$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft File: Y3kC4bqWiB1HLuyt-kW1V348HDE.mft (raw, json) Hash identifier: FYu/klX5tiLJAGEY8PlhdmfvYJMD1ukC3GqIVHBP1cc= Subject key identifier: FB:E2:BB:CB:CE:B9:47:55:18:01:2B:75:98:F9:FD:19:82:AC:8F:B9 Authority key identifier: 63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31 Certificate issuer: /CN=A91CE524/serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31 Certificate serial: 016A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft Manifest number: 0167 Signing time: Sun 19 Oct 2025 06:37:55 +0000 Manifest this update: Sun 19 Oct 2025 06:37:55 +0000 Manifest next update: Sun 26 Oct 2025 06:37:54 +0000 Files and hashes: 1: Y3kC4bqWiB1HLuyt-kW1V348HDE.crl (hash: k6aoQD4qyZhcmMruREOdu9dlSELpwT5J2LKC2FEpq90=) 2: FF1FE402898011EEB3403779C4F9AE02.roa (hash: kfUd7cLCmHmQ/k7ENeRjEkFUrum5OXV/qc4Vt8EOcIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.crl rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:37:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 362 (0x16a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE524, serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31 Validity Not Before: Oct 19 06:37:55 2025 GMT Not After : Oct 26 06:37:54 2025 GMT Subject: CN=68f48743-4796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:43:a7:f0:ca:e7:83:c6:02:df:3f:5e:2d:50: 13:aa:20:af:5c:8c:7b:ca:74:8d:13:2b:b1:bc:99: c1:38:cf:a0:26:a9:de:db:a7:a8:e4:86:bf:eb:23: d5:91:33:48:41:81:a5:50:94:a2:95:99:b2:f8:0c: 36:d2:ee:50:13:5b:ca:97:d7:c9:d1:41:07:16:b6: 8e:d0:81:62:3f:0e:95:9a:e6:03:be:40:a7:cc:82: b6:02:57:84:e3:50:fd:11:10:78:59:f0:ec:0d:ad: b7:04:a2:79:65:4b:45:72:56:40:e6:c2:36:73:06: 18:37:b7:d6:9b:74:46:48:6f:5c:9f:49:2d:7e:83: 82:48:9f:7e:cf:0c:61:ae:36:8e:28:d5:17:3e:43: 34:6a:65:12:2f:50:7a:7c:5b:db:8f:8e:d9:2d:6a: 7b:db:aa:c2:41:95:6a:e7:d7:0d:4f:99:4e:38:98: 4c:b1:37:a1:ba:49:99:5f:e7:e3:ad:57:1c:a7:34: a9:e3:63:16:be:1a:aa:61:2f:43:ca:75:6a:81:b5: 68:08:79:35:d9:5f:07:64:27:39:3e:7e:92:85:8e: 40:c4:8e:6c:fb:3d:fb:4d:89:25:48:e4:59:7c:72: 17:2d:f0:09:26:2a:74:ca:3d:f8:26:a7:e4:c6:e3: 5b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E2:BB:CB:CE:B9:47:55:18:01:2B:75:98:F9:FD:19:82:AC:8F:B9 X509v3 Authority Key Identifier: keyid:63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:af:2b:54:7f:dc:80:77:a1:8e:72:00:bf:24:3d:65:17:68: c9:e2:70:cb:88:ca:72:99:1c:a8:30:6b:4a:c2:fd:b2:ed:57: df:51:f9:36:37:77:18:26:5d:b9:dc:de:21:f1:d7:8b:4e:de: f0:be:08:b1:e0:84:f0:dc:2f:7c:b4:d7:2b:fe:ff:57:b9:34: 88:f5:3e:ac:37:d3:f5:e1:91:1c:b0:94:ec:c6:53:a7:ed:5e: 16:a1:9a:d0:74:e1:10:49:07:d6:9f:22:6b:d5:7c:3f:1b:3a: e1:84:ea:85:3d:b5:76:fc:de:fc:07:0a:04:ef:a1:2c:d1:30: 8d:e8:30:59:30:3c:b5:a8:a9:14:95:e1:c1:ee:dd:75:7c:03: 8e:c4:48:47:b2:8d:fa:4d:12:c6:2a:51:4e:7b:a2:4c:31:da: e4:2d:47:22:91:e0:8f:59:9a:5e:0f:4b:e6:fd:1d:df:96:3a: 77:60:5c:4c:e6:cd:80:04:25:73:20:d6:05:2f:98:db:65:52: 20:bf:f4:87:5d:e8:d8:f5:b1:6b:f7:fe:a2:42:0b:d2:71:b2: c1:d4:f8:3d:58:c2:72:f3:ca:16:8f:e0:23:25:5b:f0:18:26: 9c:bc:8e:8b:6f:ee:d0:cd:6b:8a:85:dd:38:49:c5:86:34:15: a2:e1:2d:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1MjQxMTAvBgNVBAUTKDYzNzkwMkUxQkE5Njg4MUQ0NzJFRUNBREZBNDVCNTU3 N0UzQzFDMzEwHhcNMjUxMDE5MDYzNzU1WhcNMjUxMDI2MDYzNzU0WjAYMRYwFAYD VQQDEw02OGY0ODc0My00Nzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkOn8Mrng8YC3z9eLVATqiCvXIx7ynSNEyuxvJnBOM+gJqne26eo5Ia/6yPV kTNIQYGlUJSilZmy+Aw20u5QE1vKl9fJ0UEHFraO0IFiPw6VmuYDvkCnzIK2AleE 41D9ERB4WfDsDa23BKJ5ZUtFclZA5sI2cwYYN7fWm3RGSG9cn0ktfoOCSJ9+zwxh rjaOKNUXPkM0amUSL1B6fFvbj47ZLWp726rCQZVq59cNT5lOOJhMsTehukmZX+fj rVccpzSp42MWvhqqYS9DynVqgbVoCHk12V8HZCc5Pn6ShY5AxI5s+z37TYklSORZ fHIXLfAJJip0yj34JqfkxuNbJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPviu8vO uUdVGAErdZj5/RmCrI+5MB8GA1UdIwQYMBaAFGN5AuG6logdRy7srfpFtVd+PBwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTUyNC8wQzJDMkJENjg4 QzUxMUVFQTgzMTFDNzFDNEY5QUUwMi9ZM2tDNGJxV2lCMUhMdXl0LWtXMVYzNDhI REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kza0M0YnFXaUIxSEx1eXQta1cxVjM0OEhERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTUyNC8wQzJDMkJENjg4QzUxMUVFQTgzMTFDNzFDNEY5QUUwMi9ZM2tDNGJxV2lC MUhMdXl0LWtXMVYzNDhIREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXrytUf9yAd6GOcgC/JD1lF2jJ4nDLiMpymRyoMGtKwv2y7VffUfk2 N3cYJl253N4h8deLTt7wvgix4ITw3C98tNcr/v9XuTSI9T6sN9P14ZEcsJTsxlOn 7V4WoZrQdOEQSQfWnyJr1Xw/GzrhhOqFPbV2/N78BwoE76Es0TCN6DBZMDy1qKkU leHB7t11fAOOxEhHso36TRLGKlFOe6JMMdrkLUcikeCPWZpeD0vm/R3fljp3YFxM 5s2ABCVzINYFL5jbZVIgv/SHXejY9bFr9/6iQgvScbLB1Pg9WMJy88oWj+AjJVvw GCacvI6Lb+7QzWuKhd04ScWGNBWi4S0e -----END CERTIFICATE-----Generated at Mon Oct 20 21:45:18 2025 by rpki-client