$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft File: yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft (raw, json) Hash identifier: x1UvVZPx0rglzNW/QiqdIMuag8MILt1Xlgycs1S8HSk= Subject key identifier: 4C:8F:82:F5:34:0D:4E:28:02:87:E0:61:0D:A0:FC:4F:93:B0:60:97 Authority key identifier: C9:12:B0:54:CA:43:A9:34:C1:77:57:33:D8:4B:F1:6E:48:56:BE:F0 Certificate issuer: /CN=A917E1FA/serialNumber=C912B054CA43A934C1775733D84BF16E4856BEF0 Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRKwVMpDqTTBd1cz2EvxbkhWvvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft Manifest number: 4E Signing time: Mon 03 Nov 2025 07:18:04 +0000 Manifest this update: Mon 03 Nov 2025 07:18:04 +0000 Manifest next update: Mon 10 Nov 2025 07:18:04 +0000 Files and hashes: 1: yRKwVMpDqTTBd1cz2EvxbkhWvvA.crl (hash: QsEYsjStkFyKO/pqchkA+lEu4gNjM24K5+fWfi/Ny58=) 2: 7354ACC0472811F0ADE2D44BC4F9AE02.roa (hash: wcclgPl4R6E/Zzr/USbPvSIER4uFng9U6618g1EWkBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.crl rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRKwVMpDqTTBd1cz2EvxbkhWvvA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:18:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1FA, serialNumber=C912B054CA43A934C1775733D84BF16E4856BEF0 Validity Not Before: Nov 3 07:18:04 2025 GMT Not After : Nov 10 07:18:04 2025 GMT Subject: CN=6908572c-9024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:34:f3:ae:25:31:b9:a9:66:8d:a7:ad:93:33: 18:1f:6c:b0:4d:ab:79:7a:f1:d4:a3:f9:97:0a:6d: 8b:5b:a2:00:1c:e8:9f:45:ae:65:f4:25:fb:b8:7c: e5:50:75:96:7f:40:eb:3d:eb:11:33:0d:28:1c:cc: 50:5a:4b:fe:aa:45:b1:55:5e:93:51:a0:08:f4:e8: 98:1c:a3:ba:3d:72:b9:71:8c:2b:23:80:51:8c:96: 49:e3:1f:c0:de:fa:63:32:3f:6e:7b:85:50:38:91: ec:bc:f7:98:13:2a:74:3f:29:28:0e:02:a1:69:c2: a7:85:b6:c1:c4:fd:2d:8f:17:e6:fa:34:5e:fb:2d: be:76:84:28:a3:40:7f:11:5a:8c:eb:bb:7f:90:63: 9f:c5:26:a1:95:fb:37:48:23:46:4f:b9:e5:c0:8c: 22:7a:88:48:e9:79:5c:d4:a9:1a:6a:a5:7c:9e:4a: e4:7b:ae:21:0d:cb:1d:50:10:dd:55:21:21:ac:81: 29:71:c9:7e:e6:16:cb:79:c5:64:1b:af:f9:4c:4e: 98:6e:6c:43:c6:d3:a0:21:c7:13:c1:35:65:f7:ad: 72:ed:24:c4:3a:26:9a:43:95:09:56:9a:a2:20:3b: 17:f8:63:96:20:22:0f:9e:48:a0:03:66:a0:ea:03: df:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:8F:82:F5:34:0D:4E:28:02:87:E0:61:0D:A0:FC:4F:93:B0:60:97 X509v3 Authority Key Identifier: