$ rpki-client -vvf rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft File: yYr7tLua6bGiej3TrVlWs07anGM.mft (raw, json) Hash identifier: T1C4pW+BZBPzk3oOFC3tT7hZCQOSN48ighGFSzT5Hzs= Subject key identifier: F0:F0:37:82:47:7F:C3:F4:EA:6C:AF:0B:03:5E:5F:64:46:4C:FD:B0 Authority key identifier: C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63 Certificate issuer: /CN=A915D529/serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63 Certificate serial: 0DFA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft Manifest number: 0DE2 Signing time: Tue 04 Nov 2025 17:56:45 +0000 Manifest this update: Tue 04 Nov 2025 17:56:44 +0000 Manifest next update: Tue 11 Nov 2025 17:56:44 +0000 Files and hashes: 1: yYr7tLua6bGiej3TrVlWs07anGM.crl (hash: Wo4qt+wsZqDMdih5SbQAl9zm59T7X3uMor0nXXl/DBA=) 2: 1D884A0AC36111E9A37AC46EC4F9AE02.roa (hash: qyDf++LPWxa+MkjWOgRr95EIpuQ2+myemcO9SD4YHEk=) 3: 1E573054C36111E9A37AC46EC4F9AE02.roa (hash: 9F91+IUTL7h3rCEta0BAPCIgikPUjvwFDwgS+OoqM04=) 4: 1CD82986C36111E9A37AC46EC4F9AE02.roa (hash: UeNWqDuc6Ln+l4WWol/JGxPQ9/25U+hHn/L6mfBQ43Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:56:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3578 (0xdfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D529, serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63 Validity Not Before: Nov 4 17:56:44 2025 GMT Not After : Nov 11 17:56:44 2025 GMT Subject: CN=690a3e5c-fe0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a0:9a:73:73:2c:e2:3a:91:07:82:c8:7b:7a: e1:f6:e4:6f:fc:40:87:c3:00:4c:ab:db:da:42:fd: 6f:0a:23:c9:4c:9f:71:00:e4:b2:c4:3c:cf:b1:83: fe:3c:5e:b6:da:45:92:b2:b8:ec:96:2a:fd:54:49: 7a:78:3d:ff:47:df:b0:6a:92:fe:f5:c1:4b:11:e9: 3d:11:05:0b:63:23:94:40:96:e7:cd:23:43:e1:a6: 2d:94:19:7e:e9:a6:c9:fd:e0:24:70:8c:f9:23:ed: 71:a7:b2:30:2d:e1:c3:8a:94:12:d7:4a:18:9a:43: 82:68:48:a4:5d:92:bc:5f:cb:b2:e8:1a:2d:4e:29: 16:2c:1a:c6:a6:41:84:52:2d:5a:59:21:65:90:18: 03:55:86:55:ad:84:0d:67:cd:9a:4d:d3:61:0e:7e: a9:f3:c8:c3:8e:2d:4f:b7:47:ae:a3:04:43:97:b9: 5d:ad:37:25:76:b2:15:8b:e3:51:26:cd:a9:ea:54: 6c:ab:d4:2b:60:43:5e:4c:81:fa:49:6c:14:95:c8: 97:e6:9e:d2:cd:76:03:88:b1:63:19:05:d1:d3:dc: 94:b3:b6:0b:3d:fb:14:22:db:7e:86:83:08:9c:95: e0:b6:ac:c7:58:6c:2f:a3:11:e8:bb:bf:34:e6:c9: 62:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F0:37:82:47:7F:C3:F4:EA:6C:AF:0B:03:5E:5F:64:46:4C:FD:B0 X509v3 Authority Key Identifier: