$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft File: y78mA3JNeFZrHBLDLVxIH10w8fI.mft (raw, json) Hash identifier: vYlGDWgfU1EuwCGCtN9D1EfLG3hPhoDQT4+wTxQea/k= Subject key identifier: 35:C8:66:20:B0:1A:5A:A2:96:5B:54:24:47:F1:26:99:C7:C7:B6:6C Authority key identifier: CB:BF:26:03:72:4D:78:56:6B:1C:12:C3:2D:5C:48:1F:5D:30:F1:F2 Certificate issuer: /CN=A91B7700/serialNumber=CBBF2603724D78566B1C12C32D5C481F5D30F1F2 Certificate serial: 03B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft Manifest number: 03B2 Signing time: Sun 19 Oct 2025 02:41:01 +0000 Manifest this update: Sun 19 Oct 2025 02:41:01 +0000 Manifest next update: Sun 26 Oct 2025 02:41:01 +0000 Files and hashes: 1: y78mA3JNeFZrHBLDLVxIH10w8fI.crl (hash: 4pXl0zxwQJZF3MVwpt4+puT+rvCNAxE/M4cWDMnyI6w=) 2: 93D60566AE5B11ECB19C1569C4F9AE02.roa (hash: mfWKFm3R9Zz1cfvfe7gZWjinbVCRooVyIR4rmFi/Bec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.crl rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 950 (0x3b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7700, serialNumber=CBBF2603724D78566B1C12C32D5C481F5D30F1F2 Validity Not Before: Oct 19 02:41:01 2025 GMT Not After : Oct 26 02:41:01 2025 GMT Subject: CN=68f44fbd-e90c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9e:4b:6f:c3:af:8a:2e:e3:76:a8:a2:0a:b1: 4e:b4:ea:85:7c:1e:60:7a:cb:23:a5:d5:09:f8:b9: 2c:01:d3:07:f9:1d:f1:c9:a0:04:4e:6f:e6:16:2c: d0:90:fe:44:a1:4d:32:96:17:96:fc:36:01:b8:35: bf:88:ac:07:bb:50:d2:1e:c3:5e:07:c8:ae:f8:1a: 62:33:46:92:fd:21:ae:96:a0:a1:3d:f4:e6:46:79: e4:4b:e9:fc:85:96:a9:7c:33:56:18:dd:2a:d9:39: ce:a8:6e:65:ac:01:a6:6b:e9:cb:b8:e0:01:13:0f: d4:ec:f4:6a:b7:03:25:c6:1a:a4:a2:40:66:d6:75: 8c:4e:0b:97:76:d5:60:05:ad:e4:a7:4a:9d:79:4d: e7:fe:64:d9:9c:3e:8c:77:cb:5e:28:cf:8f:5b:6a: fb:b1:d3:b2:be:d2:e4:a8:04:e4:03:10:5a:7e:a0: da:7b:bb:7a:9e:12:39:dc:ed:e0:56:33:bf:16:22: 55:59:b8:57:fa:46:d4:cc:af:35:f2:26:51:89:e2: 10:b6:bf:00:4a:6a:97:ac:12:cc:82:5f:12:d7:22: 0b:5e:53:fd:39:c4:43:32:35:72:21:f0:36:42:ff: 39:35:31:4d:e8:be:ba:43:8a:33:86:e6:d6:70:80: ee:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C8:66:20:B0:1A:5A:A2:96:5B:54:24:47:F1:26:99:C7:C7:B6:6C X509v3 Authority Key Identifier: keyid:CB:BF:26:03:72:4D:78:56:6B:1C:12:C3:2D:5C:48:1F:5D:30:F1:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:ea:96:c0:00:9e:3b:72:b7:3a:a7:b5:a9:0e:0d:af:95:22: a8:13:09:a8:3e:57:2f:d8:5d:00:8a:2d:78:bb:e2:2f:28:03: 36:e4:63:1a:38:c7:c8:7d:1f:80:e6:e2:20:c0:b1:ea:e8:28: 55:b6:b0:85:6d:5d:b8:9b:6e:d0:f5:e1:92:b5:98:11:55:76: 90:20:40:13:57:49:97:9c:59:7d:36:53:3f:6d:9a:d0:8d:eb: 85:e0:5c:35:f2:af:9a:cc:8d:56:02:f1:ad:fc:13:09:ce:2b: de:7b:f2:e0:12:8d:46:05:fc:e8:6c:0c:48:b0:33:9f:d7:62: 89:e3:ec:7b:c0:d7:4f:9f:28:d5:1f:14:14:8c:60:94:56:46: fd:28:a0:66:48:a6:13:b1:eb:3d:f1:8b:ec:ce:b0:9e:44:28: 72:71:84:77:58:a3:3c:96:90:6f:93:95:2c:7b:03:85:b6:4d: 5f:97:c5:ff:14:a4:3c:03:90:4d:e0:dc:b2:bc:1d:32:7c:e6: ea:07:de:9d:d2:b2:7a:47:b7:20:38:5c:8a:e2:1b:e5:0f:70: 8f:fb:2f:82:4c:78:ee:42:5f:d7:a1:94:b4:3e:a1:d5:db:1b: 7e:92:4f:3c:79:f5:6f:aa:01:85:21:13:63:41:35:2c:fe:54: 8d:6d:1e:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3MDAxMTAvBgNVBAUTKENCQkYyNjAzNzI0RDc4NTY2QjFDMTJDMzJENUM0ODFG NUQzMEYxRjIwHhcNMjUxMDE5MDI0MTAxWhcNMjUxMDI2MDI0MTAxWjAYMRYwFAYD VQQDEw02OGY0NGZiZC1lOTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZ5Lb8Ovii7jdqiiCrFOtOqFfB5gessjpdUJ+LksAdMH+R3xyaAETm/mFizQ kP5EoU0ylheW/DYBuDW/iKwHu1DSHsNeB8iu+BpiM0aS/SGulqChPfTmRnnkS+n8 hZapfDNWGN0q2TnOqG5lrAGma+nLuOABEw/U7PRqtwMlxhqkokBm1nWMTguXdtVg Ba3kp0qdeU3n/mTZnD6Md8teKM+PW2r7sdOyvtLkqATkAxBafqDae7t6nhI53O3g VjO/FiJVWbhX+kbUzK818iZRieIQtr8ASmqXrBLMgl8S1yILXlP9OcRDMjVyIfA2 Qv85NTFN6L66Q4ozhubWcIDuRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDXIZiCw GlqilltUJEfxJpnHx7ZsMB8GA1UdIwQYMBaAFMu/JgNyTXhWaxwSwy1cSB9dMPHy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzcwMC9DQ0RCRjRGMEFF NTcxMUVDQjRBMURBNjRDNEY5QUUwMi95NzhtQTNKTmVGWnJIQkxETFZ4SUgxMHc4 ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3OG1BM0pOZUZackhCTERMVnhJSDEwdzhmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzcwMC9DQ0RCRjRGMEFFNTcxMUVDQjRBMURBNjRDNEY5QUUwMi95NzhtQTNKTmVG WnJIQkxETFZ4SUgxMHc4ZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB16pbAAJ47crc6p7WpDg2vlSKoEwmoPlcv2F0Aii14u+IvKAM25GMa OMfIfR+A5uIgwLHq6ChVtrCFbV24m27Q9eGStZgRVXaQIEATV0mXnFl9NlM/bZrQ jeuF4Fw18q+azI1WAvGt/BMJzivee/LgEo1GBfzobAxIsDOf12KJ4+x7wNdPnyjV HxQUjGCUVkb9KKBmSKYTses98YvszrCeRChycYR3WKM8lpBvk5UsewOFtk1fl8X/ FKQ8A5BN4NyyvB0yfObqB96d0rJ6R7cgOFyK4hvlD3CP+y+CTHjuQl/XoZS0PqHV 2xt+kk88efVvqgGFIRNjQTUs/lSNbR5E -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:18 2025 by rpki-client