$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft File: Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft (raw, json) Hash identifier: rO/ZshR1SCTooLJANRTkA7ljF5CXjZziD59EJWdzVGI= Subject key identifier: 29:1B:62:87:97:AC:D7:F2:1D:7F:03:6A:D4:9D:8C:05:2A:89:91:F9 Authority key identifier: 63:92:39:06:39:17:EE:92:C0:99:E4:6A:D3:69:6C:2E:CA:7C:51:0A Certificate issuer: /CN=A91D2706/serialNumber=639239063917EE92C099E46AD3696C2ECA7C510A Certificate serial: 0781 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft Manifest number: 077B Signing time: Sun 02 Nov 2025 21:32:52 +0000 Manifest this update: Sun 02 Nov 2025 21:32:52 +0000 Manifest next update: Sun 09 Nov 2025 21:32:52 +0000 Files and hashes: 1: Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl (hash: 1QRSkH984uatzCoh9nnXFzthMk7ukHBuNOpFgv4V4gY=) 2: 35D4363E330711EB9D3AA60BC4F9AE02.roa (hash: M4Gqzd39PMwr7C0nKPOIDqHHsIaRLfcCY3hCq+E40tY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1921 (0x781) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2706, serialNumber=639239063917EE92C099E46AD3696C2ECA7C510A Validity Not Before: Nov 2 21:32:52 2025 GMT Not After : Nov 9 21:32:52 2025 GMT Subject: CN=6907ce04-2a12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f4:8d:74:b0:1e:b8:1f:cc:3b:8f:77:bb:28: 19:31:04:de:39:12:42:d4:1e:99:0c:ed:40:1b:dd: c1:6d:43:e4:62:89:6a:7b:93:ef:52:eb:e0:a6:10: 5f:37:fc:a4:f3:fa:95:ba:b8:cf:b7:07:2a:74:79: 13:3a:03:13:be:14:b8:b1:1c:7f:4c:db:8e:b9:c1: 4c:bc:e3:92:3c:b2:b5:6f:65:14:55:d3:67:dc:9e: 8f:60:9e:0f:a5:54:99:a0:0b:ac:58:88:7a:a1:2a: 65:88:f0:ad:6b:9e:01:25:17:4d:2d:55:74:4a:55: e1:76:ae:10:0a:eb:08:88:32:cf:de:c4:49:03:6e: 69:63:5a:5b:03:a7:25:d3:8e:3d:1a:5a:0d:44:52: 8a:73:b5:db:86:db:5c:65:ad:9c:f2:ea:fb:95:fa: cf:88:a2:ae:e5:c3:de:ba:08:5e:d7:7a:cb:2a:e3: 3c:54:7d:1b:9b:ed:e1:45:a2:b4:ad:fb:c6:e6:4f: 75:fb:9b:eb:ee:96:b3:b1:5d:40:da:46:50:85:ea: 87:a7:87:ee:6a:b2:63:74:33:14:a4:06:d5:c3:bf: e0:9f:d5:62:55:02:1e:8d:a2:5d:7a:0e:3e:bd:fb: 66:fb:56:36:b7:2a:f1:e1:05:1e:b0:1e:35:7d:18: be:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:1B:62:87:97:AC:D7:F2:1D:7F:03:6A:D4:9D:8C:05:2A:89:91:F9 X509v3 Authority Key Identifier: keyid:63:92:39:06:39:17:EE:92:C0:99:E4:6A:D3:69:6C:2E:CA:7C:51:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:da:cf:43:3d:c7:47:d0:cd:78:34:2a:9a:03:9c:95:7d:8a: 