$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft File: hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft (raw, json) Hash identifier: 309FKSGpsyz0vzaJVnU2ObGMXEgwdMwPiO24F3LYOQA= Subject key identifier: 7D:F2:85:A1:CB:6F:DF:36:DD:71:7D:56:FC:F8:5F:AC:83:65:1E:71 Authority key identifier: 87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8 Certificate issuer: /CN=A91A4EF9/serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8 Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft Manifest number: 013B Signing time: Sun 19 Oct 2025 07:18:29 +0000 Manifest this update: Sun 19 Oct 2025 07:18:28 +0000 Manifest next update: Sun 26 Oct 2025 07:18:28 +0000 Files and hashes: 1: hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl (hash: /P9LY9AZUsGEYjJ4vuCWRBCBcDxSNtXQEQwaJ0veJj4=) 2: BF886C00D26A11EEAF76482BC4F9AE02.roa (hash: w6qwhTkmhaSB3ncvO8yCXadiw5lkWAA4VBrSx+fRpEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:18:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4EF9, serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8 Validity Not Before: Oct 19 07:18:28 2025 GMT Not After : Oct 26 07:18:28 2025 GMT Subject: CN=68f490c4-0189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:16:30:89:17:74:9a:35:6d:f0:14:18:91:10: 40:4d:64:42:12:00:b3:a5:14:e7:0b:e8:77:f9:1a: c4:84:2d:0e:4a:1e:44:b8:ce:a4:c3:60:32:d5:62: 5f:1a:28:0d:77:98:cf:ac:9d:40:db:eb:75:ad:a5: c3:72:ce:a4:07:9e:49:7e:49:84:1a:80:76:6c:01: 8b:59:7b:24:a3:4d:0e:28:ac:27:fa:92:e2:55:29: 88:19:70:70:b9:69:4f:10:d8:65:cf:e7:f1:d4:eb: 75:2a:53:c8:7d:7d:d9:06:1e:51:4e:e5:7d:4b:4e: 8e:42:bd:32:dd:e4:fe:ef:cb:c1:f7:97:3c:22:49: 12:7e:bd:72:06:29:12:2b:97:c5:9f:21:48:f2:79: 8d:f9:1b:d9:81:10:81:69:e1:6f:9e:6c:a7:d6:9d: 22:15:a6:71:6c:11:e5:11:54:6c:a5:89:0f:ac:65: 46:81:ca:57:57:d6:42:0a:fd:b7:6c:d0:b7:ed:b4: 10:4f:c1:b1:80:5f:66:3b:03:2a:a7:06:02:c0:ee: 48:8d:46:50:96:41:7a:75:3d:cb:3f:23:4e:87:a1: 92:59:aa:5f:98:a6:68:e2:e6:c7:96:00:0e:1d:15: 17:db:44:ad:cb:6b:18:b9:4d:a9:61:9f:27:1d:db: c6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F2:85:A1:CB:6F:DF:36:DD:71:7D:56:FC:F8:5F:AC:83:65:1E:71 X509v3 Authority Key Identifier: keyid:87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:8a:ea:78:ca:a8:88:b1:42:c8:46:f7:bf:0d:bc:58:43:5c: 16:50:90:9e:59:07:8e:64:88:01:68:b7:db:18:0a:7e:5c:34: 1d:b1:88:f6:95:70:f0:7d:73:0e:ee:e5:52:e6:ac:76:96:90: 90:57:19:5a:5e:f9:f2:36:5e:26:a4:ad:6a:f1:5a:1a:01:e3: f8:e6:1e:aa:0f:e7:b4:f4:f1:88:21:df:61:06:dd:84:fb:2d: 13:63:be:22:2b:03:34:2b:14:5d:cd:df:c5:8d:bc:d9:72:71: 1e:0a:25:5c:1a:f5:a3:75:22:b0:94:fd:8b:50:e7:b3:dd:ea: 20:67:a0:b0:4c:cb:2e:c8:49:29:41:16:d0:17:8f:a0:82:16: 83:6e:af:23:a3:87:07:00:11:d6:3d:f6:6d:60:d3:f8:4b:a9: 53:41:24:9c:a3:b9:6c:c0:3f:24:7d:fb:ee:ea:cd:44:a4:a0: 87:15:8c:6d:b9:56:83:81:f9:f7:a8:2a:ef:ae:bd:2d:b5:23: 26:01:a4:0e:b4:84:a7:16:7c:fc:32:30:1b:b1:83:35:04:6e: 54:c9:b1:4b:76:e0:92:fe:08:8f:50:3b:6b:1d:ed:a0:42:5f: f8:0f:ea:c3:81:15:53:1b:7d:5d:b6:13:c0:c8:78:74:4c:4e: 1d:de:37:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRFRjkxMTAvBgNVBAUTKDg3MkM5MzY4NjU2Qzc3ODM1N0MyQTVBOTlCRUNGRkY2 Nzc1NTBBQzgwHhcNMjUxMDE5MDcxODI4WhcNMjUxMDI2MDcxODI4WjAYMRYwFAYD VQQDEw02OGY0OTBjNC0wMTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4xYwiRd0mjVt8BQYkRBATWRCEgCzpRTnC+h3+RrEhC0OSh5EuM6kw2Ay1WJf GigNd5jPrJ1A2+t1raXDcs6kB55JfkmEGoB2bAGLWXsko00OKKwn+pLiVSmIGXBw uWlPENhlz+fx1Ot1KlPIfX3ZBh5RTuV9S06OQr0y3eT+78vB95c8IkkSfr1yBikS K5fFnyFI8nmN+RvZgRCBaeFvnmyn1p0iFaZxbBHlEVRspYkPrGVGgcpXV9ZCCv23 bNC37bQQT8GxgF9mOwMqpwYCwO5IjUZQlkF6dT3LPyNOh6GSWapfmKZo4ubHlgAO HRUX20Sty2sYuU2pYZ8nHdvGfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH3yhaHL b9823XF9Vvz4X6yDZR5xMB8GA1UdIwQYMBaAFIcsk2hlbHeDV8KlqZvs//Z3VQrI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVGOS83NUEwQ0QxNEQx MzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9oeXlUYUdWc2Q0Tlh3cVdwbS16XzluZFZD c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2h5eVRhR1ZzZDROWHdxV3BtLXpfOW5kVkNzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEVGOS83NUEwQ0QxNEQxMzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9oeXlUYUdWc2Q0 Tlh3cVdwbS16XzluZFZDc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOiup4yqiIsULIRve/DbxYQ1wWUJCeWQeOZIgBaLfbGAp+XDQdsYj2 lXDwfXMO7uVS5qx2lpCQVxlaXvnyNl4mpK1q8VoaAeP45h6qD+e09PGIId9hBt2E +y0TY74iKwM0KxRdzd/FjbzZcnEeCiVcGvWjdSKwlP2LUOez3eogZ6CwTMsuyEkp QRbQF4+gghaDbq8jo4cHABHWPfZtYNP4S6lTQSSco7lswD8kffvu6s1EpKCHFYxt uVaDgfn3qCrvrr0ttSMmAaQOtISnFnz8MjAbsYM1BG5UybFLduCS/giPUDtrHe2g Ql/4D+rDgRVTG31dthPAyHh0TE4d3jco -----END CERTIFICATE-----Generated at Mon Oct 20 21:24:05 2025 by rpki-client