$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft File: cYQNfZjFz5vWvrRIatRnQGXxR0E.mft (raw, json) Hash identifier: dLoSX1hxVzD1A5rphqFreS0wzcopeXXTJkEfKfgyNzQ= Subject key identifier: BA:96:33:19:C6:E7:59:D1:6E:1D:C6:10:CF:73:70:FD:FB:FE:AA:22 Authority key identifier: 71:84:0D:7D:98:C5:CF:9B:D6:BE:B4:48:6A:D4:67:40:65:F1:47:41 Certificate issuer: /CN=A91B7B61/serialNumber=71840D7D98C5CF9BD6BEB4486AD4674065F14741 Certificate serial: 05F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft Manifest number: 05F3 Signing time: Sun 19 Oct 2025 00:34:35 +0000 Manifest this update: Sun 19 Oct 2025 00:34:34 +0000 Manifest next update: Sun 26 Oct 2025 00:34:34 +0000 Files and hashes: 1: cYQNfZjFz5vWvrRIatRnQGXxR0E.crl (hash: VMuuadbXfrs/d4nO9lFygp74aRbyaK0oKGVRQQMihkY=) 2: C2EFC706CAAE11EBA95C5E64C4F9AE02.roa (hash: dMeJp28zx6FUq76ao4qK+ptEjKQRepLswYRFFIdTn7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.crl rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:34:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1528 (0x5f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7B61, serialNumber=71840D7D98C5CF9BD6BEB4486AD4674065F14741 Validity Not Before: Oct 19 00:34:34 2025 GMT Not After : Oct 26 00:34:34 2025 GMT Subject: CN=68f4321a-667c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:dd:9b:f1:86:17:cd:2a:09:94:1f:60:7a:0e: 76:3c:3d:18:db:50:a4:17:c7:61:b1:8d:6d:29:56: d5:23:26:f7:50:80:25:75:ec:42:1d:9c:ba:59:ed: 52:c1:91:4d:53:e3:bc:79:71:69:eb:0f:88:e7:7a: a3:db:20:1e:33:a5:d2:46:0b:7a:52:47:fb:79:71: 53:8f:90:fd:53:f3:20:34:d2:b0:f3:58:55:9d:62: 4d:fc:f6:10:c4:38:a5:ff:c6:bb:be:f8:82:bb:ef: bc:1c:8d:46:97:f8:3a:6e:11:4f:64:2b:e3:2b:dd: ac:89:7b:62:08:55:fb:88:f1:ee:e6:8f:a2:b2:a3: bd:d3:d5:63:c4:bd:1e:21:2d:87:a6:f8:44:96:68: e3:56:8c:80:18:4f:84:d7:19:26:02:2c:eb:f8:1f: cc:2a:bd:92:97:1f:84:51:59:d4:19:0c:99:ee:c9: 47:de:05:64:37:16:4e:de:0f:66:90:87:0e:39:93: 16:69:15:10:24:3d:70:ae:43:7d:54:83:7c:c3:12: 9c:40:99:cc:af:e8:b0:eb:98:51:f2:6b:fb:5b:4b: 1c:ef:a1:50:1b:7c:65:76:97:06:fc:ab:2e:f1:da: db:b0:88:7c:2b:0a:4a:e9:48:dd:ae:c9:6a:99:72: 46:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:96:33:19:C6:E7:59:D1:6E:1D:C6:10:CF:73:70:FD:FB:FE:AA:22 X509v3 Authority Key Identifier: keyid:71:84:0D:7D:98:C5:CF:9B:D6:BE:B4:48:6A:D4:67:40:65:F1:47:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e3:93:c5:5a:6a:66:2e:ed:0c:c5:8d:05:14:65:ce:a7:62:00: fe:f0:65:b8:bf:86:75:8a:3f:7a:d8:db:2c:d9:bd:e8:de:58: e6:47:cf:b3:5e:4a:fa:ae:85:6e:61:c8:4d:43:ca:b4:40:31: 9d:6c:49:9d:4e:a3:3c:0c:53:c8:f6:c7:9f:3b:dc:e2:81:82: 8c:ea:18:d7:23:c1:9f:e9:80:6b:59:50:1a:66:4c:6e:57:a0: bb:69:c9:7b:14:14:ae:d5:76:47:b8:8b:e6:fd:f8:6a:f0:a2: f9:7b:c0:64:d4:76:ff:e7:37:7d:7a:0d:26:61:28:6a:37:a9: 9a:3c:ed:77:da:7b:58:a7:6e:7d:98:6a:f9:7f:04:8f:71:ee: 38:71:0d:76:52:16:9a:31:86:80:4d:a6:33:7b:e9:fe:62:e1: 75:77:07:63:67:fe:16:50:b9:8c:16:b2:a5:33:9c:c0:5d:77: ec:69:6f:3d:ae:be:14:85:39:9c:b8:35:43:a4:a6:bc:46:22: bc:5d:28:97:2c:82:8d:2a:2a:ab:4f:a7:aa:b8:2c:88:ab:af: ac:06:94:90:89:29:fe:d6:5d:d8:c8:80:94:08:4e:dc:48:bd: 61:08:58:57:79:b6:6f:d9:c8:0d:b0:1e:62:8c:83:50:82:c1: b9:68:1d:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCNjExMTAvBgNVBAUTKDcxODQwRDdEOThDNUNGOUJENkJFQjQ0ODZBRDQ2NzQw NjVGMTQ3NDEwHhcNMjUxMDE5MDAzNDM0WhcNMjUxMDI2MDAzNDM0WjAYMRYwFAYD VQQDEw02OGY0MzIxYS02NjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtt2b8YYXzSoJlB9geg52PD0Y21CkF8dhsY1tKVbVIyb3UIAldexCHZy6We1S wZFNU+O8eXFp6w+I53qj2yAeM6XSRgt6Ukf7eXFTj5D9U/MgNNKw81hVnWJN/PYQ xDil/8a7vviCu++8HI1Gl/g6bhFPZCvjK92siXtiCFX7iPHu5o+isqO909VjxL0e IS2HpvhElmjjVoyAGE+E1xkmAizr+B/MKr2Slx+EUVnUGQyZ7slH3gVkNxZO3g9m kIcOOZMWaRUQJD1wrkN9VIN8wxKcQJnMr+iw65hR8mv7W0sc76FQG3xldpcG/Ksu 8drbsIh8KwpK6UjdrslqmXJGMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqWMxnG 51nRbh3GEM9zcP37/qoiMB8GA1UdIwQYMBaAFHGEDX2Yxc+b1r60SGrUZ0Bl8UdB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0I2MS9CRTY4RDMwMkNB QUExMUVCQjhDMDJCNUNDNEY5QUUwMi9jWVFOZlpqRno1dld2clJJYXRSblFHWHhS MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NZUU5mWmpGejV2V3ZyUklhdFJuUUdYeFIwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0I2MS9CRTY4RDMwMkNBQUExMUVCQjhDMDJCNUNDNEY5QUUwMi9jWVFOZlpqRno1 dld2clJJYXRSblFHWHhSMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDjk8VaamYu7QzFjQUUZc6nYgD+8GW4v4Z1ij962Nss2b3o3ljmR8+z Xkr6roVuYchNQ8q0QDGdbEmdTqM8DFPI9sefO9zigYKM6hjXI8Gf6YBrWVAaZkxu V6C7acl7FBSu1XZHuIvm/fhq8KL5e8Bk1Hb/5zd9eg0mYShqN6maPO132ntYp259 mGr5fwSPce44cQ12UhaaMYaATaYze+n+YuF1dwdjZ/4WULmMFrKlM5zAXXfsaW89 rr4UhTmcuDVDpKa8RiK8XSiXLIKNKiqrT6equCyIq6+sBpSQiSn+1l3YyICUCE7c SL1hCFhXebZv2cgNsB5ijINQgsG5aB3M -----END CERTIFICATE-----Generated at Mon Oct 20 04:46:09 2025 by rpki-client