$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft File: ysNNxbjd0zsX7HVcldRdD3YlD6g.mft (raw, json) Hash identifier: FY04ipKmQW2RUkuX90CjEtnc99yk1zElqUxQE2go3G4= Subject key identifier: 7A:5A:72:2E:4B:83:E0:D2:24:C8:5A:C1:D0:FF:2D:EF:99:85:AD:E0 Authority key identifier: CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8 Certificate issuer: /CN=A91C9B39/serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8 Certificate serial: 0221 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft Manifest number: 021D Signing time: Mon 03 Nov 2025 02:06:32 +0000 Manifest this update: Mon 03 Nov 2025 02:06:31 +0000 Manifest next update: Mon 10 Nov 2025 02:06:31 +0000 Files and hashes: 1: ysNNxbjd0zsX7HVcldRdD3YlD6g.crl (hash: 9qaMStooJKto24jGfaaDA3ID1LLeu+Jo9LyYt2DP6IY=) 2: E21DEF607B5E11ED98247D60C4F9AE02.roa (hash: sHBWYK9XVEHZv+A/fyqhHjEvweQybzBfh5wreKa0iZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.crl rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 545 (0x221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B39, serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8 Validity Not Before: Nov 3 02:06:31 2025 GMT Not After : Nov 10 02:06:31 2025 GMT Subject: CN=69080e27-dff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5c:11:c3:09:3e:d7:3a:57:44:9d:0e:17:da: 61:83:13:5e:98:c5:45:93:59:34:e7:6e:26:ee:05: 10:cc:6c:3f:38:e9:ca:5b:0d:89:84:fd:5c:0e:7b: fb:1d:6f:e3:12:4d:7c:67:79:ee:22:72:4e:9a:21: f8:26:32:a3:3a:80:96:01:eb:fb:35:87:f3:08:7d: d1:7b:3b:e5:d4:34:0d:30:d1:ae:73:c0:e3:72:83: 6d:ac:41:d9:db:04:17:e5:c5:55:df:14:d2:a5:07: 55:7d:01:b0:c4:13:ad:2f:4e:7a:89:1a:53:c0:b9: 62:0f:9e:cc:6e:e2:da:5f:cd:1a:61:98:f8:e3:98: 88:ba:63:a5:1a:dd:b0:68:4b:35:9d:86:ae:62:d7: 74:a7:c3:5c:f1:df:26:c9:03:44:37:2d:70:4d:af: 30:cf:ac:29:b8:1b:d2:ab:d7:ac:1a:81:f0:d1:cf: 20:c1:18:a4:c7:e9:c5:26:f1:0b:e3:e6:7e:f5:73: 46:4a:5a:03:22:91:dd:72:6e:95:93:76:a8:43:42: e8:27:b3:d5:bc:90:9a:08:61:7c:0c:2b:52:88:44: b2:d5:a0:88:78:1b:f5:d6:77:28:c9:3d:0c:5a:21: a2:9f:a4:39:f3:b7:65:a0:41:4b:c5:bd:e1:9e:06: 1c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:5A:72:2E:4B:83:E0:D2:24:C8:5A:C1:D0:FF:2D:EF:99:85:AD:E0 X509v3 Authority Key Identifier: keyid:CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:52:dc:3f:f5:b1:f5:1b:27:b4:12:ae:8c:9b:c8:85:59:2f: 2b:d6:1d:45:71:d9:94:6c:cd:65:f0:38:7a:e5:45:a1:48:c9: 45:9e:4e:31:84:95:ef:2c:c3:8f:02:5b:66:c1:9e:3c:84:89: 1c:85:d8:96:3e:c1:e5:15:2b:b2:50:a9:c6:25:b7:97:c5:fc: 78:e3:c2:2f:49:67:70:d5:09:5a:2d:e2:94:7e:78:89:37:15: 47:9a:3a:fb:4e:bd:48:e3:39:80:64:9d:51:e2:d7:b4:76:fb: 8c:06:63:ae:4a:b9:00:42:a8:41:2c:21:ee:7e:6d:99:d9:fc: 26:47:11:c2:e9:9b:2f:f9:60:a1:09:80:09:be:97:2d:f1:fb: 75:7e:fc:37:a5:9b:68:6d:4d:6d:bd:a9:3b:71:fe:68:eb:93: c6:8f:90:11:a8:21:52:cb:09:a1:14:fc:50:5c:f5:a1:e2:36: 44:4b:be:2f:17:ab:e1:ed:a7:2f:e5:85:7a:a4:bb:e3:75:55: d9:19:69:06:85:b0:38:0e:a4:dd:71:5e:45:cd:f5:e2:45:8c: 65:c3:5c:59:83:9b:1e:bf:83:92:20:80:fb:59:54:56:47:7c: 61:61:8e:53:25:87:b6:20:d7:1d:1e:77:96:38:fb:11:f5:25: cf:40:4c:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlCMzkxMTAvBgNVBAUTKENBQzM0REM1QjhEREQzM0IxN0VDNzU1Qzk1RDQ1RDBG NzYyNTBGQTgwHhcNMjUxMTAzMDIwNjMxWhcNMjUxMTEwMDIwNjMxWjAYMRYwFAYD VQQDEw02OTA4MGUyNy1kZmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVwRwwk+1zpXRJ0OF9phgxNemMVFk1k0524m7gUQzGw/OOnKWw2JhP1cDnv7 HW/jEk18Z3nuInJOmiH4JjKjOoCWAev7NYfzCH3Rezvl1DQNMNGuc8DjcoNtrEHZ 2wQX5cVV3xTSpQdVfQGwxBOtL056iRpTwLliD57MbuLaX80aYZj445iIumOlGt2w aEs1nYauYtd0p8Nc8d8myQNENy1wTa8wz6wpuBvSq9esGoHw0c8gwRikx+nFJvEL 4+Z+9XNGSloDIpHdcm6Vk3aoQ0LoJ7PVvJCaCGF8DCtSiESy1aCIeBv11ncoyT0M WiGin6Q587dloEFLxb3hngYccwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpaci5L g+DSJMhawdD/Le+Zha3gMB8GA1UdIwQYMBaAFMrDTcW43dM7F+x1XJXUXQ92JQ+o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUIzOS9CNjE1RDBCQzdC NUExMUVEQTVFM0NBNjZDNEY5QUUwMi95c05OeGJqZDB6c1g3SFZjbGRSZEQzWWxE NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lzTk54YmpkMHpzWDdIVmNsZFJkRDNZbEQ2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUIzOS9CNjE1RDBCQzdCNUExMUVEQTVFM0NBNjZDNEY5QUUwMi95c05OeGJqZDB6 c1g3SFZjbGRSZEQzWWxENmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlUtw/9bH1Gye0Eq6Mm8iFWS8r1h1FcdmUbM1l8Dh65UWhSMlFnk4x hJXvLMOPAltmwZ48hIkchdiWPsHlFSuyUKnGJbeXxfx448IvSWdw1QlaLeKUfniJ NxVHmjr7Tr1I4zmAZJ1R4te0dvuMBmOuSrkAQqhBLCHufm2Z2fwmRxHC6Zsv+WCh CYAJvpct8ft1fvw3pZtobU1tvak7cf5o65PGj5ARqCFSywmhFPxQXPWh4jZES74v F6vh7acv5YV6pLvjdVXZGWkGhbA4DqTdcV5FzfXiRYxlw1xZg5sev4OSIID7WVRW R3xhYY5TJYe2INcdHneWOPsR9SXPQExv -----END CERTIFICATE-----Generated at Mon Nov 3 18:08:14 2025 by rpki-client