$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft File: _RYHGGNz6B9E0TeyoOlpV-YquKE.mft (raw, json) Hash identifier: wmVcY3feRJ6RWk/SYy3NI3eanhDOuZZQ1rDoSl4g9Kc= Subject key identifier: 64:98:F4:E1:4E:2D:F7:CC:53:E8:74:97:E1:53:ED:77:73:44:14:4A Authority key identifier: FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1 Certificate issuer: /CN=A91EA958/serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1 Certificate serial: 3512 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft Manifest number: 34F2 Signing time: Sat 18 Oct 2025 15:10:12 +0000 Manifest this update: Sat 18 Oct 2025 15:10:11 +0000 Manifest next update: Sat 25 Oct 2025 15:10:11 +0000 Files and hashes: 1: _RYHGGNz6B9E0TeyoOlpV-YquKE.crl (hash: 4/1JUgCbUJynv5Y2O/b9Tri8Ivk1mt0VCyBcyymtMRA=) 2: 5A7BB752BD2F11EBB84EE532C4F9AE02.roa (hash: LB+KlOsPvF4imD5dH4Y/7ETYXLpR1TopuFn08dtZ6UQ=) 3: D347187A7E9511ECA9132A0BC4F9AE02.roa (hash: kxrZR2YgejKdZw2KSRqTPBaBWQsbx9P5F4vQ2qVIgKA=) 4: 59F4A758BD2F11EBB84EE532C4F9AE02.roa (hash: uAMH22czrWhCVXR1Yh4Gb924YIN0PWuUVG5CCQ0T0QI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.crl rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:10:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13586 (0x3512) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA958, serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1 Validity Not Before: Oct 18 15:10:11 2025 GMT Not After : Oct 25 15:10:11 2025 GMT Subject: CN=68f3add3-1f68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b9:b6:ed:55:4a:de:1d:ee:11:5c:25:24:47: e7:a0:fa:a4:59:10:f0:ca:ae:f3:bd:f8:3e:02:3d: 15:bb:d1:d9:2b:97:2e:44:ff:ea:1e:ea:4b:fb:b3: 87:08:01:58:f5:ff:6e:c3:02:60:24:f1:02:8e:df: 42:a1:3e:34:77:b2:5b:e2:13:a0:aa:12:fb:ad:d4: 1a:a8:f6:6c:d7:44:0b:8a:05:45:fa:46:77:8c:72: 4d:c4:65:0c:8d:23:e5:b0:4f:f2:fb:bc:fc:2e:2f: 94:a9:2c:7e:fe:72:90:39:5e:6f:1e:63:2a:0e:27: 3a:54:4d:2d:c7:98:88:4b:84:ca:d3:dd:66:1c:a2: 22:c5:ce:6a:34:15:8a:12:5e:52:b0:9f:f2:a2:d1: d2:ee:9e:0f:f2:26:2f:80:ed:8b:57:86:3b:56:a6: af:28:a8:51:f8:f2:64:9d:c8:af:5e:50:65:5f:0a: ea:76:01:71:fb:29:2c:1c:1e:5f:5c:ee:5b:c1:42: 2b:86:f4:ba:d3:9b:d7:9b:28:9d:2c:58:99:9b:0d: 46:ae:9e:aa:f6:86:38:69:b7:c8:06:72:bb:04:43: e4:5d:d8:03:b3:85:53:00:bb:fa:ee:bf:ed:2c:f8: cd:e9:03:17:22:a3:39:07:41:f7:c1:f9:78:eb:0c: a1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:98:F4:E1:4E:2D:F7:CC:53:E8:74:97:E1:53:ED:77:73:44:14:4A X509v3 Authority