$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft File: y51BptqW92pP8FhrXoqIn8AjVFc.mft (raw, json) Hash identifier: gRa95e5HE1j03YUp6dzS0OPkq4oPEzMLiYgelu/V/QU= Subject key identifier: 19:6B:76:44:E5:21:38:37:37:12:DE:7D:A2:FE:5A:1F:40:4F:03:D5 Authority key identifier: CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57 Certificate issuer: /CN=A91C7A69/serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457 Certificate serial: 0384 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft Manifest number: 037C Signing time: Mon 27 Oct 2025 02:15:59 +0000 Manifest this update: Mon 27 Oct 2025 02:15:58 +0000 Manifest next update: Mon 03 Nov 2025 02:15:58 +0000 Files and hashes: 1: y51BptqW92pP8FhrXoqIn8AjVFc.crl (hash: 1/YYCQFBymoORzDjXHhzL6xoVSkngezwrDeoTs2um1s=) 2: 94FE3AB6D55011EF8A1E1855C4F9AE02.roa (hash: jgn+IjzdhxyJSAgxV7AsSre4TgUxRmV/YSZYucj9K7o=) 3: 4FF0079CC6CB11ECB185E43EC4F9AE02.roa (hash: mF7kZS6Jy+xmheJVzwvgL67SCm3/Tv+kyRiKbt147Mc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 02:15:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 900 (0x384) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7A69, serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457 Validity Not Before: Oct 27 02:15:58 2025 GMT Not After : Nov 3 02:15:58 2025 GMT Subject: CN=68fed5de-ba77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a3:89:b2:c9:93:93:3f:f6:cd:13:91:11:7b: 02:55:e0:e3:39:f7:ab:19:79:e7:7e:44:f0:34:47: d6:ed:f8:34:bb:6f:8c:fc:16:b6:ae:47:af:b0:f6: ab:6e:ed:03:c7:c9:8a:95:1e:3b:e4:c5:fc:e1:09: 88:ad:d2:b5:d9:11:31:04:0b:30:ae:e1:8f:96:dc: b6:ac:55:8c:e5:1e:43:8b:b2:88:e7:91:01:51:91: 83:d0:d9:fb:e7:63:03:33:43:b2:aa:68:6b:38:00: 3f:44:8f:c6:d7:03:28:76:bb:0d:72:e0:a3:d2:ec: f8:2c:3a:b9:55:b0:01:3f:7d:12:83:e5:5d:a6:68: 53:6d:f2:14:0c:e7:0e:6c:d7:bb:58:6c:e2:d9:15: f6:2f:1e:8e:6e:0d:c5:bb:08:54:f0:74:f5:09:a0: 70:5a:f8:ff:e3:24:47:e3:fd:c2:b9:d3:9b:bd:5d: 46:7e:2c:ea:42:4d:51:be:6f:8c:cb:bd:8b:a0:1e: 34:6b:b9:39:a2:35:e3:f6:46:07:71:e8:de:85:4c: e1:f4:06:bd:3f:85:b2:87:25:cc:8b:e7:ff:4e:7b: 10:2c:ab:d9:27:96:fc:91:f9:62:d2:2b:71:e8:bc: 62:1f:81:44:13:fe:93:0e:22:f3:a6:64:c6:7e:45: 33:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:6B:76:44:E5:21:38:37:37:12:DE:7D:A2:FE:5A:1F:40:4F:03:D5 X509v3 Authority Key Identifier: keyid:CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:d4:e3:63:07:d4:0e:39:d1:a8:5c:9c:a1:8a:d9:4b:c4:ca: a3:56:3c:f2:4d:f5:19:1b:89:e9:b7:81:c5:87:45:c2:58:bf: d9:6d:d7:16:4d:f1:32:54:12:b8:08:5e:ae:46:eb:4d:85:b9: b4:f3:fc:6b:1a:b8:e5:fd:e6:5d:d2:64:12:a3:f6:5e:da:be: 46:12:77:33:5d:85:7a:e8:79:5f:61:4f:79:e5:a7:87:13:de: c5:95:a0:51:32:23:a9:45:9d:e0:56:64:6d:13:12:c2:73:01: 53:61:d8:c0:88:18:8a:89:b2:d6:bf:ac:2e:5c:4e:d7:de:1a: 5c:cf:2d:ba:c1:dd:c0:e4:c8:a8:15:17:b4:d4:03:4c:79:65: 95:28:10:ef:f6:54:96:94:83:f4:92:cf:b2:93:03:2a:fb:0d: d0:d7:01:58:98:80:39:52:f4:71:e6:4e:4d:cb:62:19:ca:ee: 5f:f4:ce:ec:39:59:b4:da:8a:53:cf:ff:43:b0:13:72:ae:50: 21:ae:eb:63:20:08:d7:79:df:c5:31:18:7b:9d:3f:28:88:e3: c3:23:f3:29:4a:79:c9:60:3b:4f:7a:4d:70:e5:3d:57:2d:17: 17:b2:bc:c6:c2:50:19:d3:c8:d1:94:c8:a6:d6:9e:20:9b:5c: 1a:e2:00:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdBNjkxMTAvBgNVBAUTKENCOUQ0MUE2REE5NkY3NkE0RkYwNTg2QjVFOEE4ODlG QzAyMzU0NTcwHhcNMjUxMDI3MDIxNTU4WhcNMjUxMTAzMDIxNTU4WjAYMRYwFAYD VQQDEw02OGZlZDVkZS1iYTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA16OJssmTkz/2zROREXsCVeDjOferGXnnfkTwNEfW7fg0u2+M/Ba2rkevsPar bu0Dx8mKlR475MX84QmIrdK12RExBAswruGPlty2rFWM5R5Di7KI55EBUZGD0Nn7 52MDM0OyqmhrOAA/RI/G1wModrsNcuCj0uz4LDq5VbABP30Sg+VdpmhTbfIUDOcO bNe7WGzi2RX2Lx6Obg3FuwhU8HT1CaBwWvj/4yRH4/3CudObvV1GfizqQk1Rvm+M y72LoB40a7k5ojXj9kYHcejehUzh9Aa9P4WyhyXMi+f/TnsQLKvZJ5b8kfli0itx 6LxiH4FEE/6TDiLzpmTGfkUzaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBlrdkTl ITg3NxLefaL+Wh9ATwPVMB8GA1UdIwQYMBaAFMudQabalvdqT/BYa16KiJ/AI1RX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0E2OS84QUYzRDVCMkM2 MDMxMUVDOEIwRDVEM0RDNEY5QUUwMi95NTFCcHRxVzkycFA4RmhyWG9xSW44QWpW RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k1MUJwdHFXOTJwUDhGaHJYb3FJbjhBalZGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0E2OS84QUYzRDVCMkM2MDMxMUVDOEIwRDVEM0RDNEY5QUUwMi95NTFCcHRxVzky cFA4RmhyWG9xSW44QWpWRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN1ONjB9QOOdGoXJyhitlLxMqjVjzyTfUZG4npt4HFh0XCWL/ZbdcW TfEyVBK4CF6uRutNhbm08/xrGrjl/eZd0mQSo/Ze2r5GEnczXYV66HlfYU955aeH E97FlaBRMiOpRZ3gVmRtExLCcwFTYdjAiBiKibLWv6wuXE7X3hpczy26wd3A5Mio FRe01ANMeWWVKBDv9lSWlIP0ks+ykwMq+w3Q1wFYmIA5UvRx5k5Ny2IZyu5f9M7s OVm02opTz/9DsBNyrlAhrutjIAjXed/FMRh7nT8oiOPDI/MpSnnJYDtPek1w5T1X LRcXsrzGwlAZ08jRlMim1p4gm1wa4gC4 -----END CERTIFICATE-----Generated at Mon Oct 27 17:40:02 2025 by rpki-client