$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft File: _yC8N52JoNs75vzykPo91S63-iA.mft (raw, json) Hash identifier: s/eXSrYnDrJoMx6pVtsWSaQQN3vVMsWjdUjbxYHiMBc= Subject key identifier: 97:4A:23:E1:FA:80:6D:B1:EB:9A:4E:A1:6C:C0:BF:EA:B7:69:5F:C5 Authority key identifier: FF:20:BC:37:9D:89:A0:DB:3B:E6:FC:F2:90:FA:3D:D5:2E:B7:FA:20 Certificate issuer: /CN=A91FC4FB/serialNumber=FF20BC379D89A0DB3BE6FCF290FA3DD52EB7FA20 Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft Manifest number: 8D Signing time: Mon 27 Oct 2025 08:53:48 +0000 Manifest this update: Mon 27 Oct 2025 08:53:48 +0000 Manifest next update: Mon 03 Nov 2025 08:53:48 +0000 Files and hashes: 1: _yC8N52JoNs75vzykPo91S63-iA.crl (hash: R/5YvZOlRq5fe4jt8eAv+y49bTVZtWQ+oQ956/6OfmQ=) 2: F20BD4DEDD5C11EFAA80BB1AC4F9AE02.roa (hash: v5aAOYFTKYQs9mswlL+k53rGpICa845yISkOLh9tIAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.crl rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 08:53:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC4FB, serialNumber=FF20BC379D89A0DB3BE6FCF290FA3DD52EB7FA20 Validity Not Before: Oct 27 08:53:48 2025 GMT Not After : Nov 3 08:53:48 2025 GMT Subject: CN=68ff331c-9c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e7:58:1f:cb:4e:73:87:7e:fa:1f:2f:ce:6c: 9e:b5:5f:ac:50:6a:30:b0:ab:0c:2d:04:c5:5b:2a: bc:93:89:1d:70:58:f2:86:d9:3e:df:4a:ec:c2:bc: 0d:90:8f:5f:29:e5:b0:39:a5:fb:20:34:b2:06:72: ac:43:81:22:1a:5c:89:5c:1c:a9:94:64:a9:79:bc: 0c:20:a4:86:af:80:73:e7:90:3b:5c:06:35:2d:f0: b8:b8:83:f1:d0:c8:0e:79:2a:86:ec:2a:43:00:3c: ea:36:b7:5c:0d:18:e1:c9:a9:4b:56:2c:76:b2:23: 09:d6:d5:3b:8e:09:17:fd:64:e8:d5:20:60:d5:29: 80:13:30:61:2c:55:4a:47:04:e6:96:d8:25:bd:a6: 44:58:96:cc:25:a1:e6:83:1a:ea:49:87:9d:97:6d: d0:bf:84:ed:ca:25:58:d7:98:8a:cf:25:f2:ce:9d: 0d:5d:c0:f5:19:8c:92:17:7d:b2:bf:ed:de:07:99: 88:1e:1b:bc:7a:22:a2:f3:09:3b:23:ed:17:51:71: 2b:a4:d2:9b:35:6e:fe:02:02:37:8c:44:27:55:d5: 32:12:61:e3:0a:fe:cd:96:8a:39:00:31:21:cd:bb: 3c:2f:15:0d:07:2e:aa:f2:4b:e1:db:13:8a:d1:a2: 4d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:4A:23:E1:FA:80:6D:B1:EB:9A:4E:A1:6C:C0:BF:EA:B7:69:5F:C5 X509v3 Authority Key Identifier: keyid:FF:20:BC:37:9D:89:A0:DB:3B:E6:FC:F2:90:FA:3D:D5:2E:B7:FA:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:47:e1:3f:c4:57:32:83:2e:56:8b:c3:23:49:37:7c:c3:76: f4:3c:14:61:3a:d2:40:99:bb:16:40:0c:49:57:b5:9b:8b:4c: ad:e5:85:c8:20:0e:9a:bf:70:48:82:91:0b:9c:30:9e:82:f7: dd:9e:63:05:51:fc:7f:a5:62:2d:1c:1e:51:92:45:a3:6a:91: da:9f:1f:55:de:0b:74:fc:81:37:b7:72:ec:45:fe:03:d4:5b: cc:20:69:fb:2c:93:ae:17:3b:a9:f9:8f:6f:73:ba:b5:63:63: 6a:57:31:92:9b:4c:75:78:62:6c:94:c8:39:cf:e6:0b:07:d9: f4:47:f3:4a:ed:93:52:0d:18:b0:b6:bb:ca:71:5c:48:d0:fd: d4:94:39:ca:e5:f2:22:51:eb:cb:f7:23:69:9e:ce:9b:15:91: e9:5d:6e:49:b0:d6:8f:ad:d3:5d:28:74:25:09:76:ea:2d:4e: e0:12:e7:b2:52:b4:93:15:18:bf:07:e4:62:66:4d:cb:88:a0: 08:c6:2c:4a:e4:2f:2b:f9:29:3f:ae:73:18:98:2c:ae:52:ec: 77:9f:a6:46:66:4f:e8:62:fe:7a:77:d4:44:6d:dd:9c:56:63: 89:86:8f:7a:8d:f2:db:24:ff:5d:d7:05:00:c5:83:27:74:4f: 62:d1:c1:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM0RkIxMTAvBgNVBAUTKEZGMjBCQzM3OUQ4OUEwREIzQkU2RkNGMjkwRkEzREQ1 MkVCN0ZBMjAwHhcNMjUxMDI3MDg1MzQ4WhcNMjUxMTAzMDg1MzQ4WjAYMRYwFAYD VQQDEw02OGZmMzMxYy05YzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1udYH8tOc4d++h8vzmyetV+sUGowsKsMLQTFWyq8k4kdcFjyhtk+30rswrwN kI9fKeWwOaX7IDSyBnKsQ4EiGlyJXByplGSpebwMIKSGr4Bz55A7XAY1LfC4uIPx 0MgOeSqG7CpDADzqNrdcDRjhyalLVix2siMJ1tU7jgkX/WTo1SBg1SmAEzBhLFVK RwTmltglvaZEWJbMJaHmgxrqSYedl23Qv4TtyiVY15iKzyXyzp0NXcD1GYySF32y v+3eB5mIHhu8eiKi8wk7I+0XUXErpNKbNW7+AgI3jEQnVdUyEmHjCv7Nloo5ADEh zbs8LxUNBy6q8kvh2xOK0aJN2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJdKI+H6 gG2x65pOoWzAv+q3aV/FMB8GA1UdIwQYMBaAFP8gvDediaDbO+b88pD6PdUut/og MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzRGQi8wOThGRTJFOERD REMxMUVGOEUyOTE4NDRDNEY5QUUwMi9feUM4TjUySm9Oczc1dnp5a1BvOTFTNjMt aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL195QzhONTJKb05zNzV2enlrUG85MVM2My1pQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzRGQi8wOThGRTJFOERDREMxMUVGOEUyOTE4NDRDNEY5QUUwMi9feUM4TjUySm9O czc1dnp5a1BvOTFTNjMtaUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8R+E/xFcygy5Wi8MjSTd8w3b0PBRhOtJAmbsWQAxJV7Wbi0yt5YXI IA6av3BIgpELnDCegvfdnmMFUfx/pWItHB5RkkWjapHanx9V3gt0/IE3t3LsRf4D 1FvMIGn7LJOuFzup+Y9vc7q1Y2NqVzGSm0x1eGJslMg5z+YLB9n0R/NK7ZNSDRiw trvKcVxI0P3UlDnK5fIiUevL9yNpns6bFZHpXW5JsNaPrdNdKHQlCXbqLU7gEuey UrSTFRi/B+RiZk3LiKAIxixK5C8r+Sk/rnMYmCyuUux3n6ZGZk/oYv56d9REbd2c VmOJho96jfLbJP9d1wUAxYMndE9i0cGI -----END CERTIFICATE-----Generated at Tue Oct 28 02:41:09 2025 by rpki-client