$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft File: Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft (raw, json) Hash identifier: zRtcMFrsUY5tXNivKi/GcOiJMBM8t4XJeXASi/vVZQc= Subject key identifier: CB:DA:AC:7F:81:DE:D5:49:D9:4F:80:16:64:09:57:D2:E8:51:2B:1F Authority key identifier: 63:83:3A:24:1E:3E:49:59:EB:A1:9C:70:1D:04:88:7D:B4:B1:FC:74 Certificate issuer: /CN=A91DFD4C/serialNumber=63833A241E3E4959EBA19C701D04887DB4B1FC74 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft Manifest number: 1F Signing time: Sun 19 Oct 2025 11:22:12 +0000 Manifest this update: Sun 19 Oct 2025 11:22:11 +0000 Manifest next update: Sun 26 Oct 2025 11:22:11 +0000 Files and hashes: 1: Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl (hash: 0AtcmN9WpyKZsWJz0hylCTf3PbFtB7VkJrGkOByUwrs=) 2: 4EC550229F7911F0892F6680C4F9AE02.roa (hash: 8V07zUVOskE1wa+gVr+yuKqZDgrgYU/QSi8IILKEhL0=) 3: 3A4C99D49F7911F08FC08A7FC4F9AE02.roa (hash: hzN1fw40guW51CNb+UZLqljQGspAiSfGnAzMh1uOZu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:22:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFD4C, serialNumber=63833A241E3E4959EBA19C701D04887DB4B1FC74 Validity Not Before: Oct 19 11:22:11 2025 GMT Not After : Oct 26 11:22:11 2025 GMT Subject: CN=68f4c9e4-5181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b4:39:aa:79:e4:e6:83:d2:66:a8:90:cb:72: b1:10:d9:f8:25:86:b9:8e:c1:2f:15:04:2a:a3:5c: 14:98:33:75:5b:9b:4f:b3:1f:7f:47:75:33:aa:1a: 19:be:86:e4:aa:d5:07:79:13:9c:89:97:98:df:c1: 4c:a1:3e:55:b7:21:e6:b1:91:f1:a8:a5:1b:1a:db: a2:c4:ec:52:e7:8c:3b:2d:e1:f8:72:71:67:14:44: 38:c8:e9:bb:8f:34:38:39:0b:a3:9d:28:98:a4:03: 9f:84:b2:76:5b:b0:41:62:fe:0c:5d:03:69:69:85: 17:e4:7a:fd:9a:74:31:e1:bd:12:71:1c:ea:97:ba: 12:f4:d8:7e:91:1e:5f:14:55:3a:94:e0:62:8f:80: 11:a1:20:ec:bb:63:cc:6d:a0:e3:cc:39:6d:0d:c4: 1f:8a:bc:54:bc:36:99:d5:bb:15:f9:73:92:1f:ea: 14:28:a7:26:45:64:24:a8:a5:e5:ad:a6:d9:a2:c5: 02:4d:2d:4b:9b:34:f9:21:aa:c1:d2:13:ec:9b:fe: 82:c3:f5:6a:cb:c9:fe:3d:56:fb:35:39:e9:f6:49: 72:f9:73:66:d5:f7:14:7c:97:eb:b5:67:2e:5f:46: 2e:8b:af:df:42:37:6d:0d:1a:06:d4:78:ea:88:be: 41:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:DA:AC:7F:81:DE:D5:49:D9:4F:80:16:64:09:57:D2:E8:51:2B:1F X509v3 Authority Key Identifier: keyid:63:83:3A:24:1E:3E:49:59:EB:A1:9C:70:1D:04:88:7D:B4:B1:FC:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:9a:9f:40:ab:c8:c8:02:b6:8f:52:eb:27:a5:eb:7e:f1:72: 