$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft File: 7yfjyfFbWDsVypzMPJBdIpzi8NA.mft (raw, json) Hash identifier: P81SYbBuSpw8vFsO1zEkPJzDLyN87h/28VXGy5bXrQ4= Subject key identifier: 7B:CE:68:99:8F:3A:63:0F:19:95:EB:51:27:6F:3A:FD:CE:24:FD:34 Authority key identifier: EF:27:E3:C9:F1:5B:58:3B:15:CA:9C:CC:3C:90:5D:22:9C:E2:F0:D0 Certificate issuer: /CN=A91C1814/serialNumber=EF27E3C9F15B583B15CA9CCC3C905D229CE2F0D0 Certificate serial: 0622 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7yfjyfFbWDsVypzMPJBdIpzi8NA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft Manifest number: 061D Signing time: Sun 19 Oct 2025 00:23:33 +0000 Manifest this update: Sun 19 Oct 2025 00:23:33 +0000 Manifest next update: Sun 26 Oct 2025 00:23:33 +0000 Files and hashes: 1: 7yfjyfFbWDsVypzMPJBdIpzi8NA.crl (hash: C6mUNLoEzeZl6An0u8OA7hTMjzaujPBUfoLDCLoSSYE=) 2: 38378A3EBA3411EBB94A527CC4F9AE02.roa (hash: bXfsV+JRththOFdM9JTTJyhVvibLKGVpju+gIvVc/Sk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.crl rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7yfjyfFbWDsVypzMPJBdIpzi8NA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:23:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1570 (0x622) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1814, serialNumber=EF27E3C9F15B583B15CA9CCC3C905D229CE2F0D0 Validity Not Before: Oct 19 00:23:33 2025 GMT Not After : Oct 26 00:23:33 2025 GMT Subject: CN=68f42f85-2081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:77:85:56:a6:e5:f8:1c:9a:d8:ff:ac:cb:22: 04:06:8e:68:b0:e4:64:01:06:66:31:31:ce:a6:59: f7:5e:8c:43:4a:47:0d:ef:69:29:70:4c:44:fe:1d: df:85:f4:92:a7:bb:9d:f1:31:92:6c:5d:c6:60:20: f3:e6:4c:f1:06:bd:e8:87:2f:69:da:81:d9:e0:80: 63:f4:df:ec:d8:ce:ce:58:b7:90:85:de:c9:fe:f5: be:0d:1b:4c:1c:05:1f:ad:d4:b0:af:d3:9e:53:37: a2:4c:63:1c:fa:67:d9:b7:01:1d:4b:0b:67:a8:91: 1e:f9:97:60:29:1e:99:8d:a0:aa:7f:01:18:eb:e2: 3b:60:db:43:61:34:d0:df:18:c1:e1:cf:90:0f:36: a4:e9:71:d5:22:18:37:00:20:8a:ad:ac:c9:5b:a3: 04:29:31:2c:15:eb:c3:07:93:cf:09:92:3e:89:fd: 28:7e:6f:39:ce:b9:de:45:70:2b:fe:90:9c:eb:19: f0:48:aa:e3:28:1a:7e:c3:60:ef:fe:2b:45:1e:4b: 62:7c:b0:12:17:a8:75:37:30:f8:4e:7b:2f:61:17: ad:0a:bb:b5:7c:63:95:5b:32:d3:43:c2:8e:e3:25: 1c:76:5f:53:f6:93:18:94:ec:db:8e:5d:07:38:44: 13:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:CE:68:99:8F:3A:63:0F:19:95:EB:51:27:6F:3A:FD:CE:24:FD:34 X509v3 Authority Key Identifier: keyid:EF:27:E3:C9:F1:5B:58:3B:15:CA:9C:CC:3C:90:5D:22:9C:E2:F0:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7yfjyfFbWDsVypzMPJBdIpzi8NA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:a5:0b:cd:ad:53:10:76:3e:72:11:8f:bc:b7:04:e3:19:55: 76:ef:c1:74:3f:0e:9c:0f:79:8b:94:c2:8f:d4:47:d7:dd:58: 19:b0:eb:f5:ef:17:40:f7:4f:43:2b:ed:70:e5:ef:4b:29:5b: 67:f0:df:4e:37:c2:4f:00:99:26:86:85:03:37:5f:ff:41:b4: bb:29:0e:85:c9:16:0b:7c:55:ca:b7:c4:d6:20:70:bf:ec:45: 84:13:e5:73:a9:fa:ca:69:aa:68:f3:ea:25:91:7f:49:04:02: 1c:d6:b9:15:a8:1b:a7:c7:0a:e4:ac:b1:77:b1:b2:ca:95:51: 37:3e:45:1a:47:23:ba:23:9a:8b:63:28:ad:51:26:21:54:67: a4:91:66:79:38:d2:94:8f:83:cf:f2:d0:5a:30:c3:ec:46:34: b9:51:f6:80:a9:4f:01:55:95:8f:23:f0:25:1b:46:11:a1:9d: 08:71:c3:e0:16:ec:f6:95:69:1c:78:e7:b3:5f:87:41:0c:71: 12:75:a5:e9:b3:9c:9e:3e:15:3a:74:f4:2e:8b:62:41:8c:6f: d0:c4:40:7c:ba:32:7c:92:ef:c1:bc:83:2b:8c:69:9e:55:31: ac:3f:f9:78:8a:17:da:10:dc:ee:d1:89:11:ba:2c:91:c1:e4: 05:8c:93:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE4MTQxMTAvBgNVBAUTKEVGMjdFM0M5RjE1QjU4M0IxNUNBOUNDQzNDOTA1RDIy OUNFMkYwRDAwHhcNMjUxMDE5MDAyMzMzWhcNMjUxMDI2MDAyMzMzWjAYMRYwFAYD VQQDEw02OGY0MmY4NS0yMDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnHeFVqbl+Bya2P+syyIEBo5osORkAQZmMTHOpln3XoxDSkcN72kpcExE/h3f hfSSp7ud8TGSbF3GYCDz5kzxBr3ohy9p2oHZ4IBj9N/s2M7OWLeQhd7J/vW+DRtM HAUfrdSwr9OeUzeiTGMc+mfZtwEdSwtnqJEe+ZdgKR6ZjaCqfwEY6+I7YNtDYTTQ 3xjB4c+QDzak6XHVIhg3ACCKrazJW6MEKTEsFevDB5PPCZI+if0ofm85zrneRXAr /pCc6xnwSKrjKBp+w2Dv/itFHktifLASF6h1NzD4TnsvYRetCru1fGOVWzLTQ8KO 4yUcdl9T9pMYlOzbjl0HOEQT9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHvOaJmP OmMPGZXrUSdvOv3OJP00MB8GA1UdIwQYMBaAFO8n48nxW1g7FcqczDyQXSKc4vDQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTgxNC9GM0M4NTM5RUJB MzExMUVCOUM2OUMxNzhDNEY5QUUwMi83eWZqeWZGYldEc1Z5cHpNUEpCZElwemk4 TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd5Zmp5ZkZiV0RzVnlwek1QSkJkSXB6aThOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTgxNC9GM0M4NTM5RUJBMzExMUVCOUM2OUMxNzhDNEY5QUUwMi83eWZqeWZGYldE c1Z5cHpNUEpCZElwemk4TkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5pQvNrVMQdj5yEY+8twTjGVV278F0Pw6cD3mLlMKP1EfX3VgZsOv1 7xdA909DK+1w5e9LKVtn8N9ON8JPAJkmhoUDN1//QbS7KQ6FyRYLfFXKt8TWIHC/ 7EWEE+VzqfrKaapo8+olkX9JBAIc1rkVqBunxwrkrLF3sbLKlVE3PkUaRyO6I5qL YyitUSYhVGekkWZ5ONKUj4PP8tBaMMPsRjS5UfaAqU8BVZWPI/AlG0YRoZ0IccPg Fuz2lWkceOezX4dBDHESdaXps5yePhU6dPQui2JBjG/QxEB8ujJ8ku/BvIMrjGme VTGsP/l4ihfaENzu0YkRuiyRweQFjJNE -----END CERTIFICATE-----Generated at Mon Oct 20 08:49:23 2025 by rpki-client