$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft File: y1IFTj13aOoWtrColMdzon3qkho.mft (raw, json) Hash identifier: Ey6f0h7u+gOjIZTG71crOVOg5catXl1q8L1P+YTPZ20= Subject key identifier: 30:23:51:DE:29:84:AB:E7:54:3D:77:C6:35:F6:DA:93:B8:BE:30:C8 Authority key identifier: CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A Certificate issuer: /CN=A91EB6AC/serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A Certificate serial: 0C41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft Manifest number: 0C37 Signing time: Sat 18 Oct 2025 19:27:47 +0000 Manifest this update: Sat 18 Oct 2025 19:27:47 +0000 Manifest next update: Sat 25 Oct 2025 19:27:47 +0000 Files and hashes: 1: y1IFTj13aOoWtrColMdzon3qkho.crl (hash: paU05iMWLa49554sJB66zSPKEF9VY+uKBE7O8+HLWLU=) 2: 12D352766D2911F0B26CB33BC4F9AE02.roa (hash: d+PNEJYkgwfN/EWh9YAvK3NrsnGHrIa0Ji1QGqGUhS8=) 3: 9DA63F546D2811F09647053BC4F9AE02.roa (hash: 3gAyCRS9eTrSpT6uGMaC2W//L+1mB9VyFAfUFmHY1AA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3137 (0xc41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB6AC, serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A Validity Not Before: Oct 18 19:27:47 2025 GMT Not After : Oct 25 19:27:47 2025 GMT Subject: CN=68f3ea33-8aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:29:bc:d7:45:53:ab:00:c5:c8:5e:65:68:6c: 41:18:fd:80:62:86:66:f1:5a:21:a5:75:f0:11:cc: cc:4e:19:29:04:4b:06:c8:10:5c:d1:80:f1:79:3d: 42:60:c5:fe:9c:5d:6b:7a:18:46:7d:b6:f2:36:20: 66:32:74:07:b4:2d:e9:01:a9:a8:7b:9f:ba:18:3a: fb:d0:77:24:d0:13:4a:70:5e:6a:6f:91:56:41:2a: 37:4f:54:e2:c4:a2:07:fc:87:db:89:c5:e6:7a:a8: a3:6d:9d:6b:18:e6:bb:19:68:5a:29:96:53:c0:0b: 36:85:9a:1d:51:65:77:03:11:b8:22:c1:39:94:f5: 77:a5:5a:52:1b:7b:09:79:0d:b1:0d:12:6d:c6:8f: 99:b2:b7:3c:9e:c3:0b:5d:f8:24:47:41:70:74:98: 07:5b:18:92:85:eb:0a:48:f8:a8:81:0f:27:c2:18: 36:bf:9b:aa:ff:33:bc:bd:41:20:15:61:94:52:71: c9:93:92:51:81:8f:a1:62:27:6f:d9:82:a1:bd:ab: 23:9a:0e:b1:58:5f:57:77:05:59:f8:17:ff:1b:ff: c3:98:05:65:2a:87:77:e4:09:d7:7d:36:65:bc:31: 92:76:e7:44:d8:1b:eb:b0:3d:1e:ff:db:30:f9:0a: 36:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:23:51:DE:29:84:AB:E7:54:3D:77:C6:35:F6:DA:93:B8:BE:30:C8 X509v3 Authority Key Identifier: keyid:CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:3f:63:1a:d7:9e:66:e6:7f:2b:80:84:dd:c6:d6:cd:1a:24: af:32:25:9f:7a:f4:39:39:e5:19:39:57:92:09:34:38:0d:46: c7:87:73:24:cb:25:1c:b6:6a:86:bd:3b:b2:f0:d0:81:dc:be: 11:f0:a5:3a:2a:c9:70:a2:bb:c8:65:98:90:96:a9:6e:40:02: 45:e1:e7:19:19:be:26:98:be:75:9c:3b:cc:c2:32:ac:3b:67: d8:eb:d0:2e:4a:a1:59:f0:fd:14:fc:d8:94:15:ab:1d:36:85: 24:4c:12:79:96:fa:8d:b5:ec:f0:87:c9:b4:76:a4:2e:ff:b2: 4d:f3:c4:4d:db:3d:86:5a:59:d6:9b:73:9c:16:ef:57:36:0b: 9e:ce:4c:0f:f4:cf:76:04:23:74:7f:d6:6b:ba:f4:05:7f:33: 18:29:8e:7e:b1:61:8f:f4:c3:ad:94:d4:3d:7a:f9:f0:6e:61: 8b:f1:95:8e:68:da:99:e8:d0:a4:6d:9f:c0:5e:0a:96:4b:a9: db:2e:d8:35:b4:73:ff:17:95:f0:fb:b0:c5:d9:7b:e3:a7:79: fd:b8:43:df:64:a7:1a:16:ae:cb:2d:10:ce:f3:c6:db:6d:74: 6d:d4:5c:8f:ec:39:09:7f:d9:c1:da:95:89:d0:9a:03:16:b1: 70:cb:0d:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI2QUMxMTAvBgNVBAUTKENCNTIwNTRFM0Q3NzY4RUExNkI2QjBBODk0Qzc3M0Ey N0RFQTkyMUEwHhcNMjUxMDE4MTkyNzQ3WhcNMjUxMDI1MTkyNzQ3WjAYMRYwFAYD VQQDEw02OGYzZWEzMy04YWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCm810VTqwDFyF5laGxBGP2AYoZm8VohpXXwEczMThkpBEsGyBBc0YDxeT1C YMX+nF1rehhGfbbyNiBmMnQHtC3pAamoe5+6GDr70Hck0BNKcF5qb5FWQSo3T1Ti xKIH/IfbicXmeqijbZ1rGOa7GWhaKZZTwAs2hZodUWV3AxG4IsE5lPV3pVpSG3sJ eQ2xDRJtxo+Zsrc8nsMLXfgkR0FwdJgHWxiShesKSPiogQ8nwhg2v5uq/zO8vUEg FWGUUnHJk5JRgY+hYidv2YKhvasjmg6xWF9XdwVZ+Bf/G//DmAVlKod35AnXfTZl vDGSdudE2BvrsD0e/9sw+Qo2TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDAjUd4p hKvnVD13xjX22pO4vjDIMB8GA1UdIwQYMBaAFMtSBU49d2jqFrawqJTHc6J96pIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjZBQy9EN0U5OEE2RTE1 RDAxMUVBOTNDQTBFMTlDNEY5QUUwMi95MUlGVGoxM2FPb1d0ckNvbE1kem9uM3Fr aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kxSUZUajEzYU9vV3RyQ29sTWR6b24zcWtoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjZBQy9EN0U5OEE2RTE1RDAxMUVBOTNDQTBFMTlDNEY5QUUwMi95MUlGVGoxM2FP b1d0ckNvbE1kem9uM3FraG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcP2Ma155m5n8rgITdxtbNGiSvMiWfevQ5OeUZOVeSCTQ4DUbHh3Mk yyUctmqGvTuy8NCB3L4R8KU6KslworvIZZiQlqluQAJF4ecZGb4mmL51nDvMwjKs O2fY69AuSqFZ8P0U/NiUFasdNoUkTBJ5lvqNtezwh8m0dqQu/7JN88RN2z2GWlnW m3OcFu9XNguezkwP9M92BCN0f9ZruvQFfzMYKY5+sWGP9MOtlNQ9evnwbmGL8ZWO aNqZ6NCkbZ/AXgqWS6nbLtg1tHP/F5Xw+7DF2Xvjp3n9uEPfZKcaFq7LLRDO88bb bXRt1FyP7DkJf9nB2pWJ0JoDFrFwyw26 -----END CERTIFICATE-----Generated at Mon Oct 20 01:43:03 2025 by rpki-client