$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft File: 9FYY6ic_QLS8aF4piH4gUIPEkKY.mft (raw, json) Hash identifier: 46c40SKLJjTU7IWP8vJ8OUi+MexBaZry5z5zU+FwhKQ= Subject key identifier: 15:04:9E:7B:D5:2F:0A:9F:66:A8:88:46:0E:F8:56:BD:47:31:73:F0 Authority key identifier: F4:56:18:EA:27:3F:40:B4:BC:68:5E:29:88:7E:20:50:83:C4:90:A6 Certificate issuer: /CN=A91C3E37/serialNumber=F45618EA273F40B4BC685E29887E205083C490A6 Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft Manifest number: 01CA Signing time: Sun 19 Oct 2025 05:21:18 +0000 Manifest this update: Sun 19 Oct 2025 05:21:17 +0000 Manifest next update: Sun 26 Oct 2025 05:21:17 +0000 Files and hashes: 1: 9FYY6ic_QLS8aF4piH4gUIPEkKY.crl (hash: w3zPU/jPfL+LZSFpPVZt4KmtwXkxXQZIA6DxBhb9vUs=) 2: 9BBCC1F60D2411EEA8431074C4F9AE02.roa (hash: CWem0s7hf8kQnIdZUnWxTyisJw7AnKLcP2ANy+rIwcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.crl rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3E37, serialNumber=F45618EA273F40B4BC685E29887E205083C490A6 Validity Not Before: Oct 19 05:21:17 2025 GMT Not After : Oct 26 05:21:17 2025 GMT Subject: CN=68f4754d-a4c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:17:d9:f4:69:15:45:8d:52:c4:04:52:bb:9e: e3:25:a5:a9:17:b8:d6:e9:b6:66:be:66:27:2e:64: 74:52:0b:90:ed:f9:61:00:25:2a:e1:24:e0:6f:42: ab:0a:27:99:fe:a7:9a:33:b0:27:99:d0:c2:87:24: 9a:b5:e9:92:3d:f7:35:51:21:11:9a:42:a4:33:92: a5:88:1a:ed:95:82:00:15:eb:e8:5f:34:18:86:02: c0:b1:c5:06:a3:ba:64:d0:a0:f2:2f:ea:63:77:3c: 75:bc:61:db:19:36:00:2c:3e:e0:31:45:1f:3b:df: 9c:bb:f9:95:3d:e3:8e:8a:fb:b7:f6:e0:b7:be:83: ba:1a:02:ab:61:cf:a9:22:42:ed:f4:e6:17:1c:7d: 55:23:d7:95:6e:3e:c1:c5:0d:d0:40:c3:f3:85:bd: db:8f:34:d5:e8:95:b9:4f:86:f6:7d:a8:e5:bb:b8: 3e:a5:7e:af:d3:d5:e7:c8:47:ab:3f:1e:1e:ad:f5: 0a:c1:68:ee:34:74:79:2d:94:ad:0d:19:f5:aa:f4: bc:96:a6:1c:8e:b2:00:93:92:2b:ee:e3:4a:05:ed: 32:7a:e2:ec:bd:15:82:b4:99:8e:f4:36:36:4d:94: 69:77:e6:45:0f:5e:19:2d:39:fe:0a:04:ee:47:72: b3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:04:9E:7B:D5:2F:0A:9F:66:A8:88:46:0E:F8:56:BD:47:31:73:F0 X509v3 Authority Key Identifier: keyid:F4:56:18:EA:27:3F:40:B4:BC:68:5E:29:88:7E:20:50:83:C4:90:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:72:8b:21:bc:11:65:db:78:64:66:60:72:73:1d:25:c2:f2: ae:2a:57:cf:84:41:6b:7e:44:d9:19:a5:25:23:94:9c:79:b7: 3c:a3:39:2a:9c:0a:4d:7b:3c:01:0d:d7:93:02:1a:6d:9e:63: c9:d7:19:59:ad:12:f7:14:8e:d6:ab:f2:f7:aa:6e:85:e1:e4: ed:0c:db:91:22:d2:a0:e0:f8:55:6c:42:53:23:5a:be:4f:fc: 0d:23:49:8f:4f:fd:7d:80:38:25:19:06:aa:89:76:d2:98:86: c1:fb:f1:2b:aa:34:9f:bf:76:37:c8:4c:5f:23:3a:f7:21:a3: a5:18:c9:1d:dc:e3:cc:5a:25:e1:2a:20:6f:f6:65:70:49:06: 25:48:7c:db:5c:12:ad:b1:4c:a5:24:ff:e0:96:be:a0:dc:d0: 12:63:ef:26:43:08:7d:be:23:0a:d7:ec:ee:df:aa:81:e9:3c: 7b:7d:2f:fc:11:03:b6:a8:ce:bb:52:6b:1a:15:6c:9e:19:eb: 24:ab:7e:e6:80:45:a2:5f:da:b6:1c:c8:86:c2:5c:38:08:6c: 25:12:00:56:15:00:b5:f8:4c:9d:04:1d:7b:f1:ba:a2:e0:f4: 10:a4:e5:fd:e5:e5:3d:a3:49:b1:27:9f:b3:d9:54:0c:f9:da: fb:8b:f0:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNFMzcxMTAvBgNVBAUTKEY0NTYxOEVBMjczRjQwQjRCQzY4NUUyOTg4N0UyMDUw ODNDNDkwQTYwHhcNMjUxMDE5MDUyMTE3WhcNMjUxMDI2MDUyMTE3WjAYMRYwFAYD VQQDEw02OGY0NzU0ZC1hNGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhfZ9GkVRY1SxARSu57jJaWpF7jW6bZmvmYnLmR0UguQ7flhACUq4STgb0Kr CieZ/qeaM7AnmdDChySatemSPfc1USERmkKkM5KliBrtlYIAFevoXzQYhgLAscUG o7pk0KDyL+pjdzx1vGHbGTYALD7gMUUfO9+cu/mVPeOOivu39uC3voO6GgKrYc+p IkLt9OYXHH1VI9eVbj7BxQ3QQMPzhb3bjzTV6JW5T4b2fajlu7g+pX6v09XnyEer Px4erfUKwWjuNHR5LZStDRn1qvS8lqYcjrIAk5Ir7uNKBe0yeuLsvRWCtJmO9DY2 TZRpd+ZFD14ZLTn+CgTuR3KzmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBUEnnvV LwqfZqiIRg74Vr1HMXPwMB8GA1UdIwQYMBaAFPRWGOonP0C0vGheKYh+IFCDxJCm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0UzNy9CNDQ1NTNEOEYw OUYxMUVEOUI0QTA3MzRDNEY5QUUwMi85RllZNmljX1FMUzhhRjRwaUg0Z1VJUEVr S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGWVk2aWNfUUxTOGFGNHBpSDRnVUlQRWtLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0UzNy9CNDQ1NTNEOEYwOUYxMUVEOUI0QTA3MzRDNEY5QUUwMi85RllZNmljX1FM UzhhRjRwaUg0Z1VJUEVrS1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNcoshvBFl23hkZmBycx0lwvKuKlfPhEFrfkTZGaUlI5Scebc8ozkq nApNezwBDdeTAhptnmPJ1xlZrRL3FI7Wq/L3qm6F4eTtDNuRItKg4PhVbEJTI1q+ T/wNI0mPT/19gDglGQaqiXbSmIbB+/ErqjSfv3Y3yExfIzr3IaOlGMkd3OPMWiXh KiBv9mVwSQYlSHzbXBKtsUylJP/glr6g3NASY+8mQwh9viMK1+zu36qB6Tx7fS/8 EQO2qM67UmsaFWyeGeskq37mgEWiX9q2HMiGwlw4CGwlEgBWFQC1+EydBB178bqi 4PQQpOX95eU9o0mxJ5+z2VQM+dr7i/C3 -----END CERTIFICATE-----Generated at Mon Oct 20 04:06:35 2025 by rpki-client