$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft File: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft (raw, json) Hash identifier: 9X+NWsGEGNksMnuUjEpsjDQzy2M9BxSKlUmUqcfB6q0= Subject key identifier: 7B:E7:99:C6:C6:DC:AA:2A:7B:CC:C9:94:77:09:D9:D9:4C:36:50:2F Authority key identifier: 62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC Certificate issuer: /CN=A91685E9/serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft Manifest number: B5 Signing time: Wed 05 Nov 2025 06:36:27 +0000 Manifest this update: Wed 05 Nov 2025 06:36:27 +0000 Manifest next update: Wed 12 Nov 2025 06:36:27 +0000 Files and hashes: 1: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl (hash: fA5eqNo+NhwYyhwDmFjUlWWAjPEWb+WjrOiPZ5vF5NA=) 2: E3239FCAD48C11EFA27EEC37C4F9AE02.roa (hash: eDrkrHM6e7G8MkefF8uO0ebeRL2ZiilrSCVyjl1v/78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:36:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91685E9, serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC Validity Not Before: Nov 5 06:36:27 2025 GMT Not After : Nov 12 06:36:27 2025 GMT Subject: CN=690af06b-12cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:31:0f:54:c9:df:49:9f:a9:56:e5:b3:ae:64: 54:57:ef:87:c3:13:08:18:61:75:09:5f:d0:e1:77: f0:e3:04:b3:13:2a:e0:d8:49:67:e0:ff:31:50:60: 11:fc:56:8c:48:37:50:cd:f7:ab:72:a7:c8:d8:54: 83:4a:66:07:f8:36:b4:ff:b1:50:33:96:55:b8:e5: 8c:48:5b:af:96:de:91:80:74:d0:23:38:d2:83:0f: cf:0a:1f:b1:f6:7c:c2:ad:91:b4:5d:00:28:d7:fa: 23:6f:58:64:2a:bf:5d:b8:5d:71:3f:a9:7e:78:eb: e2:3f:75:09:7f:b6:d2:73:93:c5:0d:88:d1:fc:d9: 73:c6:3a:8d:b5:f9:5c:36:ff:6d:cc:64:08:8c:09: b3:0f:10:35:e2:f7:29:fa:90:97:b2:b1:c9:bf:25: 32:9a:d3:f7:b8:85:a4:b5:99:44:5c:99:c3:be:81: 22:ac:10:d9:86:a4:13:9a:11:a4:01:f5:97:e1:77: 68:13:fe:5c:20:50:ed:62:67:06:40:e7:76:85:a9: ce:cf:ef:26:5e:6f:47:16:26:54:c8:81:51:de:b4: 84:32:df:8a:0d:0a:ec:c8:4c:54:56:85:9c:9a:fe: b2:c0:68:a8:71:58:31:44:23:69:77:43:59:15:c5: dd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E7:99:C6:C6:DC:AA:2A:7B:CC:C9:94:77:09:D9:D9:4C:36:50:2F X509v3 Authority Key Identifier: keyid:62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ab:80:f9:4c:1a:cc:47:60:63:36:00:08:c4:47:62:37:62: 1b:ea:ce:96:38:67:c6:82:87:cf:8d:bc:b6:1b:d8:a9:63:30: 38:f3:8d:ea:90:4a:0a:af:03:a6:c8:cb:af:5f:92:5f:09:ce: a5:6b:74:72:51:7e:74:b9:7b:37:ee:8a:d4:48:69:5f:bd:6d: 4e:ea:cc:c8:2a:a4:72:f5:6f:88:a3:56:e7:36:f7:ab:d2:d5: 37:9d:25:5a:4a:5c:9b:58:2c:80:bb:56:7d:12:a3:1a:8d:7c: a3:b0:8f:0f:6d:fb:91:3b:e3:85:80:9d:5f:0a:e4:cf:9e:1a: 98:12:95:ce:f7:0e:58:e1:9e:34:22:b9:7b:3f:bf:1f:ba:3a: 7f:e9:77:66:27:58:9f:e4:e1:f9:06:e7:2e:d3:70:84:bf:ea: b5:dc:69:ef:5d:c2:40:53:f1:07:8c:e5:2d:ad:8d:ce:8d:92: ba:42:ff:8b:f5:3d:55:e4:32:27:87:c4:66:44:1a:75:a2:8b: b2:a9:f7:0d:78:03:4f:e2:fd:6a:27:54:7c:15:6e:ac:e7:42: 3e:44:eb:70:e6:d8:0c:40:de:ba:f1:63:6f:27:10:de:15:8c: 30:80:df:86:c0:9e:a2:bb:5b:67:bd:e8:3a:d6:cb:92:4f:3b: 2e:34:4d:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg1RTkxMTAvBgNVBAUTKDYyNEI5NkUxRDY2NUVENzhFNzhERkFGNkMyMjAxOTEw NzNEQjY2Q0MwHhcNMjUxMTA1MDYzNjI3WhcNMjUxMTEyMDYzNjI3WjAYMRYwFAYD VQQDEw02OTBhZjA2Yi0xMmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDEPVMnfSZ+pVuWzrmRUV++HwxMIGGF1CV/Q4Xfw4wSzEyrg2Eln4P8xUGAR /FaMSDdQzfercqfI2FSDSmYH+Da0/7FQM5ZVuOWMSFuvlt6RgHTQIzjSgw/PCh+x 9nzCrZG0XQAo1/ojb1hkKr9duF1xP6l+eOviP3UJf7bSc5PFDYjR/NlzxjqNtflc Nv9tzGQIjAmzDxA14vcp+pCXsrHJvyUymtP3uIWktZlEXJnDvoEirBDZhqQTmhGk AfWX4XdoE/5cIFDtYmcGQOd2hanOz+8mXm9HFiZUyIFR3rSEMt+KDQrsyExUVoWc mv6ywGiocVgxRCNpd0NZFcXdGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHvnmcbG 3Koqe8zJlHcJ2dlMNlAvMB8GA1UdIwQYMBaAFGJLluHWZe1454369sIgGRBz22bM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODVFOS9DMTEyRjU1Q0Qx NzYxMUVGOTVDNURFNUFDNEY5QUUwMi9Za3VXNGRabDdYam5qZnIyd2lBWkVIUGJa c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lrdVc0ZFpsN1hqbmpmcjJ3aUFaRUhQYlpzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODVFOS9DMTEyRjU1Q0QxNzYxMUVGOTVDNURFNUFDNEY5QUUwMi9Za3VXNGRabDdY am5qZnIyd2lBWkVIUGJac3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfq4D5TBrMR2BjNgAIxEdiN2Ib6s6WOGfGgofPjby2G9ipYzA4843q kEoKrwOmyMuvX5JfCc6la3RyUX50uXs37orUSGlfvW1O6szIKqRy9W+Io1bnNver 0tU3nSVaSlybWCyAu1Z9EqMajXyjsI8PbfuRO+OFgJ1fCuTPnhqYEpXO9w5Y4Z40 Irl7P78fujp/6XdmJ1if5OH5Bucu03CEv+q13GnvXcJAU/EHjOUtrY3OjZK6Qv+L 9T1V5DInh8RmRBp1oouyqfcNeANP4v1qJ1R8FW6s50I+ROtw5tgMQN668WNvJxDe FYwwgN+GwJ6iu1tnveg61suSTzsuNE1Y -----END CERTIFICATE-----Generated at Wed Nov 5 12:28:30 2025 by rpki-client