$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft File: Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft (raw, json) Hash identifier: I6gtlWS6STKBNoxgX024Dnab+5wNyGAw9FQiWTKf+v8= Subject key identifier: AC:DF:5C:DD:11:BC:FE:8D:26:60:FD:34:F3:FE:5D:BC:C3:3D:26:56 Authority key identifier: 63:92:39:06:39:17:EE:92:C0:99:E4:6A:D3:69:6C:2E:CA:7C:51:0A Certificate issuer: /CN=A91D2706/serialNumber=639239063917EE92C099E46AD3696C2ECA7C510A Certificate serial: 077A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft Manifest number: 0774 Signing time: Sat 18 Oct 2025 22:56:16 +0000 Manifest this update: Sat 18 Oct 2025 22:56:16 +0000 Manifest next update: Sat 25 Oct 2025 22:56:16 +0000 Files and hashes: 1: Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl (hash: 2PoNEvM9uNZqChUnMbmPOWP80OKriKSJqghPDQqC1d4=) 2: 35D4363E330711EB9D3AA60BC4F9AE02.roa (hash: M4Gqzd39PMwr7C0nKPOIDqHHsIaRLfcCY3hCq+E40tY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1914 (0x77a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2706, serialNumber=639239063917EE92C099E46AD3696C2ECA7C510A Validity Not Before: Oct 18 22:56:16 2025 GMT Not After : Oct 25 22:56:16 2025 GMT Subject: CN=68f41b10-eeea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:40:6c:8c:c1:d6:cd:bd:6c:11:39:1c:5e:12: 35:60:8c:79:65:26:ad:6c:7c:f9:10:d6:e3:10:3a: 2e:29:79:a4:b0:c9:35:78:52:0b:cb:47:07:78:01: 9c:40:98:d1:f9:eb:d3:ff:a8:3a:ce:3a:83:07:60: 05:b0:ca:3b:d0:fb:0a:22:17:b5:3c:aa:42:a8:8a: a2:d5:61:5c:5d:9e:61:d4:56:88:ca:de:53:ec:f5: e6:58:93:aa:6e:c7:0a:de:54:d8:4a:05:23:7d:96: 99:0a:ae:98:09:23:9b:8e:e1:51:4a:cc:a8:f6:41: 48:cf:bf:9f:2c:d4:be:6c:40:6c:5e:25:b7:2a:1a: 50:2e:4e:0c:cf:40:41:d2:29:ec:46:99:84:9e:48: e2:70:db:cc:41:4f:70:bb:8b:16:f0:fe:9e:d9:9c: e9:07:62:a3:8f:5e:4f:19:a7:d8:9d:08:d7:7c:29: a1:5a:87:ea:4e:29:fa:95:b1:a8:0f:04:1e:47:cf: a6:45:04:cd:69:ae:28:7a:03:41:5a:5e:54:b8:8b: 46:25:b6:0e:43:66:b9:5a:53:05:c8:8a:18:d7:96: a5:a4:33:13:48:9f:b1:2a:e7:64:db:bb:e7:47:5c: 77:e1:c3:38:3e:0c:9f:8f:f0:e4:5a:8b:b1:db:e4: 62:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:DF:5C:DD:11:BC:FE:8D:26:60:FD:34:F3:FE:5D:BC:C3:3D:26:56 X509v3 Authority Key Identifier: keyid:63:92:39:06:39:17:EE:92:C0:99:E4:6A:D3:69:6C:2E:CA:7C:51:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:91:db:78:30:29:0d:11:88:8b:c2:ab:d9:43:c1:00:06:93: 