38:58:4b:49:eb:30:17:24:e3:c1:5c:c7:67:d0:46:8d:9b:b6: a3:7f:ea:92:ff:f6:e1:c1:0a:08:4c:a9:d6:4a:0c:65:84:89: d2:84:21:e9:21:d9:27:44:22:65:ac:ce:50:57:f1:03:9d:ae: 55:72:5a:52:5d:b1:7a:63:8b:ae:cf:72:71:5a:cd:86:4b:33: fd:c6:5d:9e:b6:b4:b8:3a:ee:c9:c4:c8:f2:56:8d:99:85:0d: 48:2f:2c:a8:2d:2b:ed:ed:9a:6b:29:4e:af:38:ab:26:9e:91: 52:a1:35:31:53:09:c1:eb:88:44:c4:81:3c:21:b3:14:4f:a6: 88:ed:10:7b:0c:3f:d8:aa:ef:d9:d0:86:ad:0e:0b:e0:9b:0b: 3a:10:bb:5e:a0:49:a5:1c:e9:59:4b:73:fb:58:e1:06:6d:1f: 4c:ac:18:99:cd:e1:4b:e5:00:b6:9b:5d:03:19:c1:0d:92:77: 16:d0:1a:68:72:8c:05:dd:b4:f8:f3:34:c1:ad:4b:b5:e7:06: 65:51:a4:42:7c:86:d5:d0:97:80:36:66:31:f4:4d:91:4e:f1: 94:da:9b:22:e8:ae:95:c8:13:30:00:d0:14:69:b2:38:a3:1e: 04:6b:60:a6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RkQ0QzExMC8GA1UEBRMoNjM4MzNBMjQxRTNFNDk1OUVCQTE5QzcwMUQwNDg4N0RC NEIxRkM3NDAeFw0yNTEwMTkxMTIyMTFaFw0yNTEwMjYxMTIyMTFaMBgxFjAUBgNV BAMTDTY4ZjRjOWU0LTUxODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLtDmqeeTmg9JmqJDLcrEQ2fglhrmOwS8VBCqjXBSYM3Vbm0+zH39HdTOqGhm+ huSq1Qd5E5yJl5jfwUyhPlW3IeaxkfGopRsa26LE7FLnjDst4fhycWcURDjI6buP NDg5C6OdKJikA5+EsnZbsEFi/gxdA2lphRfkev2adDHhvRJxHOqXuhL02H6RHl8U VTqU4GKPgBGhIOy7Y8xtoOPMOW0NxB+KvFS8NpnVuxX5c5If6hQopyZFZCSopeWt ptmixQJNLUubNPkhqsHSE+yb/oLD9WrLyf49Vvs1Oen2SXL5c2bV9xR8l+u1Zy5f Ri6Lr99CN20NGgbUeOqIvkH3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUy9qsf4He 1UnZT4AWZAlX0uhRKx8wHwYDVR0jBBgwFoAUY4M6JB4+SVnroZxwHQSIfbSx/HQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGRDRDLzU2RUMzRDlDODM2 RDExRjA4ODE2MDA2QUM0RjlBRTAyL1k0TTZKQjQtU1Zucm9aeHdIUVNJZmJTeF9I US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWTRNNkpCNC1TVm5yb1p4d0hRU0lmYlN4X0hRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG RDRDLzU2RUMzRDlDODM2RDExRjA4ODE2MDA2QUM0RjlBRTAyL1k0TTZKQjQtU1Zu cm9aeHdIUVNJZmJTeF9IUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIWan0CryMgCto9S6yel637xcjhYS0nrMBck48Fcx2fQRo2btqN/6pL/ 9uHBCghMqdZKDGWEidKEIekh2SdEImWszlBX8QOdrlVyWlJdsXpji67PcnFazYZL M/3GXZ62tLg67snEyPJWjZmFDUgvLKgtK+3tmmspTq84qyaekVKhNTFTCcHriETE gTwhsxRPpojtEHsMP9iq79nQhq0OC+CbCzoQu16gSaUc6VlLc/tY4QZtH0ysGJnN 4UvlALabXQMZwQ2SdxbQGmhyjAXdtPjzNMGtS7XnBmVRpEJ8htXQl4A2ZjH0TZFO 8ZTamyLorpXIEzAA0BRpsjijHgRrYKY= -----END CERTIFICATE-----Generated at Sun Oct 19 22:57:44 2025 by rpki-client