$ rpki-client -vvf rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft File: YJezTWdAEygGKfiFypA_1pq5W-M.mft (raw, json) Hash identifier: C23zbnBsnYG38DrGF4Z8VsAuJEX4zFmDluyTMmMi9mI= Subject key identifier: D8:E2:A8:DE:54:07:77:C1:FE:CD:D2:44:7D:D1:0F:00:62:E2:63:23 Authority key identifier: 60:97:B3:4D:67:40:13:28:06:29:F8:85:CA:90:3F:D6:9A:B9:5B:E3 Certificate issuer: /CN=A915E742/serialNumber=6097B34D674013280629F885CA903FD69AB95BE3 Certificate serial: 34FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJezTWdAEygGKfiFypA_1pq5W-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft Manifest number: 34E8 Signing time: Sun 02 Nov 2025 14:24:49 +0000 Manifest this update: Sun 02 Nov 2025 14:24:49 +0000 Manifest next update: Sun 09 Nov 2025 14:24:49 +0000 Files and hashes: 1: YJezTWdAEygGKfiFypA_1pq5W-M.crl (hash: OgQtIhJ/C9kHuAlObS7cdxKgjTKaszqaZ9EoWtOuYiQ=) 2: 41DE51D0DF3E11EEBE02E04AC4F9AE02.roa (hash: c58CEgh4CjRukGrqeNGEEV6pW1Olrp6Yxcjw73N7YrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.crl rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJezTWdAEygGKfiFypA_1pq5W-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13564 (0x34fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E742, serialNumber=6097B34D674013280629F885CA903FD69AB95BE3 Validity Not Before: Nov 2 14:24:49 2025 GMT Not After : Nov 9 14:24:49 2025 GMT Subject: CN=690769b1-3776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c5:40:ca:28:06:76:2c:06:38:00:9c:f7:5a: b1:bf:cb:78:71:25:0d:13:97:d7:fc:63:c2:ba:4d: 7b:39:03:7a:29:a1:5a:9a:9e:d1:d3:d1:84:ef:4e: 64:23:df:28:7a:6d:60:f3:04:c5:50:20:2d:17:b2: 0e:c1:09:24:0f:93:04:62:52:94:52:63:01:55:a4: 33:2e:8e:ba:a0:e7:84:82:7b:a5:62:6d:cc:35:47: 11:ae:99:a1:cc:08:fa:62:4d:f0:04:8b:06:7b:93: b9:12:c3:09:b3:f6:0a:35:b8:4b:07:8f:bf:76:50: a1:5a:9a:b7:18:56:aa:00:c7:1b:ce:86:0d:5c:75: c8:65:6b:80:0e:5e:b3:f7:e9:01:10:81:3b:7d:8a: a7:07:44:f5:e9:1c:44:4f:08:fe:55:4f:9f:12:04: 7f:6f:09:b8:95:18:d9:4a:91:7e:a3:02:cb:6e:e7: 47:33:24:85:61:78:91:94:45:0c:11:a3:2b:b2:0a: cd:43:18:1d:8e:77:00:ae:ba:a6:ee:bb:77:9c:b2: 2e:01:10:b3:bb:80:cf:2a:34:19:0b:87:03:99:75: cf:a8:f4:a7:32:71:92:b9:92:db:63:64:cf:52:c7: 99:26:d1:34:cc:fa:65:88:43:67:34:ae:10:c5:4a: 79:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E2:A8:DE:54:07:77:C1:FE:CD:D2:44:7D:D1:0F:00:62:E2:63:23 X509v3 Authority Key Identifier: keyid:60:97:B3:4D:67:40:13:28:06:29:F8:85:CA:90:3F:D6:9A:B9:5B:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJezTWdAEygGKfiFypA_1pq5W-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:96:c6:ee:93:c5:d9:9f:02:72:25:29:9a:42:f3:a5:b5:88: d9:fa:cb:45:48:20:c0:f8:de:fd:a4:c2:58:d3:1b:5d:a8:12: 00:ae:79:65:58:62:6e:f2:06:38:d0:34:dc:2c:4a:a3:a3:cf: 35:8d:ba:f6:f1:e2:7e:0e:41:7a:36:f1:2d:fb:a5:35:67:22: 65:3d:be:45:63:9a:c0:79:a9:ba:63:a8:1e:c5:1f:9a:00:88: 3a:16:68:8b:dd:23:b3:98:54:e3:cd:e7:7a:48:5f:4f:a6:82: 52:12:9c:e1:4c:b5:49:08:a9:42:41:72:92:0d:03:d0:79:c5: 4d:2c:05:a6:10:20:97:df:3a:33:f6:85:57:37:af:a1:27:bc: 17:f1:87:41:f3:d6:7d:d1:13:ac:de:09:0f:33:8e:5e:c2:95: 31:ac:83:54:bb:d6:14:7f:d2:eb:cc:51:d1:35:16:b0:9e:14: 89:93:33:1a:9c:af:08:52:07:84:de:22:92:4a:69:ae:53:a1: 4d:6d:b8:d8:e3:78:9c:1e:18:0c:c3:e3:5d:36:fc:62:01:16: 07:e3:eb:e1:1e:48:c7:21:6f:82:be:45:9c:3e:33:b0:92:f1: ff:a1:5f:62:73:45:bb:6b:c9:f1:e9:dd:20:ed:c2:ae:f9:a4: d8:83:a7:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU3NDIxMTAvBgNVBAUTKDYwOTdCMzRENjc0MDEzMjgwNjI5Rjg4NUNBOTAzRkQ2 OUFCOTVCRTMwHhcNMjUxMTAyMTQyNDQ5WhcNMjUxMTA5MTQyNDQ5WjAYMRYwFAYD VQQDEw02OTA3NjliMS0zNzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8VAyigGdiwGOACc91qxv8t4cSUNE5fX/GPCuk17OQN6KaFamp7R09GE705k I98oem1g8wTFUCAtF7IOwQkkD5MEYlKUUmMBVaQzLo66oOeEgnulYm3MNUcRrpmh zAj6Yk3wBIsGe5O5EsMJs/YKNbhLB4+/dlChWpq3GFaqAMcbzoYNXHXIZWuADl6z 9+kBEIE7fYqnB0T16RxETwj+VU+fEgR/bwm4lRjZSpF+owLLbudHMySFYXiRlEUM EaMrsgrNQxgdjncArrqm7rt3nLIuARCzu4DPKjQZC4cDmXXPqPSnMnGSuZLbY2TP UseZJtE0zPpliENnNK4QxUp5BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjiqN5U B3fB/s3SRH3RDwBi4mMjMB8GA1UdIwQYMBaAFGCXs01nQBMoBin4hcqQP9aauVvj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTc0Mi8yRUQwRjVGQzFE ODUxMUUyQjAzMkE5REIwOEIwMkNEMi9ZSmV6VFdkQUV5Z0dLZmlGeXBBXzFwcTVX LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lKZXpUV2RBRXlnR0tmaUZ5cEFfMXBxNVctTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTc0Mi8yRUQwRjVGQzFEODUxMUUyQjAzMkE5REIwOEIwMkNEMi9ZSmV6VFdkQUV5 Z0dLZmlGeXBBXzFwcTVXLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLlsbuk8XZnwJyJSmaQvOltYjZ+stFSCDA+N79pMJY0xtdqBIArnll WGJu8gY40DTcLEqjo881jbr28eJ+DkF6NvEt+6U1ZyJlPb5FY5rAeam6Y6gexR+a AIg6FmiL3SOzmFTjzed6SF9PpoJSEpzhTLVJCKlCQXKSDQPQecVNLAWmECCX3zoz 9oVXN6+hJ7wX8YdB89Z90ROs3gkPM45ewpUxrINUu9YUf9LrzFHRNRawnhSJkzMa nK8IUgeE3iKSSmmuU6FNbbjY43icHhgMw+NdNvxiARYH4+vhHkjHIW+CvkWcPjOw kvH/oV9ic0W7a8nx6d0g7cKu+aTYg6cu -----END CERTIFICATE-----Generated at Tue Nov 4 02:17:05 2025 by rpki-client