$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft File: Y19XnOBVlw4BocO3dQIcjj4ieIc.mft (raw, json) Hash identifier: kD2W0Nvvbb6kuf0oaFNrTvQgelCewD6Kr7PfFpjnqOw= Subject key identifier: 4E:27:29:67:47:11:D9:B5:67:2F:81:DF:62:7D:14:00:E8:73:D1:48 Authority key identifier: 63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87 Certificate issuer: /CN=A91F4294/serialNumber=635F579CE055970E01A1C3B775021C8E3E227887 Certificate serial: 0E4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft Manifest number: 0E44 Signing time: Thu 30 Oct 2025 17:45:45 +0000 Manifest this update: Thu 30 Oct 2025 17:45:45 +0000 Manifest next update: Thu 06 Nov 2025 17:45:45 +0000 Files and hashes: 1: Y19XnOBVlw4BocO3dQIcjj4ieIc.crl (hash: 6SKDIVZeIohE+vICBOFcGHDRkOO2koM6Z1d/k1B7a2o=) 2: 1E018994AEBF11E993F33C65C4F9AE02.roa (hash: VAz7Q8OmwNVtqjw21t41eYyn3+glN8lqbyiXL2P+yek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 17:45:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3660 (0xe4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4294, serialNumber=635F579CE055970E01A1C3B775021C8E3E227887 Validity Not Before: Oct 30 17:45:45 2025 GMT Not After : Nov 6 17:45:45 2025 GMT Subject: CN=6903a449-32e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5e:19:19:97:89:5a:f1:36:ef:79:df:4d:0e: 7d:41:2f:b9:a9:0a:28:0f:3b:fd:e3:c9:3f:ee:30: ea:c0:87:35:2e:a7:f0:18:d9:6d:f7:76:82:02:15: 79:da:44:e8:07:76:49:aa:ac:f7:4a:5d:23:0a:91: 16:1b:a0:4f:2a:a5:6f:ce:29:7b:fe:ae:4f:cf:92: 6f:1c:38:ea:7b:50:30:81:53:2c:b0:5b:fd:24:a5: 13:aa:c1:e0:ea:3a:8a:34:34:b3:88:7d:6a:55:87: 3e:3d:17:cb:19:2f:92:91:da:47:4c:56:af:19:7c: 8a:42:1f:e5:fa:25:f0:07:a6:3e:97:62:f2:ba:59: 24:8d:22:50:6d:18:fc:a0:19:d7:73:2c:77:5c:dc: 47:4c:99:df:12:0c:bb:eb:ae:25:e5:b8:38:43:6e: ba:4e:12:4a:07:8c:ac:5f:79:ad:42:d6:b7:18:28: fc:2f:33:a5:6c:b3:6b:16:2b:6b:a4:7c:62:90:dd: 15:dd:a9:fd:e5:bc:fa:49:67:63:1e:57:48:2c:e3: 4b:01:cf:06:7a:6f:5b:6c:3d:56:64:b3:e4:15:3f: 70:1f:08:26:0b:8a:5e:ab:ee:6b:fa:39:8b:59:5a: a4:b2:57:a1:ba:96:af:4d:99:18:9d:b0:e3:3d:93: 29:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:27:29:67:47:11:D9:B5:67:2F:81:DF:62:7D:14:00:E8:73:D1:48 X509v3 Authority Key Identifier: keyid:63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:4c:9a:0d:e3:28:85:5f:73:1c:40:18:47:3b:a8:66:11:f2: be:da:49:82:66:bc:1d:05:bb:4f:28:ab:cd:79:80:2f:1c:d0: 74:f6:86:4b:54:85:2c:69:c5:ec:56:bc:94:20:b7:d8:3f:f0: 47:eb:15:5d:e0:03:4b:5d:12:e5:2f:e5:2a:3c:4f:5d:18:80: c9:06:0d:ff:a9:9b:6f:ba:71:bf:2e:e5:2d:dd:a8:78:d5:7c: ae:48:c5:4f:83:d6:91:fd:c8:16:9e:2c:31:69:81:b2:de:c8: 52:98:8c:4d:de:5f:8d:11:e0:fe:72:96:02:f5:d9:3c:b3:7d: 01:3d:cf:25:da:d1:0f:38:e6:1a:2f:f9:c5:a7:cb:3a:60:06: b5:69:50:5c:04:93:f2:db:29:50:c2:2d:7e:21:e7:ab:74:0d: 05:16:3a:e3:cd:fe:9b:72:c3:0b:26:62:7c:8f:a0:e7:f7:b2: 93:0a:b4:61:3d:f3:58:48:2d:f8:20:f8:ce:8c:9c:ae:2f:e0: 4e:35:b6:c2:2b:c5:c4:2c:bd:4b:d1:9e:51:ad:78:3e:48:5b: 1f:94:fd:73:2d:4c:2e:69:38:b1:25:ad:0e:ae:6c:b6:b6:41: 03:74:33:8d:9d:d6:da:53:3f:0e:1b:c3:a8:e7:9d:5b:88:ff: 19:ce:c2:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOTQxMTAvBgNVBAUTKDYzNUY1NzlDRTA1NTk3MEUwMUExQzNCNzc1MDIxQzhF M0UyMjc4ODcwHhcNMjUxMDMwMTc0NTQ1WhcNMjUxMTA2MTc0NTQ1WjAYMRYwFAYD VQQDEw02OTAzYTQ0OS0zMmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnl4ZGZeJWvE273nfTQ59QS+5qQooDzv948k/7jDqwIc1LqfwGNlt93aCAhV5 2kToB3ZJqqz3Sl0jCpEWG6BPKqVvzil7/q5Pz5JvHDjqe1AwgVMssFv9JKUTqsHg 6jqKNDSziH1qVYc+PRfLGS+SkdpHTFavGXyKQh/l+iXwB6Y+l2LyulkkjSJQbRj8 oBnXcyx3XNxHTJnfEgy7664l5bg4Q266ThJKB4ysX3mtQta3GCj8LzOlbLNrFitr pHxikN0V3an95bz6SWdjHldILONLAc8Gem9bbD1WZLPkFT9wHwgmC4peq+5r+jmL WVqkslehupavTZkYnbDjPZMp6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4nKWdH Edm1Zy+B32J9FADoc9FIMB8GA1UdIwQYMBaAFGNfV5zgVZcOAaHDt3UCHI4+IniH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI5NC8wQ0I1RUFGQUFF QkUxMUU5ODBGQjRFNjNDNEY5QUUwMi9ZMTlYbk9CVmx3NEJvY08zZFFJY2pqNGll SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kxOVhuT0JWbHc0Qm9jTzNkUUljamo0aWVJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI5NC8wQ0I1RUFGQUFFQkUxMUU5ODBGQjRFNjNDNEY5QUUwMi9ZMTlYbk9CVmx3 NEJvY08zZFFJY2pqNGllSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3TJoN4yiFX3McQBhHO6hmEfK+2kmCZrwdBbtPKKvNeYAvHNB09oZL VIUsacXsVryUILfYP/BH6xVd4ANLXRLlL+UqPE9dGIDJBg3/qZtvunG/LuUt3ah4 1XyuSMVPg9aR/cgWniwxaYGy3shSmIxN3l+NEeD+cpYC9dk8s30BPc8l2tEPOOYa L/nFp8s6YAa1aVBcBJPy2ylQwi1+IeerdA0FFjrjzf6bcsMLJmJ8j6Dn97KTCrRh PfNYSC34IPjOjJyuL+BONbbCK8XELL1L0Z5RrXg+SFsflP1zLUwuaTixJa0Ormy2 tkEDdDONndbaUz8OG8Oo551biP8ZzsKC -----END CERTIFICATE-----Generated at Fri Oct 31 05:39:10 2025 by rpki-client