4a:9e:69:6d:5a:83:ad:c6:dc:bb:4b:2c:24:da:d8:8c:d1:3b: 3e:41:3b:8f:27:4b:31:78:c5:e2:4d:bb:80:7c:2e:82:8d:9a: cd:be:53:20:a0:9d:a4:86:53:fb:73:24:0a:02:b1:02:49:7a: d5:d5:1a:bf:83:24:7c:cb:d6:db:1b:8a:d6:8a:f8:00:e3:a7: e1:21:87:de:d7:19:b7:1a:a4:04:30:ba:13:5a:dd:26:05:cf: df:72:c0:61:64:5c:3f:0d:90:1e:10:e6:34:f3:cc:fd:77:b3: 79:19:78:10:aa:99:68:41:9e:4d:5f:be:44:18:b4:94:f9:df: b0:01:18:79:9d:2e:1f:7f:72:43:62:c6:ea:59:b4:22:11:51: 6c:c7:12:05:97:06:07:1a:c3:59:fa:9f:d9:bb:0c:cc:36:68: 96:61:24:30:1e:fd:c0:37:dc:78:00:b6:44:80:96:5a:14:98: c7:8f:55:8c:44:6a:98:71:f1:e0:7b:2b:d7:c8:cf:7e:a5:f6: 19:1d:22:ff:8f:86:5c:d3:ae:bb:0f:89:a6:06:ce:5e:60:f7: 95:95:de:71:a9:8a:23:ad:d5:07:be:ae:21:44:71:4a:bf:64: 0f:66:ac:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI3MDYxMTAvBgNVBAUTKDYzOTIzOTA2MzkxN0VFOTJDMDk5RTQ2QUQzNjk2QzJF Q0E3QzUxMEEwHhcNMjUxMTAyMjEzMjUyWhcNMjUxMTA5MjEzMjUyWjAYMRYwFAYD VQQDEw02OTA3Y2UwNC0yYTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApfSNdLAeuB/MO493uygZMQTeORJC1B6ZDO1AG93BbUPkYolqe5PvUuvgphBf N/yk8/qVurjPtwcqdHkTOgMTvhS4sRx/TNuOucFMvOOSPLK1b2UUVdNn3J6PYJ4P pVSZoAusWIh6oSpliPCta54BJRdNLVV0SlXhdq4QCusIiDLP3sRJA25pY1pbA6cl 0449GloNRFKKc7XbhttcZa2c8ur7lfrPiKKu5cPeughe13rLKuM8VH0bm+3hRaK0 rfvG5k91+5vr7pazsV1A2kZQheqHp4fuarJjdDMUpAbVw7/gn9ViVQIejaJdeg4+ vftm+1Y2tyrx4QUesB41fRi+XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkbYoeX rNfyHX8DatSdjAUqiZH5MB8GA1UdIwQYMBaAFGOSOQY5F+6SwJnkatNpbC7KfFEK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjcwNi8wNEQ0NTdDMjMz MDYxMUVCQTI4MkQzMEFDNEY5QUUwMi9ZNUk1QmprWDdwTEFtZVJxMDJsc0xzcDhV UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k1STVCamtYN3BMQW1lUnEwMmxzTHNwOFVRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjcwNi8wNEQ0NTdDMjMzMDYxMUVCQTI4MkQzMEFDNEY5QUUwMi9ZNUk1QmprWDdw TEFtZVJxMDJsc0xzcDhVUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBi2s9DPcdH0M14NCqaA5yVfYpKnmltWoOtxty7Sywk2tiM0Ts+QTuP J0sxeMXiTbuAfC6CjZrNvlMgoJ2khlP7cyQKArECSXrV1Rq/gyR8y9bbG4rWivgA 46fhIYfe1xm3GqQEMLoTWt0mBc/fcsBhZFw/DZAeEOY088z9d7N5GXgQqploQZ5N X75EGLSU+d+wARh5nS4ff3JDYsbqWbQiEVFsxxIFlwYHGsNZ+p/ZuwzMNmiWYSQw Hv3AN9x4ALZEgJZaFJjHj1WMRGqYcfHgeyvXyM9+pfYZHSL/j4Zc0667D4mmBs5e YPeVld5xqYojrdUHvq4hRHFKv2QPZqz5 -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:54 2025 by rpki-client