$ rpki-client -vvf rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft File: MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft (raw, json) Hash identifier: MmfG/PJZIlzZLj+asPvGO7HZGQkLRo5/m744cc7OWSI= Subject key identifier: B9:97:CA:87:83:4B:F8:63:BE:E2:1B:10:D9:58:26:4C:8D:80:A1:EE Authority key identifier: 31:85:53:ED:09:C2:00:95:8C:B1:5D:CC:E2:77:CC:48:AA:42:A3:88 Certificate issuer: /CN=A91F378B/serialNumber=318553ED09C200958CB15DCCE277CC48AA42A388 Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYVT7QnCAJWMsV3M4nfMSKpCo4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft Manifest number: 0134 Signing time: Mon 03 Nov 2025 04:30:30 +0000 Manifest this update: Mon 03 Nov 2025 04:30:29 +0000 Manifest next update: Mon 10 Nov 2025 04:30:29 +0000 Files and hashes: 1: MYVT7QnCAJWMsV3M4nfMSKpCo4g.crl (hash: 0RypWBuJrn4y+zfaU48T4/CZ11uxZt3+JUgsQV9pZBM=) 2: 4FCB21E6E05211EE8AEC805CC4F9AE02.roa (hash: wmkDssXbtEkuG+Z3xdoaFG0tMpuTld+MRfVztfCufos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.crl rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYVT7QnCAJWMsV3M4nfMSKpCo4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F378B, serialNumber=318553ED09C200958CB15DCCE277CC48AA42A388 Validity Not Before: Nov 3 04:30:29 2025 GMT Not After : Nov 10 04:30:29 2025 GMT Subject: CN=69082fe6-0947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:99:08:27:5b:a6:cd:62:45:5a:3a:04:74:94: 3e:60:9c:aa:cc:01:5b:94:24:c8:97:1e:bd:85:10: c8:dd:80:cd:23:94:29:03:fa:be:c2:1c:9a:f8:c1: d1:8c:5f:a5:b6:8b:d7:7d:62:60:3c:67:d9:07:b0: e1:cc:b0:37:a0:44:2f:08:b4:dc:3f:d0:16:45:08: 52:77:be:74:fa:dd:62:32:34:8a:54:c8:8a:30:26: f9:86:fd:ec:1a:8b:e6:09:3c:77:a9:12:1a:a6:8c: a2:04:81:03:4d:82:18:90:11:54:0c:6c:03:17:a5: 9d:12:33:86:c3:4f:52:01:8a:fe:a6:46:0c:92:07: 3f:0d:48:e4:3f:48:3e:9a:b7:44:53:33:15:3c:21: 83:37:b8:da:0b:9d:b2:9f:1d:4d:07:2d:eb:a2:50: 4c:06:77:2d:2b:24:7c:69:21:dd:1a:1c:0d:e7:e0: fe:65:43:bb:1f:bc:0a:03:cf:f2:cb:d4:bc:7d:8f: 9b:51:27:c9:21:93:73:47:80:b6:f5:58:2a:75:f6: 9a:e3:7a:9d:4f:78:60:fa:ab:aa:06:a0:2c:25:a2: c7:e1:72:c9:f7:70:20:03:bd:40:84:4b:04:72:91: f8:58:4d:66:d0:d4:92:5e:ca:63:7f:fb:02:0d:de: 3f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:97:CA:87:83:4B:F8:63:BE:E2:1B:10:D9:58:26:4C:8D:80:A1:EE X509v3 Authority Key Identifier: