$ rpki-client -vvf rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft File: y3TVYT1zQs-5t_ed7wyfrYhceCI.mft (raw, json) Hash identifier: Z9H8t4MyaRGl+BqO+EBPVrwwLwIiwU8JDnPD6ACQlkE= Subject key identifier: 43:9C:3C:FC:64:DA:4A:F2:01:04:09:46:8E:EF:E6:72:D8:C8:15:0B Authority key identifier: CB:74:D5:61:3D:73:42:CF:B9:B7:F7:9D:EF:0C:9F:AD:88:5C:78:22 Certificate issuer: /CN=A917845B/serialNumber=CB74D5613D7342CFB9B7F79DEF0C9FAD885C7822 Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft Manifest number: 01B1 Signing time: Wed 05 Nov 2025 03:15:31 +0000 Manifest this update: Wed 05 Nov 2025 03:15:30 +0000 Manifest next update: Wed 12 Nov 2025 03:15:30 +0000 Files and hashes: 1: y3TVYT1zQs-5t_ed7wyfrYhceCI.crl (hash: kuCAdDhZ/corhNQ4lh8fXi1UTzCCZOMDNm3mIdsdSJk=) 2: D5981734217611EE9EBE2F70C4F9AE02.roa (hash: Ae2kzkiPbHsneEUo3gobHEERA3S8mH2dAIJpdvxeRck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.crl rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:15:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917845B, serialNumber=CB74D5613D7342CFB9B7F79DEF0C9FAD885C7822 Validity Not Before: Nov 5 03:15:30 2025 GMT Not After : Nov 12 03:15:30 2025 GMT Subject: CN=690ac152-9305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:55:09:de:b3:68:47:9b:20:94:03:b8:22:f4: 95:eb:8c:14:5e:4b:88:90:76:77:95:13:1b:03:6f: 14:ff:f6:5c:58:d5:4b:0d:e6:99:65:d9:fc:c8:c5: 1b:67:75:47:3d:ba:8a:61:11:51:a6:30:ef:c9:30: bd:51:b5:12:4f:e8:ee:30:39:9a:87:4c:8d:86:e5: 95:31:9c:d7:de:0c:69:0f:5d:a0:5b:8b:1c:c3:79: f2:f4:b8:69:17:99:a4:99:93:38:b0:04:42:4f:ee: 83:b0:aa:37:cb:81:bc:fd:8e:81:94:fb:8f:93:bf: 44:42:a5:32:81:96:be:02:62:82:14:ca:36:30:2e: 75:83:9f:e3:3b:f6:f2:e5:e4:c8:8f:34:e3:4f:3b: e4:9c:4c:86:b3:a5:21:b6:56:f4:09:3c:5a:e7:0b: 8e:3e:2f:73:8c:e8:fe:a2:68:40:db:a1:0f:b3:8c: 76:f8:48:6d:d7:91:1f:6f:a9:49:e1:50:6b:0a:06: c3:69:54:c9:a1:b1:17:3e:38:d9:ff:6d:8a:5b:b9: c1:1c:89:e0:8b:a3:8f:67:f8:21:0b:25:1f:aa:56: 1a:95:25:31:a8:88:d3:23:8f:cd:09:1f:f3:5f:b0: 8f:40:68:ba:16:c3:24:0d:f6:76:61:76:22:cf:95: 7f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:9C:3C:FC:64:DA:4A:F2:01:04:09:46:8E:EF:E6:72:D8:C8:15:0B X509v3 Authority Key Identifier: keyid:CB:74:D5:61:3D:73:42:CF:B9:B7:F7:9D:EF:0C:9F:AD:88:5C:78:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:10:4a:d7:05:a0:74:fc:6a:87:f8:88:f3:8c:9a:4a:fa:98: 