$ rpki-client -vvf rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft File: y8CtGWWFFkH2YRHo4pAmmKm57YA.mft (raw, json) Hash identifier: aH2P2gwNHQyGttoC0CvT6475lWfC/TlffkHT3m5o8hU= Subject key identifier: D2:22:0D:52:14:DE:03:11:90:2B:60:CA:4A:A5:4C:7F:A2:93:BF:8D Authority key identifier: CB:C0:AD:19:65:85:16:41:F6:61:11:E8:E2:90:26:98:A9:B9:ED:80 Certificate issuer: /CN=A91C38CC/serialNumber=CBC0AD1965851641F66111E8E2902698A9B9ED80 Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft Manifest number: 013E Signing time: Mon 03 Nov 2025 04:27:35 +0000 Manifest this update: Mon 03 Nov 2025 04:27:35 +0000 Manifest next update: Mon 10 Nov 2025 04:27:35 +0000 Files and hashes: 1: y8CtGWWFFkH2YRHo4pAmmKm57YA.crl (hash: ZdQdQCOih6dlVkX54QKIaOlQvU5Am7FCPiHbBynSLqo=) 2: CA2A06D6D5E511EE9B319A12C4F9AE02.roa (hash: U37kWMCNqNpu+UU1MaVXsy3rFn8/VgyQ4MzDX4Ugs7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.crl rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:27:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C38CC, serialNumber=CBC0AD1965851641F66111E8E2902698A9B9ED80 Validity Not Before: Nov 3 04:27:35 2025 GMT Not After : Nov 10 04:27:35 2025 GMT Subject: CN=69082f37-f423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bb:71:d6:1e:40:01:9b:48:d0:ab:e4:76:a2: 6e:6a:5f:12:b9:6d:cf:cc:9a:a0:5b:19:dd:90:5e: 65:24:02:42:ce:ca:8f:fe:9c:7f:a0:4f:e8:3b:a7: 37:96:33:f6:c9:59:52:7e:c8:1b:2f:76:0b:65:f0: c8:d2:ae:28:28:9e:28:7e:41:56:54:25:59:72:2c: e7:3b:b3:e9:5e:fc:50:9c:5f:41:f5:72:bd:99:7e: 67:a3:94:00:3b:5c:c2:dc:83:5d:46:50:52:de:69: 5f:29:fc:82:1c:25:46:a1:03:fa:be:08:28:ad:08: c4:c5:22:38:ed:64:c3:fa:c0:f7:6f:f4:f5:c8:cf: 1d:92:e3:58:b1:1d:a5:00:28:4e:4b:19:5b:98:9d: ee:61:9d:92:f7:34:33:5e:68:ed:ec:31:c9:15:8c: e9:4a:a4:fe:00:a4:42:45:90:df:34:7e:8b:a0:01: 85:f7:48:e6:96:1e:45:8a:46:48:0e:b8:9d:6c:3b: 4d:f7:4b:93:06:69:70:41:b3:d0:bd:87:8a:62:05: 3d:44:0d:f1:10:26:46:db:9e:1a:16:49:bd:a3:22: e0:33:9f:f2:95:e6:f8:60:0a:b5:80:4a:4b:ef:4d: 17:91:03:b4:a5:2c:f2:77:2d:64:11:5d:c9:c2:be: b8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:22:0D:52:14:DE:03:11:90:2B:60:CA:4A:A5:4C:7F:A2:93:BF:8D X509v3 Authority Key Identifier: keyid:CB:C0:AD:19:65:85:16:41:F6:61:11:E8:E2:90:26:98:A9:B9:ED:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:c4:8b:e1:f9:44:08:2c:24:05:c3:0a:ab:69:89:71:9f:62: 