$ rpki-client -vvf rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.mft File: yyBKq8TrV0KH_ARSchxbAQqavzE.mft (raw, json) Hash identifier: +M6f6qBsxiis2dlTqorVofarMaAH3exUWIaO2dslyRg= Subject key identifier: 4B:AD:30:A0:44:13:3D:55:AB:D2:4B:FC:E7:CB:40:E0:6D:D0:2C:2D Authority key identifier: CB:20:4A:AB:C4:EB:57:42:87:FC:04:52:72:1C:5B:01:0A:9A:BF:31 Certificate issuer: /CN=A911082E/serialNumber=CB204AABC4EB574287FC0452721C5B010A9ABF31 Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyBKq8TrV0KH_ARSchxbAQqavzE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.mft Manifest number: 38 Signing time: Wed 05 Nov 2025 07:45:39 +0000 Manifest this update: Wed 05 Nov 2025 07:45:39 +0000 Manifest next update: Wed 12 Nov 2025 07:45:39 +0000 Files and hashes: 1: yyBKq8TrV0KH_ARSchxbAQqavzE.crl (hash: s/hS+5+s+P0dIocdPST2wdSZYEg9FU030f0hyfs+e0I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.crl rsync://rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyBKq8TrV0KH_ARSchxbAQqavzE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911082E, serialNumber=CB204AABC4EB574287FC0452721C5B010A9ABF31 Validity Not Before: Nov 5 07:45:39 2025 GMT Not After : Nov 12 07:45:39 2025 GMT Subject: CN=690b00a3-f9a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:f5:82:d2:7b:9c:54:34:9b:90:a5:b3:44:4a: 63:fe:27:ab:e7:8d:56:d0:43:73:38:2b:71:f2:c7: 85:45:f5:7a:30:b8:9d:13:bf:d8:d2:97:40:08:24: 3f:e2:1c:c6:9a:65:dd:4c:25:4c:10:df:e6:a2:b7: 38:08:c6:b2:28:59:76:25:45:2e:b5:ac:8d:47:cc: 20:50:0b:e2:28:3e:a6:8b:d7:0f:1e:f4:93:78:6f: c7:d3:a0:76:57:c2:a5:39:ec:3a:21:af:f3:af:e7: 84:d5:ef:93:3a:ab:7c:41:44:91:b0:ec:bf:d2:47: 69:0e:24:d7:67:bb:9d:43:6b:bb:09:f6:fe:42:ef: 3b:47:72:e7:39:28:b6:57:a6:a0:0f:1a:5a:78:56: f8:a1:14:c8:6b:7a:5b:f3:ed:42:a4:32:1a:86:f7: 87:c2:ad:45:c0:c8:9c:a8:b6:c1:fa:e2:2e:11:bb: 73:27:4f:fc:77:1a:65:0f:d2:06:c3:c0:7d:bf:23: 98:f7:3d:85:87:b8:46:6c:b6:3a:0a:74:53:a6:30: f1:57:0c:9f:11:0b:00:61:7b:2a:c8:cc:89:cc:22: ad:67:18:ca:f6:d2:a9:1a:7e:f1:ae:c6:5a:5c:fb: 52:e0:50:35:52:e0:00:f1:2b:b0:0e:3d:d6:d0:c7: 63:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:AD:30:A0:44:13:3D:55:AB:D2:4B:FC:E7:CB:40:E0:6D:D0:2C:2D X509v3 Authority Key Identifier: keyid:CB:20:4A:AB:C4:EB:57:42:87:FC:04:52:72:1C:5B:01:0A:9A:BF:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyBKq8TrV0KH_ARSchxbAQqavzE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:7c:ee:c3:8d:ef:d7:85:51:70:72:2b:71:23:28:4f:c6:9e: 