$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft File: yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft (raw, json) Hash identifier: 3NQ5WB+bKJD94lb3M8j7xDIGkJqVfeWCr7KF6I594vk= Subject key identifier: 00:81:A1:14:37:06:0A:C6:DD:0F:40:03:91:F1:B0:8F:56:3C:7D:C2 Authority key identifier: C9:45:B7:77:2C:CC:27:41:38:65:A9:2C:B8:92:DF:D2:7C:AA:9F:77 Certificate issuer: /CN=A91CB06F/serialNumber=C945B7772CCC27413865A92CB892DFD27CAA9F77 Certificate serial: 0331 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft Manifest number: 032C Signing time: Wed 05 Nov 2025 01:09:34 +0000 Manifest this update: Wed 05 Nov 2025 01:09:33 +0000 Manifest next update: Wed 12 Nov 2025 01:09:33 +0000 Files and hashes: 1: yUW3dyzMJ0E4ZaksuJLf0nyqn3c.crl (hash: fZE1xeQrk23tp5FEE9RnZDUJxz8E253XvL5LExqEC9s=) 2: 5FC8538AE7D811ECB3E05318C4F9AE02.roa (hash: QUXJ6EoEVGUyvaKXpTag7fMul5UWaiUgtkt9cLzt5qM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.crl rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 817 (0x331) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB06F, serialNumber=C945B7772CCC27413865A92CB892DFD27CAA9F77 Validity Not Before: Nov 5 01:09:33 2025 GMT Not After : Nov 12 01:09:33 2025 GMT Subject: CN=690aa3ce-86d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a2:dc:21:9a:77:90:a1:8d:8d:e1:7d:61:07: 11:71:e6:49:4c:00:6a:da:23:99:bd:99:98:e3:97: a6:1e:91:45:e5:d1:1b:97:9e:44:15:d0:f4:f1:63: c8:ac:0c:5e:c5:dc:bd:54:c7:eb:33:98:d0:6f:5e: 77:9a:74:c7:b2:bf:a6:36:54:92:e8:eb:42:23:9e: cf:bf:d9:98:5f:94:53:b7:be:2a:2a:12:39:dc:35: 0c:3a:09:78:05:7f:0a:c5:9e:09:2c:ef:29:bf:fe: cd:d9:33:f4:65:0b:f6:b5:ff:89:e8:53:2c:26:10: d6:d2:f1:d9:1a:e8:aa:4f:d8:df:87:f4:83:2a:87: db:61:5d:01:28:de:0c:2b:7f:17:c0:cf:5a:3b:8b: 30:92:d2:b6:0b:49:98:b6:7a:d2:dd:1a:64:14:8c: f6:84:cb:71:a6:00:29:97:0e:5c:bd:b1:bc:8c:de: f8:23:0b:41:00:8f:06:63:68:bb:89:53:b9:6c:b0: c5:d2:3f:97:f1:c4:24:13:3a:31:b4:73:91:01:d5: 9a:39:0e:20:5f:84:d4:a1:88:52:b4:18:96:3e:17: 51:8d:48:4c:4b:6c:ec:c3:d5:53:dd:e5:0c:fe:38: b9:ec:ec:8d:14:62:bc:d6:ec:59:57:7c:19:9d:30: 65:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:81:A1:14:37:06:0A:C6:DD:0F:40:03:91:F1:B0:8F:56:3C:7D:C2 X509v3 Authority Key Identifier: keyid:C9:45:B7:77:2C:CC:27:41:38:65:A9:2C:B8:92:DF:D2:7C:AA:9F:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:38:ab:f5:81:d8:c3:d9:02:6c:8b:62:02:50:15:c5:e8:da: 