$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft File: pYh4bi_YjPqvU6qilsNkRg7m6m0.mft (raw, json) Hash identifier: 7vlYqCrWznIVCXDYVNBDYH8cLFKpkp5EUdTBDuG7CKo= Subject key identifier: 39:18:81:6C:7F:27:A5:F7:D8:CE:F0:2E:AA:51:EB:D1:3A:11:0A:FE Authority key identifier: A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D Certificate issuer: /CN=A91C8485/serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft Manifest number: A8 Signing time: Sat 25 Oct 2025 10:05:06 +0000 Manifest this update: Sat 25 Oct 2025 10:05:05 +0000 Manifest next update: Sat 01 Nov 2025 10:05:05 +0000 Files and hashes: 1: pYh4bi_YjPqvU6qilsNkRg7m6m0.crl (hash: SPoXiF0KjN2Ary9Yv30sW1UlS0RNGQgiFSmxTjBBwtk=) 2: 5B4A5E7EB7CF11EF860F535AC4F9AE02.roa (hash: Z9DYBfabGIxHjUBLevu5KvPw0ydtYOqQMGpRrWOIWpg=) 3: A59FFB3EB7D711EF9ED0C324C4F9AE02.roa (hash: qXU62xBJEhF8s34iW9kLJHW6sq1BX3PHBxT3tX/weaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 10:05:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8485, serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Validity Not Before: Oct 25 10:05:05 2025 GMT Not After : Nov 1 10:05:05 2025 GMT Subject: CN=68fca0d1-ee51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bb:2a:13:1c:79:a6:49:06:65:0b:dc:2a:81: 17:5f:2a:75:c1:27:c8:0e:72:6a:c1:ce:ba:a4:b5: 69:60:12:fb:13:10:02:ce:12:0f:df:c2:3b:9e:4f: 15:ac:45:3b:96:b1:02:2d:da:20:1a:01:41:08:3c: 71:34:25:36:4f:0e:aa:24:90:e9:d4:f3:5e:b3:f0: 9f:5a:43:27:d9:5f:c4:bf:43:40:44:c1:db:5e:ee: d8:1d:d8:b6:aa:3e:98:41:03:0b:1d:ae:d6:cd:41: 5a:92:2e:b5:96:ea:1e:23:24:b2:2a:2c:5d:29:22: a9:f7:df:81:b5:83:c3:3b:63:b5:1b:cd:98:db:26: 12:b1:64:7f:e5:0d:23:d0:73:e0:e1:f8:c5:86:68: 3e:c8:de:c4:db:c4:ba:45:d7:a2:48:40:9d:52:62: 75:1f:9d:cb:90:2d:94:2a:6e:93:83:fb:d1:65:a3: 9a:d8:08:60:36:bd:37:f3:75:62:48:5b:e5:70:05: c5:30:4f:32:63:54:f9:33:3e:a3:b7:7b:21:c7:28: 4d:83:bf:a4:c7:18:91:0a:bb:0f:5c:49:6b:4b:53: 07:d0:fc:c1:2c:db:e2:0c:aa:8f:33:4a:64:dc:f7: 1a:64:15:ae:a7:b2:1e:9e:46:fb:2e:00:12:64:d3: 1b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:18:81:6C:7F:27:A5:F7:D8:CE:F0:2E:AA:51:EB:D1:3A:11:0A:FE X509v3 Authority Key Identifier: keyid:A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:c6:21:e5:43:81:4b:bd:60:0e:b0:e3:8f:42:da:88:ad:06: 