$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft File: y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft (raw, json) Hash identifier: 0KL5X0QQhDlrGFn8I7wq1f+gYAPrQDfc2hy1GPyGIP0= Subject key identifier: DF:F1:1E:E7:CF:13:0C:C6:B8:51:0B:38:60:1C:03:65:C3:BB:3F:2B Authority key identifier: CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63 Certificate issuer: /CN=A91C3A74/serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363 Certificate serial: 2658 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft Manifest number: 2641 Signing time: Sat 18 Oct 2025 15:55:44 +0000 Manifest this update: Sat 18 Oct 2025 15:55:43 +0000 Manifest next update: Sat 25 Oct 2025 15:55:43 +0000 Files and hashes: 1: y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl (hash: xyb2R+CTSDqpb2lLsIFqLHFwsbEyBSUuUiRYjUtuupw=) 2: 767655BE561A11E79F98831DC4F9AE02.roa (hash: bf73yAvc50YmZ9DwhowT9EQ5/Cgl8VLGPJbD30MABw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:55:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9816 (0x2658) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3A74, serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363 Validity Not Before: Oct 18 15:55:43 2025 GMT Not After : Oct 25 15:55:43 2025 GMT Subject: CN=68f3b87f-df5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9c:b2:62:1e:2f:5b:3c:b5:c4:89:d1:7d:54: 26:77:d3:68:2d:c5:86:db:4e:5d:30:1a:9e:0e:ca: e7:fd:53:f5:73:fc:b3:a2:51:8f:d7:31:e5:50:3e: 9c:01:14:09:2f:27:3c:4f:41:25:42:c8:7c:fd:d5: d8:01:38:08:e5:03:bd:d6:62:bb:50:82:74:6b:8c: 82:b3:5f:93:db:da:7e:31:da:5d:63:97:be:46:8a: 48:5e:bd:bf:14:42:92:7e:05:b9:eb:2f:12:eb:fb: 8f:5a:ec:a1:b7:dd:de:36:de:df:20:30:ff:84:1a: 8e:4d:a3:16:cd:ec:56:1b:79:93:a0:b8:58:c7:6d: 60:27:dc:2e:70:f5:13:5a:7e:85:c5:92:79:94:67: 43:d9:75:c0:d5:64:0a:de:ef:8a:c4:29:01:65:8f: e2:91:9e:84:b4:44:45:25:74:89:7d:94:f0:5b:fa: cb:a9:42:dc:3f:a3:d3:e4:d6:85:22:f6:b3:91:57: d7:18:b2:2c:0d:32:b9:be:dc:5f:62:94:23:bf:c8: 72:c4:e0:29:e0:f5:d3:64:d2:cb:49:0a:ee:8f:9d: 23:bd:e8:10:24:52:8d:2f:cd:c4:be:c2:12:59:8b: 46:35:96:30:be:2b:9c:06:30:78:13:de:d7:ba:67: 46:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F1:1E:E7:CF:13:0C:C6:B8:51:0B:38:60:1C:03:65:C3:BB:3F:2B X509v3 Authority Key Identifier: keyid:CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:0c:64:19:96:71:92:91:4a:50:e8:e1:2f:89:43:d3:01:eb: 21:0e:60:c0:8f:88:9b:c2:f0:d5:1f:6e:88:6d:d8:0b:9c:41: 3b:82:0a:7d:db:0f:33:dd:89:77:96:d9:a2:ce:88:db:89:8a: 0c:0f:ea:99:8a:36:16:84:eb:fb:70:76:ff:c2:02:3b:20:59: 4b:c5:fc:b5:e5:d2:95:2d:ce:e3:4b:6a:84:01:67:ac:de:2a: f9:4a:42:c4:d8:31:63:0b:a5:e4:90:9c:1c:0c:70:20:f3:fc: dc:d1:c9:8b:f2:b6:ce:59:62:84:ba:0c:b9:e6:74:89:8c:bf: c0:71:b7:74:52:d7:6d:31:e4:4c:62:44:ef:be:e5:d9:6f:df: 0d:84:77:e8:fa:92:b4:c3:5c:e6:2e:d1:91:e8:ba:d2:e5:2b: 69:e7:9c:67:ea:c1:42:ac:e7:77:e0:5d:49:f4:7e:7c:87:44: 8b:1d:e0:44:36:4c:5b:93:7a:e8:18:31:65:43:96:d0:da:5a: 4a:e1:ab:aa:a6:13:a6:fb:3b:ae:5a:ab:74:57:fd:a8:3f:7e: 85:3b:a8:4c:e9:4d:4c:bf:dc:d0:5b:e2:b6:d3:33:f5:54:58: 12:b2:6f:a1:16:53:33:4c:6e:f2:27:26:98:ee:ba:92:a5:51: 69:e6:b7:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNBNzQxMTAvBgNVBAUTKENCN0I4REI0MjQ4MjRDNzFBODcwM0JCRkI5NDJBMzE1 MjkxNTQzNjMwHhcNMjUxMDE4MTU1NTQzWhcNMjUxMDI1MTU1NTQzWjAYMRYwFAYD VQQDEw02OGYzYjg3Zi1kZjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5yyYh4vWzy1xInRfVQmd9NoLcWG205dMBqeDsrn/VP1c/yzolGP1zHlUD6c ARQJLyc8T0ElQsh8/dXYATgI5QO91mK7UIJ0a4yCs1+T29p+MdpdY5e+RopIXr2/ FEKSfgW56y8S6/uPWuyht93eNt7fIDD/hBqOTaMWzexWG3mToLhYx21gJ9wucPUT Wn6FxZJ5lGdD2XXA1WQK3u+KxCkBZY/ikZ6EtERFJXSJfZTwW/rLqULcP6PT5NaF IvazkVfXGLIsDTK5vtxfYpQjv8hyxOAp4PXTZNLLSQruj50jvegQJFKNL83EvsIS WYtGNZYwviucBjB4E97XumdGfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/xHufP EwzGuFELOGAcA2XDuz8rMB8GA1UdIwQYMBaAFMt7jbQkgkxxqHA7v7lCoxUpFUNj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0E3NC83Q0I0QTA1NkZE M0ExMUU0ODZGODY3NUZDNEY5QUUwMi95M3VOdENTQ1RIR29jRHVfdVVLakZTa1ZR Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kzdU50Q1NDVEhHb2NEdV91VUtqRlNrVlEyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0E3NC83Q0I0QTA1NkZEM0ExMUU0ODZGODY3NUZDNEY5QUUwMi95M3VOdENTQ1RI R29jRHVfdVVLakZTa1ZRMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaDGQZlnGSkUpQ6OEviUPTAeshDmDAj4ibwvDVH26IbdgLnEE7ggp9 2w8z3Yl3ltmizojbiYoMD+qZijYWhOv7cHb/wgI7IFlLxfy15dKVLc7jS2qEAWes 3ir5SkLE2DFjC6XkkJwcDHAg8/zc0cmL8rbOWWKEugy55nSJjL/Acbd0UtdtMeRM YkTvvuXZb98NhHfo+pK0w1zmLtGR6LrS5Stp55xn6sFCrOd34F1J9H58h0SLHeBE Nkxbk3roGDFlQ5bQ2lpK4auqphOm+zuuWqt0V/2oP36FO6hM6U1Mv9zQW+K20zP1 VFgSsm+hFlMzTG7yJyaY7rqSpVFp5rfM -----END CERTIFICATE-----Generated at Mon Oct 20 15:39:49 2025 by rpki-client