:58:59:54:c2:25:39:b1:ff:4f:0b:27: 09:46:ee:0b:14:70:c1:59:31:c2:8a:05:a2:5a:aa: a3:06:e5:62:96:77:0d:11:97:d2:2f:e8:d3:05:38: b5:06:c5:06:9b:4c:91:15:a4:f7:03:c0:b3:a1:7a: fa:45:24:6a:09:98:6d:1f:d5:29:20:ef:c8:f3:c0: 11:93:1c:8b:3f:19:f7:24:b9:24:3e:bf:2d:50:a0: f3:1e:83:43:f7:ff:a6:41:b4:11:19:71:23:41:81: d0:f6:3b:95:f2:08:c8:68:e6:c3:54:51:0e:9a:41: 1d:ca:30:25:93:af:0a:38:8f:5b:ae:4c:6b:2b:91: 76:70:c1:03:a3:f4:ab:d9:a9:33:93:18:c9:6a:c1: 1e:d4:23:5e:b3:b8:78:bc:0c:02:2c:82:ce:55:41: a4:71:f8:4c:5c:e7:ad:04:ff:bd:48:74:9b:15:be: 5c:31:6a:c0:be:11:e9:f1:87:99:c4:49:3f:a5:9b: 95:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:A1:0D:B7:4E:9B:9A:76:C8:5F:6C:D3:52:7B:B0:2B:36:49:A4:A7 X509v3 Authority Key Identifier: keyid:32:66:30:6A:70:38:DC:9B:01:53:27:C7:25:56:40:5F:39:FC:E6:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:af:67:f8:08:04:15:aa:9a:6a:08:e8:ae:eb:53:17:47:87: 3a:73:99:d1:a8:f6:92:28:5e:df:8d:62:27:a6:5f:b6:60:4a: 3e:c8:f3:9a:bf:d9:63:e5:6f:3e:34:4f:57:9e:b9:5e:2b:a5: a3:91:55:6f:2f:f7:a1:e4:58:3a:04:e2:dd:c5:27:8a:c2:8a: 4d:3d:01:24:79:d5:2e:f1:14:06:76:7e:72:00:0e:a2:5b:83: d4:cb:40:97:ca:5f:27:66:9e:ec:e4:69:ab:de:8c:f6:74:c6: 3c:a3:22:74:bb:42:bd:c2:78:94:6a:89:d3:9c:89:6e:5c:c9: 56:41:e1:65:87:56:70:6d:41:19:60:c0:e5:0a:3e:f6:0c:8a: da:ca:b0:05:1f:5e:c5:43:97:56:c3:aa:4b:d5:84:f1:8d:12: 47:99:03:83:f2:9c:87:30:05:74:fc:1e:23:b0:a0:f1:0d:01: 2b:41:2b:ea:83:fc:de:25:64:40:28:9d:61:20:0f:31:25:6d: 2b:9c:7c:f7:63:39:1c:1d:2c:18:1c:30:b7:54:19:f7:3a:49: 55:e6:a9:6e:6e:97:3f:bc:ff:80:7d:46:cd:65:65:b6:80:33: 1d:47:91:4c:30:94:a5:04:a3:19:14:ef:03:66:10:15:76:76: 84:9f:42:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGrswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY0NEUxMTAvBgNVBAUTKDMyNjYzMDZBNzAzOERDOUIwMTUzMjdDNzI1NTY0MDVG MzlGQ0U2MEIwHhcNMjUxMTA0MTYyNTA0WhcNMjUxMTExMTYyNTAzWjAYMRYwFAYD VQQDEw02OTBhMjhlMC1hMGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwojW6V3mMLGJyYEZ46nov7grRnnoKHyhNw+x9h2/AojdE1ImjRmXImhoWRQt e5czmsNlH/r4EjxGNSf2/O+HWFlUwiU5sf9PCycJRu4LFHDBWTHCigWiWqqjBuVi lncNEZfSL+jTBTi1BsUGm0yRFaT3A8CzoXr6RSRqCZhtH9UpIO/I88ARkxyLPxn3 JLkkPr8tUKDzHoND9/+mQbQRGXEjQYHQ9juV8gjIaObDVFEOmkEdyjAlk68KOI9b rkxrK5F2cMEDo/Sr2akzkxjJasEe1CNes7h4vAwCLILOVUGkcfhMXOetBP+9SHSb Fb5cMWrAvhHp8YeZxEk/pZuVcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGOhDbdO m5p2yF9s01J7sCs2SaSnMB8GA1UdIwQYMBaAFDJmMGpwONybAVMnxyVWQF85/OYL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjQ0RS9FNDNCNkU0QTQw NUQxMUU3QjAxQkExNDVDNEY5QUUwMi9NbVl3YW5BNDNKc0JVeWZISlZaQVh6bjg1 Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tWXdhbkE0M0pzQlV5ZkhKVlpBWHpuODVncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjQ0RS9FNDNCNkU0QTQwNUQxMUU3QjAxQkExNDVDNEY5QUUwMi9NbVl3YW5BNDNK c0JVeWZISlZaQVh6bjg1Z3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDr2f4CAQVqppqCOiu61MXR4c6c5nRqPaSKF7fjWInpl+2YEo+yPOa v9lj5W8+NE9XnrleK6WjkVVvL/eh5Fg6BOLdxSeKwopNPQEkedUu8RQGdn5yAA6i W4PUy0CXyl8nZp7s5Gmr3oz2dMY8oyJ0u0K9wniUaonTnIluXMlWQeFlh1ZwbUEZ YMDlCj72DIrayrAFH17FQ5dWw6pL1YTxjRJHmQOD8pyHMAV0/B4jsKDxDQErQSvq g/zeJWRAKJ1hIA8xJW0rnHz3YzkcHSwYHDC3VBn3OklV5qlubpc/vP+AfUbNZWW2 gDMdR5FMMJSlBKMZFO8DZhAVdnaEn0Kj -----END CERTIFICATE-----Generated at Tue Nov 4 21:04:19 2025 by rpki-client