$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft File: Y35CcZzKBnZlOgprNKBujlSsBe8.mft (raw, json) Hash identifier: Tt3v98OqE5+YNrdXOlFBoxFDO8TbTcFx++Mxba0lsSM= Subject key identifier: 68:2C:CB:2D:2D:E7:ED:65:60:27:A4:98:37:8A:A6:0F:FD:B8:4B:AF Authority key identifier: 63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF Certificate issuer: /CN=A91FECFD/serialNumber=637E42719CCA0676653A0A6B34A06E8E54AC05EF Certificate serial: 092F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft Manifest number: 0929 Signing time: Sun 02 Nov 2025 20:11:22 +0000 Manifest this update: Sun 02 Nov 2025 20:11:21 +0000 Manifest next update: Sun 09 Nov 2025 20:11:21 +0000 Files and hashes: 1: Y35CcZzKBnZlOgprNKBujlSsBe8.crl (hash: YkH6rV4nn9nMyXdehzr/onLE8TgVDjv43B9TaDVkyKY=) 2: 995F3DCEAF7811EABCA9AC1DC4F9AE02.roa (hash: ZNkH5Sj7XHBs6ufHKPHidPlMntGP72EIG2BMLfQDnC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.crl rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:11:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2351 (0x92f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FECFD, serialNumber=637E42719CCA0676653A0A6B34A06E8E54AC05EF Validity Not Before: Nov 2 20:11:21 2025 GMT Not After : Nov 9 20:11:21 2025 GMT Subject: CN=6907baea-4f63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ea:f9:f5:25:bd:8e:45:87:70:71:71:8c:82: 93:0b:53:db:88:c4:99:d5:02:c0:e9:48:c8:a3:1b: f0:1e:15:91:26:1b:b9:8e:ae:c7:47:5b:c5:61:0c: 1f:5e:e2:4f:b6:c4:4a:06:f1:09:5c:b2:ac:60:4d: 81:a9:47:39:fd:51:9b:b3:a9:9b:b7:d3:89:23:20: f8:76:d7:c2:8e:84:31:3e:49:ef:ab:4b:ae:5b:16: 97:4e:77:66:4a:da:c5:e0:03:35:60:1d:d4:50:16: 37:bb:ad:7d:c4:f8:19:18:14:b5:4c:1d:b4:e6:24: 95:27:39:3f:07:e2:9f:6d:94:93:54:d0:a0:4f:66: c5:bc:31:32:58:87:be:a5:77:a0:4c:e7:df:a6:08: ae:bc:93:6c:34:56:ae:be:64:55:a0:4a:5c:e9:89: b7:7b:45:5f:0a:27:1a:a6:3b:c9:be:7c:7e:b7:95: b9:6b:ed:1c:4c:0b:f6:be:42:d6:d8:a3:da:f9:24: d9:1b:a9:ed:7c:d3:6e:34:f5:1a:4c:93:7e:c5:1f: a9:cb:1e:4e:20:45:d3:02:8c:b3:3c:d1:e2:a5:7a: 8e:dd:3c:0c:9a:ab:30:c2:b9:44:97:fa:ea:83:77: 07:ab:39:ae:6f:e7:34:d2:27:89:bc:91:16:f7:7b: 4f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:2C:CB:2D:2D:E7:ED:65:60:27:A4:98:37:8A:A6:0F:FD:B8:4B:AF X509v3 Authority Key Identifier: keyid:63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:86:00:e4:48:e2:47:03:b4:b9:85:d0:30:94:62:7d:af:b2: 