Key Identifier: keyid:FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:24:9b:82:9c:e5:40:5a:1d:ec:fd:78:b8:95:7d:f1:8f:c0: 25:c0:04:7f:97:50:41:4f:8e:d5:c8:e6:c5:2a:5e:ed:8a:01: 57:98:73:e7:cf:03:93:2d:74:cd:33:50:98:2d:38:5a:ec:df: 11:09:bb:d8:e8:16:ac:73:f6:0e:41:8f:d3:53:16:c3:2e:ca: 7f:3f:9a:08:c9:c8:92:ad:01:9f:38:b7:a5:a8:1e:c4:5e:dc: e5:5f:d1:22:f5:9d:0c:a2:ee:3e:ec:91:ac:fd:14:d7:7b:8e: a3:68:6f:4b:b4:68:2a:ea:8f:a5:42:cd:5d:4f:7f:25:01:d2: c9:0d:0a:64:41:58:00:c6:ce:d3:44:b7:3c:81:34:0b:5d:02: 88:00:1b:41:24:b4:ae:94:0c:d0:d7:1e:75:6d:8c:5c:1a:c1: fa:1e:3d:ee:a1:e0:f7:c0:32:a8:73:c5:22:a0:ea:2c:f9:28: 24:18:1b:fb:01:71:21:7d:36:9c:41:ab:8f:a9:4d:12:7b:06: 5f:7d:52:e3:0f:21:8e:e2:08:4c:23:4f:5d:4b:0b:d3:05:08: 33:f8:d3:aa:b1:12:d3:9b:03:d7:67:96:cd:ec:93:82:57:36: c3:02:65:f5:7b:36:ac:28:aa:d3:25:47:78:bf:cd:a7:30:08: d0:57:4b:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NTgxMTAvBgNVBAUTKEZEMTYwNzE4NjM3M0U4MUY0NEQxMzdCMkEwRTk2OTU3 RTYyQUI4QTEwHhcNMjUxMDE4MTUxMDExWhcNMjUxMDI1MTUxMDExWjAYMRYwFAYD VQQDEw02OGYzYWRkMy0xZjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4bm27VVK3h3uEVwlJEfnoPqkWRDwyq7zvfg+Aj0Vu9HZK5cuRP/qHupL+7OH CAFY9f9uwwJgJPECjt9CoT40d7Jb4hOgqhL7rdQaqPZs10QLigVF+kZ3jHJNxGUM jSPlsE/y+7z8Li+UqSx+/nKQOV5vHmMqDic6VE0tx5iIS4TK091mHKIixc5qNBWK El5SsJ/yotHS7p4P8iYvgO2LV4Y7VqavKKhR+PJkncivXlBlXwrqdgFx+yksHB5f XO5bwUIrhvS605vXmyidLFiZmw1Grp6q9oY4abfIBnK7BEPkXdgDs4VTALv67r/t LPjN6QMXIqM5B0H3wfl46wyhcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGSY9OFO LffMU+h0l+FT7XdzRBRKMB8GA1UdIwQYMBaAFP0WBxhjc+gfRNE3sqDpaVfmKrih MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk1OC81QUUxOTdGNDFE OUYxMUUyQkNCRkY3OEYwOEIwMkNEMi9fUllIR0dOejZCOUUwVGV5b09scFYtWXF1 S0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19SWUhHR056NkI5RTBUZXlvT2xwVi1ZcXVLRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTk1OC81QUUxOTdGNDFEOUYxMUUyQkNCRkY3OEYwOEIwMkNEMi9fUllIR0dOejZC OUUwVGV5b09scFYtWXF1S0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTJJuCnOVAWh3s/Xi4lX3xj8AlwAR/l1BBT47VyObFKl7tigFXmHPn zwOTLXTNM1CYLTha7N8RCbvY6Basc/YOQY/TUxbDLsp/P5oIyciSrQGfOLelqB7E XtzlX9Ei9Z0Mou4+7JGs/RTXe46jaG9LtGgq6o+lQs1dT38lAdLJDQpkQVgAxs7T RLc8gTQLXQKIABtBJLSulAzQ1x51bYxcGsH6Hj3uoeD3wDKoc8UioOos+SgkGBv7 AXEhfTacQauPqU0SewZffVLjDyGO4ghMI09dSwvTBQgz+NOqsRLTmwPXZ5bN7JOC VzbDAmX1ezasKKrTJUd4v82nMAjQV0sR -----END CERTIFICATE-----Generated at Mon Oct 20 16:17:03 2025 by rpki-client