$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft File: y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft (raw, json) Hash identifier: RPnHRrvxkHGUXLbfZBExBbQbEA9ZgmijWdCUWdtCQBU= Subject key identifier: 55:7B:1F:B6:91:05:E1:59:83:EA:66:58:1D:AC:37:D1:7A:E8:D7:D6 Authority key identifier: CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63 Certificate issuer: /CN=A91C3A74/serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363 Certificate serial: 2661 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft Manifest number: 264A Signing time: Sun 02 Nov 2025 15:43:02 +0000 Manifest this update: Sun 02 Nov 2025 15:43:01 +0000 Manifest next update: Sun 09 Nov 2025 15:43:01 +0000 Files and hashes: 1: y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl (hash: l9Mm5ISem65mFnf9cdV4uQoKLWNgGPdcAUq8xUN8QeA=) 2: 767655BE561A11E79F98831DC4F9AE02.roa (hash: bf73yAvc50YmZ9DwhowT9EQ5/Cgl8VLGPJbD30MABw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9825 (0x2661) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3A74, serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363 Validity Not Before: Nov 2 15:43:01 2025 GMT Not After : Nov 9 15:43:01 2025 GMT Subject: CN=69077c05-8c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1c:e2:1d:e1:21:ef:5e:fb:89:76:45:e0:65: 99:d9:96:d0:d5:ea:5f:74:91:e6:f1:21:aa:c2:e0: e3:0e:11:1a:60:ad:4a:65:1b:11:9d:b8:ba:cd:24: e2:05:4a:62:45:d8:1c:dd:8d:6b:4a:60:38:3f:f7: 12:f7:ad:2b:8e:34:e3:dd:2f:75:eb:cc:98:e4:9a: 97:9d:e6:36:36:81:cc:a8:95:19:a6:33:be:46:26: 44:1e:35:9f:82:4e:20:2e:02:bd:03:a2:18:f3:20: 87:22:ee:bd:c2:b6:22:1f:c7:6f:1f:86:a5:a7:93: b6:65:1d:cd:25:d9:50:b1:18:a7:6c:66:eb:1e:17: 7c:86:52:40:ff:49:2f:0d:a8:dc:23:21:8b:29:36: 88:b3:e8:63:c9:7f:af:6e:c0:f3:79:16:4d:dd:31: 5b:c8:e3:b8:3e:d0:89:98:9b:0a:df:82:73:0b:c3: 0f:01:02:06:3f:3d:35:05:88:8b:bf:e3:49:de:35: 18:72:8c:bf:35:07:2d:42:51:ee:5c:cd:83:61:57: 86:6e:f3:c1:5c:ed:df:10:dc:63:fe:24:8c:36:ec: d6:58:50:a1:e0:61:91:32:63:1b:ee:56:ea:7d:b3: da:fa:24:61:b6:c5:15:70:31:b1:0f:f7:4a:ae:9f: 9e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:7B:1F:B6:91:05:E1:59:83:EA:66:58:1D:AC:37:D1:7A:E8:D7:D6 X509v3 Authority Key Identifier: keyid:CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:15:59:3d:3f:ab:ea:1b:5f:ac:11:0f:e8:18:9e:19:72:78: ee:c1:b3:e3:f6:3c:fa:80:b7:be:40:19:4c:c8:40:99:0a:80: e2:5e:37:9c:5f:22:75:e3:f7:15:07:7f:4c:4d:8f:53:da:e4: b9:7b:d8:c7:57:dc:fa:f8:93:fe:5e:2a:1c:1b:bf:23:f5:99: 6d:52:fd:b9:be:0d:ec:5d:1a:37:47:31:f3:d8:48:f3:dd:2f: 2c:8e:9d:1f:00:8a:f1:b1:f5:89:1a:3d:59:ce:07:14:c7:f6: fe:57:12:04:9a:e6:58:b2:84:a5:f2:dd:07:c8:6b:e2:06:a6: b3:33:be:88:50:d2:1b:f9:f2:f4:ce:77:5c:f7:4b:8e:b1:17: 46:b5:4e:ce:ad:58:06:8a:09:46:87:87:18:ab:c7:e7:a6:f2: 10:ae:11:b8:cb:42:57:3b:ce:e5:07:d3:76:07:11:ff:2d:69: 2c:39:e4:13:b2:a6:7f:f8:76:38:ed:2d:5d:6b:05:0e:fc:f6: 94:c0:89:8d:ce:e6:eb:a3:1f:9e:06:08:52:a4:ea:9a:b9:30: 94:9f:9f:80:98:4b:4f:19:e9:08:f2:7d:c8:1c:be:a6:d8:4a: 35:51:87:07:dc:4a:ee:45:f2:f7:f2:64:e3:7b:9a:29:d1:aa: 34:07:ea:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNBNzQxMTAvBgNVBAUTKENCN0I4REI0MjQ4MjRDNzFBODcwM0JCRkI5NDJBMzE1 MjkxNTQzNjMwHhcNMjUxMTAyMTU0MzAxWhcNMjUxMTA5MTU0MzAxWjAYMRYwFAYD VQQDEw02OTA3N2MwNS04YzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBziHeEh7177iXZF4GWZ2ZbQ1epfdJHm8SGqwuDjDhEaYK1KZRsRnbi6zSTi BUpiRdgc3Y1rSmA4P/cS960rjjTj3S9168yY5JqXneY2NoHMqJUZpjO+RiZEHjWf gk4gLgK9A6IY8yCHIu69wrYiH8dvH4alp5O2ZR3NJdlQsRinbGbrHhd8hlJA/0kv DajcIyGLKTaIs+hjyX+vbsDzeRZN3TFbyOO4PtCJmJsK34JzC8MPAQIGPz01BYiL v+NJ3jUYcoy/NQctQlHuXM2DYVeGbvPBXO3fENxj/iSMNuzWWFCh4GGRMmMb7lbq fbPa+iRhtsUVcDGxD/dKrp+e+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFV7H7aR BeFZg+pmWB2sN9F66NfWMB8GA1UdIwQYMBaAFMt7jbQkgkxxqHA7v7lCoxUpFUNj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0E3NC83Q0I0QTA1NkZE M0ExMUU0ODZGODY3NUZDNEY5QUUwMi95M3VOdENTQ1RIR29jRHVfdVVLakZTa1ZR Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kzdU50Q1NDVEhHb2NEdV91VUtqRlNrVlEyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0E3NC83Q0I0QTA1NkZEM0ExMUU0ODZGODY3NUZDNEY5QUUwMi95M3VOdENTQ1RI R29jRHVfdVVLakZTa1ZRMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpFVk9P6vqG1+sEQ/oGJ4ZcnjuwbPj9jz6gLe+QBlMyECZCoDiXjec XyJ14/cVB39MTY9T2uS5e9jHV9z6+JP+XiocG78j9ZltUv25vg3sXRo3RzHz2Ejz 3S8sjp0fAIrxsfWJGj1ZzgcUx/b+VxIEmuZYsoSl8t0HyGviBqazM76IUNIb+fL0 zndc90uOsRdGtU7OrVgGiglGh4cYq8fnpvIQrhG4y0JXO87lB9N2BxH/LWksOeQT sqZ/+HY47S1dawUO/PaUwImNzubrox+eBghSpOqauTCUn5+AmEtPGekI8n3IHL6m 2Eo1UYcH3EruRfL38mTje5op0ao0B+rE -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:15 2025 by rpki-client