$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft File: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft (raw, json) Hash identifier: 2KEgKNZopcuZKETtG6HrC7SDneMmRwViOGfnOdBzsL8= Subject key identifier: 82:3C:9E:10:DD:5E:8C:16:92:5F:A9:A9:ED:A5:A0:36:41:0F:71:86 Authority key identifier: 63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9 Certificate issuer: /CN=A91B1461/serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9 Certificate serial: 31C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft Manifest number: 31A9 Signing time: Sun 02 Nov 2025 15:25:25 +0000 Manifest this update: Sun 02 Nov 2025 15:25:24 +0000 Manifest next update: Sun 09 Nov 2025 15:25:24 +0000 Files and hashes: 1: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl (hash: 8F98225wCD4ePXuqZTneQX11+MgEJpEsjdPRnd9qVy4=) 2: 33B0CCAEBCE311EA953FBB5EC4F9AE02.roa (hash: ErhPkGRbX8uOsiv8BWxLJU0CPTjQbpalIipsBEye//M=) 3: 32538B4EBCE311EA953FBB5EC4F9AE02.roa (hash: /EM/vo0t7hxhR1+u4hOK5kv/a5vaIBeuI2TOpMQ2J6U=) 4: 31CCE602BCE311EA953FBB5EC4F9AE02.roa (hash: 4L/QBsPDgl5EFK4nBoxi1+onb9ozFugWEl6aDf8ffAI=) 5: 33036E24BCE311EA953FBB5EC4F9AE02.roa (hash: XqVyekJEjEzuH8hLRjew+hAKZkF1o9oKv8NocJP1RLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:25:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12737 (0x31c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1461, serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9 Validity Not Before: Nov 2 15:25:24 2025 GMT Not After : Nov 9 15:25:24 2025 GMT Subject: CN=690777e5-062e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2f:59:7f:28:d8:e4:4e:16:57:f1:6a:69:41: b0:e7:ee:bd:ea:43:ee:25:81:36:23:54:6b:e5:f0: 5d:1b:43:54:8b:4a:7e:e4:11:65:de:c4:a6:d9:43: 31:6b:c8:ae:37:83:06:d3:d3:8d:81:37:a1:71:0e: bb:64:dd:30:8c:ad:9c:48:40:fe:c5:ca:5f:8c:eb: eb:2c:4f:0a:34:10:07:a8:9f:17:a5:32:ff:34:7d: 6c:06:d8:ef:34:4f:c0:1b:d7:f3:27:8b:39:f8:2d: f3:1d:ba:41:3a:33:39:80:e2:d8:89:ea:80:d5:c4: 9e:e2:dd:b6:82:98:55:12:04:3b:4d:48:ea:81:cd: fe:09:69:37:d6:16:d5:f1:60:44:21:78:ab:50:12: 19:7a:51:bb:62:77:50:95:12:2a:43:75:f0:99:19: 94:a7:11:b2:68:79:c9:db:d7:33:10:b0:0f:8d:f7: 88:66:60:37:da:73:af:58:c6:d8:d2:2f:e2:7e:f4: a8:1b:6e:9f:a9:d2:4e:19:90:68:49:ea:dd:44:fe: d7:9d:d1:a8:53:69:3a:bd:ec:55:40:ce:f3:e4:e0: 6a:6b:af:26:ae:7e:85:2d:78:da:b9:32:b0:a7:e2: 85:65:0c:db:cf:e2:90:8f:89:5e:e8:db:e0:4d:b1: 36:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:3C:9E:10:DD:5E:8C:16:92:5F:A9:A9:ED:A5:A0:36:41:0F:71:86 