$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft File: hYony1wEyt-u_biTvwbhp7fZ8cE.mft (raw, json) Hash identifier: 3ag+4fzMRTtqgRADhloOAz0YxZok2UhF9c5/2j7e/M4= Subject key identifier: 9D:80:63:47:04:C0:24:BF:7C:16:0F:19:19:B7:C3:16:A5:F9:92:C2 Authority key identifier: 85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1 Certificate issuer: /CN=A91CBE2E/serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1 Certificate serial: 036F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft Manifest number: 0365 Signing time: Mon 27 Oct 2025 02:22:59 +0000 Manifest this update: Mon 27 Oct 2025 02:22:59 +0000 Manifest next update: Mon 03 Nov 2025 02:22:59 +0000 Files and hashes: 1: hYony1wEyt-u_biTvwbhp7fZ8cE.crl (hash: ttVzZeBUKSUeQOVk4Z54gLEzAz10P6dno+ZFzgBphu4=) 2: A0879902F15711EC846A5F29C4F9AE02.roa (hash: 7/5fZwleDVzsoLoxdmlvx46DZvj38NfAJm5JPzwN8K4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 02:22:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 879 (0x36f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBE2E, serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1 Validity Not Before: Oct 27 02:22:59 2025 GMT Not After : Nov 3 02:22:59 2025 GMT Subject: CN=68fed783-62fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:60:81:fa:17:b1:02:e4:27:1c:2e:23:31:1e: 64:41:9f:71:85:cc:39:b9:fc:f0:ec:83:4d:ca:70: 3a:89:cf:72:e8:6f:d5:d6:f7:9a:37:49:29:a2:93: 8d:41:7f:6a:9d:08:41:7d:75:4a:d6:aa:20:5b:f9: 94:57:25:41:e8:d0:00:aa:2f:c9:c1:52:38:45:c5: 62:fd:cd:c9:b8:9e:bc:58:95:65:dc:77:2c:62:94: 8a:08:99:82:c1:6e:84:f7:c5:5e:97:71:43:a3:20: 34:96:c1:02:25:c5:eb:82:40:3e:b0:13:f4:af:db: ee:21:34:54:37:25:12:19:16:14:ff:a8:cf:68:20: 10:8e:ea:63:bc:5a:98:98:0e:ad:22:21:53:80:5b: 3e:0f:53:eb:6a:f8:51:f4:d2:08:0b:30:4c:93:48: 05:a6:dc:e1:63:08:99:5b:be:6a:b2:7b:03:97:8c: 5b:32:f6:77:4b:ef:4f:76:34:32:97:8f:5d:53:a2: e4:dc:95:54:9a:58:0d:b5:e0:b9:43:7f:bc:78:70: b5:45:d4:67:1e:7b:7a:31:11:7a:e6:c1:26:a8:c6: 60:64:28:1e:79:6f:ca:29:e2:b6:58:0a:0c:97:35: dc:11:b0:7a:f5:22:75:f6:c7:17:bf:1b:bb:a8:3b: 3f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:80:63:47:04:C0:24:BF:7C:16:0F:19:19:B7:C3:16:A5:F9:92:C2 X509v3 Authority Key Identifier: keyid:85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:27:30:47:36:b4:c1:ad:1f:1f:13:dd:80:3b:7e:8b:b0:3f: c3:96:25:a8:f4:fd:4f:9e:1a:6c:0e:6a:8b:f1:ea:e0:8a:da: 28:e0:06:0a:66:c3:40:db:ec:ba:b5:fd:96:85:8c:65:39:75: 5a:f5:97:3f:04:f9:c0:ab:2d:a8:50:82:e9:79:98:88:4a:56: 82:ff:75:3c:57:12:d2:ac:5f:98:12:d5:7a:01:a6:36:a7:23: 9f:bc:cb:66:52:bd:39:9b:e9:e7:53:89:6e:bd:a0:25:0f:4d: b1:f6:84:10:2a:64:4f:14:e8:c5:bb:7f:bc:26:d8:c5:9d:25: 11:e9:81:84:91:67:d7:ea:fd:49:8b:59:38:ef:09:39:d4:86: 6b:56:d0:79:e9:2c:94:d6:ad:b1:48:62:87:d4:14:7c:e3:db: f9:ea:2b:78:bc:f5:0a:b0:b1:5d:2d:64:23:98:eb:1d:52:32: fe:f9:d4:0a:75:37:23:03:4c:8d:9b:bb:32:bc:e2:4a:60:ae: 13:2d:aa:53:1f:bc:f8:59:bb:ea:f0:be:70:bc:17:5c:fc:23: 6c:fd:5a:1e:7a:8b:5a:fc:e4:2b:6f:3f:63:da:67:6e:28:0e: 19:ac:d4:91:d1:19:46:cf:da:7b:9e:00:36:04:99:01:3c:d9: ae:b2:11:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JFMkUxMTAvBgNVBAUTKDg1OEEyN0NCNUMwNENBREZBRUZEQjg5M0JGMDZFMUE3 QjdEOUYxQzEwHhcNMjUxMDI3MDIyMjU5WhcNMjUxMTAzMDIyMjU5WjAYMRYwFAYD VQQDEw02OGZlZDc4My02MmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGCB+hexAuQnHC4jMR5kQZ9xhcw5ufzw7INNynA6ic9y6G/V1veaN0kpopON QX9qnQhBfXVK1qogW/mUVyVB6NAAqi/JwVI4RcVi/c3JuJ68WJVl3HcsYpSKCJmC wW6E98Vel3FDoyA0lsECJcXrgkA+sBP0r9vuITRUNyUSGRYU/6jPaCAQjupjvFqY mA6tIiFTgFs+D1PravhR9NIICzBMk0gFptzhYwiZW75qsnsDl4xbMvZ3S+9PdjQy l49dU6Lk3JVUmlgNteC5Q3+8eHC1RdRnHnt6MRF65sEmqMZgZCgeeW/KKeK2WAoM lzXcEbB69SJ19scXvxu7qDs/OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ2AY0cE wCS/fBYPGRm3wxal+ZLCMB8GA1UdIwQYMBaAFIWKJ8tcBMrfrv24k78G4ae32fHB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkUyRS9EOEFCQUZFOEQw RkIxMUVDQTI3QUYyMkZDNEY5QUUwMi9oWW9ueTF3RXl0LXVfYmlUdndiaHA3Zlo4 Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hZb255MXdFeXQtdV9iaVR2d2JocDdmWjhjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkUyRS9EOEFCQUZFOEQwRkIxMUVDQTI3QUYyMkZDNEY5QUUwMi9oWW9ueTF3RXl0 LXVfYmlUdndiaHA3Zlo4Y0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZJzBHNrTBrR8fE92AO36LsD/DliWo9P1PnhpsDmqL8ergitoo4AYK ZsNA2+y6tf2WhYxlOXVa9Zc/BPnAqy2oUILpeZiISlaC/3U8VxLSrF+YEtV6AaY2 pyOfvMtmUr05m+nnU4luvaAlD02x9oQQKmRPFOjFu3+8JtjFnSUR6YGEkWfX6v1J i1k47wk51IZrVtB56SyU1q2xSGKH1BR849v56it4vPUKsLFdLWQjmOsdUjL++dQK dTcjA0yNm7syvOJKYK4TLapTH7z4Wbvq8L5wvBdc/CNs/Voeeota/OQrbz9j2mdu KA4ZrNSR0RlGz9p7ngA2BJkBPNmushH9 -----END CERTIFICATE-----Generated at Tue Oct 28 07:43:39 2025 by rpki-client