$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft File: y2yF51LVad_PHekEycvnHkg-9fI.mft (raw, json) Hash identifier: Vf/KDWAFa1jForXMkwhQxw7cHRyB8GypErHCrYE9Y7I= Subject key identifier: 95:C0:06:48:78:F8:4F:5A:3F:86:59:66:9A:70:5D:AB:CF:96:67:E4 Authority key identifier: CB:6C:85:E7:52:D5:69:DF:CF:1D:E9:04:C9:CB:E7:1E:48:3E:F5:F2 Certificate issuer: /CN=A91BC039/serialNumber=CB6C85E752D569DFCF1DE904C9CBE71E483EF5F2 Certificate serial: 051B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft Manifest number: 0515 Signing time: Sun 19 Oct 2025 01:21:30 +0000 Manifest this update: Sun 19 Oct 2025 01:21:29 +0000 Manifest next update: Sun 26 Oct 2025 01:21:29 +0000 Files and hashes: 1: y2yF51LVad_PHekEycvnHkg-9fI.crl (hash: G+2hDoNo6GWwPA3Z5edOXiSVUZzahAT7cWNSBDjcHjg=) 2: B0A2E01225C411EC88466E59C4F9AE02.roa (hash: 8z4FQ3P4ffexi4IqxjF16x9Xr0QlwFMb8TffrA8dnxw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.crl rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1307 (0x51b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC039, serialNumber=CB6C85E752D569DFCF1DE904C9CBE71E483EF5F2 Validity Not Before: Oct 19 01:21:29 2025 GMT Not After : Oct 26 01:21:29 2025 GMT Subject: CN=68f43d1a-6408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a3:ca:c4:bf:e6:30:51:da:15:2c:3a:11:41: 17:49:77:26:55:86:64:3a:c1:e0:93:05:71:f4:42: ae:d3:76:11:9d:73:a4:ed:be:be:f3:42:71:bb:2a: 7b:36:40:9b:2f:a1:35:49:a6:51:e1:77:41:46:08: 29:83:2b:56:48:9c:3a:b2:30:dd:89:d5:e9:4d:91: 31:18:41:e0:46:02:4c:1d:67:57:57:e5:30:30:dd: c1:34:e7:ae:14:38:67:23:0a:e7:c0:dc:76:9c:a0: 4e:fc:6d:b1:e7:e8:0d:22:87:4a:8b:5f:19:8e:c4: a7:39:96:e6:ec:87:e5:a1:b2:7d:d3:78:0c:a2:fa: 40:89:c8:69:64:65:bf:82:81:63:cc:2a:25:4f:c3: 09:b4:f1:6e:8b:71:4b:30:b4:a3:72:b9:0e:61:f6: f9:7e:50:4e:95:be:18:e2:a6:69:ba:5d:2e:d5:9c: 7e:55:4f:f7:97:d4:19:47:ad:da:0d:4f:95:11:27: 07:fe:9a:22:0e:fa:de:f4:f6:eb:89:46:85:4c:71: 52:4d:b4:6d:28:9e:9e:60:68:c1:02:5d:fb:36:9d: 62:5b:ac:ab:04:2a:71:33:d3:b0:83:9a:d1:da:cd: b4:b1:3d:14:c4:a4:86:b4:44:26:79:3b:0d:33:c9: 00:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C0:06:48:78:F8:4F:5A:3F:86:59:66:9A:70:5D:AB:CF:96:67:E4 X509v3 Authority Key Identifier: keyid:CB:6C:85:E7:52:D5:69:DF:CF:1D:E9:04:C9:CB:E7:1E:48:3E:F5:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:98:96:5d:df:2d:c6:3c:29:29:94:0e:5a:bb:a3:7b:78:05: 