$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft File: Y35CcZzKBnZlOgprNKBujlSsBe8.mft (raw, json) Hash identifier: R8bS57zP8X7rByOdxKuSpItxfZwkJXMV4PGofhvysYI= Subject key identifier: 28:32:EF:30:1F:04:70:EB:26:AB:A8:36:17:86:78:B1:AB:D2:15:45 Authority key identifier: 63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF Certificate issuer: /CN=A91FECFD/serialNumber=637E42719CCA0676653A0A6B34A06E8E54AC05EF Certificate serial: 0930 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft Manifest number: 092A Signing time: Tue 04 Nov 2025 20:19:24 +0000 Manifest this update: Tue 04 Nov 2025 20:19:24 +0000 Manifest next update: Tue 11 Nov 2025 20:19:24 +0000 Files and hashes: 1: Y35CcZzKBnZlOgprNKBujlSsBe8.crl (hash: o37h01RFVJPjwAhAX0CNQJ7LI4YjIuQM8SrNL2R5lfU=) 2: 995F3DCEAF7811EABCA9AC1DC4F9AE02.roa (hash: ZNkH5Sj7XHBs6ufHKPHidPlMntGP72EIG2BMLfQDnC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.crl rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:19:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2352 (0x930) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FECFD, serialNumber=637E42719CCA0676653A0A6B34A06E8E54AC05EF Validity Not Before: Nov 4 20:19:24 2025 GMT Not After : Nov 11 20:19:24 2025 GMT Subject: CN=690a5fcc-ceb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cb:e1:e6:68:54:0b:c9:68:d3:72:8b:72:3c: 72:7d:de:3c:f5:73:74:d7:d6:f3:ab:33:92:1e:7a: 9c:ce:75:5b:6d:fa:04:0f:22:75:67:43:a5:ab:e8: 6e:5e:c0:c4:57:2f:aa:e5:d8:ce:54:c8:9d:ec:82: 77:3c:ed:45:9d:ff:8c:1d:72:ab:c9:15:6c:2d:a9: f6:3a:57:2c:d7:54:b0:41:05:98:09:ea:a5:32:68: ba:82:63:2b:87:e4:82:23:e9:66:ea:28:51:80:89: 1b:a7:cc:6c:d1:9d:91:d8:0c:d2:f9:20:6a:15:33: bb:80:58:70:2a:c1:98:97:68:a8:7e:f3:08:15:27: ea:32:e7:5b:e6:2e:4b:41:70:d3:22:b8:9a:5f:aa: ee:89:27:73:7e:72:62:60:3f:46:c1:32:2b:47:60: 82:6b:83:16:eb:26:26:2f:4b:74:b4:37:e0:ad:84: ff:2d:6e:3b:6a:02:90:1c:47:47:64:e4:d1:57:c0: 11:6d:12:24:02:ab:a8:2a:5b:b9:e3:0d:c4:59:2e: a8:a6:aa:f5:73:21:45:b5:39:12:e3:5c:9c:a3:65: 51:f7:98:0d:b4:85:af:5e:1d:e8:ac:76:aa:94:5f: 89:07:19:7a:96:84:a8:36:63:d3:34:b5:47:12:19: f0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:32:EF:30:1F:04:70:EB:26:AB:A8:36:17:86:78:B1:AB:D2:15:45 X509v3 Authority Key Identifier: keyid:63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:60:62:55:02:4c:0d:6d:67:9b:1a:c2:53:7a:91:55:35:ef: c4:24:38:d2:33:09:34:f9:23:e6:72:6f:25:c7:0a:2e:5b:07: 42:66:87:7a:97:f5:97:6c:d3:19:72:ff:40:33:b9:0a:c1:6b: 83:b6:6a:e6:59:4b:4f:ba:4f:9b:fc:99:ce:f8:10:52:82:06: 98:40:20:b2:d7:56:36:87:2c:04:ea:3b:c4:e0:70:b4:49:29: ee:e1:e3:b2:0a:8e:e0:15:eb:18:10:16:f6:3a:45:d4:30:f2: b6:37:50:19:09:e2:ee:ab:3b:fd:05:34:3c:28:13:a8:47:df: 34:60:e7:fa:32:ff:a0:63:7c:f2:2d:55:52:4d:c2:61:d0:19: d1:fb:55:15:8d:3e:b8:0d:18:43:2f:ad:b0:87:51:aa:52:cd: aa:c7:34:24:d1:17:f2:a9:6c:48:df:cd:c6:ca:93:62:31:6a: f0:d0:82:9c:2a:dc:fc:f0:86:e7:cd:c3:a0:f1:b3:85:1f:bb: c2:14:1e:80:7d:46:b3:36:5a:3b:f6:25:8a:52:f0:e3:9a:ff: c0:9c:83:0f:16:b5:d5:dd:82:37:bd:43:dd:aa:d9:6c:45:de: 24:58:e1:e4:25:86:58:48:d5:61:7a:ca:2a:d1:4e:e6:95:2c: a5:c7:a6:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVDRkQxMTAvBgNVBAUTKDYzN0U0MjcxOUNDQTA2NzY2NTNBMEE2QjM0QTA2RThF NTRBQzA1RUYwHhcNMjUxMTA0MjAxOTI0WhcNMjUxMTExMjAxOTI0WjAYMRYwFAYD VQQDEw02OTBhNWZjYy1jZWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8vh5mhUC8lo03KLcjxyfd489XN019bzqzOSHnqcznVbbfoEDyJ1Z0Olq+hu XsDEVy+q5djOVMid7IJ3PO1Fnf+MHXKryRVsLan2Olcs11SwQQWYCeqlMmi6gmMr h+SCI+lm6ihRgIkbp8xs0Z2R2AzS+SBqFTO7gFhwKsGYl2iofvMIFSfqMudb5i5L QXDTIriaX6ruiSdzfnJiYD9GwTIrR2CCa4MW6yYmL0t0tDfgrYT/LW47agKQHEdH ZOTRV8ARbRIkAquoKlu54w3EWS6opqr1cyFFtTkS41yco2VR95gNtIWvXh3orHaq lF+JBxl6loSoNmPTNLVHEhnwoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgy7zAf BHDrJquoNheGeLGr0hVFMB8GA1UdIwQYMBaAFGN+QnGcygZ2ZToKazSgbo5UrAXv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUNGRC8zN0EwNDI2NEFG NzcxMUVBODExODMxMUJDNEY5QUUwMi9ZMzVDY1p6S0JuWmxPZ3ByTktCdWpsU3NC ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kzNUNjWnpLQm5abE9ncHJOS0J1amxTc0JlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUNGRC8zN0EwNDI2NEFGNzcxMUVBODExODMxMUJDNEY5QUUwMi9ZMzVDY1p6S0Ju WmxPZ3ByTktCdWpsU3NCZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmYGJVAkwNbWebGsJTepFVNe/EJDjSMwk0+SPmcm8lxwouWwdCZod6 l/WXbNMZcv9AM7kKwWuDtmrmWUtPuk+b/JnO+BBSggaYQCCy11Y2hywE6jvE4HC0 SSnu4eOyCo7gFesYEBb2OkXUMPK2N1AZCeLuqzv9BTQ8KBOoR980YOf6Mv+gY3zy LVVSTcJh0BnR+1UVjT64DRhDL62wh1GqUs2qxzQk0RfyqWxI383GypNiMWrw0IKc Ktz88IbnzcOg8bOFH7vCFB6AfUazNlo79iWKUvDjmv/AnIMPFrXV3YI3vUPdqtls Rd4kWOHkJYZYSNVhesoq0U7mlSylx6bA -----END CERTIFICATE-----Generated at Wed Nov 5 11:50:15 2025 by rpki-client