$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft File: 9FYY6ic_QLS8aF4piH4gUIPEkKY.mft (raw, json) Hash identifier: Zt6OM+C8xAeqtF9SzqmXYyroft5mnJGDfKh4UB7eNDM= Subject key identifier: C0:CB:BE:BA:DE:56:C7:98:BD:CD:96:5F:14:CD:79:A5:81:2A:BD:F6 Authority key identifier: F4:56:18:EA:27:3F:40:B4:BC:68:5E:29:88:7E:20:50:83:C4:90:A6 Certificate issuer: /CN=A91C3E37/serialNumber=F45618EA273F40B4BC685E29887E205083C490A6 Certificate serial: 01D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft Manifest number: 01D1 Signing time: Mon 03 Nov 2025 02:48:12 +0000 Manifest this update: Mon 03 Nov 2025 02:48:11 +0000 Manifest next update: Mon 10 Nov 2025 02:48:11 +0000 Files and hashes: 1: 9FYY6ic_QLS8aF4piH4gUIPEkKY.crl (hash: dCW/8E0YH5HuAeWI2eiqyPAWjVvEiLlCfINLuPADW4Y=) 2: 9BBCC1F60D2411EEA8431074C4F9AE02.roa (hash: CWem0s7hf8kQnIdZUnWxTyisJw7AnKLcP2ANy+rIwcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.crl rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:48:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3E37, serialNumber=F45618EA273F40B4BC685E29887E205083C490A6 Validity Not Before: Nov 3 02:48:11 2025 GMT Not After : Nov 10 02:48:11 2025 GMT Subject: CN=690817eb-18a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8f:bc:c0:05:5b:f3:25:45:a3:99:25:19:dd: 59:81:10:cc:9d:6d:93:f1:9a:3b:74:fa:96:c6:9f: 4c:2e:7c:68:93:e8:2d:12:ac:33:de:5f:8c:9a:67: ef:f0:f3:0a:17:99:3e:67:4b:03:6b:65:99:68:80: 3b:62:2f:f2:39:ce:99:d8:02:7d:96:b5:c4:66:23: 3d:ac:6e:b3:ba:32:13:f9:b9:ea:e6:c0:3f:84:5d: b9:c8:ae:b2:18:1a:0e:1d:6a:50:1b:83:ce:24:bf: e8:5a:e4:07:37:31:8a:70:d2:c1:59:68:db:28:7c: c9:23:d3:b3:34:db:1c:7d:12:ac:52:4a:b7:43:21: 51:f2:d3:76:53:c7:a8:01:5d:d0:48:01:c7:22:ef: 0a:af:1a:85:a6:5f:d6:c2:9d:8d:8b:bd:3a:7a:bf: 5e:ff:67:2a:df:3b:fc:c8:b1:56:86:fd:ab:2f:d7: 0f:78:ec:29:1f:23:f5:3b:b6:ad:25:44:66:80:2c: 80:63:89:90:1d:b7:0c:db:10:fe:e4:3f:06:24:2b: 9c:f7:2d:49:fa:18:bc:8e:50:5d:e9:bd:6c:b0:39: 95:fe:65:e8:4f:c1:8d:27:2f:e0:29:f3:ff:11:fe: 10:59:fa:b1:70:39:58:fb:04:82:2d:a7:59:b5:2c: ce:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:CB:BE:BA:DE:56:C7:98:BD:CD:96:5F:14:CD:79:A5:81:2A:BD:F6 X509v3 Authority Key Identifier: keyid:F4:56:18:EA:27:3F:40:B4:BC:68:5E:29:88:7E:20:50:83:C4:90:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:3e:27:5d:1b:96:03:bc:7d:79:25:fa:bc:8f:cf:be:f7:5c: d7:25:3f:28:da:88:5c:dd:8e:f4:9a:c4:e0:93:18:16:78:f5: 8b:f8:a2:40:3e:99:19:b3:27:7f:d5:aa:3f:5d:8f:64:61:86: 34:9d:ef:ec:e8:d1:db:d8:96:d7:27:c7:6d:ca:5b:f5:db:52: 08:0b:5e:3b:51:9c:f9:e5:9d:7c:1e:f1:a6:c4:b9:d7:0a:ce: fa:07:c7:e2:b2:a8:a2:45:01:91:aa:d3:f7:6e:1a:46:6f:45: 70:a2:5d:4a:da:cf:16:1a:5b:cf:ea:b9:5a:e7:03:e6:7b:28: ae:b6:6e:c3:f7:9b:35:87:d2:e1:d7:cf:c8:be:c3:9f:5e:8f: 7e:df:d1:79:c6:0a:dd:f7:13:bb:a3:d1:ba:64:de:b6:c3:d8: ba:6e:2d:26:03:fa:93:cc:01:28:aa:dd:67:ea:04:02:76:78: 18:60:a6:2a:84:34:64:17:a2:a9:b5:b6:7e:58:d8:cf:f8:68: 95:63:79:fa:01:28:65:7a:2c:7e:27:9d:a2:5e:8a:83:5a:b1: 9c:50:ea:3e:cd:37:39:eb:7a:0b:5f:b5:a5:47:6a:fd:83:ff: 72:60:18:f7:c6:00:28:a0:55:6f:a1:e8:0b:a3:54:be:ec:a3: 6b:e1:04:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNFMzcxMTAvBgNVBAUTKEY0NTYxOEVBMjczRjQwQjRCQzY4NUUyOTg4N0UyMDUw ODNDNDkwQTYwHhcNMjUxMTAzMDI0ODExWhcNMjUxMTEwMDI0ODExWjAYMRYwFAYD VQQDEw02OTA4MTdlYi0xOGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApo+8wAVb8yVFo5klGd1ZgRDMnW2T8Zo7dPqWxp9MLnxok+gtEqwz3l+Mmmfv 8PMKF5k+Z0sDa2WZaIA7Yi/yOc6Z2AJ9lrXEZiM9rG6zujIT+bnq5sA/hF25yK6y GBoOHWpQG4POJL/oWuQHNzGKcNLBWWjbKHzJI9OzNNscfRKsUkq3QyFR8tN2U8eo AV3QSAHHIu8KrxqFpl/Wwp2Ni706er9e/2cq3zv8yLFWhv2rL9cPeOwpHyP1O7at JURmgCyAY4mQHbcM2xD+5D8GJCuc9y1J+hi8jlBd6b1ssDmV/mXoT8GNJy/gKfP/ Ef4QWfqxcDlY+wSCLadZtSzORQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDLvrre VseYvc2WXxTNeaWBKr32MB8GA1UdIwQYMBaAFPRWGOonP0C0vGheKYh+IFCDxJCm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0UzNy9CNDQ1NTNEOEYw OUYxMUVEOUI0QTA3MzRDNEY5QUUwMi85RllZNmljX1FMUzhhRjRwaUg0Z1VJUEVr S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGWVk2aWNfUUxTOGFGNHBpSDRnVUlQRWtLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0UzNy9CNDQ1NTNEOEYwOUYxMUVEOUI0QTA3MzRDNEY5QUUwMi85RllZNmljX1FM UzhhRjRwaUg0Z1VJUEVrS1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEPiddG5YDvH15Jfq8j8++91zXJT8o2ohc3Y70msTgkxgWePWL+KJA PpkZsyd/1ao/XY9kYYY0ne/s6NHb2JbXJ8dtylv121IIC147UZz55Z18HvGmxLnX Cs76B8fisqiiRQGRqtP3bhpGb0Vwol1K2s8WGlvP6rla5wPmeyiutm7D95s1h9Lh 18/IvsOfXo9+39F5xgrd9xO7o9G6ZN62w9i6bi0mA/qTzAEoqt1n6gQCdngYYKYq hDRkF6KptbZ+WNjP+GiVY3n6AShleix+J52iXoqDWrGcUOo+zTc563oLX7WlR2r9 g/9yYBj3xgAooFVvoegLo1S+7KNr4QR7 -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:06 2025 by rpki-client