9c:ee:39:be:a1:6e:f7:00:6a:fe:64:de:28:72:5d:bd:a8:e5: fa:e9:af:0e:42:3f:ed:d4:b7:0a:c9:44:50:8e:84:19:79:02: ae:01:6a:61:15:f8:3a:bf:3b:90:3e:d0:a2:fc:a9:d4:2a:13: 31:8f:0f:0f:24:84:7b:0b:03:76:70:47:e2:46:ec:f4:8f:82: f0:9c:30:f8:7b:67:4e:cb:20:da:6e:2a:bc:29:e3:60:d4:06: 39:d6:84:c6:87:7b:d2:77:6b:ab:5f:43:e1:a0:47:c1:59:7b: db:15:e7:87:e0:a1:9b:51:fc:d7:e4:26:3a:3c:87:65:15:dc: 09:f7:26:9d:e6:42:f6:c3:32:36:e4:53:b8:a0:11:1b:6b:59: fd:7d:7e:7b:74:d5:2d:fa:3e:0f:89:c8:e2:23:5c:ef:df:f3: b9:60:33:13:00:11:ee:40:ef:e8:41:32:90:c4:8a:9c:64:d5: 68:c1:9c:34:33:04:bc:4f:50:42:6a:09:84:08:af:0e:29:50: be:dd:0f:17:4a:27:1c:38:b9:8c:1b:52:7f:4f:f7:0e:5c:f7: 4e:0a:32:bd:7d:55:76:14:01:43:68:73:08:10:72:bb:d5:58: 66:ff:f5:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMwMzkxMTAvBgNVBAUTKENCNkM4NUU3NTJENTY5REZDRjFERTkwNEM5Q0JFNzFF NDgzRUY1RjIwHhcNMjUxMDE5MDEyMTI5WhcNMjUxMDI2MDEyMTI5WjAYMRYwFAYD VQQDEw02OGY0M2QxYS02NDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3qPKxL/mMFHaFSw6EUEXSXcmVYZkOsHgkwVx9EKu03YRnXOk7b6+80Jxuyp7 NkCbL6E1SaZR4XdBRggpgytWSJw6sjDdidXpTZExGEHgRgJMHWdXV+UwMN3BNOeu FDhnIwrnwNx2nKBO/G2x5+gNIodKi18ZjsSnOZbm7IflobJ903gMovpAichpZGW/ goFjzColT8MJtPFui3FLMLSjcrkOYfb5flBOlb4Y4qZpul0u1Zx+VU/3l9QZR63a DU+VEScH/poiDvre9PbriUaFTHFSTbRtKJ6eYGjBAl37Np1iW6yrBCpxM9Owg5rR 2s20sT0UxKSGtEQmeTsNM8kAjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJXABkh4 +E9aP4ZZZppwXavPlmfkMB8GA1UdIwQYMBaAFMtshedS1Wnfzx3pBMnL5x5IPvXy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzAzOS9CQjUzMjNFODI1 QzIxMUVDQjQ5OUQxNThDNEY5QUUwMi95MnlGNTFMVmFkX1BIZWtFeWN2bkhrZy05 ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kyeUY1MUxWYWRfUEhla0V5Y3ZuSGtnLTlmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzAzOS9CQjUzMjNFODI1QzIxMUVDQjQ5OUQxNThDNEY5QUUwMi95MnlGNTFMVmFk X1BIZWtFeWN2bkhrZy05ZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMmJZd3y3GPCkplA5au6N7eAWc7jm+oW73AGr+ZN4ocl29qOX66a8O Qj/t1LcKyURQjoQZeQKuAWphFfg6vzuQPtCi/KnUKhMxjw8PJIR7CwN2cEfiRuz0 j4LwnDD4e2dOyyDabiq8KeNg1AY51oTGh3vSd2urX0PhoEfBWXvbFeeH4KGbUfzX 5CY6PIdlFdwJ9yad5kL2wzI25FO4oBEba1n9fX57dNUt+j4PicjiI1zv3/O5YDMT ABHuQO/oQTKQxIqcZNVowZw0MwS8T1BCagmECK8OKVC+3Q8XSiccOLmMG1J/T/cO XPdOCjK9fVV2FAFDaHMIEHK71Vhm//Xh -----END CERTIFICATE-----Generated at Mon Oct 20 13:41:39 2025 by rpki-client