8a:ed:15:4d:d6:4c:0b:fc:99:82:4b:17:7e:43:17:9b:65:7e: 3e:14:18:7f:db:c5:18:ed:de:89:02:e1:e9:d7:0e:79:5c:3b: fa:5e:3c:ae:df:c4:ae:a0:d4:c1:24:ef:eb:45:89:45:5f:c2: e5:91:3d:be:62:c3:d6:8f:a8:e5:24:82:fc:2d:37:fa:32:a0: 12:c2:2a:b7:f0:03:4e:40:33:7d:cb:8a:bb:a8:aa:4f:72:aa: 50:38:0b:4b:8f:9c:72:b5:c9:3b:e4:10:83:28:33:33:48:45: 1e:52:4a:0a:1f:e3:c8:a0:8c:2f:6d:65:ce:fa:90:63:0b:0f: c0:2a:4f:bf:15:10:e4:e4:6b:3a:68:b0:67:21:5b:9a:a9:ca: d7:a0:50:52:9d:24:74:46:02:26:f3:17:ba:cc:11:67:8b:61: e2:54:86:8e:0d:83:92:c8:02:ff:77:ac:1c:9e:a0:9a:60:ec: 8b:47:61:a3:97:24:6a:32:fc:47:0f:97:2f:d9:29:30:5d:1a: 9d:09:bc:e4:2d:88:1d:ed:0e:53:9e:b4:9b:c8:85:f2:44:e9: 57:85:c0:58:00:63:f7:60:c3:13:f1:a6:28:69:08:73:30:ed: d6:5e:58:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM4Q0MxMTAvBgNVBAUTKENCQzBBRDE5NjU4NTE2NDFGNjYxMTFFOEUyOTAyNjk4 QTlCOUVEODAwHhcNMjUxMTAzMDQyNzM1WhcNMjUxMTEwMDQyNzM1WjAYMRYwFAYD VQQDEw02OTA4MmYzNy1mNDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbtx1h5AAZtI0KvkdqJual8SuW3PzJqgWxndkF5lJAJCzsqP/px/oE/oO6c3 ljP2yVlSfsgbL3YLZfDI0q4oKJ4ofkFWVCVZciznO7PpXvxQnF9B9XK9mX5no5QA O1zC3INdRlBS3mlfKfyCHCVGoQP6vggorQjExSI47WTD+sD3b/T1yM8dkuNYsR2l AChOSxlbmJ3uYZ2S9zQzXmjt7DHJFYzpSqT+AKRCRZDfNH6LoAGF90jmlh5FikZI DridbDtN90uTBmlwQbPQvYeKYgU9RA3xECZG254aFkm9oyLgM5/yleb4YAq1gEpL 700XkQO0pSzydy1kEV3Jwr64nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNIiDVIU 3gMRkCtgykqlTH+ik7+NMB8GA1UdIwQYMBaAFMvArRllhRZB9mER6OKQJpipue2A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzhDQy8zQUM1N0M4Q0Q1 RTUxMUVFQjc3OTIyM0VDNEY5QUUwMi95OEN0R1dXRkZrSDJZUkhvNHBBbW1LbTU3 WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k4Q3RHV1dGRmtIMllSSG80cEFtbUttNTdZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzhDQy8zQUM1N0M4Q0Q1RTUxMUVFQjc3OTIyM0VDNEY5QUUwMi95OEN0R1dXRkZr SDJZUkhvNHBBbW1LbTU3WUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuxIvh+UQILCQFwwqraYlxn2KK7RVN1kwL/JmCSxd+QxebZX4+FBh/ 28UY7d6JAuHp1w55XDv6Xjyu38SuoNTBJO/rRYlFX8LlkT2+YsPWj6jlJIL8LTf6 MqASwiq38ANOQDN9y4q7qKpPcqpQOAtLj5xytck75BCDKDMzSEUeUkoKH+PIoIwv bWXO+pBjCw/AKk+/FRDk5Gs6aLBnIVuaqcrXoFBSnSR0RgIm8xe6zBFni2HiVIaO DYOSyAL/d6wcnqCaYOyLR2GjlyRqMvxHD5cv2SkwXRqdCbzkLYgd7Q5TnrSbyIXy ROlXhcBYAGP3YMMT8aYoaQhzMO3WXlgV -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:18 2025 by rpki-client