keyid:C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:2f:e5:c4:d2:f8:ea:41:f1:c3:b0:d3:cc:c4:48:b9:e3:ed: d2:aa:8e:36:3d:47:49:c1:67:cd:fc:4d:93:d6:8a:33:c2:8f: 00:e1:79:b4:a6:02:d0:6b:b9:d7:02:a3:7c:fd:90:60:49:44: c9:0f:f4:38:a6:68:41:68:c0:bf:b6:ea:cd:36:1c:06:91:bb: 63:c6:d3:70:6f:a8:57:bc:ec:d9:aa:cc:75:26:58:5f:f2:ca: 56:e6:02:3a:ca:e5:0d:4a:4e:b5:ba:b9:51:9b:ef:61:7b:8c: 06:0f:2e:5c:a7:09:2f:ae:d5:43:0b:e5:4f:89:9f:bc:4e:90: f8:b0:ac:97:be:d1:06:da:4d:dd:31:d9:a6:d1:52:60:88:71: c9:40:2d:79:26:27:e6:be:c8:4b:7e:df:3c:76:7b:06:c9:5a: b3:3a:ec:64:51:20:ed:58:18:65:96:b6:8c:dd:21:1d:63:16: fc:05:41:2a:6c:cb:c6:ed:fa:3f:d5:8e:be:4a:00:9a:31:5b: 23:82:f8:34:0e:3a:fc:f1:39:27:ce:88:12:4b:f8:75:14:84: 53:88:85:3e:b2:a9:79:56:16:4d:83:d6:c1:fc:a8:1b:16:52: ec:07:09:d1:a2:8c:24:ee:9a:24:ce:be:21:aa:14:8f:21:65: da:31:a8:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ1MjkxMTAvBgNVBAUTKEM5OEFGQkI0QkI5QUU5QjFBMjdBM0REM0FENTk1NkIz NEVEQTlDNjMwHhcNMjUxMTA0MTc1NjQ0WhcNMjUxMTExMTc1NjQ0WjAYMRYwFAYD VQQDEw02OTBhM2U1Yy1mZTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKCac3Ms4jqRB4LIe3rh9uRv/ECHwwBMq9vaQv1vCiPJTJ9xAOSyxDzPsYP+ PF622kWSsrjslir9VEl6eD3/R9+wapL+9cFLEek9EQULYyOUQJbnzSND4aYtlBl+ 6abJ/eAkcIz5I+1xp7IwLeHDipQS10oYmkOCaEikXZK8X8uy6BotTikWLBrGpkGE Ui1aWSFlkBgDVYZVrYQNZ82aTdNhDn6p88jDji1Pt0euowRDl7ldrTcldrIVi+NR Js2p6lRsq9QrYENeTIH6SWwUlciX5p7SzXYDiLFjGQXR09yUs7YLPfsUItt+hoMI nJXgtqzHWGwvoxHou7805sliwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPDwN4JH f8P06myvCwNeX2RGTP2wMB8GA1UdIwQYMBaAFMmK+7S7mumxono9061ZVrNO2pxj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDUyOS8yMENGMkUxNEMz NjAxMUU5OEE1QzAyNkRDNEY5QUUwMi95WXI3dEx1YTZiR2llajNUclZsV3MwN2Fu R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lZcjd0THVhNmJHaWVqM1RyVmxXczA3YW5HTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDUyOS8yMENGMkUxNEMzNjAxMUU5OEE1QzAyNkRDNEY5QUUwMi95WXI3dEx1YTZi R2llajNUclZsV3MwN2FuR00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxL+XE0vjqQfHDsNPMxEi54+3Sqo42PUdJwWfN/E2T1oozwo8A4Xm0 pgLQa7nXAqN8/ZBgSUTJD/Q4pmhBaMC/turNNhwGkbtjxtNwb6hXvOzZqsx1Jlhf 8spW5gI6yuUNSk61urlRm+9he4wGDy5cpwkvrtVDC+VPiZ+8TpD4sKyXvtEG2k3d Mdmm0VJgiHHJQC15JifmvshLft88dnsGyVqzOuxkUSDtWBhllraM3SEdYxb8BUEq bMvG7fo/1Y6+SgCaMVsjgvg0Djr88TknzogSS/h1FIRTiIU+sql5VhZNg9bB/Kgb FlLsBwnRoowk7pokzr4hqhSPIWXaMaiB -----END CERTIFICATE-----Generated at Wed Nov 5 13:32:48 2025 by rpki-client