42:af:63:d9:03:76:69:4e:54:e1:94:77:41:34:a6:a3:42:37: 90:b0:74:78:82:e4:8a:ed:02:34:cb:91:89:49:e1:5e:4f:46: a3:b1:bf:c7:3d:0e:49:9d:83:94:2d:1e:81:ce:3e:aa:14:1e: 47:ce:4f:b3:26:96:03:1e:f0:7b:ba:b8:b2:5f:8c:2f:65:6f: 62:ca:97:f8:41:47:e8:7a:b0:89:29:49:55:1d:11:eb:cb:dc: 63:6c:bc:d3:ca:50:73:f5:56:e6:35:f4:fd:42:09:f8:de:63: 5b:cd:29:07:05:10:ee:0c:79:b6:9c:b7:37:33:06:c1:1e:ee: f6:88:f9:e8:ea:87:88:77:0d:b3:3e:65:92:b5:59:3c:cd:8b: ba:2a:0d:78:ad:f2:fc:9e:6c:8f:94:c5:65:bf:47:fe:77:cc: a8:4d:8c:c3:9a:1d:cd:dd:e9:f0:62:b1:e3:a3:62:dc:cf:0c: b5:b3:9b:6e:a9:b8:a3:5f:77:a2:97:f5:38:2a:77:a8:85:4d: ca:22:77:74:73:b5:bd:7d:f7:ed:b7:f0:f0:a8:5a:88:47:85: e1:0b:f6:9c:88:86:e2:fe:1d:70:30:c8:c9:d7:cd:2b:9d:27: 9a:23:3e:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVDRkQxMTAvBgNVBAUTKDYzN0U0MjcxOUNDQTA2NzY2NTNBMEE2QjM0QTA2RThF NTRBQzA1RUYwHhcNMjUxMTAyMjAxMTIxWhcNMjUxMTA5MjAxMTIxWjAYMRYwFAYD VQQDEw02OTA3YmFlYS00ZjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOr59SW9jkWHcHFxjIKTC1PbiMSZ1QLA6UjIoxvwHhWRJhu5jq7HR1vFYQwf XuJPtsRKBvEJXLKsYE2BqUc5/VGbs6mbt9OJIyD4dtfCjoQxPknvq0uuWxaXTndm StrF4AM1YB3UUBY3u619xPgZGBS1TB205iSVJzk/B+KfbZSTVNCgT2bFvDEyWIe+ pXegTOffpgiuvJNsNFauvmRVoEpc6Ym3e0VfCicapjvJvnx+t5W5a+0cTAv2vkLW 2KPa+STZG6ntfNNuNPUaTJN+xR+pyx5OIEXTAoyzPNHipXqO3TwMmqswwrlEl/rq g3cHqzmub+c00ieJvJEW93tPeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGgsyy0t 5+1lYCekmDeKpg/9uEuvMB8GA1UdIwQYMBaAFGN+QnGcygZ2ZToKazSgbo5UrAXv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUNGRC8zN0EwNDI2NEFG NzcxMUVBODExODMxMUJDNEY5QUUwMi9ZMzVDY1p6S0JuWmxPZ3ByTktCdWpsU3NC ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kzNUNjWnpLQm5abE9ncHJOS0J1amxTc0JlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUNGRC8zN0EwNDI2NEFGNzcxMUVBODExODMxMUJDNEY5QUUwMi9ZMzVDY1p6S0Ju WmxPZ3ByTktCdWpsU3NCZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAChgDkSOJHA7S5hdAwlGJ9r7JCr2PZA3ZpTlThlHdBNKajQjeQsHR4 guSK7QI0y5GJSeFeT0ajsb/HPQ5JnYOULR6Bzj6qFB5Hzk+zJpYDHvB7uriyX4wv ZW9iypf4QUfoerCJKUlVHRHry9xjbLzTylBz9VbmNfT9Qgn43mNbzSkHBRDuDHm2 nLc3MwbBHu72iPno6oeIdw2zPmWStVk8zYu6Kg14rfL8nmyPlMVlv0f+d8yoTYzD mh3N3enwYrHjo2Lczwy1s5tuqbijX3eil/U4KneohU3KInd0c7W9ffftt/DwqFqI R4XhC/aciIbi/h1wMMjJ180rnSeaIz7T -----END CERTIFICATE-----Generated at Tue Nov 4 08:18:18 2025 by rpki-client