$ rpki-client -vvf rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft File: YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft (raw, json) Hash identifier: zAGgt54rT206vHaGJ2rs0vVS9GmMYowwz3Ryf656fOE= Subject key identifier: 98:37:8B:D9:5B:CA:B2:84:81:BA:19:B3:30:54:A2:9D:51:F6:1D:F8 Authority key identifier: 60:02:50:F6:38:36:FB:4C:2F:23:F4:87:D7:14:BF:32:F7:59:A5:B5 Certificate issuer: /CN=A917799C/serialNumber=600250F63836FB4C2F23F487D714BF32F759A5B5 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft Manifest number: 43 Signing time: Wed 05 Nov 2025 07:35:34 +0000 Manifest this update: Wed 05 Nov 2025 07:35:33 +0000 Manifest next update: Wed 12 Nov 2025 07:35:33 +0000 Files and hashes: 1: YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl (hash: 47rh70+OY3fDilX2J0109HLRTz9QIltf2hL5uYAdMu0=) 2: 05939A1C554611F09F737331C4F9AE02.roa (hash: wHvbvusPDO6yRWHfYUtmsZklb3g0w6TjKvsCHWFb4uE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:35:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917799C, serialNumber=600250F63836FB4C2F23F487D714BF32F759A5B5 Validity Not Before: Nov 5 07:35:33 2025 GMT Not After : Nov 12 07:35:33 2025 GMT Subject: CN=690afe45-1c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f2:fd:ce:94:20:61:30:8a:51:f8:76:ce:44: 3d:5d:62:fd:4e:32:67:4f:e0:9b:0c:25:b7:b4:df: fe:71:e2:51:07:e4:76:53:12:bc:3e:28:82:6c:0f: 1e:b5:a2:91:ab:f0:21:7a:e7:2c:22:bb:ad:44:93: c1:61:6a:d3:af:2d:ca:8f:0c:62:6d:c7:2e:90:5b: 05:e4:55:02:72:83:cb:31:54:1f:d0:3a:e9:f0:75: 8a:79:23:2d:61:31:9d:b5:56:aa:37:ba:8a:ec:41: 62:82:ea:ce:69:ec:d4:62:df:c5:c7:b2:13:38:db: 44:f0:58:85:0a:d9:73:b2:9c:d4:92:5f:08:9d:71: 5f:93:89:f0:7d:d0:dc:a5:1b:50:ae:12:e5:1e:fa: e5:3c:06:18:25:b5:9c:71:a9:31:1d:7b:d2:a1:97: 85:67:71:36:0f:fc:da:84:42:1d:91:3b:e3:8f:dd: 23:16:07:3b:5f:da:60:e7:7f:0a:b7:9f:9d:63:9c: fb:25:f1:76:40:09:15:cc:7d:f2:68:90:c4:95:cb: 67:f1:13:9e:d6:12:f0:d7:db:01:07:a0:2f:0c:75: 06:40:79:b5:25:66:5d:e7:7d:45:e2:d8:e3:94:4a: ab:4d:8f:15:bc:bd:dc:21:d1:23:82:3a:27:59:e7: 03:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:37:8B:D9:5B:CA:B2:84:81:BA:19:B3:30:54:A2:9D:51:F6:1D:F8 X509v3 Authority Key Identifier: keyid:60:02:50:F6:38:36:FB:4C:2F:23:F4:87:D7:14:BF:32:F7:59:A5:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a3:bb:81:ce:ac:f0:70:a7:84:2a:1c:21:1a:ec:3e:7b:e5: 