$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft File: pYh4bi_YjPqvU6qilsNkRg7m6m0.mft (raw, json) Hash identifier: TQD3bU6r0vaGYi5xtXdlTrsMfXVE/tvlQimojSwarRA= Subject key identifier: F6:B7:D9:9E:AD:5A:AD:E1:39:50:01:57:23:F2:B8:8D:32:51:4F:09 Authority key identifier: A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D Certificate issuer: /CN=A91C8485/serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft Manifest number: A6 Signing time: Sun 19 Oct 2025 09:29:42 +0000 Manifest this update: Sun 19 Oct 2025 09:29:41 +0000 Manifest next update: Sun 26 Oct 2025 09:29:41 +0000 Files and hashes: 1: pYh4bi_YjPqvU6qilsNkRg7m6m0.crl (hash: jfPf7xEtnPsJE/LdMisN1k7KUmsH9vH3muXX/5eULfo=) 2: 5B4A5E7EB7CF11EF860F535AC4F9AE02.roa (hash: Z9DYBfabGIxHjUBLevu5KvPw0ydtYOqQMGpRrWOIWpg=) 3: A59FFB3EB7D711EF9ED0C324C4F9AE02.roa (hash: qXU62xBJEhF8s34iW9kLJHW6sq1BX3PHBxT3tX/weaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8485, serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Validity Not Before: Oct 19 09:29:41 2025 GMT Not After : Oct 26 09:29:41 2025 GMT Subject: CN=68f4af86-76f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:66:99:8a:a4:a3:0b:76:36:6e:4d:d3:74:7e: 6b:73:d4:31:22:46:74:95:96:26:5f:ab:10:e1:26: 59:c2:e4:d9:5c:dc:e1:f8:5f:f8:1e:c9:81:28:8b: a8:d6:c3:8f:70:0c:16:5e:aa:d2:76:f5:77:2c:26: d0:4c:aa:20:3e:41:91:38:6d:15:89:2f:5d:10:3c: 95:f8:1b:1f:2e:9b:ae:82:4c:be:81:21:6e:92:72: d6:fe:f8:0f:0d:0d:1c:d4:df:6d:c7:29:4b:b8:54: 7a:f7:c3:e1:f2:ee:25:4f:93:f3:c3:ac:cb:5b:6d: 1b:92:49:50:26:21:3b:fc:aa:ae:fa:46:6d:00:78: 67:8f:d3:8e:06:1b:2a:e2:ee:5d:e3:58:5f:3d:e1: 36:ba:bf:c3:7b:80:89:fb:4b:b7:cf:4a:14:24:00: 14:51:bb:ae:f6:eb:0a:04:a7:12:5a:86:e3:cd:16: d6:61:db:8a:ec:bc:fd:ed:f7:94:b1:f7:db:59:48: 4e:c4:ba:95:72:6d:ef:bd:9e:ee:80:8a:39:0d:c6: f8:a3:ae:16:9b:a8:e5:72:36:d9:03:3d:30:59:d2: 1b:cf:44:4c:47:7d:f7:ff:18:ba:aa:d0:04:a5:43: 31:dd:01:b4:40:0d:2d:14:69:ca:e6:0c:c9:23:1d: 22:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B7:D9:9E:AD:5A:AD:E1:39:50:01:57:23:F2:B8:8D:32:51:4F:09 X509v3 Authority Key Identifier: keyid:A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:02:b2:fc:f8:f4:2d:6a:5e:6b:37:c7:ea:a0:85:5d:ce:3d: 75:4f:eb:c3:74:f4:42:65:3a:78:57:6c:da:cf:07:d5:5f:78: f2:09:68:6a:1f:e9:8a:a5:26:a6:04:10:47:e6:8e:79:20:90: 2d:01:c0:78:f8:3a:dc:23:ff:c4:63:cc:e3:a1:90:b2:10:4f: ef:a0:c2:08:9c:31:52:bd:db:c4:98:0e:f5:b6:1e:9f:ad:6e: 02:9d:f7:39:4a:4d:64:0d:80:09:76:3b:7f:0f:64:1b:9d:0f: b4:25:b6:bf:ee:f7:c4:95:10:82:60:4b:45:ef:d9:e8:dc:cf: 31:19:e2:da:cd:90:79:50:0b:6b:5a:fe:b3:81:09:2e:3e:0a: 1f:dc:93:07:fc:29:67:16:07:aa:f0:c8:fe:30:70:40:d2:3b: 22:a7:1c:ac:a3:27:17:20:00:47:03:1e:cc:fb:a6:21:64:c3: 3a:63:81:46:0c:56:37:47:c1:33:15:34:4c:e1:c8:6c:77:5e: eb:19:af:0c:04:54:4c:a4:29:15:ed:fb:92:69:b5:60:e1:d9: f8:a2:cd:57:8e:a5:f1:2c:c6:16:d3:cb:89:cd:0a:0d:0c:dc: 27:b1:08:b0:e9:92:43:f1:7f:c5:55:57:7f:97:e3:ee:19:3f: b5:39:58:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg0ODUxMTAvBgNVBAUTKEE1ODg3ODZFMkZEODhDRkFBRjUzQUFBMjk2QzM2NDQ2 MEVFNkVBNkQwHhcNMjUxMDE5MDkyOTQxWhcNMjUxMDI2MDkyOTQxWjAYMRYwFAYD VQQDEw02OGY0YWY4Ni03NmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGaZiqSjC3Y2bk3TdH5rc9QxIkZ0lZYmX6sQ4SZZwuTZXNzh+F/4HsmBKIuo 1sOPcAwWXqrSdvV3LCbQTKogPkGROG0ViS9dEDyV+BsfLpuugky+gSFuknLW/vgP DQ0c1N9txylLuFR698Ph8u4lT5Pzw6zLW20bkklQJiE7/Kqu+kZtAHhnj9OOBhsq 4u5d41hfPeE2ur/De4CJ+0u3z0oUJAAUUbuu9usKBKcSWobjzRbWYduK7Lz97feU sffbWUhOxLqVcm3vvZ7ugIo5Dcb4o64Wm6jlcjbZAz0wWdIbz0RMR333/xi6qtAE pUMx3QG0QA0tFGnK5gzJIx0iiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPa32Z6t Wq3hOVABVyPyuI0yUU8JMB8GA1UdIwQYMBaAFKWIeG4v2Iz6r1OqopbDZEYO5upt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODQ4NS8yREJDRUY0NkI0 MTIxMUVGQjhFNkU3NzNDNEY5QUUwMi9wWWg0YmlfWWpQcXZVNnFpbHNOa1JnN202 bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BZaDRiaV9ZalBxdlU2cWlsc05rUmc3bTZtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODQ4NS8yREJDRUY0NkI0MTIxMUVGQjhFNkU3NzNDNEY5QUUwMi9wWWg0YmlfWWpQ cXZVNnFpbHNOa1JnN202bTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdArL8+PQtal5rN8fqoIVdzj11T+vDdPRCZTp4V2zazwfVX3jyCWhq H+mKpSamBBBH5o55IJAtAcB4+DrcI//EY8zjoZCyEE/voMIInDFSvdvEmA71th6f rW4Cnfc5Sk1kDYAJdjt/D2QbnQ+0Jba/7vfElRCCYEtF79no3M8xGeLazZB5UAtr Wv6zgQkuPgof3JMH/ClnFgeq8Mj+MHBA0jsipxysoycXIABHAx7M+6YhZMM6Y4FG DFY3R8EzFTRM4chsd17rGa8MBFRMpCkV7fuSabVg4dn4os1XjqXxLMYW08uJzQoN DNwnsQiw6ZJD8X/FVVd/l+PuGT+1OVjg -----END CERTIFICATE-----Generated at Mon Oct 20 14:46:42 2025 by rpki-client