$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft File: y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft (raw, json) Hash identifier: +zhGOUSp6+jlRZ086m1A24aVDzLSblESaTUJawNDMTY= Subject key identifier: 9B:48:51:60:B3:27:F9:40:C0:57:9B:CB:EA:D7:E3:0A:D3:09:1B:42 Authority key identifier: CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A Certificate issuer: /CN=A91E0CF5/serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft Manifest number: F1 Signing time: Mon 03 Nov 2025 05:17:04 +0000 Manifest this update: Mon 03 Nov 2025 05:17:04 +0000 Manifest next update: Mon 10 Nov 2025 05:17:04 +0000 Files and hashes: 1: y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl (hash: Q136/ccQm1ZvEdmrV1rEUNDyiBvwIMFX/Pqk3Trfukw=) 2: C155660E492B11EF8EF0D04FC4F9AE02.roa (hash: p1Kd4l2BGto3TUE6P+Iwqb8Y4agcHwTbtFw10TWcSis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:17:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0CF5, serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A Validity Not Before: Nov 3 05:17:04 2025 GMT Not After : Nov 10 05:17:04 2025 GMT Subject: CN=69083ad0-b391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fd:e6:92:a1:64:ae:b7:bc:3d:53:73:0f:67: e7:10:35:86:cc:90:93:13:71:8a:cf:c2:91:80:65: d8:94:56:4c:31:69:93:c7:d2:5b:dd:ec:68:4d:dd: 1c:04:e2:bc:a5:b6:dd:42:fb:2c:b1:4b:df:dc:04: 3e:96:b8:c0:c0:a2:c6:2e:14:19:2e:c7:cb:7b:82: 6e:22:ef:69:8e:47:a9:14:fc:e7:f5:61:c2:70:c9: 0c:0a:88:86:38:8a:ce:8a:ff:5c:2f:4c:61:aa:e8: ed:af:de:7b:8d:4b:8f:b5:29:08:2d:c5:79:c9:cd: c9:16:a5:f9:88:98:65:f2:23:4e:dd:48:d4:2b:8f: e3:67:a7:61:02:a8:b8:35:a1:a3:cc:6a:82:b8:16: da:e6:71:3c:da:b5:e3:e2:d3:06:eb:ad:bb:1c:fb: 98:a7:8d:1d:af:e4:ab:98:5d:45:37:b5:ca:0e:20: cd:a3:c8:8f:bc:7d:2e:8c:b0:e0:36:03:00:a2:9b: 6e:62:9e:1c:06:16:fc:76:29:8a:69:00:1d:77:b4: b3:c7:59:11:2f:e0:9a:34:d4:7f:33:a5:ba:1b:98: 98:94:78:0d:6a:f7:2f:65:8e:9d:c3:3d:56:1e:0d: 88:c5:08:4a:84:24:85:54:50:66:ff:66:88:5c:20: bf:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:48:51:60:B3:27:F9:40:C0:57:9B:CB:EA:D7:E3:0A:D3:09:1B:42 X509v3 Authority Key Identifier: keyid:CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:20:e0:46:a5:e2:b0:ba:30:a2:f8:14:c9:e7:b2:2a:a1:8e: 91:7b:cf:5b:6c:68:9d:57:26:5d:03:04:b9:6c:1a:93:b5:50: b8:8d:aa:34:33:37:e5:08:d3:5d:f0:b7:73:47:e1:a3:93:64: e3:b8:77:da:97:3b:6f:26:e2:72:4e:8a:1b:58:80:5c:ac:49: 96:89:3f:87:27:c5:da:c6:72:b8:ac:70:29:c7:38:f0:86:21: 17:ee:69:a0:dd:db:b3:3c:fa:38:78:83:c0:6e:9d:7c:78:d3: e5:96:77:9a:3f:ee:69:74:2b:2e:22:73:22:f2:20:e7:22:c4: f8:e1:8a:6a:a2:ad:f0:25:2d:6c:31:e6:a0:7b:ad:44:a5:64: 75:9b:25:6f:1e:f4:59:6b:b7:b5:10:51:48:5e:5a:69:1d:5e: 3c:2f:ac:02:ce:dd:af:db:23:2b:b3:dc:4d:6d:78:0a:36:67: 59:0b:f5:c1:ff:db:91:d4:29:b4:9c:7d:12:40:ea:3e:1b:26: ae:09:25:b4:87:da:7c:35:63:bb:64:94:4e:f3:28:1e:d5:8b: c8:8a:ed:cf:4e:99:cf:e7:f1:8d:4a:80:81:74:49:f2:26:9c: c5:78:6a:ec:c7:0b:9d:d3:83:0a:32:5e:44:fa:d5:5e:fa:49: b0:27:cf:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDRjUxMTAvBgNVBAUTKENCQkJCQjI0QjIyQjQzNUQxQ0E0OTNBOUQ2M0RDQTc3 OUJFMDc5NkEwHhcNMjUxMTAzMDUxNzA0WhcNMjUxMTEwMDUxNzA0WjAYMRYwFAYD VQQDEw02OTA4M2FkMC1iMzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqv3mkqFkrre8PVNzD2fnEDWGzJCTE3GKz8KRgGXYlFZMMWmTx9Jb3exoTd0c BOK8pbbdQvsssUvf3AQ+lrjAwKLGLhQZLsfLe4JuIu9pjkepFPzn9WHCcMkMCoiG OIrOiv9cL0xhqujtr957jUuPtSkILcV5yc3JFqX5iJhl8iNO3UjUK4/jZ6dhAqi4 NaGjzGqCuBba5nE82rXj4tMG6627HPuYp40dr+SrmF1FN7XKDiDNo8iPvH0ujLDg NgMAoptuYp4cBhb8dimKaQAdd7Szx1kRL+CaNNR/M6W6G5iYlHgNavcvZY6dwz1W Hg2IxQhKhCSFVFBm/2aIXCC/nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJtIUWCz J/lAwFeby+rX4wrTCRtCMB8GA1UdIwQYMBaAFMu7uySyK0NdHKSTqdY9yneb4Hlq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENGNS81MzhDMTk2MDQ5 MkIxMUVGQkUxMDE4NEZDNEY5QUUwMi95N3U3SkxJclExMGNwSk9wMWozS2Q1dmdl V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3dTdKTElyUTEwY3BKT3AxajNLZDV2Z2VXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MENGNS81MzhDMTk2MDQ5MkIxMUVGQkUxMDE4NEZDNEY5QUUwMi95N3U3SkxJclEx MGNwSk9wMWozS2Q1dmdlV28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFIOBGpeKwujCi+BTJ57IqoY6Re89bbGidVyZdAwS5bBqTtVC4jao0 MzflCNNd8LdzR+Gjk2TjuHfalztvJuJyToobWIBcrEmWiT+HJ8XaxnK4rHApxzjw hiEX7mmg3duzPPo4eIPAbp18eNPllneaP+5pdCsuInMi8iDnIsT44Ypqoq3wJS1s Meage61EpWR1myVvHvRZa7e1EFFIXlppHV48L6wCzt2v2yMrs9xNbXgKNmdZC/XB /9uR1Cm0nH0SQOo+GyauCSW0h9p8NWO7ZJRO8yge1YvIiu3PTpnP5/GNSoCBdEny JpzFeGrsxwud04MKMl5E+tVe+kmwJ89B -----END CERTIFICATE-----Generated at Wed Nov 5 05:24:59 2025 by rpki-client