$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft File: hYony1wEyt-u_biTvwbhp7fZ8cE.mft (raw, json) Hash identifier: LhV6Ev2xVMV1pUhFbMmQZawVYKHf+vGkBWWGksspdG0= Subject key identifier: 3D:C8:5E:58:81:C8:A1:72:5F:2F:C5:AE:1B:8F:F5:EC:C4:EA:BC:8F Authority key identifier: 85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1 Certificate issuer: /CN=A91CBE2E/serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1 Certificate serial: 036B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft Manifest number: 0361 Signing time: Sun 19 Oct 2025 03:00:40 +0000 Manifest this update: Sun 19 Oct 2025 03:00:39 +0000 Manifest next update: Sun 26 Oct 2025 03:00:39 +0000 Files and hashes: 1: hYony1wEyt-u_biTvwbhp7fZ8cE.crl (hash: cvFELuExZ0Gi5vIUR2qL8T2mddMV0e8bmh2pGWLhUjs=) 2: A0879902F15711EC846A5F29C4F9AE02.roa (hash: 7/5fZwleDVzsoLoxdmlvx46DZvj38NfAJm5JPzwN8K4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 875 (0x36b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBE2E, serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1 Validity Not Before: Oct 19 03:00:39 2025 GMT Not After : Oct 26 03:00:39 2025 GMT Subject: CN=68f45458-0e43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ff:fb:6c:92:e9:08:41:ee:b0:71:b3:62:b2: 14:af:04:55:79:51:56:14:d1:ca:44:50:9b:cb:36: fc:be:b0:96:1c:d2:77:dc:62:3e:6f:8b:4d:23:eb: 0c:c3:20:22:55:61:5d:54:22:12:0f:e4:d5:ba:13: 36:4e:96:4d:85:75:f0:0e:ae:cc:1d:3e:08:65:77: 0c:cc:d2:3e:a0:b8:f6:98:78:6d:8e:c1:e3:ba:4b: d7:bb:94:a7:cb:a0:d2:23:e5:c2:2b:46:85:47:ca: 31:33:15:79:ad:57:df:dc:6e:12:78:e6:35:ac:38: a2:f8:62:96:9e:4d:b0:a6:75:ce:ef:89:db:ca:13: 96:fa:1d:86:5e:9b:38:8a:ea:76:26:e2:49:b0:2d: 10:4e:ad:65:1e:da:ad:ad:14:f1:b3:f4:12:d3:74: e6:b9:3b:73:40:37:97:51:96:b6:e2:39:d4:c4:3d: 16:94:57:03:0c:ca:be:f6:9e:fe:87:cf:4e:6a:6d: 30:d3:70:dc:b7:60:04:c4:ec:a9:e1:ec:83:f0:4e: 8e:3b:4d:12:ed:91:eb:7f:93:72:d1:05:f2:a5:a0: b5:a1:25:16:d2:08:7a:17:d1:3d:c2:31:9f:95:b5: bf:4a:91:3d:10:e1:ad:8c:44:b6:2c:be:7b:5d:10: 17:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C8:5E:58:81:C8:A1:72:5F:2F:C5:AE:1B:8F:F5:EC:C4:EA:BC:8F X509v3 Authority Key Identifier: keyid:85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:58:cb:78:79:6e:6a:35:81:f7:8f:2a:eb:16:32:5a:62:51: f9:d7:67:8f:9c:43:1c:f1:37:55:42:8d:5c:13:a4:db:48:f3: 34:da:2b:ca:da:cd:c8:48:72:88:f4:d6:11:05:0b:9b:c8:2f: e8:59:8a:b5:e4:37:07:86:6c:9b:f3:df:b0:70:c7:f1:15:92: 9e:e9:fb:ba:6e:8f:a7:cd:c0:8b:bd:61:d5:01:b5:3d:3f:7f: 99:25:a5:25:b0:df:d3:00:ed:32:91:ea:91:90:33:a2:93:17: 90:ac:57:f4:a6:72:38:1a:0b:01:59:6a:99:39:b6:2e:de:46: 2a:9c:3c:c4:5d:2f:15:c4:22:51:90:58:f1:e1:22:34:18:ad: 0f:0a:6e:c6:50:cb:77:73:90:26:1a:8a:02:6a:74:d0:c0:75: 26:c0:35:6d:c7:20:88:5e:17:68:a7:43:5f:07:9f:9e:25:61: c7:7e:19:34:1d:b8:04:c1:52:d2:ad:a2:ae:09:ab:5e:99:2e: 71:6b:8b:93:42:1c:72:5d:3c:00:71:b6:c7:73:ac:17:4b:a5: 68:32:6d:33:f2:5e:9b:ac:29:24:f6:41:7c:9f:2a:00:ef:03: 13:59:bb:a2:ec:8b:6f:f9:d6:4b:fd:f4:19:de:00:f9:09:2f: 8f:95:f1:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JFMkUxMTAvBgNVBAUTKDg1OEEyN0NCNUMwNENBREZBRUZEQjg5M0JGMDZFMUE3 QjdEOUYxQzEwHhcNMjUxMDE5MDMwMDM5WhcNMjUxMDI2MDMwMDM5WjAYMRYwFAYD VQQDEw02OGY0NTQ1OC0wZTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm//7bJLpCEHusHGzYrIUrwRVeVFWFNHKRFCbyzb8vrCWHNJ33GI+b4tNI+sM wyAiVWFdVCISD+TVuhM2TpZNhXXwDq7MHT4IZXcMzNI+oLj2mHhtjsHjukvXu5Sn y6DSI+XCK0aFR8oxMxV5rVff3G4SeOY1rDii+GKWnk2wpnXO74nbyhOW+h2GXps4 iup2JuJJsC0QTq1lHtqtrRTxs/QS03TmuTtzQDeXUZa24jnUxD0WlFcDDMq+9p7+ h89Oam0w03Dct2AExOyp4eyD8E6OO00S7ZHrf5Ny0QXypaC1oSUW0gh6F9E9wjGf lbW/SpE9EOGtjES2LL57XRAXeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD3IXliB yKFyXy/FrhuP9ezE6ryPMB8GA1UdIwQYMBaAFIWKJ8tcBMrfrv24k78G4ae32fHB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkUyRS9EOEFCQUZFOEQw RkIxMUVDQTI3QUYyMkZDNEY5QUUwMi9oWW9ueTF3RXl0LXVfYmlUdndiaHA3Zlo4 Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hZb255MXdFeXQtdV9iaVR2d2JocDdmWjhjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkUyRS9EOEFCQUZFOEQwRkIxMUVDQTI3QUYyMkZDNEY5QUUwMi9oWW9ueTF3RXl0 LXVfYmlUdndiaHA3Zlo4Y0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEWMt4eW5qNYH3jyrrFjJaYlH512ePnEMc8TdVQo1cE6TbSPM02ivK 2s3ISHKI9NYRBQubyC/oWYq15DcHhmyb89+wcMfxFZKe6fu6bo+nzcCLvWHVAbU9 P3+ZJaUlsN/TAO0ykeqRkDOikxeQrFf0pnI4GgsBWWqZObYu3kYqnDzEXS8VxCJR kFjx4SI0GK0PCm7GUMt3c5AmGooCanTQwHUmwDVtxyCIXhdop0NfB5+eJWHHfhk0 HbgEwVLSraKuCatemS5xa4uTQhxyXTwAcbbHc6wXS6VoMm0z8l6brCkk9kF8nyoA 7wMTWbui7Itv+dZL/fQZ3gD5CS+PlfGm -----END CERTIFICATE-----Generated at Mon Oct 20 14:41:19 2025 by rpki-client