$ rpki-client -vvf rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft File: YWOpVUwzBnn36hZnixCNlk7ByAI.mft (raw, json) Hash identifier: 316joTAG/QEphcovVSBO32yuyHREvOK9belKSdySuio= Subject key identifier: 45:E4:02:0A:6E:24:48:87:61:50:D4:93:FF:99:6F:45:CD:B2:EB:15 Authority key identifier: 61:63:A9:55:4C:33:06:79:F7:EA:16:67:8B:10:8D:96:4E:C1:C8:02 Certificate issuer: /CN=A91364F5/serialNumber=6163A9554C330679F7EA16678B108D964EC1C802 Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YWOpVUwzBnn36hZnixCNlk7ByAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft Manifest number: 013F Signing time: Mon 03 Nov 2025 04:28:31 +0000 Manifest this update: Mon 03 Nov 2025 04:28:30 +0000 Manifest next update: Mon 10 Nov 2025 04:28:30 +0000 Files and hashes: 1: YWOpVUwzBnn36hZnixCNlk7ByAI.crl (hash: ihqe0AJa13/vl44R/1XSR1Z8vWFmI4GIdYFCjqbPz+8=) 2: 0992C84EAC9111EF81B7B058C4F9AE02.roa (hash: 0r1+bjf/CBoFjNEUVu+pdLpoE7fYxxmBMNd9J5fRyzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.crl rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YWOpVUwzBnn36hZnixCNlk7ByAI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91364F5, serialNumber=6163A9554C330679F7EA16678B108D964EC1C802 Validity Not Before: Nov 3 04:28:30 2025 GMT Not After : Nov 10 04:28:30 2025 GMT Subject: CN=69082f6e-9536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:be:9a:b6:da:88:38:0d:5b:4b:86:d7:fd:72: e7:f4:31:ee:aa:d6:fd:16:42:59:8a:30:a8:49:1c: b6:ee:39:dd:25:cc:01:03:14:a9:49:35:50:30:30: 55:9e:4b:4c:df:9a:d0:e8:21:0c:fb:0f:4e:49:6e: 44:09:be:e6:38:44:e4:2d:bf:9b:30:3a:31:0c:f6: 70:de:48:ec:84:c7:6c:28:89:df:22:ec:98:58:0a: c0:7a:24:84:c0:85:21:80:f3:ed:06:9b:1e:54:63: 1a:16:7f:36:94:e8:ef:01:06:f4:1d:d8:99:b2:3d: c9:37:b1:bd:6c:9f:08:70:b5:e4:4b:5b:ba:e5:18: 69:26:1c:23:03:51:bb:6c:b4:29:97:bf:f4:ea:8d: c1:83:1a:3b:12:e8:1d:7a:9c:ef:93:97:68:c0:d4: 7c:39:24:a0:f7:fc:ab:97:02:e3:30:d2:7f:eb:91: ae:89:46:c9:22:aa:86:56:3a:6c:6a:f7:46:b6:d9: c2:d6:4f:61:80:32:ea:6e:2d:f3:c8:9d:87:bf:37: d1:aa:31:47:57:13:fa:a4:99:14:e5:9d:58:bf:20: f8:db:b6:85:37:62:4f:5a:04:26:7f:ca:2e:7f:19: 37:da:d1:92:a2:13:c3:73:fb:7d:bc:f5:bf:bb:35: 71:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E4:02:0A:6E:24:48:87:61:50:D4:93:FF:99:6F:45:CD:B2:EB:15 X509v3 Authority Key Identifier: keyid:61:63:A9:55:4C:33:06:79:F7:EA:16:67:8B:10:8D:96:4E:C1:C8:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YWOpVUwzBnn36hZnixCNlk7ByAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a8:15:d1:17:77:40:80:af:8a:2b:c9:57:30:40:f5:cf:22: da:b7:f6:2d:35:f0:72:4c:9b:59:c6:93:61:2a:b5:8c:0c:86: 39:3b:5f:70:a6:60:ca:77:7b:00:52:f4:b9:e3:40:52:ce:eb: c7:15:57:8b:1e:62:c7:d9:df:a1:b9:e6:68:db:2e:cd:7c:ea: cd:fb:f3:4b:97:0d:2d:b8:9d:8f:8e:79:f4:18:21:61:94:18: 01:b1:bc:58:16:a0:b6:c9:89:38:e6:32:c4:e9:e3:4a:74:5b: cf:a7:30:7d:f3:55:cc:9a:03:d6:6e:4d:77:ac:21:5a:7c:13: c7:c3:41:09:a0:2d:32:eb:f0:42:5a:d6:f9:99:cc:a1:d6:b4: 8b:8d:db:00:f9:61:cc:f1:79:64:4d:0c:c3:d6:67:5c:0d:16: a2:7e:ff:cb:a5:1d:2d:ad:6c:38:26:c3:60:a1:c3:9f:61:68: 5e:13:d1:e2:93:af:85:fd:22:de:9c:71:3b:c9:21:42:9e:13: 9d:cf:93:a0:44:30:c7:fb:19:d0:5a:73:6a:86:50:10:04:65: 46:69:a4:31:ed:7f:16:7f:d1:b4:6e:26:a9:5a:d7:dc:c0:cc: 0d:6b:08:16:a8:d2:1f:fc:98:d8:ee:af:eb:9a:ff:27:08:eb: 2a:88:d3:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY0RjUxMTAvBgNVBAUTKDYxNjNBOTU1NEMzMzA2NzlGN0VBMTY2NzhCMTA4RDk2 NEVDMUM4MDIwHhcNMjUxMTAzMDQyODMwWhcNMjUxMTEwMDQyODMwWjAYMRYwFAYD VQQDEw02OTA4MmY2ZS05NTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApr6attqIOA1bS4bX/XLn9DHuqtb9FkJZijCoSRy27jndJcwBAxSpSTVQMDBV nktM35rQ6CEM+w9OSW5ECb7mOETkLb+bMDoxDPZw3kjshMdsKInfIuyYWArAeiSE wIUhgPPtBpseVGMaFn82lOjvAQb0HdiZsj3JN7G9bJ8IcLXkS1u65RhpJhwjA1G7 bLQpl7/06o3Bgxo7Eugdepzvk5dowNR8OSSg9/yrlwLjMNJ/65GuiUbJIqqGVjps avdGttnC1k9hgDLqbi3zyJ2HvzfRqjFHVxP6pJkU5Z1YvyD427aFN2JPWgQmf8ou fxk32tGSohPDc/t9vPW/uzVxiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEXkAgpu JEiHYVDUk/+Zb0XNsusVMB8GA1UdIwQYMBaAFGFjqVVMMwZ59+oWZ4sQjZZOwcgC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjRGNS81QjVCOTNFQ0Q5 RjkxMUVFOUVBRTVEN0RDNEY5QUUwMi9ZV09wVlV3ekJubjM2aFpuaXhDTmxrN0J5 QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lXT3BWVXd6Qm5uMzZoWm5peENObGs3QnlBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjRGNS81QjVCOTNFQ0Q5RjkxMUVFOUVBRTVEN0RDNEY5QUUwMi9ZV09wVlV3ekJu bjM2aFpuaXhDTmxrN0J5QUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMqBXRF3dAgK+KK8lXMED1zyLat/YtNfByTJtZxpNhKrWMDIY5O19w pmDKd3sAUvS540BSzuvHFVeLHmLH2d+hueZo2y7NfOrN+/NLlw0tuJ2Pjnn0GCFh lBgBsbxYFqC2yYk45jLE6eNKdFvPpzB981XMmgPWbk13rCFafBPHw0EJoC0y6/BC Wtb5mcyh1rSLjdsA+WHM8XlkTQzD1mdcDRaifv/LpR0trWw4JsNgocOfYWheE9Hi k6+F/SLenHE7ySFCnhOdz5OgRDDH+xnQWnNqhlAQBGVGaaQx7X8Wf9G0biapWtfc wMwNawgWqNIf/JjY7q/rmv8nCOsqiNPL -----END CERTIFICATE-----Generated at Tue Nov 4 21:29:27 2025 by rpki-client