$ rpki-client -vvf rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft File: bywgdVh2TqtQ74UGb3hZDOWxxWE.mft (raw, json) Hash identifier: zCHae/Q+Dbt6Ntr14Ag2FM+UuSd12CTbGjHTa64mM3k= Subject key identifier: 7D:DB:0A:C9:F8:00:90:56:5C:64:8D:40:FF:6F:50:8D:97:CC:66:1C Authority key identifier: 6F:2C:20:75:58:76:4E:AB:50:EF:85:06:6F:78:59:0C:E5:B1:C5:61 Certificate issuer: /CN=A91995D5/serialNumber=6F2C207558764EAB50EF85066F78590CE5B1C561 Certificate serial: 10F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft Manifest number: 10EB Signing time: Tue 04 Nov 2025 17:22:35 +0000 Manifest this update: Tue 04 Nov 2025 17:22:35 +0000 Manifest next update: Tue 11 Nov 2025 17:22:35 +0000 Files and hashes: 1: bywgdVh2TqtQ74UGb3hZDOWxxWE.crl (hash: kIfP95FWJ7DHK51a35nMlPQMao9lYd+R9iP4nFQNVxU=) 2: ADA9DA3C2AAE11E9BEFAEF4EC4F9AE02.roa (hash: NcGX1+0f22h9EnvK4Hf3V559zCSmDIlERyuyLCtuDE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.crl rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4339 (0x10f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91995D5, serialNumber=6F2C207558764EAB50EF85066F78590CE5B1C561 Validity Not Before: Nov 4 17:22:35 2025 GMT Not After : Nov 11 17:22:35 2025 GMT Subject: CN=690a365b-6b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:33:8a:78:c3:76:51:46:de:ca:4d:d6:1a:f5: 0f:11:62:45:13:24:b9:5f:59:62:57:1a:d3:4b:c7: af:df:94:21:b6:4b:71:72:9e:ae:d9:94:50:d2:7e: e7:9c:1c:a3:3a:28:e0:43:dd:b5:56:a1:d1:70:ee: 1f:ad:5a:c1:20:6f:e8:6a:75:67:6d:cf:c5:76:b6: 69:5c:c0:fe:ea:7b:20:4f:be:22:f3:50:b6:71:1e: 94:c6:39:c1:7d:91:4b:7d:66:08:7c:37:60:31:79: 9b:3d:d6:25:36:15:7c:f6:bd:db:14:ec:6e:e0:c3: 2c:45:4e:42:03:a7:9b:9d:1d:90:75:e6:a0:a5:04: b0:5e:7b:74:0e:b0:3d:3a:9e:68:3c:94:bd:e2:7a: 3b:78:2f:f3:4e:25:60:4a:cf:f3:7b:7f:fa:62:9f: 80:30:41:06:67:66:42:09:f1:65:21:c3:37:ef:36: 88:48:1d:35:00:bc:a0:75:ee:ab:07:b8:90:22:31: 26:f7:dc:74:30:ea:86:02:05:28:45:b9:21:d7:38: 1b:05:58:94:0f:57:06:03:30:fe:a3:ac:5b:8c:aa: b7:d3:83:c6:a1:0b:9b:5e:d4:9f:c8:19:2d:61:5b: 7c:7e:5a:ec:d2:bd:a7:f5:3d:fe:4c:29:f4:13:b3: 34:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:DB:0A:C9:F8:00:90:56:5C:64:8D:40:FF:6F:50:8D:97:CC:66:1C X509v3 Authority Key Identifier: keyid:6F:2C:20:75:58:76:4E:AB:50:EF:85:06:6F:78:59:0C:E5:B1:C5:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:ae:6b:b5:e6:a1:48:9c:fd:87:8b:ce:b6:9d:1c:0c:1a:76: f8:54:30:aa:f7:f5:b1:5a:8f:8e:e5:52:a3:b6:9b:cc:ef:30: c5:81:62:33:3d:de:17:6a:d1:77:e3:99:8d:b3:66:44:a2:1b: ce:2c:82:a0:e4:db:f6:bb:9c:66:8d:6d:b3:01:49:ba:d0:f4: c2:92:fb:4e:2d:87:b6:8a:19:0a:f8:72:2e:6d:6e:d5:62:0d: 49:12:c3:60:be:0e:03:c0:d7:59:c3:e4:7b:0a:c0:7c:0f:f5: 12:18:9f:2a:64:84:45:06:3f:f6:ee:2e:78:63:ac:db:b0:53: 63:82:d9:56:c6:1e:7f:b5:2d:83:2d:62:21:26:9d:0c:a6:1b: 2d:80:ba:17:85:53:5b:a9:cc:33:d4:46:ee:3e:2c:4e:0c:d0: a6:df:9e:7f:be:c4:15:32:3a:c0:2f:87:f0:92:2d:71:ba:b7: af:fd:2e:15:3e:32:44:3d:9d:73:6f:50:e8:e0:75:59:11:47: e9:7a:10:a4:d5:d6:39:f0:ff:03:e1:23:9d:43:56:fa:94:da: 68:7a:92:4b:1e:9c:96:4d:be:02:24:08:1a:34:83:b5:36:76: ad:6c:ff:04:27:22:42:e3:ff:c1:8e:ae:3c:3d:d5:c0:9f:e9: b5:13:81:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk1RDUxMTAvBgNVBAUTKDZGMkMyMDc1NTg3NjRFQUI1MEVGODUwNjZGNzg1OTBD RTVCMUM1NjEwHhcNMjUxMTA0MTcyMjM1WhcNMjUxMTExMTcyMjM1WjAYMRYwFAYD VQQDEw02OTBhMzY1Yi02YjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTOKeMN2UUbeyk3WGvUPEWJFEyS5X1liVxrTS8ev35Qhtktxcp6u2ZRQ0n7n nByjOijgQ921VqHRcO4frVrBIG/oanVnbc/FdrZpXMD+6nsgT74i81C2cR6UxjnB fZFLfWYIfDdgMXmbPdYlNhV89r3bFOxu4MMsRU5CA6ebnR2QdeagpQSwXnt0DrA9 Op5oPJS94no7eC/zTiVgSs/ze3/6Yp+AMEEGZ2ZCCfFlIcM37zaISB01ALygde6r B7iQIjEm99x0MOqGAgUoRbkh1zgbBViUD1cGAzD+o6xbjKq304PGoQubXtSfyBkt YVt8flrs0r2n9T3+TCn0E7M0DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH3bCsn4 AJBWXGSNQP9vUI2XzGYcMB8GA1UdIwQYMBaAFG8sIHVYdk6rUO+FBm94WQzlscVh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTVENS8xNjNCMUU3QzJB QUUxMUU5QUE1NzRFNEVDNEY5QUUwMi9ieXdnZFZoMlRxdFE3NFVHYjNoWkRPV3h4 V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J5d2dkVmgyVHF0UTc0VUdiM2haRE9XeHhXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTVENS8xNjNCMUU3QzJBQUUxMUU5QUE1NzRFNEVDNEY5QUUwMi9ieXdnZFZoMlRx dFE3NFVHYjNoWkRPV3h4V0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxrmu15qFInP2Hi862nRwMGnb4VDCq9/WxWo+O5VKjtpvM7zDFgWIz Pd4XatF345mNs2ZEohvOLIKg5Nv2u5xmjW2zAUm60PTCkvtOLYe2ihkK+HIubW7V Yg1JEsNgvg4DwNdZw+R7CsB8D/USGJ8qZIRFBj/27i54Y6zbsFNjgtlWxh5/tS2D LWIhJp0MphstgLoXhVNbqcwz1EbuPixODNCm355/vsQVMjrAL4fwki1xurev/S4V PjJEPZ1zb1Do4HVZEUfpehCk1dY58P8D4SOdQ1b6lNpoepJLHpyWTb4CJAgaNIO1 NnatbP8EJyJC4//Bjq48PdXAn+m1E4H6 -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:33 2025 by rpki-client