$ rpki-client -vvf rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft File: y8CtGWWFFkH2YRHo4pAmmKm57YA.mft (raw, json) Hash identifier: alM8c7pWQfJqiubBXJa/OHp7O9zwTdEnlD/l+dx1Hcc= Subject key identifier: D7:3B:90:08:52:08:B9:01:52:D9:04:4F:26:94:86:12:0D:7E:40:D7 Authority key identifier: CB:C0:AD:19:65:85:16:41:F6:61:11:E8:E2:90:26:98:A9:B9:ED:80 Certificate issuer: /CN=A91C38CC/serialNumber=CBC0AD1965851641F66111E8E2902698A9B9ED80 Certificate serial: 013A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft Manifest number: 0137 Signing time: Sun 19 Oct 2025 07:20:55 +0000 Manifest this update: Sun 19 Oct 2025 07:20:55 +0000 Manifest next update: Sun 26 Oct 2025 07:20:55 +0000 Files and hashes: 1: y8CtGWWFFkH2YRHo4pAmmKm57YA.crl (hash: nas8vlynOUGf5SyYS/DRvsfBZIEj5WACCUzSyG7NSzU=) 2: CA2A06D6D5E511EE9B319A12C4F9AE02.roa (hash: U37kWMCNqNpu+UU1MaVXsy3rFn8/VgyQ4MzDX4Ugs7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.crl rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C38CC, serialNumber=CBC0AD1965851641F66111E8E2902698A9B9ED80 Validity Not Before: Oct 19 07:20:55 2025 GMT Not After : Oct 26 07:20:55 2025 GMT Subject: CN=68f49157-be1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9a:f1:60:b2:97:f3:71:ce:55:05:d9:9a:c4: 09:b6:23:c7:e5:c6:62:fe:03:2d:c4:f1:ae:0b:a0: 20:27:e1:1d:23:f1:7d:e4:4d:49:8a:b1:2e:8b:22: e9:fe:3e:0c:74:07:65:12:39:71:03:27:f5:7e:6c: 74:4f:73:ff:19:6b:56:b7:b2:f0:4b:ae:5c:a8:72: 07:82:a1:36:54:8f:46:06:19:81:7a:d7:7f:09:7b: 0c:33:22:6a:c7:1b:2d:d2:1d:07:10:a7:1e:88:ab: 87:d3:cd:c8:af:ad:1f:3b:bb:96:d5:03:73:f6:6c: c9:a2:80:b3:1e:ab:c8:49:76:9d:92:fe:40:c4:60: 91:0f:f9:ba:cc:4d:a1:0f:4d:3b:8f:37:4d:11:91: 51:cb:2f:0e:cf:bb:74:13:a0:ee:f0:ea:e2:1f:f1: 0c:5f:f0:7f:26:6a:a0:d3:ba:2b:5b:96:0c:8f:16: 40:b7:e4:fa:7b:6e:96:b3:b1:b8:a1:7e:3d:8b:88: da:eb:6d:1e:d2:82:ff:67:5c:94:63:ac:18:4b:a1: ca:c7:0e:c4:7e:02:f9:fe:ac:c9:51:d1:e0:77:bf: 45:ce:4a:3f:f1:e3:9b:00:ee:e9:67:8f:05:d2:eb: eb:2f:40:dc:1e:a4:b9:5e:40:72:17:ca:8c:a7:94: 53:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:3B:90:08:52:08:B9:01:52:D9:04:4F:26:94:86:12:0D:7E:40:D7 X509v3 Authority Key Identifier: keyid:CB:C0:AD:19:65:85:16:41:F6:61:11:E8:E2:90:26:98:A9:B9:ED:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:cc:54:e0:cd:03:b8:1e:b2:0a:56:50:fa:6f:f6:e6:26:be: 