$ rpki-client -vvf rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft File: yWKh77HWheqfDoW0F2aCj2oT7-U.mft (raw, json) Hash identifier: 9ZCrRwfaXjq2m5WC26soXbqL57lIbM0YweTjaUvzXrA= Subject key identifier: F8:D8:47:75:3D:47:8A:DD:08:32:CA:D3:B0:71:EE:95:61:38:B7:DC Authority key identifier: C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5 Certificate issuer: /CN=A91188F4/serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5 Certificate serial: 04BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft Manifest number: 04B5 Signing time: Tue 04 Nov 2025 23:59:23 +0000 Manifest this update: Tue 04 Nov 2025 23:59:22 +0000 Manifest next update: Tue 11 Nov 2025 23:59:22 +0000 Files and hashes: 1: yWKh77HWheqfDoW0F2aCj2oT7-U.crl (hash: owzvqXc1J6lLv0JBVWrGS9SW/QZbN3J0jXFI37pny2k=) 2: 7CAFA5C44CA711EC9D22716BC4F9AE02.roa (hash: aRUayRfr0vMR7tS5Y4z3m5ZDFVHmg6WwIEoeJRznQ08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1210 (0x4ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91188F4, serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5 Validity Not Before: Nov 4 23:59:22 2025 GMT Not After : Nov 11 23:59:22 2025 GMT Subject: CN=690a935a-8b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ad:f8:e0:25:e0:9c:84:63:92:2b:f0:7b:c8: cf:e4:a8:a0:11:70:cf:f6:7e:65:00:0e:23:26:08: 90:1a:8d:24:c3:4c:9a:1a:22:91:7e:97:90:4d:2b: a7:d7:11:3d:72:13:c5:4e:11:5b:db:a1:4d:65:8a: 1f:1c:64:53:b9:5f:fc:fc:5a:be:4d:33:19:ec:4b: 64:31:59:e3:54:1a:d8:8f:ed:39:7b:7b:7c:bb:89: fd:e3:c6:0e:89:02:c9:73:d5:d8:70:3a:43:ee:f1: 5c:ba:2e:27:10:e1:aa:da:74:4d:07:1a:50:31:ec: ae:bc:13:75:3b:92:5d:d2:77:f5:b8:34:91:7a:cc: c0:78:8c:85:17:1c:39:59:5a:26:29:20:b1:f7:43: b1:03:31:dc:9e:a9:ce:7d:06:31:58:68:40:03:b0: 88:77:c3:27:60:05:08:3e:34:f5:bc:cf:d7:5f:9a: 1e:5f:ba:ed:22:e6:b6:82:43:36:7e:a6:a6:db:17: ee:4d:a1:f6:6b:85:e0:99:30:e4:11:a4:f6:5d:1f: 94:d2:c7:f2:60:ca:aa:ce:07:59:0a:fd:e8:f8:25: 27:68:5b:15:98:92:99:f4:cf:25:d0:eb:d5:c5:37: 88:68:33:95:a8:c6:e6:4c:5a:ac:16:33:3f:e5:9e: f2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D8:47:75:3D:47:8A:DD:08:32:CA:D3:B0:71:EE:95:61:38:B7:DC X509v3 Authority Key Identifier: keyid:C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:59:30:a2:ad:12:f9:0c:87:31:9c:8c:98:5c:07:a4:d3:0a: b8:55:80:04:e8:0e:e9:d2:10:bd:84:28:30:60:77:82:c7:e4: 6e:80:89:01:81:3d:66:af:52:ab:f5:7a:09:2d:75:38:b5:ae: f2:ed:87:88:76:fa:c8:fe:fe:ec:41:b1:47:91:bf:f5:48:ca: ef:da:c6:5c:c5:95:dd:fb:28:db:e9:ff:c7:7f:a0:f6:e0:1e: 1c:8c:e9:c1:0f:1c:7b:93:2a:35:4d:73:bc:05:5e:07:9c:58: 5b:83:2f:eb:fc:aa:12:a6:d2:2b:b2:f9:cb:74:d8:2c:63:96: 0f:36:99:78:c5:7d:9b:98:69:4e:48:c5:70:b8:73:ac:16:ac: f4:f8:9f:d4:53:04:5b:c8:2b:73:98:f2:3f:68:03:89:79:79: 25:e5:5a:4d:cf:83:b9:80:d0:2d:74:99:c3:88:23:14:79:32: ff:58:35:cb:5d:d2:77:9e:99:a9:21:b4:0c:c3:8e:05:c6:36: 80:77:67:f8:b5:99:ef:29:c9:3c:49:0c:a4:92:15:90:d7:49: 31:52:79:90:81:46:73:44:57:ef:70:a3:a5:40:dd:4c:91:e6: 87:ba:07:2e:ba:b5:62:46:ca:1d:34:08:cd:ae:66:c2:f0:62: 7e:bc:f7:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg4RjQxMTAvBgNVBAUTKEM5NjJBMUVGQjFENjg1RUE5RjBFODVCNDE3NjY4MjhG NkExM0VGRTUwHhcNMjUxMTA0MjM1OTIyWhcNMjUxMTExMjM1OTIyWjAYMRYwFAYD VQQDEw02OTBhOTM1YS04YjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA06344CXgnIRjkivwe8jP5KigEXDP9n5lAA4jJgiQGo0kw0yaGiKRfpeQTSun 1xE9chPFThFb26FNZYofHGRTuV/8/Fq+TTMZ7EtkMVnjVBrYj+05e3t8u4n948YO iQLJc9XYcDpD7vFcui4nEOGq2nRNBxpQMeyuvBN1O5Jd0nf1uDSReszAeIyFFxw5 WVomKSCx90OxAzHcnqnOfQYxWGhAA7CId8MnYAUIPjT1vM/XX5oeX7rtIua2gkM2 fqam2xfuTaH2a4XgmTDkEaT2XR+U0sfyYMqqzgdZCv3o+CUnaFsVmJKZ9M8l0OvV xTeIaDOVqMbmTFqsFjM/5Z7ylQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjYR3U9 R4rdCDLK07Bx7pVhOLfcMB8GA1UdIwQYMBaAFMlioe+x1oXqnw6FtBdmgo9qE+/l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODhGNC85MjhEQjBGNjRD QTMxMUVDODIzQTg5NjVDNEY5QUUwMi95V0toNzdIV2hlcWZEb1cwRjJhQ2oyb1Q3 LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lXS2g3N0hXaGVxZkRvVzBGMmFDajJvVDctVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODhGNC85MjhEQjBGNjRDQTMxMUVDODIzQTg5NjVDNEY5QUUwMi95V0toNzdIV2hl cWZEb1cwRjJhQ2oyb1Q3LVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmWTCirRL5DIcxnIyYXAek0wq4VYAE6A7p0hC9hCgwYHeCx+RugIkB gT1mr1Kr9XoJLXU4ta7y7YeIdvrI/v7sQbFHkb/1SMrv2sZcxZXd+yjb6f/Hf6D2 4B4cjOnBDxx7kyo1TXO8BV4HnFhbgy/r/KoSptIrsvnLdNgsY5YPNpl4xX2bmGlO SMVwuHOsFqz0+J/UUwRbyCtzmPI/aAOJeXkl5VpNz4O5gNAtdJnDiCMUeTL/WDXL XdJ3npmpIbQMw44FxjaAd2f4tZnvKck8SQykkhWQ10kxUnmQgUZzRFfvcKOlQN1M keaHugcuurViRsodNAjNrmbC8GJ+vPcT -----END CERTIFICATE-----Generated at Wed Nov 5 13:32:25 2025 by rpki-client