$ rpki-client -vvf rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft File: Yja2yVcFRCapTOamlDI45v5tH1Y.mft (raw, json) Hash identifier: VlnnpA3ljjuKal2SuTPC0dxviMTyLKpCyOo68x7pT1k= Subject key identifier: 00:98:C1:CD:17:10:70:F8:31:D2:5B:1C:15:F1:23:BF:F4:94:22:F2 Authority key identifier: 62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56 Certificate issuer: /CN=A915D655/serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56 Certificate serial: 0423 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft Manifest number: 041E Signing time: Wed 05 Nov 2025 00:27:10 +0000 Manifest this update: Wed 05 Nov 2025 00:27:09 +0000 Manifest next update: Wed 12 Nov 2025 00:27:09 +0000 Files and hashes: 1: Yja2yVcFRCapTOamlDI45v5tH1Y.crl (hash: br+crUdLGptUCI1Zh/S0K5TisdICoYtA3XWZKUhLciU=) 2: 8B626F5487C911EC908CE327C4F9AE02.roa (hash: 4ePFqqTPP+4ZfS7bacR18941px2N5kQ0emROx+NaWmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1059 (0x423) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D655, serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56 Validity Not Before: Nov 5 00:27:09 2025 GMT Not After : Nov 12 00:27:09 2025 GMT Subject: CN=690a99dd-5bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d4:f5:cc:98:32:b3:e2:7d:84:ea:f8:f2:cd: de:69:1c:f7:92:5e:75:9b:0f:6b:f0:e7:94:5b:ff: 01:d3:1b:57:2a:3a:e8:49:93:04:38:63:02:91:88: 60:e8:23:af:bf:02:4b:f4:e5:aa:34:05:cf:a2:cf: 2d:e8:e2:ae:ed:dd:58:06:b7:c2:9c:6e:a4:be:3a: 07:f2:d4:bd:62:11:8d:7a:58:cf:f1:c8:dc:0e:ba: 86:5b:cf:44:7b:f7:b0:49:7d:10:88:92:cd:27:6f: e8:1d:3b:4f:b2:1b:9e:51:11:8d:64:57:ee:f7:27: 19:79:d7:07:06:7a:eb:ac:7e:2c:66:ff:8c:d6:eb: d4:3d:0c:ea:99:e4:e7:88:6a:e6:97:ff:bc:f1:32: f8:ab:41:46:28:98:5d:b7:0c:dc:db:7c:73:2d:45: a1:7a:b5:6a:ed:93:31:5f:8a:a1:82:c6:10:45:da: fb:88:69:35:80:c6:3b:4c:90:15:95:8f:e9:33:b4: 66:e6:c6:83:9c:b3:e8:ad:db:b2:57:2c:00:a9:0c: 54:ef:45:34:42:91:12:b6:b9:f6:a2:c6:5e:07:e8: 0d:e3:dc:ac:15:0f:ad:ea:06:74:a2:db:62:fb:16: e3:1a:ab:2c:58:98:f5:c9:b9:44:2d:b7:05:ca:0f: ca:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:98:C1:CD:17:10:70:F8:31:D2:5B:1C:15:F1:23:BF:F4:94:22:F2 X509v3 Authority Key Identifier: keyid:62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:d1:43:8d:1d:c0:3d:2d:c9:ff:30:75:c2:54:ed:d0:36:96: 99:e9:ae:95:f6:67:6c:7d:cb:a2:59:1f:1c:b4:cb:a3:91:a2: 8e:b4:15:9b:3e:82:d2:2b:ec:fb:80:08:fc:aa:b1:ee:bd:42: 90:58:e9:bd:77:8d:7c:a4:5e:05:c0:17:97:45:54:65:8a:81: 68:00:91:34:67:d0:b5:27:66:8f:cb:57:52:11:71:16:a3:2b: bf:17:c4:15:b4:33:47:77:f5:76:b9:72:ee:1b:da:b7:ef:52: 4b:6e:fa:42:09:73:2e:fe:2f:d9:f3:7f:02:ee:25:0d:b3:9d: 28:4e:f9:09:60:a3:57:a7:ea:66:fc:f8:b2:5e:6c:6f:85:e7: e6:bf:62:4f:34:ed:94:91:93:9b:8b:e4:cb:c9:76:6e:a3:8c: 87:ed:9f:39:19:49:88:bc:a1:f9:97:d5:4e:7e:2b:3a:d9:25: cf:c1:14:04:e9:09:be:35:03:77:3a:41:ca:8e:ee:3b:2d:87: f6:69:a5:2b:bc:6f:9d:24:e2:af:25:03:12:47:fa:a4:81:2b: 8f:c3:d6:54:dc:40:03:05:b6:cb:68:ed:39:a4:3e:3b:68:5a: 1f:a1:8e:d3:65:d0:fd:e6:b3:9c:ee:51:f2:d6:c8:a7:73:f3: 96:a6:bd:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2NTUxMTAvBgNVBAUTKDYyMzZCNkM5NTcwNTQ0MjZBOTRDRTZBNjk0MzIzOEU2 RkU2RDFGNTYwHhcNMjUxMTA1MDAyNzA5WhcNMjUxMTEyMDAyNzA5WjAYMRYwFAYD VQQDEw02OTBhOTlkZC01YmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdT1zJgys+J9hOr48s3eaRz3kl51mw9r8OeUW/8B0xtXKjroSZMEOGMCkYhg 6COvvwJL9OWqNAXPos8t6OKu7d1YBrfCnG6kvjoH8tS9YhGNeljP8cjcDrqGW89E e/ewSX0QiJLNJ2/oHTtPshueURGNZFfu9ycZedcHBnrrrH4sZv+M1uvUPQzqmeTn iGrml/+88TL4q0FGKJhdtwzc23xzLUWherVq7ZMxX4qhgsYQRdr7iGk1gMY7TJAV lY/pM7Rm5saDnLPorduyVywAqQxU70U0QpEStrn2osZeB+gN49ysFQ+t6gZ0otti +xbjGqssWJj1yblELbcFyg/KIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFACYwc0X EHD4MdJbHBXxI7/0lCLyMB8GA1UdIwQYMBaAFGI2tslXBUQmqUzmppQyOOb+bR9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDY1NS9FN0JBQTBCRTg3 QzQxMUVDOTY5MjgxMUNDNEY5QUUwMi9ZamEyeVZjRlJDYXBUT2FtbERJNDV2NXRI MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lqYTJ5VmNGUkNhcFRPYW1sREk0NXY1dEgxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDY1NS9FN0JBQTBCRTg3QzQxMUVDOTY5MjgxMUNDNEY5QUUwMi9ZamEyeVZjRlJD YXBUT2FtbERJNDV2NXRIMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo0UONHcA9Lcn/MHXCVO3QNpaZ6a6V9mdsfcuiWR8ctMujkaKOtBWb PoLSK+z7gAj8qrHuvUKQWOm9d418pF4FwBeXRVRlioFoAJE0Z9C1J2aPy1dSEXEW oyu/F8QVtDNHd/V2uXLuG9q371JLbvpCCXMu/i/Z838C7iUNs50oTvkJYKNXp+pm /PiyXmxvhefmv2JPNO2UkZObi+TLyXZuo4yH7Z85GUmIvKH5l9VOfis62SXPwRQE 6Qm+NQN3OkHKju47LYf2aaUrvG+dJOKvJQMSR/qkgSuPw9ZU3EADBbbLaO05pD47 aFofoY7TZdD95rOc7lHy1sinc/OWpr3L -----END CERTIFICATE-----Generated at Wed Nov 5 05:42:19 2025 by rpki-client