$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft File: CyVhxLV9qB1w85cksN4scQF0n10.mft (raw, json) Hash identifier: NLxsiOg403Wajmn3edNcCE9Wkyq4E55rXfkkHIM2yf8= Subject key identifier: 84:AD:97:94:F0:B1:39:30:D5:3A:90:15:C6:6C:5D:30:BE:AC:ED:F7 Authority key identifier: 0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D Certificate issuer: /CN=A91E1155/serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D Certificate serial: 0F4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft Manifest number: 0F3D Signing time: Sat 18 Oct 2025 18:12:25 +0000 Manifest this update: Sat 18 Oct 2025 18:12:25 +0000 Manifest next update: Sat 25 Oct 2025 18:12:25 +0000 Files and hashes: 1: CyVhxLV9qB1w85cksN4scQF0n10.crl (hash: Yg4/x9fm5PmZzF5KOLgbDUiruadcG4dvdGXNUitlb5M=) 2: 4B1E3E947EB411E994ED5B25C4F9AE02.roa (hash: v5g7cjNReibtump5AZbTVG2Okqg2HIeG+osQENS8uAY=) 3: AC8695B8A60611EE8FEB2160C4F9AE02.roa (hash: e0d6vw79IEqP0AdvR6b4v7RskAnTjUKydxlFYiex0pY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:12:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3914 (0xf4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1155, serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D Validity Not Before: Oct 18 18:12:25 2025 GMT Not After : Oct 25 18:12:25 2025 GMT Subject: CN=68f3d889-0012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:70:fc:d9:fd:d7:f7:07:c6:1e:2c:30:8e:66: e8:0e:d0:bc:98:d3:7c:29:c0:2f:85:cc:16:ed:47: 6e:b3:3c:5e:b6:3f:6d:8d:5e:8e:d9:0f:7f:4a:40: 74:ad:81:26:b6:ae:ed:1c:82:b2:03:bc:66:df:0b: 5a:13:03:54:37:fa:3c:63:96:72:27:df:08:f1:34: 24:f7:71:a6:cb:d4:db:d9:d7:b0:b3:35:eb:3a:41: f4:e1:00:32:fe:ab:bc:71:0c:2a:95:41:13:90:88: 23:01:49:0d:df:12:9c:4e:b7:18:9c:78:9b:a3:bf: 6e:60:6c:6c:d5:2f:05:e4:4e:6f:78:21:b5:94:1e: bb:66:4a:9d:9a:fc:8e:f3:a1:2f:d6:df:92:1d:41: cc:ba:45:75:81:9b:c6:4d:b9:da:46:20:25:ef:d5: 94:af:c2:98:8b:c5:2c:03:50:7b:25:77:6c:54:38: 3e:ca:e0:8d:82:67:57:c6:7f:8d:eb:ae:c9:8f:e9: 34:1f:f8:8b:ee:d0:ea:c4:12:e8:11:86:fc:43:b7: ad:38:7b:77:4a:94:1b:35:79:ae:1e:1c:8f:61:42: fa:06:39:f5:f3:2d:d6:c2:67:ae:3f:d7:98:4e:36: 6d:99:35:1d:9d:85:e5:c0:49:c5:22:b2:e7:c6:a8: 70:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AD:97:94:F0:B1:39:30:D5:3A:90:15:C6:6C:5D:30:BE:AC:ED:F7 X509v3 Authority Key Identifier: keyid:0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:c3:48:84:20:0b:58:02:78:96:89:33:04:82:4c:5b:01:19: 