$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft File: _YxfSHdCyyBRsoaXKbRmEkzfXms.mft (raw, json) Hash identifier: 3sy5+NnC8gCNixBngVKdY8CpTV3zYizUVli1QBtx+10= Subject key identifier: E7:18:9F:84:5A:12:F9:54:B9:D6:A7:ED:EE:EE:D8:51:10:95:36:FA Authority key identifier: FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B Certificate issuer: /CN=A91EBA46/serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B Certificate serial: B8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft Manifest number: B5 Signing time: Sun 19 Oct 2025 09:13:40 +0000 Manifest this update: Sun 19 Oct 2025 09:13:39 +0000 Manifest next update: Sun 26 Oct 2025 09:13:39 +0000 Files and hashes: 1: _YxfSHdCyyBRsoaXKbRmEkzfXms.crl (hash: nkjaR6Xpr8ajza/GXoAtCls8PruAd/zgEU2yO5NGPy4=) 2: DDA167929E5111EF94F71013C4F9AE02.roa (hash: ayuReQbwZQyyFifWvSerspyTPQuIIk708kpChRAJhtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:13:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 184 (0xb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA46, serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B Validity Not Before: Oct 19 09:13:39 2025 GMT Not After : Oct 26 09:13:39 2025 GMT Subject: CN=68f4abc3-c835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5d:ef:0d:c8:ff:79:26:d2:a8:84:59:50:9a: 23:0b:37:4d:3c:b4:8a:55:5e:8a:de:84:da:1e:fa: ce:18:58:32:65:d4:78:9e:78:55:e3:26:d9:49:68: 09:8a:20:7d:c4:59:3d:ca:a6:5d:d9:de:e1:42:65: 3d:ce:6d:63:9d:9a:45:40:61:fd:6c:09:28:95:4c: 23:60:66:dc:66:85:b2:ef:d8:50:1e:03:fb:61:8f: ae:df:27:08:9a:bf:49:f8:56:2e:ca:f7:eb:75:03: 60:b6:eb:60:8c:9d:a8:2e:ae:1d:13:7d:2e:5f:ee: 26:2b:27:b5:eb:29:30:1c:3a:e9:c3:14:c8:29:d3: 2f:5d:18:1b:94:43:3b:60:98:9f:b4:cd:1e:48:4e: be:37:da:83:43:a7:6a:08:ed:a3:0a:f8:ab:32:ff: 23:82:3c:92:83:7d:78:c5:5e:05:98:ce:d9:ad:89: 81:3b:5b:a5:6d:13:69:4b:c2:da:58:4e:b7:34:22: 57:4d:92:72:0a:8d:3f:d4:9b:66:9d:3a:dd:d9:b0: 81:7a:f6:62:92:e9:3f:49:5e:40:29:b8:29:67:e8: 80:11:2e:a6:df:49:44:63:5b:7c:46:41:04:ee:fc: c5:26:2d:f8:c8:b4:63:c2:b5:b9:c7:fb:35:9b:70: 74:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:18:9F:84:5A:12:F9:54:B9:D6:A7:ED:EE:EE:D8:51:10:95:36:FA X509v3 Authority Key Identifier: keyid:FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:b9:c5:f2:38:d0:f5:51:3e:03:96:9d:a2:38:10:62:38:e7: 80:7d:db:4f:69:9f:4f:ce:5f:56:4f:1b:49:a1:41:f7:bc:74: 9b:8d:87:7b:c5:26:a6:6b:49:66:df:5c:9e:ff:89:43:e0:22: 91:3d:fe:7b:4b:3b:73:a7:8e:9b:c0:6f:04:96:b0:3f:34:be: 5d:f7:91:da:5e:04:93:1b:f3:53:7e:4b:51:b0:85:f4:b5:ad: 91:ba:e9:39:b1:e5:9b:4a:f0:1a:08:c9:5f:49:d8:a7:f1:b5: a4:3e:99:00:29:d6:30:b1:79:4b:ad:e3:79:e1:c5:a1:c7:c8: d2:f5:68:45:f1:9c:45:da:11:b3:57:bc:d7:11:fd:23:4f:67: 63:29:ec:90:0c:0c:55:20:4e:a6:74:33:8a:1c:86:d2:cf:95: f4:ec:e2:82:a2:33:26:18:92:b0:01:5e:20:ab:68:ea:7b:4d: 1f:4b:c9:20:f8:af:a7:81:9c:da:6c:26:43:eb:bd:a9:94:97: c2:2c:d3:4b:1f:cd:a5:d7:29:be:8e:38:fd:6b:fd:33:04:1f: a7:d3:66:87:a8:7f:5a:6f:7d:a6:80:10:fd:07:40:1c:e2:8a: e0:1d:1a:66:fd:0a:4f:9d:f1:4e:84:2b:37:70:c1:25:50:72: a6:67:19:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBNDYxMTAvBgNVBAUTKEZEOEM1RjQ4Nzc0MkNCMjA1MUIyODY5NzI5QjQ2NjEy NENERjVFNkIwHhcNMjUxMDE5MDkxMzM5WhcNMjUxMDI2MDkxMzM5WjAYMRYwFAYD VQQDEw02OGY0YWJjMy1jODM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuF3vDcj/eSbSqIRZUJojCzdNPLSKVV6K3oTaHvrOGFgyZdR4nnhV4ybZSWgJ iiB9xFk9yqZd2d7hQmU9zm1jnZpFQGH9bAkolUwjYGbcZoWy79hQHgP7YY+u3ycI mr9J+FYuyvfrdQNgtutgjJ2oLq4dE30uX+4mKye16ykwHDrpwxTIKdMvXRgblEM7 YJiftM0eSE6+N9qDQ6dqCO2jCvirMv8jgjySg314xV4FmM7ZrYmBO1ulbRNpS8La WE63NCJXTZJyCo0/1JtmnTrd2bCBevZikuk/SV5AKbgpZ+iAES6m30lEY1t8RkEE 7vzFJi34yLRjwrW5x/s1m3B0pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOcYn4Ra EvlUudan7e7u2FEQlTb6MB8GA1UdIwQYMBaAFP2MX0h3QssgUbKGlym0ZhJM315r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkE0Ni9GRjhBQTI0QTlD RjUxMUVGOEE2Qzg1ODFDNEY5QUUwMi9fWXhmU0hkQ3l5QlJzb2FYS2JSbUVremZY bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19ZeGZTSGRDeXlCUnNvYVhLYlJtRWt6Zlhtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkE0Ni9GRjhBQTI0QTlDRjUxMUVGOEE2Qzg1ODFDNEY5QUUwMi9fWXhmU0hkQ3l5 QlJzb2FYS2JSbUVremZYbXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDucXyOND1UT4Dlp2iOBBiOOeAfdtPaZ9Pzl9WTxtJoUH3vHSbjYd7 xSama0lm31ye/4lD4CKRPf57Sztzp46bwG8ElrA/NL5d95HaXgSTG/NTfktRsIX0 ta2Ruuk5seWbSvAaCMlfSdin8bWkPpkAKdYwsXlLreN54cWhx8jS9WhF8ZxF2hGz V7zXEf0jT2djKeyQDAxVIE6mdDOKHIbSz5X07OKCojMmGJKwAV4gq2jqe00fS8kg +K+ngZzabCZD672plJfCLNNLH82l1ym+jjj9a/0zBB+n02aHqH9ab32mgBD9B0Ac 4orgHRpm/QpPnfFOhCs3cMElUHKmZxlt -----END CERTIFICATE-----Generated at Tue Oct 21 02:26:01 2025 by rpki-client