$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft File: -Y6-IGkPLysjShVIfdCVIfPUdTw.mft (raw, json) Hash identifier: urGx4u1Znun+W20fqlHY/YcMDaBfxC4E3xl+/nu74RA= Subject key identifier: 4F:5B:DC:F0:BD:20:D9:B7:32:1A:A4:F2:93:DE:51:E6:D6:AE:65:7B Authority key identifier: F9:8E:BE:20:69:0F:2F:2B:23:4A:15:48:7D:D0:95:21:F3:D4:75:3C Certificate issuer: /CN=A91BCC44/serialNumber=F98EBE20690F2F2B234A15487DD09521F3D4753C Certificate serial: 0B36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft Manifest number: 0B2F Signing time: Sat 18 Oct 2025 20:10:13 +0000 Manifest this update: Sat 18 Oct 2025 20:10:13 +0000 Manifest next update: Sat 25 Oct 2025 20:10:13 +0000 Files and hashes: 1: -Y6-IGkPLysjShVIfdCVIfPUdTw.crl (hash: aWI+q8ZcAy1iKvijI521aB9j+tD7LS5d99RoAwMxnKA=) 2: B69F45F6480C11EAA7171874C4F9AE02.roa (hash: gMyJ+7eXQOz2lZ7oRn13QHvOh0RqD5UbZBYLXAXV9no=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.crl rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:10:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2870 (0xb36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCC44, serialNumber=F98EBE20690F2F2B234A15487DD09521F3D4753C Validity Not Before: Oct 18 20:10:13 2025 GMT Not After : Oct 25 20:10:13 2025 GMT Subject: CN=68f3f425-8fa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:74:7c:e2:da:4c:8f:2d:02:74:b5:c9:0b:1a: 47:c4:df:05:3d:4a:b0:d9:41:18:fb:bc:2d:ee:98: d4:02:89:2e:12:d1:ce:df:39:0e:bf:32:1c:a0:11: 4a:40:82:0c:e6:8c:4b:83:d3:da:ff:ee:f8:ac:77: 32:28:83:3c:3f:65:9b:1e:9b:35:18:be:87:72:68: af:3d:99:db:a3:1c:90:f0:fc:e0:8e:33:87:9d:d2: 01:40:8c:dc:6a:5b:95:6c:73:74:89:0e:a7:a5:cd: 30:9e:e2:a7:2a:a7:d3:46:cd:44:68:56:e1:d9:1f: 9c:df:97:49:c3:18:42:5d:e9:eb:67:db:04:54:f2: 4d:56:41:fd:3a:b5:6b:c0:f4:0f:d0:36:f0:a4:1b: 65:d4:24:27:27:ff:8e:c8:ea:95:41:93:c9:76:1b: 5e:ca:21:0a:28:3a:de:08:59:9c:b3:b0:7e:99:7d: 07:9e:c0:10:8b:93:ed:43:23:bb:42:94:aa:28:63: fd:15:60:86:1c:44:ed:0b:bb:46:fe:c7:a4:45:bc: 9a:30:89:11:ea:d8:fa:24:1c:a1:3c:b3:87:c3:cf: 17:47:53:62:02:10:b0:ee:17:2f:6b:ba:63:d6:ea: 10:b2:73:e7:ba:00:26:14:cc:da:12:a5:99:8f:f8: fd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:5B:DC:F0:BD:20:D9:B7:32:1A:A4:F2:93:DE:51:E6:D6:AE:65:7B X509v3 Authority Key Identifier: keyid:F9:8E:BE:20:69:0F:2F:2B:23:4A:15:48:7D:D0:95:21:F3:D4:75:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:4e:2c:72:7c:80:a6:a3:81:43:d2:f1:d1:8f:53:e2:1a:b6: de:0a:49:d6:b1:5e:da:0e:67:84:7e:59:fc:7c:bf:a3:4c:04: 99:30:88:4f:cb:63:df:96:d9:7c:73:fd:d1:ea:3e:2d:3b:a6: 0c:81:c1:e3:ed:ac:8e:e2:b2:00:d3:48:c1:d5:cf:ce:da:cc: 2e:96:3d:b7:9d:f0:bc:98:54:70:ec:77:1f:cb:e4:30:59:dd: cb:f8:4f:bc:66:2a:88:f8:95:dc:10:e7:0a:08:fe:b4:2d:52: 41:c8:e2:df:cc:92:9a:fd:59:23:a5:92:78:a3:22:ed:ef:37: cd:0d:5e:a5:d3:17:f2:6f:4a:a6:02:45:aa:b8:93:60:ad:c3: b4:ad:67:40:03:b8:fc:ce:52:7e:a5:dc:21:69:b3:01:2f:52: 71:39:d3:54:3d:c6:98:e8:df:85:44:f8:7f:78:94:5a:3f:83: 0e:56:51:66:6d:bd:87:7a:18:a8:66:7f:95:c3:68:1a:52:d3: 79:a9:99:c8:83:9f:dc:80:61:03:22:5d:b2:8e:27:92:01:53: c0:80:f2:2b:30:65:39:bd:54:7e:8a:0f:e6:d1:d6:f9:e8:23: 73:9a:eb:32:10:d1:5d:7f:28:ff:33:e7:d6:c8:b2:a7:64:c1: b8:80:5b:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNDNDQxMTAvBgNVBAUTKEY5OEVCRTIwNjkwRjJGMkIyMzRBMTU0ODdERDA5NTIx RjNENDc1M0MwHhcNMjUxMDE4MjAxMDEzWhcNMjUxMDI1MjAxMDEzWjAYMRYwFAYD VQQDEw02OGYzZjQyNS04ZmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArnR84tpMjy0CdLXJCxpHxN8FPUqw2UEY+7wt7pjUAokuEtHO3zkOvzIcoBFK QIIM5oxLg9Pa/+74rHcyKIM8P2WbHps1GL6HcmivPZnboxyQ8PzgjjOHndIBQIzc aluVbHN0iQ6npc0wnuKnKqfTRs1EaFbh2R+c35dJwxhCXenrZ9sEVPJNVkH9OrVr wPQP0DbwpBtl1CQnJ/+OyOqVQZPJdhteyiEKKDreCFmcs7B+mX0HnsAQi5PtQyO7 QpSqKGP9FWCGHETtC7tG/sekRbyaMIkR6tj6JByhPLOHw88XR1NiAhCw7hcva7pj 1uoQsnPnugAmFMzaEqWZj/j90QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE9b3PC9 INm3Mhqk8pPeUebWrmV7MB8GA1UdIwQYMBaAFPmOviBpDy8rI0oVSH3QlSHz1HU8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0M0NC9DMTYwRkNBQzQ4 MEExMUVBOTgxMTkwNkRDNEY5QUUwMi8tWTYtSUdrUEx5c2pTaFZJZmRDVklmUFVk VHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1ZNi1JR2tQTHlzalNoVklmZENWSWZQVWRUdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0M0NC9DMTYwRkNBQzQ4MEExMUVBOTgxMTkwNkRDNEY5QUUwMi8tWTYtSUdrUEx5 c2pTaFZJZmRDVklmUFVkVHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADTixyfICmo4FD0vHRj1PiGrbeCknWsV7aDmeEfln8fL+jTASZMIhP y2Pfltl8c/3R6j4tO6YMgcHj7ayO4rIA00jB1c/O2swulj23nfC8mFRw7Hcfy+Qw Wd3L+E+8ZiqI+JXcEOcKCP60LVJByOLfzJKa/VkjpZJ4oyLt7zfNDV6l0xfyb0qm AkWquJNgrcO0rWdAA7j8zlJ+pdwhabMBL1JxOdNUPcaY6N+FRPh/eJRaP4MOVlFm bb2HehioZn+Vw2gaUtN5qZnIg5/cgGEDIl2yjieSAVPAgPIrMGU5vVR+ig/m0db5 6CNzmusyENFdfyj/M+fWyLKnZMG4gFt8 -----END CERTIFICATE-----Generated at Mon Oct 20 07:03:51 2025 by rpki-client