5f:8d:0c:55:88:3e:ec:10:40:8b:ab:0b:87:22:3f:f5:ff:b9: dd:7b:02:ae:ca:6d:c2:af:68:85:c6:6f:8e:7a:47:94:27:f4: fa:3b:bc:5f:d8:5b:14:8b:e1:87:52:d0:76:9c:92:34:46:9d: 8d:b2:08:cf:ac:9f:89:3c:94:7f:28:c5:9d:73:68:5c:58:fe: 14:45:9b:e1:3a:96:a0:2f:15:00:99:9c:c6:37:e1:e2:c4:74: dd:03:df:fe:3d:ec:77:e7:7a:65:a3:7c:6d:8c:24:e2:dd:db: 39:61:4d:60:73:a1:bc:60:eb:94:6d:9b:f6:31:0a:cf:fa:39: d6:e2:71:3d:02:e0:69:b1:aa:2e:03:29:2a:de:e0:c0:bc:9d: a6:16:cc:35:17:8a:be:7a:25:44:e9:bd:25:03:47:16:07:09: 1f:36:7b:0b:eb:c1:a2:ec:a3:01:a4:e9:ff:6a:dd:71:d7:a2: 5d:9d:06:98:c7:ae:55:a1:08:a5:24:62:75:78:d3:f6:80:0f: 80:22:d9:34:13:46:79:b5:6d:1a:5a:a2:ab:45:26:9e:ff:d5: d2:75:84:b7:68:1a:3c:60:38:a2:ce:85:61:f2:7a:b8:e7:3c: 6e:08:fb:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM4Q0MxMTAvBgNVBAUTKENCQzBBRDE5NjU4NTE2NDFGNjYxMTFFOEUyOTAyNjk4 QTlCOUVEODAwHhcNMjUxMDE5MDcyMDU1WhcNMjUxMDI2MDcyMDU1WjAYMRYwFAYD VQQDEw02OGY0OTE1Ny1iZTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoprxYLKX83HOVQXZmsQJtiPH5cZi/gMtxPGuC6AgJ+EdI/F95E1JirEuiyLp /j4MdAdlEjlxAyf1fmx0T3P/GWtWt7LwS65cqHIHgqE2VI9GBhmBetd/CXsMMyJq xxst0h0HEKceiKuH083Ir60fO7uW1QNz9mzJooCzHqvISXadkv5AxGCRD/m6zE2h D007jzdNEZFRyy8Oz7t0E6Du8OriH/EMX/B/Jmqg07orW5YMjxZAt+T6e26Ws7G4 oX49i4ja620e0oL/Z1yUY6wYS6HKxw7EfgL5/qzJUdHgd79Fzko/8eObAO7pZ48F 0uvrL0DcHqS5XkByF8qMp5RTYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNc7kAhS CLkBUtkETyaUhhINfkDXMB8GA1UdIwQYMBaAFMvArRllhRZB9mER6OKQJpipue2A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzhDQy8zQUM1N0M4Q0Q1 RTUxMUVFQjc3OTIyM0VDNEY5QUUwMi95OEN0R1dXRkZrSDJZUkhvNHBBbW1LbTU3 WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k4Q3RHV1dGRmtIMllSSG80cEFtbUttNTdZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzhDQy8zQUM1N0M4Q0Q1RTUxMUVFQjc3OTIyM0VDNEY5QUUwMi95OEN0R1dXRkZr SDJZUkhvNHBBbW1LbTU3WUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLzFTgzQO4HrIKVlD6b/bmJr5fjQxViD7sEECLqwuHIj/1/7ndewKu ym3Cr2iFxm+OekeUJ/T6O7xf2FsUi+GHUtB2nJI0Rp2NsgjPrJ+JPJR/KMWdc2hc WP4URZvhOpagLxUAmZzGN+HixHTdA9/+Pex353plo3xtjCTi3ds5YU1gc6G8YOuU bZv2MQrP+jnW4nE9AuBpsaouAykq3uDAvJ2mFsw1F4q+eiVE6b0lA0cWBwkfNnsL 68Gi7KMBpOn/at1x16JdnQaYx65VoQilJGJ1eNP2gA+AItk0E0Z5tW0aWqKrRSae /9XSdYS3aBo8YDiizoVh8nq45zxuCPun -----END CERTIFICATE-----Generated at Mon Oct 20 11:59:58 2025 by rpki-client