$ rpki-client -vvf rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft File: _YASv-mRKe-ci7ekYDIUQvbSZWI.mft (raw, json) Hash identifier: tZTDtBmrn9cb7z0JRwB2v0ykjeWa52e3LQy6AIO0hRo= Subject key identifier: 4F:44:29:75:2E:A1:F5:67:09:8C:13:E1:54:39:1D:6E:75:65:78:1A Authority key identifier: FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62 Certificate issuer: /CN=A91807BB/serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562 Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft Manifest number: CF Signing time: Mon 03 Nov 2025 05:42:34 +0000 Manifest this update: Mon 03 Nov 2025 05:42:34 +0000 Manifest next update: Mon 10 Nov 2025 05:42:34 +0000 Files and hashes: 1: _YASv-mRKe-ci7ekYDIUQvbSZWI.crl (hash: AK6sIHwS8krZxF3HTnZgBaNdBpwVsNCs0i7RJzW8G+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.crl rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:42:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91807BB, serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562 Validity Not Before: Nov 3 05:42:34 2025 GMT Not After : Nov 10 05:42:34 2025 GMT Subject: CN=690840ca-bbcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2c:dd:5f:24:5e:49:d3:03:aa:5a:11:33:4c: bf:15:4b:c6:f2:7f:05:39:d2:68:b7:5d:fb:c7:ea: 90:98:62:0b:47:c9:f8:88:1f:fa:d5:41:74:11:b6: 0f:85:ee:b9:74:02:6b:78:83:f3:a7:e5:ec:d3:31: d9:46:14:d3:49:12:47:d2:75:44:4d:ce:ba:68:35: 46:20:81:bc:9e:db:9a:1d:d6:5e:59:c8:3e:02:f5: c0:7d:0b:b9:5b:f2:08:49:46:46:5f:d9:8a:21:a2: a8:dd:59:02:01:14:39:54:31:6f:df:f3:ca:11:fa: 98:53:25:af:37:48:ac:d5:c8:45:84:10:1d:cf:fd: 3d:86:0e:dd:00:be:dc:9e:85:7a:42:3e:4c:e3:00: f6:f9:9f:3b:26:bf:4d:5b:19:6f:c9:a7:9d:b9:f4: b1:31:42:09:1d:49:84:45:da:4e:ea:17:f9:db:68: 0c:fb:f7:86:b9:70:13:19:2b:34:46:12:d8:ad:ec: c2:a9:4b:c1:58:03:cd:78:c5:48:35:5c:02:7d:79: cf:b3:3e:b3:87:71:1d:d4:ed:75:a9:aa:f3:43:96: 6c:28:f5:91:a4:54:f1:cb:5c:1e:a8:68:c2:f5:72: c7:08:2c:55:d0:92:60:fb:68:d6:c8:d9:33:07:f9: 52:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:44:29:75:2E:A1:F5:67:09:8C:13:E1:54:39:1D:6E:75:65:78:1A X509v3 Authority Key Identifier: keyid:FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:f6:34:25:1c:28:2b:ac:d0:85:2d:71:76:4b:f1:33:d2:1e: ce:78:67:1b:3f:8c:ac:60:dd:42:1f:be:a1:5e:1a:78:44:98: 25:33:a7:b8:ca:a8:89:15:91:54:e2:d2:c9:fe:9a:67:e8:21: be:ce:1b:10:aa:62:1f:09:6f:85:6b:8e:d2:4f:54:eb:29:22: 11:b5:11:49:30:b2:7a:48:90:9b:9e:9f:aa:78:be:23:e8:e8: fa:44:6a:bd:d5:1a:93:7b:81:9b:68:5c:31:01:75:56:e8:49: a2:7b:45:fd:32:21:00:13:93:44:1f:38:10:28:47:bf:49:5a: de:d4:ad:b4:56:a5:8c:3a:3f:8f:8f:ff:82:b8:27:35:1a:e4: aa:a6:fb:4c:0c:b4:b7:d6:4c:b5:6d:d2:5e:d0:13:39:97:4b: 6e:d7:11:51:7b:b2:a6:d3:1e:b6:12:0c:28:f8:cd:1c:94:ee: 2a:d8:49:c9:99:a9:7f:0d:6e:cf:c1:f0:51:11:43:ac:ab:fc: 62:77:bd:fa:b8:c9:08:4c:7d:da:05:04:12:4b:4f:e9:68:b2: 02:c9:d7:82:7d:07:7c:58:fd:2f:68:63:91:51:79:0b:89:9d: b8:4b:e5:00:b6:52:ff:b9:12:fa:63:46:1d:d9:06:43:d5:c4: 5c:b5:4f:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA3QkIxMTAvBgNVBAUTKEZEODAxMkJGRTk5MTI5RUY5QzhCQjdBNDYwMzIxNDQy RjZEMjY1NjIwHhcNMjUxMTAzMDU0MjM0WhcNMjUxMTEwMDU0MjM0WjAYMRYwFAYD VQQDEw02OTA4NDBjYS1iYmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCzdXyReSdMDqloRM0y/FUvG8n8FOdJot137x+qQmGILR8n4iB/61UF0EbYP he65dAJreIPzp+Xs0zHZRhTTSRJH0nVETc66aDVGIIG8ntuaHdZeWcg+AvXAfQu5 W/IISUZGX9mKIaKo3VkCARQ5VDFv3/PKEfqYUyWvN0is1chFhBAdz/09hg7dAL7c noV6Qj5M4wD2+Z87Jr9NWxlvyaedufSxMUIJHUmERdpO6hf522gM+/eGuXATGSs0 RhLYrezCqUvBWAPNeMVINVwCfXnPsz6zh3Ed1O11qarzQ5ZsKPWRpFTxy1weqGjC 9XLHCCxV0JJg+2jWyNkzB/lSywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE9EKXUu ofVnCYwT4VQ5HW51ZXgaMB8GA1UdIwQYMBaAFP2AEr/pkSnvnIu3pGAyFEL20mVi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDdCQi8wMUQyMzlBNDdD QjMxMUVGOTZDOUYyNTBDNEY5QUUwMi9fWUFTdi1tUktlLWNpN2VrWURJVVF2YlNa V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19ZQVN2LW1SS2UtY2k3ZWtZRElVUXZiU1pXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDdCQi8wMUQyMzlBNDdDQjMxMUVGOTZDOUYyNTBDNEY5QUUwMi9fWUFTdi1tUktl LWNpN2VrWURJVVF2YlNaV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk9jQlHCgrrNCFLXF2S/Ez0h7OeGcbP4ysYN1CH76hXhp4RJglM6e4 yqiJFZFU4tLJ/ppn6CG+zhsQqmIfCW+Fa47ST1TrKSIRtRFJMLJ6SJCbnp+qeL4j 6Oj6RGq91RqTe4GbaFwxAXVW6Emie0X9MiEAE5NEHzgQKEe/SVre1K20VqWMOj+P j/+CuCc1GuSqpvtMDLS31ky1bdJe0BM5l0tu1xFRe7Km0x62Egwo+M0clO4q2EnJ mal/DW7PwfBREUOsq/xid736uMkITH3aBQQSS0/paLICydeCfQd8WP0vaGORUXkL iZ24S+UAtlL/uRL6Y0Yd2QZD1cRctU8T -----END CERTIFICATE-----Generated at Tue Nov 4 23:18:22 2025 by rpki-client