26:78:e9:5e:4f:02:ac:0a:1b:80:57:d8:78:f8:f3:7d:a0:59: 50:2c:ce:91:00:bb:53:66:a9:82:0f:7c:82:93:92:b3:17:64: ea:74:7a:b0:c0:26:6c:66:75:1b:27:8f:99:75:ff:42:11:ea: 24:2c:b1:40:12:6c:1c:92:f7:14:e1:bf:b4:99:77:23:da:06: 38:1e:15:60:88:f3:39:f2:a8:7a:ab:4f:80:0a:fd:11:0c:3c: 96:0a:34:4e:23:b7:b6:86:8b:c7:26:c7:24:dd:4b:d7:db:a6: ba:83:0b:c9:1e:2b:71:28:14:45:31:da:85:fe:52:65:63:db: d7:09:6a:f1:d5:fc:57:7e:41:2f:5e:5d:b0:4e:1b:c0:69:01: 11:5a:63:99:dd:c2:4b:be:32:d4:c1:0e:65:59:2f:42:2e:a7: 13:c5:ed:d4:ce:39:5e:61:fe:3d:6d:a3:ac:9c:13:e0:ae:e0: a6:02:d8:29:17:07:d1:a7:a1:ab:89:38:8f:87:ed:51:e2:af: f4:f2:37:61:75:af:60:c8:22:e0:91:ee:b0:26:0a:df:a1:ce: 53:c2:8b:cb:73:ce:74:58:ba:8f:f8:83:e2:e5:cc:ad:4b:51: 73:51:9e:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI3MDYxMTAvBgNVBAUTKDYzOTIzOTA2MzkxN0VFOTJDMDk5RTQ2QUQzNjk2QzJF Q0E3QzUxMEEwHhcNMjUxMDE4MjI1NjE2WhcNMjUxMDI1MjI1NjE2WjAYMRYwFAYD VQQDEw02OGY0MWIxMC1lZWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2UBsjMHWzb1sETkcXhI1YIx5ZSatbHz5ENbjEDouKXmksMk1eFILy0cHeAGc QJjR+evT/6g6zjqDB2AFsMo70PsKIhe1PKpCqIqi1WFcXZ5h1FaIyt5T7PXmWJOq bscK3lTYSgUjfZaZCq6YCSObjuFRSsyo9kFIz7+fLNS+bEBsXiW3KhpQLk4Mz0BB 0insRpmEnkjicNvMQU9wu4sW8P6e2ZzpB2Kjj15PGafYnQjXfCmhWofqTin6lbGo DwQeR8+mRQTNaa4oegNBWl5UuItGJbYOQ2a5WlMFyIoY15alpDMTSJ+xKudk27vn R1x34cM4Pgyfj/DkWoux2+RiqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKzfXN0R vP6NJmD9NPP+XbzDPSZWMB8GA1UdIwQYMBaAFGOSOQY5F+6SwJnkatNpbC7KfFEK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjcwNi8wNEQ0NTdDMjMz MDYxMUVCQTI4MkQzMEFDNEY5QUUwMi9ZNUk1QmprWDdwTEFtZVJxMDJsc0xzcDhV UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k1STVCamtYN3BMQW1lUnEwMmxzTHNwOFVRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjcwNi8wNEQ0NTdDMjMzMDYxMUVCQTI4MkQzMEFDNEY5QUUwMi9ZNUk1QmprWDdw TEFtZVJxMDJsc0xzcDhVUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtkdt4MCkNEYiLwqvZQ8EABpMmeOleTwKsChuAV9h4+PN9oFlQLM6R ALtTZqmCD3yCk5KzF2TqdHqwwCZsZnUbJ4+Zdf9CEeokLLFAEmwckvcU4b+0mXcj 2gY4HhVgiPM58qh6q0+ACv0RDDyWCjROI7e2hovHJsck3UvX26a6gwvJHitxKBRF MdqF/lJlY9vXCWrx1fxXfkEvXl2wThvAaQERWmOZ3cJLvjLUwQ5lWS9CLqcTxe3U zjleYf49baOsnBPgruCmAtgpFwfRp6GriTiPh+1R4q/08jdhda9gyCLgke6wJgrf oc5TwovLc850WLqP+IPi5cytS1FzUZ7r -----END CERTIFICATE-----Generated at Mon Oct 20 15:20:09 2025 by rpki-client