30:b7:63:87:ad:2f:d3:a7:17:a1:88:ac:7d:e5:28:42:64:14: c2:0c:f2:d0:7a:8f:90:ba:19:81:39:5e:0a:c6:97:83:b2:0e: c4:65:4a:dd:63:3b:c1:0d:09:fb:4e:41:3b:44:a7:dd:57:a6: d0:00:7c:dc:12:fd:fe:06:ae:ef:ef:23:d3:0f:46:fd:73:f4: fa:2f:7f:d3:bb:fd:03:5d:39:72:a2:43:87:bf:62:b8:39:a9: 5b:d3:9f:ba:2d:4d:79:7e:5e:5b:9b:9a:44:79:23:2f:d8:94: 62:2a:1d:2f:94:4f:ce:33:30:2b:70:8d:04:5f:36:b0:1c:13: e0:a7:00:ce:25:30:ba:94:51:40:30:01:c8:06:1f:bb:54:9c: 59:b8:a1:91:91:09:83:0f:2b:d4:5d:e9:49:4a:80:f3:de:19: 98:d5:40:96:2e:e8:b4:92:7e:05:d0:57:46:33:3d:11:d1:2b: 17:4c:c5:69:ae:8e:ec:af:21:2c:66:85:50:5f:66:54:63:a7: 39:67:e9:1d:14:34:c4:ac:19:94:70:25:8a:7f:21:de:71:af: 35:29:5b:ae:32:04:9b:f7:4a:93:3f:6c:a1:cf:97:59:21:34: 9c:9c:e8:37 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 Nzk5QzExMC8GA1UEBRMoNjAwMjUwRjYzODM2RkI0QzJGMjNGNDg3RDcxNEJGMzJG NzU5QTVCNTAeFw0yNTExMDUwNzM1MzNaFw0yNTExMTIwNzM1MzNaMBgxFjAUBgNV BAMTDTY5MGFmZTQ1LTFjNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDY8v3OlCBhMIpR+HbORD1dYv1OMmdP4JsMJbe03/5x4lEH5HZTErw+KIJsDx61 opGr8CF65ywiu61Ek8FhatOvLcqPDGJtxy6QWwXkVQJyg8sxVB/QOunwdYp5Iy1h MZ21Vqo3uorsQWKC6s5p7NRi38XHshM420TwWIUK2XOynNSSXwidcV+TifB90Nyl G1CuEuUe+uU8BhgltZxxqTEde9Khl4VncTYP/NqEQh2RO+OP3SMWBztf2mDnfwq3 n51jnPsl8XZACRXMffJokMSVy2fxE57WEvDX2wEHoC8MdQZAebUlZl3nfUXi2OOU SqtNjxW8vdwh0SOCOidZ5wMpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmDeL2VvK soSBuhmzMFSinVH2HfgwHwYDVR0jBBgwFoAUYAJQ9jg2+0wvI/SH1xS/MvdZpbUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3OTlDLzM1RUJEOEU4NTU0 NDExRjA5MzQyQUMwQ0M0RjlBRTAyL1lBSlE5amcyLTB3dklfU0gxeFNfTXZkWnBi VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWUFKUTlqZzItMHd2SV9TSDF4U19NdmRacGJVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3 OTlDLzM1RUJEOEU4NTU0NDExRjA5MzQyQUMwQ0M0RjlBRTAyL1lBSlE5amcyLTB3 dklfU0gxeFNfTXZkWnBiVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHyju4HOrPBwp4QqHCEa7D575TC3Y4etL9OnF6GIrH3lKEJkFMIM8tB6 j5C6GYE5XgrGl4OyDsRlSt1jO8ENCftOQTtEp91XptAAfNwS/f4Gru/vI9MPRv1z 9Povf9O7/QNdOXKiQ4e/Yrg5qVvTn7otTXl+XlubmkR5Iy/YlGIqHS+UT84zMCtw jQRfNrAcE+CnAM4lMLqUUUAwAcgGH7tUnFm4oZGRCYMPK9Rd6UlKgPPeGZjVQJYu 6LSSfgXQV0YzPRHRKxdMxWmujuyvISxmhVBfZlRjpzln6R0UNMSsGZRwJYp/Id5x rzUpW64yBJv3SpM/bKHPl1khNJyc6Dc= -----END CERTIFICATE-----Generated at Wed Nov 5 17:07:56 2025 by rpki-client