X509v3 Authority Key Identifier: keyid:63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:7b:c4:9e:6d:b8:7f:ac:9e:8f:b4:ae:a9:ee:99:65:8c:de: 7e:b5:5b:3c:43:5f:80:92:4e:59:3e:81:49:84:77:45:0d:30: 4f:b4:58:92:94:f8:fc:db:39:66:68:47:3d:c8:95:43:3c:66: 91:13:e5:5c:e3:aa:ff:ca:03:59:0e:e0:9c:1d:3a:ce:34:02: 03:1f:7d:e5:0c:58:e3:bb:72:12:d2:a9:89:ca:a9:e2:48:ac: 76:3d:22:66:75:f0:1e:74:43:64:70:c0:ac:a7:71:3f:b8:e3: de:8f:a4:e8:7d:4d:82:2b:ca:30:af:f2:a6:6f:f3:9b:c4:4b: 81:74:d5:d3:f2:ab:0a:47:36:e5:f5:8a:4c:07:f0:b2:2f:92: 96:36:62:77:01:5d:f4:79:6f:58:77:e7:19:bb:06:df:c9:6b: a5:b7:26:45:70:5c:0b:f8:87:8c:59:14:d5:de:ad:86:26:3d: 6f:e8:db:24:4c:3f:46:0d:e6:b9:b7:6e:e9:b1:ec:77:bc:de: 03:e0:d3:95:a5:ef:67:dd:9a:c7:17:e0:cb:62:04:de:89:38: 1c:93:0f:3c:8d:77:24:f1:ba:5e:26:e4:54:a8:08:f4:d6:83: 16:c4:c9:58:b0:37:64:17:4c:15:12:8a:33:ff:6d:4b:ef:7a: 16:1a:c4:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE0NjExMTAvBgNVBAUTKDYzN0VEMTQxRkZFMDI1RkQwNTE5OTQ1Q0VENDhFNzRG OEJEMEY1QzkwHhcNMjUxMTAyMTUyNTI0WhcNMjUxMTA5MTUyNTI0WjAYMRYwFAYD VQQDEw02OTA3NzdlNS0wNjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4C9ZfyjY5E4WV/FqaUGw5+696kPuJYE2I1Rr5fBdG0NUi0p+5BFl3sSm2UMx a8iuN4MG09ONgTehcQ67ZN0wjK2cSED+xcpfjOvrLE8KNBAHqJ8XpTL/NH1sBtjv NE/AG9fzJ4s5+C3zHbpBOjM5gOLYieqA1cSe4t22gphVEgQ7TUjqgc3+CWk31hbV 8WBEIXirUBIZelG7YndQlRIqQ3XwmRmUpxGyaHnJ29czELAPjfeIZmA32nOvWMbY 0i/ifvSoG26fqdJOGZBoSerdRP7XndGoU2k6vexVQM7z5OBqa68mrn6FLXjauTKw p+KFZQzbz+KQj4le6NvgTbE2GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFII8nhDd XowWkl+pqe2loDZBD3GGMB8GA1UdIwQYMBaAFGN+0UH/4CX9BRmUXO1I50+L0PXJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTQ2MS9GQ0U5QTY4MEJE RjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pmMEZHWlJjN1VqblQ0dlE5 Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kzN1JRZl9nSmYwRkdaUmM3VWpuVDR2UTljay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTQ2MS9GQ0U5QTY4MEJERjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pm MEZHWlJjN1VqblQ0dlE5Y2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVe8Sebbh/rJ6PtK6p7plljN5+tVs8Q1+Akk5ZPoFJhHdFDTBPtFiS lPj82zlmaEc9yJVDPGaRE+Vc46r/ygNZDuCcHTrONAIDH33lDFjju3IS0qmJyqni SKx2PSJmdfAedENkcMCsp3E/uOPej6TofU2CK8owr/Kmb/ObxEuBdNXT8qsKRzbl 9YpMB/CyL5KWNmJ3AV30eW9Yd+cZuwbfyWultyZFcFwL+IeMWRTV3q2GJj1v6Nsk TD9GDea5t27psex3vN4D4NOVpe9n3ZrHF+DLYgTeiTgckw88jXck8bpeJuRUqAj0 1oMWxMlYsDdkF0wVEooz/21L73oWGsTC -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:04 2025 by rpki-client