$ rpki-client -vvf rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft File: YfcrXpPnk13XngQ1yBj4-acQ9ok.mft (raw, json) Hash identifier: aDhloLa5AZ0OqmnhbjOzhuk3kY3zI5MhdwA1RAxebcc= Subject key identifier: EA:FC:69:92:B5:01:2D:9D:B4:07:29:8E:5B:62:94:41:45:98:2E:1A Authority key identifier: 61:F7:2B:5E:93:E7:93:5D:D7:9E:04:35:C8:18:F8:F9:A7:10:F6:89 Certificate issuer: /CN=A913FE55/serialNumber=61F72B5E93E7935DD79E0435C818F8F9A710F689 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfcrXpPnk13XngQ1yBj4-acQ9ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft Manifest number: 4C Signing time: Wed 05 Nov 2025 07:31:00 +0000 Manifest this update: Wed 05 Nov 2025 07:31:00 +0000 Manifest next update: Wed 12 Nov 2025 07:31:00 +0000 Files and hashes: 1: YfcrXpPnk13XngQ1yBj4-acQ9ok.crl (hash: DhEXAtkj/DhgHwPocf4wtMrRa6tDV0XcBqPkE/iPcro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.crl rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfcrXpPnk13XngQ1yBj4-acQ9ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:30:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FE55, serialNumber=61F72B5E93E7935DD79E0435C818F8F9A710F689 Validity Not Before: Nov 5 07:31:00 2025 GMT Not After : Nov 12 07:31:00 2025 GMT Subject: CN=690afd34-aa74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:db:ef:4d:ed:4d:fa:d3:ba:e8:22:63:87:8d: 3d:d2:38:61:a0:cf:ca:d7:51:e2:5c:df:1b:6f:a3: 5b:2e:9f:5f:2a:26:da:81:90:5f:47:a6:2e:a4:bf: 36:0f:5a:3e:61:79:c9:f0:ac:06:4f:aa:df:9c:8d: d6:29:76:e6:4d:5b:29:3a:5a:90:b6:87:0e:55:84: 63:4c:6c:14:6d:3b:aa:37:17:59:42:f0:39:a5:36: d0:95:5f:f0:aa:f7:1c:e5:de:1c:e8:fe:b2:51:9c: a3:cc:42:d0:f5:49:87:bd:52:84:7c:e4:bc:2f:68: a1:42:13:43:95:dc:bd:bc:72:ec:bc:5d:40:9a:4e: 77:e0:4a:fa:68:d7:47:c5:14:92:53:1b:91:4e:62: 70:e6:05:50:67:8e:2a:05:13:4d:0f:71:b7:20:a9: 05:ff:25:2a:df:0f:e9:27:92:2c:8a:73:59:8d:d1: 8b:86:ed:eb:8c:ea:c6:3d:9c:db:7a:56:aa:2b:ed: 8e:3b:ab:4b:0b:69:44:da:50:fd:4b:a3:c2:64:3d: db:06:2e:10:26:07:e6:fc:14:12:42:61:0b:23:03: 5b:3f:90:9a:72:8b:2c:d3:c6:5f:19:b7:a5:09:3a: e7:b9:8e:50:82:de:f6:35:db:d6:59:cf:81:c2:18: e8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:FC:69:92:B5:01:2D:9D:B4:07:29:8E:5B:62:94:41:45:98:2E:1A X509v3 Authority Key Identifier: keyid:61:F7:2B:5E:93:E7:93:5D:D7:9E:04:35:C8:18:F8:F9:A7:10:F6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfcrXpPnk13XngQ1yBj4-acQ9ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:e4:c9:13:84:71:f0:13:fa:dc:ba:75:5c:1c:3b:08:cc:a0: db:f1:b2:d2:c4:5c:e0:23:eb:3a:a2:de:93:fd:6b:47:97:8e: 7d:a4:00:eb:37:66:24:b0:6d:0f:5e:8d:f0:a7:2b:d0:1a:50: 0e:83:f8:e4:71:c5:ea:a0:32:21:fc:78:25:de:9c:56:df:7f: 39:de:0e:40:4d:1e:40:e5:55:2f:f5:f4:71:89:74:01:fc:1c: 90:12:d5:56:e4:05:a9:74:a3:43:7a:1f:ed:77:84:bd:38:cd: 3e:30:97:a8:f5:43:73:2e:8b:79:d3:b0:e8:9c:35:86:a2:16: 9e:c1:b5:5f:78:a2:e3:b9:a4:16:83:45:2b:88:28:08:9e:17: c5:ac:17:71:9c:b6:2a:4c:cc:3d:67:c7:87:a0:a5:9a:66:a9: db:0c:32:e5:6e:53:0b:25:4a:9c:f6:a9:77:ce:34:68:f0:2a: 11:0f:b1:df:4f:c4:bd:3d:89:2c:5a:9a:fd:3e:5c:0d:e8:27: 91:fc:e1:40:33:96:40:41:0f:a4:22:c2:a1:9d:a8:ea:dc:ff: 5a:10:02:56:7f:92:a4:72:bc:1a:89:13:e1:04:45:4b:70:59: 02:28:7c:d3:73:10:07:43:00:b5:8e:cf:2d:28:69:9a:fe:87: e9:a2:bf:db -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RkU1NTExMC8GA1UEBRMoNjFGNzJCNUU5M0U3OTM1REQ3OUUwNDM1QzgxOEY4RjlB NzEwRjY4OTAeFw0yNTExMDUwNzMxMDBaFw0yNTExMTIwNzMxMDBaMBgxFjAUBgNV BAMTDTY5MGFmZDM0LWFhNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/2+9N7U3607roImOHjT3SOGGgz8rXUeJc3xtvo1sun18qJtqBkF9Hpi6kvzYP Wj5hecnwrAZPqt+cjdYpduZNWyk6WpC2hw5VhGNMbBRtO6o3F1lC8DmlNtCVX/Cq 9xzl3hzo/rJRnKPMQtD1SYe9UoR85LwvaKFCE0OV3L28cuy8XUCaTnfgSvpo10fF FJJTG5FOYnDmBVBnjioFE00PcbcgqQX/JSrfD+knkiyKc1mN0YuG7euM6sY9nNt6 Vqor7Y47q0sLaUTaUP1Lo8JkPdsGLhAmB+b8FBJCYQsjA1s/kJpyiyzTxl8Zt6UJ Oue5jlCC3vY129ZZz4HCGOhtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6vxpkrUB LZ20BymOW2KUQUWYLhowHwYDVR0jBBgwFoAUYfcrXpPnk13XngQ1yBj4+acQ9okw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGRTU1LzJENDU3ODAwNDcz QjExRjA4MzM2Rjc1Q0M0RjlBRTAyL1lmY3JYcFBuazEzWG5nUTF5Qmo0LWFjUTlv ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWWZjclhwUG5rMTNYbmdRMXlCajQtYWNROW9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNG RTU1LzJENDU3ODAwNDczQjExRjA4MzM2Rjc1Q0M0RjlBRTAyL1lmY3JYcFBuazEz WG5nUTF5Qmo0LWFjUTlvay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABLkyROEcfAT+ty6dVwcOwjMoNvxstLEXOAj6zqi3pP9a0eXjn2kAOs3 ZiSwbQ9ejfCnK9AaUA6D+ORxxeqgMiH8eCXenFbffzneDkBNHkDlVS/19HGJdAH8 HJAS1VbkBal0o0N6H+13hL04zT4wl6j1Q3Mui3nTsOicNYaiFp7BtV94ouO5pBaD RSuIKAieF8WsF3GctipMzD1nx4egpZpmqdsMMuVuUwslSpz2qXfONGjwKhEPsd9P xL09iSxamv0+XA3oJ5H84UAzlkBBD6QiwqGdqOrc/1oQAlZ/kqRyvBqJE+EERUtw WQIofNNzEAdDALWOzy0oaZr+h+miv9s= -----END CERTIFICATE-----Generated at Wed Nov 5 19:47:43 2025 by rpki-client