keyid:31:85:53:ED:09:C2:00:95:8C:B1:5D:CC:E2:77:CC:48:AA:42:A3:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYVT7QnCAJWMsV3M4nfMSKpCo4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:0c:7d:e5:87:c8:67:04:ff:28:9b:29:44:ad:8d:ef:bd:40: 6e:c8:04:90:ac:e0:49:d3:34:a0:54:0e:6d:b2:59:31:b5:0a: 4d:bb:5f:98:c8:af:40:90:8c:1c:96:4b:6d:e5:54:f2:04:de: e2:4c:91:b9:ab:24:b8:66:e1:3d:f9:d4:54:ff:6b:21:04:8c: 7d:e9:ae:e3:eb:0b:c9:94:94:d5:da:01:4e:26:de:ce:1a:6d: ea:c9:f5:fc:ab:92:57:f1:3c:bc:48:e4:ab:89:ac:13:0f:f7: 36:a7:cf:ad:ed:22:79:3a:7c:aa:33:34:4e:e9:d6:2b:e2:ba: f0:5b:1e:0b:10:15:b2:8d:c8:10:a9:ca:a3:f7:26:1b:40:1e: a2:ee:76:f5:cd:82:b5:24:ab:94:19:52:d3:4b:df:55:47:f8: 84:49:f4:76:83:a5:42:87:71:b5:88:07:29:a5:b4:09:27:35: 34:b4:17:0f:99:d6:8a:5b:45:b4:3a:5a:43:7a:a3:c6:8b:45: 76:6d:de:b5:bc:ac:72:c8:ab:e8:78:d8:be:11:c6:2a:24:94: 32:a1:c4:8d:51:8d:b9:93:e2:0f:b2:35:38:fa:ab:10:cb:3e: 2c:c9:da:9c:9c:99:20:48:c0:8b:88:e0:51:bc:bc:7e:fb:fd: fd:0d:ed:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM3OEIxMTAvBgNVBAUTKDMxODU1M0VEMDlDMjAwOTU4Q0IxNURDQ0UyNzdDQzQ4 QUE0MkEzODgwHhcNMjUxMTAzMDQzMDI5WhcNMjUxMTEwMDQzMDI5WjAYMRYwFAYD VQQDEw02OTA4MmZlNi0wOTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8ZkIJ1umzWJFWjoEdJQ+YJyqzAFblCTIlx69hRDI3YDNI5QpA/q+whya+MHR jF+ltovXfWJgPGfZB7DhzLA3oEQvCLTcP9AWRQhSd750+t1iMjSKVMiKMCb5hv3s GovmCTx3qRIapoyiBIEDTYIYkBFUDGwDF6WdEjOGw09SAYr+pkYMkgc/DUjkP0g+ mrdEUzMVPCGDN7jaC52ynx1NBy3rolBMBnctKyR8aSHdGhwN5+D+ZUO7H7wKA8/y y9S8fY+bUSfJIZNzR4C29Vgqdfaa43qdT3hg+quqBqAsJaLH4XLJ93AgA71AhEsE cpH4WE1m0NSSXspjf/sCDd4/oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmXyoeD S/hjvuIbENlYJkyNgKHuMB8GA1UdIwQYMBaAFDGFU+0JwgCVjLFdzOJ3zEiqQqOI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzc4Qi9DMTNBQTc3NkUw NTExMUVFQjVCMDkyNUJDNEY5QUUwMi9NWVZUN1FuQ0FKV01zVjNNNG5mTVNLcENv NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01ZVlQ3UW5DQUpXTXNWM000bmZNU0twQ280Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mzc4Qi9DMTNBQTc3NkUwNTExMUVFQjVCMDkyNUJDNEY5QUUwMi9NWVZUN1FuQ0FK V01zVjNNNG5mTVNLcENvNGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABDH3lh8hnBP8omylErY3vvUBuyASQrOBJ0zSgVA5tslkxtQpNu1+Y yK9AkIwclktt5VTyBN7iTJG5qyS4ZuE9+dRU/2shBIx96a7j6wvJlJTV2gFOJt7O Gm3qyfX8q5JX8Ty8SOSriawTD/c2p8+t7SJ5OnyqMzRO6dYr4rrwWx4LEBWyjcgQ qcqj9yYbQB6i7nb1zYK1JKuUGVLTS99VR/iESfR2g6VCh3G1iAcppbQJJzU0tBcP mdaKW0W0OlpDeqPGi0V2bd61vKxyyKvoeNi+EcYqJJQyocSNUY25k+IPsjU4+qsQ yz4sydqcnJkgSMCLiOBRvLx++/39De1G -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:00 2025 by rpki-client