$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft File: y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft (raw, json) Hash identifier: L2gEkqXEU2kaCqEL8SmzNy06/Z20gmwDXL7iiKSgtSY= Subject key identifier: F8:93:8C:11:F2:C9:09:85:D0:FD:6B:E8:08:ED:7B:71:C1:DA:2F:B2 Authority key identifier: CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A Certificate issuer: /CN=A91E0CF5/serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft Manifest number: E9 Signing time: Sun 19 Oct 2025 08:22:24 +0000 Manifest this update: Sun 19 Oct 2025 08:22:23 +0000 Manifest next update: Sun 26 Oct 2025 08:22:23 +0000 Files and hashes: 1: y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl (hash: hiHi/rVew+m83bnJQ4S0lY0ov3i/3XHrTkwnjjMsogc=) 2: C155660E492B11EF8EF0D04FC4F9AE02.roa (hash: p1Kd4l2BGto3TUE6P+Iwqb8Y4agcHwTbtFw10TWcSis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0CF5, serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A Validity Not Before: Oct 19 08:22:23 2025 GMT Not After : Oct 26 08:22:23 2025 GMT Subject: CN=68f49fc0-1330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c0:54:3c:f1:71:51:67:9e:a1:be:5a:3b:97: 18:b0:20:54:4e:ec:3c:b6:69:05:d8:ac:92:74:a2: cd:4c:45:21:1b:f0:7f:81:9b:b2:26:c5:68:05:b9: 79:a9:4b:03:4c:76:74:3f:4e:e3:7a:d2:52:ef:8b: 6d:48:a5:19:47:6a:36:ab:0d:60:ad:af:e8:0b:d6: d9:8b:32:17:98:27:b2:56:f8:84:00:2c:a2:a3:32: d1:f2:0b:92:7b:b2:28:3e:58:c9:c8:f7:ab:59:29: a1:df:5d:dc:0a:d4:b1:55:7c:56:90:65:5b:45:8a: 85:b3:bd:4d:10:95:62:6f:25:8b:5e:5d:53:d7:0a: 29:e4:a8:f5:8b:18:73:56:c9:87:d9:8e:c4:e0:31: 2b:e1:a4:19:ed:d5:03:2b:8b:b2:5c:33:70:2c:c2: cd:f4:74:8d:27:d8:10:4e:0a:13:de:41:4f:4e:8c: 86:b3:db:8e:15:4f:fc:6d:f2:27:9b:04:3c:04:9a: ca:cc:b9:36:76:11:18:06:9a:a2:2a:a6:dc:a0:b0: 79:1c:2a:bd:77:ea:0b:43:8a:6e:6e:70:e8:c9:5f: 98:a9:c6:cf:85:d7:67:ec:37:d2:9d:43:73:42:ee: 50:f0:74:f8:31:8e:d6:84:8d:c7:96:0f:50:1c:17: 57:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:93:8C:11:F2:C9:09:85:D0:FD:6B:E8:08:ED:7B:71:C1:DA:2F:B2 X509v3 Authority Key Identifier: keyid:CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:5c:08:25:ed:c4:3b:61:00:ef:2b:aa:dd:d6:5f:5c:d9:d5: 5f:fd:89:7a:ad:1f:aa:23:48:19:e3:35:ae:c7:63:22:b3:29: 72:22:8e:84:f7:7a:47:ac:6c:c3:06:90:09:c9:bb:02:1d:0a: 76:2f:fb:e8:b5:1a:a9:79:d8:4c:60:cb:bb:af:1e:73:07:e8: 98:cc:bb:5b:ce:17:b9:f1:57:af:7e:7b:05:f7:22:c3:59:d8: fe:f3:37:da:b9:e8:f4:02:cc:bd:2e:43:61:85:57:0e:00:7f: 5e:57:d7:54:07:ad:30:1a:42:82:68:b6:fa:8e:ba:f2:42:37: df:7d:ee:f2:19:6c:df:f9:8f:21:75:34:6c:d0:50:95:e3:7c: f9:0e:bc:63:22:97:4b:fd:85:de:a2:09:cb:d0:df:be:f0:e2: ba:9d:0c:48:12:db:0f:8d:2a:14:69:ba:ce:c1:26:b5:2a:45: 90:66:a0:0e:76:af:b3:8d:9a:b4:68:6d:20:fa:36:de:6b:f1: b7:4b:6d:ce:cb:fd:4e:7d:01:44:cf:72:32:8e:92:b0:9f:a9: 39:0d:2b:ff:23:21:3b:67:49:1e:e7:63:14:b1:e5:cf:66:f4: 02:91:2b:3f:4d:99:75:b0:16:4d:28:17:e4:7c:81:9f:9b:d7: a3:ab:4c:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDRjUxMTAvBgNVBAUTKENCQkJCQjI0QjIyQjQzNUQxQ0E0OTNBOUQ2M0RDQTc3 OUJFMDc5NkEwHhcNMjUxMDE5MDgyMjIzWhcNMjUxMDI2MDgyMjIzWjAYMRYwFAYD VQQDEw02OGY0OWZjMC0xMzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqMBUPPFxUWeeob5aO5cYsCBUTuw8tmkF2KySdKLNTEUhG/B/gZuyJsVoBbl5 qUsDTHZ0P07jetJS74ttSKUZR2o2qw1gra/oC9bZizIXmCeyVviEACyiozLR8guS e7IoPljJyPerWSmh313cCtSxVXxWkGVbRYqFs71NEJVibyWLXl1T1wop5Kj1ixhz VsmH2Y7E4DEr4aQZ7dUDK4uyXDNwLMLN9HSNJ9gQTgoT3kFPToyGs9uOFU/8bfIn mwQ8BJrKzLk2dhEYBpqiKqbcoLB5HCq9d+oLQ4pubnDoyV+YqcbPhddn7DfSnUNz Qu5Q8HT4MY7WhI3Hlg9QHBdXdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPiTjBHy yQmF0P1r6Ajte3HB2i+yMB8GA1UdIwQYMBaAFMu7uySyK0NdHKSTqdY9yneb4Hlq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENGNS81MzhDMTk2MDQ5 MkIxMUVGQkUxMDE4NEZDNEY5QUUwMi95N3U3SkxJclExMGNwSk9wMWozS2Q1dmdl V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3dTdKTElyUTEwY3BKT3AxajNLZDV2Z2VXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MENGNS81MzhDMTk2MDQ5MkIxMUVGQkUxMDE4NEZDNEY5QUUwMi95N3U3SkxJclEx MGNwSk9wMWozS2Q1dmdlV28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmXAgl7cQ7YQDvK6rd1l9c2dVf/Yl6rR+qI0gZ4zWux2MisylyIo6E 93pHrGzDBpAJybsCHQp2L/votRqpedhMYMu7rx5zB+iYzLtbzhe58VevfnsF9yLD Wdj+8zfauej0Asy9LkNhhVcOAH9eV9dUB60wGkKCaLb6jrryQjfffe7yGWzf+Y8h dTRs0FCV43z5DrxjIpdL/YXeognL0N++8OK6nQxIEtsPjSoUabrOwSa1KkWQZqAO dq+zjZq0aG0g+jbea/G3S23Oy/1OfQFEz3IyjpKwn6k5DSv/IyE7Z0ke52MUseXP ZvQCkSs/TZl1sBZNKBfkfIGfm9ejq0wB -----END CERTIFICATE-----Generated at Mon Oct 20 19:29:48 2025 by rpki-client