23:53:b7:82:48:e7:56:c2:9a:c7:d8:e3:5e:43:3a:99:57:1a: 9a:4c:0c:ce:fc:d2:90:5c:9b:ed:30:7c:0f:5e:6d:06:a0:84: ae:6f:c0:db:9b:3f:54:f9:0d:1c:84:b5:34:10:f4:b5:55:7e: 69:cf:3f:c8:d9:cd:60:46:6b:5e:dd:75:92:dc:e5:01:fc:e5: f9:5d:b2:69:06:39:39:e8:60:94:20:c2:a0:20:39:0d:71:36: ca:c2:9f:c6:8c:16:5c:21:e8:e8:07:e7:2c:95:cc:f3:ab:c1: 47:a4:10:c5:82:96:5b:e2:67:1c:42:d4:2f:c9:6a:55:61:d4: 6f:24:38:e3:fe:9f:61:0c:6c:41:cf:ef:be:6c:a0:23:3c:fd: bf:f5:65:3d:7a:bf:33:02:f1:60:4c:dc:35:c8:d4:d7:68:c5: 97:bd:6c:be:54:97:c8:c5:eb:d4:e2:8b:c6:3d:23:31:27:0e: 87:7b:24:52:77:b1:77:c9:ab:9d:40:50:32:ae:d2:9b:27:56: 21:14:7a:8b:aa:13:62:99:1b:14:e2:b2:22:ba:84:ac:3f:c6: 15:85:20:4f:b5:31:af:59:6f:54:8f:4c:59:fe:04:26:68:2e: 80:14:31:5c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MDgyRTExMC8GA1UEBRMoQ0IyMDRBQUJDNEVCNTc0Mjg3RkMwNDUyNzIxQzVCMDEw QTlBQkYzMTAeFw0yNTExMDUwNzQ1MzlaFw0yNTExMTIwNzQ1MzlaMBgxFjAUBgNV BAMTDTY5MGIwMGEzLWY5YTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD29YLSe5xUNJuQpbNESmP+J6vnjVbQQ3M4K3Hyx4VF9XowuJ0Tv9jSl0AIJD/i HMaaZd1MJUwQ3+aitzgIxrIoWXYlRS61rI1HzCBQC+IoPqaL1w8e9JN4b8fToHZX wqU57Dohr/Ov54TV75M6q3xBRJGw7L/SR2kOJNdnu51Da7sJ9v5C7ztHcuc5KLZX pqAPGlp4VvihFMhrelvz7UKkMhqG94fCrUXAyJyotsH64i4Ru3MnT/x3GmUP0gbD wH2/I5j3PYWHuEZstjoKdFOmMPFXDJ8RCwBheyrIzInMIq1nGMr20qkafvGuxlpc +1LgUDVS4ADxK7AOPdbQx2MFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUS60woEQT PVWr0kv858tA4G3QLC0wHwYDVR0jBBgwFoAUyyBKq8TrV0KH/ARSchxbAQqavzEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwODJFLzhERkU2MzY2NjZF MjExRjBCRUFCRTkzRUM0RjlBRTAyL3l5QktxOFRyVjBLSF9BUlNjaHhiQVFxYXZ6 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveXlCS3E4VHJWMEtIX0FSU2NoeGJBUXFhdnpFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEw ODJFLzhERkU2MzY2NjZFMjExRjBCRUFCRTkzRUM0RjlBRTAyL3l5QktxOFRyVjBL SF9BUlNjaHhiQVFxYXZ6RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKF87sON79eFUXByK3EjKE/GniNTt4JI51bCmsfY415DOplXGppMDM78 0pBcm+0wfA9ebQaghK5vwNubP1T5DRyEtTQQ9LVVfmnPP8jZzWBGa17ddZLc5QH8 5fldsmkGOTnoYJQgwqAgOQ1xNsrCn8aMFlwh6OgH5yyVzPOrwUekEMWCllviZxxC 1C/JalVh1G8kOOP+n2EMbEHP775soCM8/b/1ZT16vzMC8WBM3DXI1NdoxZe9bL5U l8jF69Tii8Y9IzEnDod7JFJ3sXfJq51AUDKu0psnViEUeouqE2KZGxTisiK6hKw/ xhWFIE+1Ma9Zb1SPTFn+BCZoLoAUMVw= -----END CERTIFICATE-----Generated at Wed Nov 5 17:16:39 2025 by rpki-client