28:84:b1:3c:d6:a2:f1:8f:b2:66:b1:0d:3a:fd:17:39:bf:90: 44:c4:ad:68:59:3c:f1:21:1e:00:85:cf:cd:70:e5:d9:39:3e: aa:d6:5a:c4:26:3e:f2:47:f0:da:98:a3:01:f2:91:a5:a3:63: f3:f7:89:3e:c8:7d:01:bf:10:c1:c8:b7:30:9b:23:e2:7b:bd: 07:ea:10:8b:d6:1c:c2:99:31:03:28:70:18:e7:43:36:b8:1b: 7f:a3:e8:a7:da:d4:0f:43:dd:44:a5:a4:f8:d4:ff:35:e6:e8: c0:c3:27:77:eb:44:cc:b2:26:a3:7b:8d:8e:0e:49:50:8b:e3: cc:ce:e8:0c:0c:60:d5:03:36:49:cd:4c:42:f6:6c:b4:09:1b: 19:47:4f:0b:c3:a0:49:95:87:cb:b1:ea:ec:42:70:53:f8:8d: a5:d9:97:48:d5:ba:49:2d:c4:6e:8b:6a:6d:c2:b0:20:64:1e: a1:27:16:2d:e0:25:59:57:fb:6a:9c:63:c5:d2:8a:ca:74:ef: 2f:65:2d:30:52:1e:29:9b:f6:3c:8e:4b:5c:f5:11:65:e3:e1: 11:b8:25:a1:48:04:90:58:8f:b3:50:bd:60:d8:b6:45:92:e9: 9a:cd:49:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg0ODUxMTAvBgNVBAUTKEE1ODg3ODZFMkZEODhDRkFBRjUzQUFBMjk2QzM2NDQ2 MEVFNkVBNkQwHhcNMjUxMDI1MTAwNTA1WhcNMjUxMTAxMTAwNTA1WjAYMRYwFAYD VQQDEw02OGZjYTBkMS1lZTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsbsqExx5pkkGZQvcKoEXXyp1wSfIDnJqwc66pLVpYBL7ExACzhIP38I7nk8V rEU7lrECLdogGgFBCDxxNCU2Tw6qJJDp1PNes/CfWkMn2V/Ev0NARMHbXu7YHdi2 qj6YQQMLHa7WzUFaki61luoeIySyKixdKSKp99+BtYPDO2O1G82Y2yYSsWR/5Q0j 0HPg4fjFhmg+yN7E28S6RdeiSECdUmJ1H53LkC2UKm6Tg/vRZaOa2AhgNr0383Vi SFvlcAXFME8yY1T5Mz6jt3shxyhNg7+kxxiRCrsPXElrS1MH0PzBLNviDKqPM0pk 3PcaZBWup7Ienkb7LgASZNMbWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDkYgWx/ J6X32M7wLqpR69E6EQr+MB8GA1UdIwQYMBaAFKWIeG4v2Iz6r1OqopbDZEYO5upt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODQ4NS8yREJDRUY0NkI0 MTIxMUVGQjhFNkU3NzNDNEY5QUUwMi9wWWg0YmlfWWpQcXZVNnFpbHNOa1JnN202 bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BZaDRiaV9ZalBxdlU2cWlsc05rUmc3bTZtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODQ4NS8yREJDRUY0NkI0MTIxMUVGQjhFNkU3NzNDNEY5QUUwMi9wWWg0YmlfWWpQ cXZVNnFpbHNOa1JnN202bTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXxiHlQ4FLvWAOsOOPQtqIrQYohLE81qLxj7JmsQ06/Rc5v5BExK1o WTzxIR4Ahc/NcOXZOT6q1lrEJj7yR/DamKMB8pGlo2Pz94k+yH0BvxDByLcwmyPi e70H6hCL1hzCmTEDKHAY50M2uBt/o+in2tQPQ91EpaT41P815ujAwyd360TMsiaj e42ODklQi+PMzugMDGDVAzZJzUxC9my0CRsZR08Lw6BJlYfLsersQnBT+I2l2ZdI 1bpJLcRui2ptwrAgZB6hJxYt4CVZV/tqnGPF0orKdO8vZS0wUh4pm/Y8jktc9RFl 4+ERuCWhSASQWI+zUL1g2LZFkumazUn5 -----END CERTIFICATE-----Generated at Sun Oct 26 12:26:02 2025 by rpki-client