9b:a0:cf:15:c8:ed:92:4a:a9:8c:b4:74:f4:8b:4c:e6:19:01: e7:8a:2f:63:4a:e2:c2:2c:c4:d9:a3:4b:7d:d4:1d:33:b5:22: 5f:64:6d:c0:73:72:41:a2:e7:d2:16:1c:36:5e:59:7d:8b:74: ce:c4:7a:cc:1a:82:aa:97:0e:30:f1:9e:bb:17:40:47:92:11: e7:52:45:c0:ce:f7:b8:8b:8d:67:9d:94:87:3e:14:d6:bc:7a: ef:ae:9f:80:73:99:00:ae:c4:b8:bc:8d:e4:c9:eb:c5:49:54: b4:b4:b2:8a:f8:c8:ef:6b:7f:98:53:ae:4c:5d:c5:81:18:90: d5:f0:24:73:4c:88:dd:75:7e:2b:3b:44:53:0d:26:82:25:4a: 81:88:5d:72:9f:f5:dd:73:0e:f0:7e:89:f5:c0:0b:9b:37:66: 94:55:25:41:b2:99:70:77:37:70:ec:99:60:38:93:f6:a1:fc: 8c:0d:9c:d1:71:93:94:cf:d4:81:50:f1:16:28:7d:eb:05:0d: c5:f7:2d:16:f0:08:de:10:32:96:a0:d4:02:89:ee:33:f4:b1: 7c:c9:c7:80:09:85:60:37:d2:f4:03:4c:60:d1:bd:c4:15:14: 47:f3:b9:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTExNTUxMTAvBgNVBAUTKDBCMjU2MUM0QjU3REE4MUQ3MEYzOTcyNEIwREUyQzcx MDE3NDlGNUQwHhcNMjUxMDE4MTgxMjI1WhcNMjUxMDI1MTgxMjI1WjAYMRYwFAYD VQQDEw02OGYzZDg4OS0wMDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHD82f3X9wfGHiwwjmboDtC8mNN8KcAvhcwW7Uduszxetj9tjV6O2Q9/SkB0 rYEmtq7tHIKyA7xm3wtaEwNUN/o8Y5ZyJ98I8TQk93Gmy9Tb2dewszXrOkH04QAy /qu8cQwqlUETkIgjAUkN3xKcTrcYnHibo79uYGxs1S8F5E5veCG1lB67ZkqdmvyO 86Ev1t+SHUHMukV1gZvGTbnaRiAl79WUr8KYi8UsA1B7JXdsVDg+yuCNgmdXxn+N 667Jj+k0H/iL7tDqxBLoEYb8Q7etOHt3SpQbNXmuHhyPYUL6Bjn18y3WwmeuP9eY TjZtmTUdnYXlwEnFIrLnxqhwvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIStl5Tw sTkw1TqQFcZsXTC+rO33MB8GA1UdIwQYMBaAFAslYcS1fagdcPOXJLDeLHEBdJ9d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTE1NS81Mzk5OEEzNDdF QjMxMUU5QUI5QzdCMjRDNEY5QUUwMi9DeVZoeExWOXFCMXc4NWNrc040c2NRRjBu MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N5Vmh4TFY5cUIxdzg1Y2tzTjRzY1FGMG4xMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTE1NS81Mzk5OEEzNDdFQjMxMUU5QUI5QzdCMjRDNEY5QUUwMi9DeVZoeExWOXFC MXc4NWNrc040c2NRRjBuMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOw0iEIAtYAniWiTMEgkxbARmboM8VyO2SSqmMtHT0i0zmGQHnii9j SuLCLMTZo0t91B0ztSJfZG3Ac3JBoufSFhw2Xll9i3TOxHrMGoKqlw4w8Z67F0BH khHnUkXAzve4i41nnZSHPhTWvHrvrp+Ac5kArsS4vI3kyevFSVS0tLKK+Mjva3+Y U65MXcWBGJDV8CRzTIjddX4rO0RTDSaCJUqBiF1yn/Xdcw7wfon1wAubN2aUVSVB splwdzdw7JlgOJP2ofyMDZzRcZOUz9SBUPEWKH3rBQ3F9y0W8AjeEDKWoNQCie4z 9LF8yceACYVgN9L0A0xg0b3EFRRH87k3 -----END CERTIFICATE-----Generated at Mon Oct 20 09:35:21 2025 by rpki-client