2d:81:5f:41:fc:b4:fb:fc:4e:22:48:f9:af:b7:34:f0:c1:c5: 84:4c:d4:35:af:92:89:8d:21:fe:dc:e5:7c:16:04:1a:76:c5: 3d:08:5b:b4:d9:aa:07:1b:d8:bb:4f:98:84:6b:ea:44:d2:30: 1f:51:5d:81:b8:ee:ce:1d:f3:c2:2b:be:95:10:fe:a6:85:55: c1:fa:5a:d1:5c:85:0e:f4:93:19:07:8d:e0:88:e8:cd:1a:46: b9:1d:12:9e:2c:4f:60:a3:d9:31:ee:be:f7:17:c5:86:ce:2e: 5c:da:d2:41:89:d0:a4:92:c6:54:37:99:c6:1c:7e:63:7b:c5: e7:36:85:ab:2d:14:71:7f:52:d6:ac:75:16:eb:ef:85:42:19: 09:77:2f:6e:b5:6d:70:47:d3:a1:43:62:e6:f4:89:4e:79:d9: 91:66:52:f9:7e:78:4d:46:e7:36:d3:ce:17:41:16:2c:cd:0e: 7b:52:de:f7:08:fa:b9:c9:3a:50:41:04:f6:ff:92:63:f8:8e: 90:4f:f8:2e:04:68:46:8d:18:e6:f5:67:d8:e6:d6:2f:82:bb: cc:f7:e6:47:2d:82:53:95:a3:a4:7c:9c:62:5d:87:0c:94:71: 1c:25:24:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IwNkYxMTAvBgNVBAUTKEM5NDVCNzc3MkNDQzI3NDEzODY1QTkyQ0I4OTJERkQy N0NBQTlGNzcwHhcNMjUxMTA1MDEwOTMzWhcNMjUxMTEyMDEwOTMzWjAYMRYwFAYD VQQDEw02OTBhYTNjZS04NmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxaLcIZp3kKGNjeF9YQcRceZJTABq2iOZvZmY45emHpFF5dEbl55EFdD08WPI rAxexdy9VMfrM5jQb153mnTHsr+mNlSS6OtCI57Pv9mYX5RTt74qKhI53DUMOgl4 BX8KxZ4JLO8pv/7N2TP0ZQv2tf+J6FMsJhDW0vHZGuiqT9jfh/SDKofbYV0BKN4M K38XwM9aO4swktK2C0mYtnrS3RpkFIz2hMtxpgAplw5cvbG8jN74IwtBAI8GY2i7 iVO5bLDF0j+X8cQkEzoxtHORAdWaOQ4gX4TUoYhStBiWPhdRjUhMS2zsw9VT3eUM /ji57OyNFGK81uxZV3wZnTBlZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFACBoRQ3 BgrG3Q9AA5HxsI9WPH3CMB8GA1UdIwQYMBaAFMlFt3cszCdBOGWpLLiS39J8qp93 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA2Ri8xMkYzMDIxMkU3 MzgxMUVDODhGMTE2NDFDNEY5QUUwMi95VVczZHl6TUowRTRaYWtzdUpMZjBueXFu M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lVVzNkeXpNSjBFNFpha3N1SkxmMG55cW4zYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjA2Ri8xMkYzMDIxMkU3MzgxMUVDODhGMTE2NDFDNEY5QUUwMi95VVczZHl6TUow RTRaYWtzdUpMZjBueXFuM2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/OKv1gdjD2QJsi2ICUBXF6NotgV9B/LT7/E4iSPmvtzTwwcWETNQ1 r5KJjSH+3OV8FgQadsU9CFu02aoHG9i7T5iEa+pE0jAfUV2BuO7OHfPCK76VEP6m hVXB+lrRXIUO9JMZB43giOjNGka5HRKeLE9go9kx7r73F8WGzi5c2tJBidCkksZU N5nGHH5je8XnNoWrLRRxf1LWrHUW6++FQhkJdy9utW1wR9OhQ2Lm9IlOedmRZlL5 fnhNRuc2084XQRYszQ57Ut73CPq5yTpQQQT2/5Jj+I6QT/guBGhGjRjm9WfY5tYv grvM9+ZHLYJTlaOkfJxiXYcMlHEcJSQK -----END CERTIFICATE-----Generated at Wed Nov 5 05:27:11 2025 by rpki-client