$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft File: 0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft (raw, json) Hash identifier: Uuqd2d6OoeaptadHWHfEl5GIgkwA9Oe7W4zigfidSjM= Subject key identifier: 49:72:88:70:13:AC:F6:F1:6F:09:42:78:A8:7C:E5:94:AF:DB:B3:90 Authority key identifier: D1:8D:44:5D:26:57:EA:FD:D4:A6:6E:75:B0:FB:D6:03:03:F0:25:FC Certificate issuer: /CN=A91FD6A0/serialNumber=D18D445D2657EAFDD4A66E75B0FBD60303F025FC Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y1EXSZX6v3Upm51sPvWAwPwJfw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft Manifest number: 33 Signing time: Mon 03 Nov 2025 07:36:32 +0000 Manifest this update: Mon 03 Nov 2025 07:36:31 +0000 Manifest next update: Mon 10 Nov 2025 07:36:31 +0000 Files and hashes: 1: 0Y1EXSZX6v3Upm51sPvWAwPwJfw.crl (hash: 5gtTZ614N/wzxdqcoq9S8TOpw3xfz1g5fOe3vzMZ9QA=) 2: 053416126DB211F0962DC55BC4F9AE02.roa (hash: x2PuVPfM9opRCGhS75prbzNf+RUMoFINYisW+YfHaDY=) 3: 39926F626DB211F0AC1D0420C4F9AE02.roa (hash: kEFMUW+00UAEsPjX4mZ1eO2YdFDM6+IhBX5a3Q9IDw8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.crl rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y1EXSZX6v3Upm51sPvWAwPwJfw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD6A0, serialNumber=D18D445D2657EAFDD4A66E75B0FBD60303F025FC Validity Not Before: Nov 3 07:36:31 2025 GMT Not After : Nov 10 07:36:31 2025 GMT Subject: CN=69085b7f-c7ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:34:57:eb:a8:c7:ba:20:86:53:41:25:db:50: 80:7e:ee:1c:c6:2c:68:57:5b:28:bd:04:97:c4:00: 4a:ff:27:2e:46:bf:01:82:51:3e:f0:89:05:5f:3a: 8d:f5:1f:d3:45:bd:25:a9:47:57:91:d5:6f:2f:8e: 38:0d:af:2a:4c:f0:a6:65:4d:c8:de:ac:89:4c:57: 8d:60:91:f6:79:51:a8:9a:9c:3f:3d:dc:f9:7a:f8: d4:30:da:59:ad:c1:bd:41:37:d9:82:46:b8:cd:2e: 18:1c:da:1e:6f:86:2b:f2:8d:f9:50:58:e3:c8:59: bf:93:71:94:3b:c0:d1:f7:86:1a:70:a0:86:1a:72: 85:5f:a0:72:c7:e2:83:17:66:9f:c1:10:3a:e4:d3: 65:ef:ec:93:b6:af:e4:c8:88:87:0e:28:3c:45:10: ca:d6:b7:75:76:24:b0:5c:27:92:7d:e2:e8:c3:2d: 5c:b9:0c:fb:d9:fb:3d:0d:82:e2:42:d4:e9:ee:68: c9:22:48:eb:0c:94:c0:ba:c1:5e:0b:73:19:97:40: 99:de:0a:1a:a5:33:6e:38:54:ab:b0:86:cf:aa:a0: 7c:ed:cc:85:21:79:45:5f:a7:2b:21:91:dd:f3:0c: 5d:33:a3:07:39:19:b3:3d:ea:7a:a8:8b:f6:d3:2a: 9c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:72:88:70:13:AC:F6:F1:6F:09:42:78:A8:7C:E5:94:AF:DB:B3:90 X509v3 Authority Key Identifier: keyid:D1:8D:44:5D:26:57:EA:FD:D4:A6:6E:75:B0:FB:D6:03:03:F0:25:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y1EXSZX6v3Upm51sPvWAwPwJfw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:50:de:b6:e0:e0:45:d9:99:33:b5:c4:f9:29:81:4d:d5:2b: 74:55:db:2b:bb:1c:c3:b7:c0:4d:b4:53:9d:99:69:43:d9:0c: d6:29:03:b4:e8:df:1a:a7:d8:a6:c3:ea:37:f9:40:8d:aa:60: db:26:7a:2b:2f:70:32:9e:26:f8:e9:7f:ba:a0:51:33:fa:c4: cd:0d:be:ca:88:87:d0:cd:40:66:a5:b3:d6:95:7b:48:9f:45: 27:62:d1:74:52:5a:e5:9e:14:14:e5:bd:58:a5:d0:b3:ec:5e: 53:cb:63:0c:fd:cc:ff:42:c1:2e:ef:d7:d1:16:c4:98:fc:6a: 57:3f:b2:49:27:51:02:5c:b7:f2:96:60:e8:fe:cb:10:20:3e: a1:40:8c:57:19:ef:eb:26:0f:ca:58:a1:88:3a:9c:e8:be:5f: 81:53:c7:19:5f:09:f9:40:ac:d7:93:81:02:26:05:af:9e:fa: 3f:72:2a:35:3c:e5:cc:bb:d4:72:28:b9:e5:bf:fb:2c:b6:ff: d3:2c:09:da:66:af:0e:07:0d:43:13:2d:bd:9a:ab:16:1a:dc: 48:77:c6:0e:df:39:07:15:77:20:8f:d7:d6:2f:54:da:6c:0c: 3c:47:f6:b2:e7:25:ba:7a:b5:0d:10:5c:9f:90:4c:b1:9c:e1: 72:6f:78:2b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RDZBMDExMC8GA1UEBRMoRDE4RDQ0NUQyNjU3RUFGREQ0QTY2RTc1QjBGQkQ2MDMw M0YwMjVGQzAeFw0yNTExMDMwNzM2MzFaFw0yNTExMTAwNzM2MzFaMBgxFjAUBgNV BAMTDTY5MDg1YjdmLWM3YmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDENFfrqMe6IIZTQSXbUIB+7hzGLGhXWyi9BJfEAEr/Jy5GvwGCUT7wiQVfOo31 H9NFvSWpR1eR1W8vjjgNrypM8KZlTcjerIlMV41gkfZ5UaianD893Pl6+NQw2lmt wb1BN9mCRrjNLhgc2h5vhivyjflQWOPIWb+TcZQ7wNH3hhpwoIYacoVfoHLH4oMX Zp/BEDrk02Xv7JO2r+TIiIcOKDxFEMrWt3V2JLBcJ5J94ujDLVy5DPvZ+z0NguJC 1OnuaMkiSOsMlMC6wV4LcxmXQJneChqlM244VKuwhs+qoHztzIUheUVfpyshkd3z DF0zowc5GbM96nqoi/bTKpzZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSXKIcBOs 9vFvCUJ4qHzllK/bs5AwHwYDVR0jBBgwFoAU0Y1EXSZX6v3Upm51sPvWAwPwJfww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZENkEwLzc4REY2MDdDNkRC MTExRjBBRDRCNUU1QUM0RjlBRTAyLzBZMUVYU1pYNnYzVXBtNTFzUHZXQXdQd0pm dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMFkxRVhTWlg2djNVcG01MXNQdldBd1B3SmZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE NkEwLzc4REY2MDdDNkRCMTExRjBBRDRCNUU1QUM0RjlBRTAyLzBZMUVYU1pYNnYz VXBtNTFzUHZXQXdQd0pmdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADpQ3rbg4EXZmTO1xPkpgU3VK3RV2yu7HMO3wE20U52ZaUPZDNYpA7To 3xqn2KbD6jf5QI2qYNsmeisvcDKeJvjpf7qgUTP6xM0NvsqIh9DNQGals9aVe0if RSdi0XRSWuWeFBTlvVil0LPsXlPLYwz9zP9CwS7v19EWxJj8alc/skknUQJct/KW YOj+yxAgPqFAjFcZ7+smD8pYoYg6nOi+X4FTxxlfCflArNeTgQImBa+e+j9yKjU8 5cy71HIoueW/+yy2/9MsCdpmrw4HDUMTLb2aqxYa3Eh3xg7fOQcVdyCP19YvVNps DDxH9rLnJbp6tQ0QXJ+QTLGc4XJveCs= -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:53 2025 by rpki-client