8b:c0:8b:b6:2d:24:90:e2:dc:bc:31:f8:e6:67:71:56:bc:66: e9:99:d5:c1:49:79:08:00:9c:65:10:36:b1:7f:df:37:ef:b5: 37:a4:e1:09:82:b0:f4:df:e3:99:9c:1a:b2:fd:3a:fe:f0:e1: cd:35:1d:48:43:f4:b0:e1:ce:42:dc:5b:60:a1:25:3f:1d:88: b4:06:94:b2:ba:90:9c:3f:30:6d:ed:58:ea:bb:c7:93:38:02: f8:77:01:0b:9b:88:7a:95:bc:8f:3a:ed:d0:f0:49:36:36:5c: 62:08:f0:cb:81:87:5e:77:a4:f5:ec:72:12:55:b3:84:f2:87: bf:67:6a:ad:8d:5c:88:af:46:21:1b:c7:55:85:35:1c:60:9a: e5:35:fc:02:02:c8:15:21:ac:19:49:e9:38:3d:59:af:bb:85: 5d:ba:6f:24:9d:2f:4b:4f:53:15:87:9a:9f:88:2d:08:a6:7a: f8:b8:f3:5e:48:e9:db:ad:0f:f9:6c:e7:65:e7:c6:6e:77:6a: 7e:14:1e:d2:05:6e:7a:8c:d7:58:92:eb:28:7e:9d:8b:30:e1: d5:48:1b:7f:6b:87:7e:9a:cd:4a:0b:7f:bf:57:98:b7:59:ca: 8f:d1:21:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg0NUIxMTAvBgNVBAUTKENCNzRENTYxM0Q3MzQyQ0ZCOUI3Rjc5REVGMEM5RkFE ODg1Qzc4MjIwHhcNMjUxMTA1MDMxNTMwWhcNMjUxMTEyMDMxNTMwWjAYMRYwFAYD VQQDEw02OTBhYzE1Mi05MzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlVUJ3rNoR5sglAO4IvSV64wUXkuIkHZ3lRMbA28U//ZcWNVLDeaZZdn8yMUb Z3VHPbqKYRFRpjDvyTC9UbUST+juMDmah0yNhuWVMZzX3gxpD12gW4scw3ny9Lhp F5mkmZM4sARCT+6DsKo3y4G8/Y6BlPuPk79EQqUygZa+AmKCFMo2MC51g5/jO/by 5eTIjzTjTzvknEyGs6Uhtlb0CTxa5wuOPi9zjOj+omhA26EPs4x2+Eht15Efb6lJ 4VBrCgbDaVTJobEXPjjZ/22KW7nBHIngi6OPZ/ghCyUfqlYalSUxqIjTI4/NCR/z X7CPQGi6FsMkDfZ2YXYiz5V/NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEOcPPxk 2kryAQQJRo7v5nLYyBULMB8GA1UdIwQYMBaAFMt01WE9c0LPubf3ne8Mn62IXHgi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODQ1Qi85NzM2OUI0NjIx NzYxMUVFQjRGM0FENkZDNEY5QUUwMi95M1RWWVQxelFzLTV0X2VkN3d5ZnJZaGNl Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kzVFZZVDF6UXMtNXRfZWQ3d3lmclloY2VDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODQ1Qi85NzM2OUI0NjIxNzYxMUVFQjRGM0FENkZDNEY5QUUwMi95M1RWWVQxelFz LTV0X2VkN3d5ZnJZaGNlQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWEErXBaB0/GqH+IjzjJpK+piLwIu2LSSQ4ty8MfjmZ3FWvGbpmdXB SXkIAJxlEDaxf98377U3pOEJgrD03+OZnBqy/Tr+8OHNNR1IQ/Sw4c5C3FtgoSU/ HYi0BpSyupCcPzBt7Vjqu8eTOAL4dwELm4h6lbyPOu3Q8Ek2NlxiCPDLgYded6T1 7HISVbOE8oe/Z2qtjVyIr0YhG8dVhTUcYJrlNfwCAsgVIawZSek4PVmvu4Vdum8k nS9LT1MVh5qfiC0Ipnr4uPNeSOnbrQ/5bOdl58Zud2p+FB7SBW56jNdYkusofp2L MOHVSBt/a4d+ms1KC3+/V5i3WcqP0SGO -----END CERTIFICATE-----Generated at Wed Nov 5 21:12:47 2025 by rpki-client