keyid:C9:12:B0:54:CA:43:A9:34:C1:77:57:33:D8:4B:F1:6E:48:56:BE:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRKwVMpDqTTBd1cz2EvxbkhWvvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:d6:f6:69:00:f5:ae:f2:9b:75:e9:b2:0b:83:9f:83:68:50: fb:53:f6:34:fb:ee:1f:c4:bd:4e:e4:3a:9f:da:5a:d7:86:9c: bb:89:50:62:32:0e:b0:e4:20:3a:5f:e1:29:6c:0c:b5:be:6b: 25:22:59:75:74:9d:ac:80:45:70:bd:b9:d2:c0:5b:f2:9a:36: 96:9b:e1:a4:b9:71:05:92:82:ad:72:20:d9:61:c4:60:4b:22: 73:02:01:5f:e5:f8:04:d9:d0:df:cd:4a:b8:9f:79:1a:4e:a4: 46:c8:50:c0:80:cf:65:0f:67:3a:93:98:3e:e6:12:df:3f:53: 31:ff:ff:04:5d:4e:b0:cd:f5:68:07:9f:92:94:80:e6:46:91: eb:97:77:dc:ef:32:4e:6b:44:d7:1a:97:71:3e:bd:b5:ae:cd: d5:ee:27:e5:8a:f0:18:01:d0:92:18:d2:14:d2:9f:4f:e0:1f: 62:ba:61:59:70:b1:06:91:de:82:ec:86:b4:b3:97:4e:13:23: a6:47:a0:2f:74:97:17:09:cb:d9:5e:49:a7:e4:7f:60:42:b6: ff:00:cc:b3:aa:61:a4:c8:d4:46:2f:95:2f:24:5f:e3:85:ea: 39:47:0b:a0:e3:6c:05:5c:85:88:6b:62:e3:45:24:ed:a5:7a: 15:68:ed:e4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTFGQTExMC8GA1UEBRMoQzkxMkIwNTRDQTQzQTkzNEMxNzc1NzMzRDg0QkYxNkU0 ODU2QkVGMDAeFw0yNTExMDMwNzE4MDRaFw0yNTExMTAwNzE4MDRaMBgxFjAUBgNV BAMTDTY5MDg1NzJjLTkwMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoNPOuJTG5qWaNp62TMxgfbLBNq3l68dSj+ZcKbYtbogAc6J9FrmX0Jfu4fOVQ dZZ/QOs96xEzDSgczFBaS/6qRbFVXpNRoAj06Jgco7o9crlxjCsjgFGMlknjH8De +mMyP257hVA4key895gTKnQ/KSgOAqFpwqeFtsHE/S2PF+b6NF77Lb52hCijQH8R Wozru3+QY5/FJqGV+zdII0ZPueXAjCJ6iEjpeVzUqRpqpXyeSuR7riENyx1QEN1V ISGsgSlxyX7mFst5xWQbr/lMTphubEPG06AhxxPBNWX3rXLtJMQ6JppDlQlWmqIg Oxf4Y5YgIg+eSKADZqDqA9/9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTI+C9TQN TigCh+BhDaD8T5OwYJcwHwYDVR0jBBgwFoAUyRKwVMpDqTTBd1cz2EvxbkhWvvAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFMUZBL0EyRDVFRTVFNDVB MzExRjA5NUVGRkQ0OEM0RjlBRTAyL3lSS3dWTXBEcVRUQmQxY3oyRXZ4YmtoV3Z2 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveVJLd1ZNcERxVFRCZDFjejJFdnhia2hXdnZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF MUZBL0EyRDVFRTVFNDVBMzExRjA5NUVGRkQ0OEM0RjlBRTAyL3lSS3dWTXBEcVRU QmQxY3oyRXZ4YmtoV3Z2QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHHW9mkA9a7ym3XpsguDn4NoUPtT9jT77h/EvU7kOp/aWteGnLuJUGIy DrDkIDpf4SlsDLW+ayUiWXV0nayARXC9udLAW/KaNpab4aS5cQWSgq1yINlhxGBL InMCAV/l+ATZ0N/NSrifeRpOpEbIUMCAz2UPZzqTmD7mEt8/UzH//wRdTrDN9WgH n5KUgOZGkeuXd9zvMk5rRNcal3E+vbWuzdXuJ+WK8BgB0JIY0hTSn0/gH2K6YVlw sQaR3oLshrSzl04TI6ZHoC90lxcJy9leSafkf2BCtv8AzLOqYaTI1EYvlS8kX+OF 6jlHC6DjbAVchYhrYuNFJO2lehVo7eQ= -----END CERTIFICATE-----Generated at Wed Nov 5 05:11:06 2025 by rpki-client