$ rpki-client -vvf rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft File: -YvpQtnreFakMNG8KUc7xN1nf-o.mft (raw, json) Hash identifier: xO1NLSa9ItpjjPpkgjXi5ebFbH0RaSb9wUp0IT5IJrk= Subject key identifier: 97:02:5F:DF:68:7B:3E:F4:85:E7:CB:E1:1D:DE:B1:0E:5A:A7:64:30 Authority key identifier: F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA Certificate issuer: /CN=A91949C1/serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft Manifest number: 0102 Signing time: Wed 05 Nov 2025 05:12:30 +0000 Manifest this update: Wed 05 Nov 2025 05:12:30 +0000 Manifest next update: Wed 12 Nov 2025 05:12:30 +0000 Files and hashes: 1: -YvpQtnreFakMNG8KUc7xN1nf-o.crl (hash: wKccooe+O1iW7eb6qPY+PZ7s3OzSPalmzxTpJ0l5AbQ=) 2: 5E1227E22DD511EF9AFE395EC4F9AE02.roa (hash: //CtK2APwvuKqYfNGso7I/JYlqJyjoNEWh980lWprcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91949C1, serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA Validity Not Before: Nov 5 05:12:30 2025 GMT Not After : Nov 12 05:12:30 2025 GMT Subject: CN=690adcbe-512b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9d:60:17:09:18:f9:63:d6:a1:4d:ce:75:2d: 31:65:9a:49:ee:ba:e6:ca:9f:28:87:61:a7:6b:a0: d8:a2:db:76:a2:4d:b6:63:3c:26:74:c7:d5:31:3c: 05:74:ad:ff:ed:c2:03:5a:f3:22:42:9d:6e:39:c5: ca:8a:38:08:17:11:24:9d:eb:f3:2a:ae:e1:92:78: 0f:c6:4d:fb:df:30:0d:a2:13:87:8c:6f:47:81:27: 2d:42:4b:b4:3a:e2:2b:17:83:0b:6c:00:b2:13:7f: ff:96:3e:d5:7b:56:04:d3:5a:39:57:75:15:c7:fe: ac:8c:48:65:48:66:88:e1:0c:71:30:c8:28:58:1e: 5c:3e:92:7f:40:53:42:38:58:39:d9:7e:06:f2:2f: 87:95:e6:bb:c9:0a:a9:c7:3b:2c:c0:57:3e:c8:4f: 5a:f3:06:e8:68:fa:25:6a:b9:fa:b0:99:8d:24:38: 3f:5b:2e:ab:3c:aa:68:ee:e9:7b:6d:31:28:c2:2b: 5c:a0:fd:6a:e0:6c:a7:01:f2:39:6c:4f:af:e5:27: 2b:8a:36:38:fa:c9:e2:6f:dc:14:12:a0:a1:35:57: 43:ab:ff:29:87:3a:3e:8b:3a:87:4f:75:9c:8d:3b: 85:46:5e:19:51:d1:07:ef:5d:3b:63:74:88:99:a7: 2f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:02:5F:DF:68:7B:3E:F4:85:E7:CB:E1:1D:DE:B1:0E:5A:A7:64:30 X509v3 Authority Key Identifier: keyid:F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:22:7c:3f:a5:27:f2:88:4c:af:b6:25:26:b3:fe:76:5d:23: b1:12:19:0c:d2:61:6e:68:df:59:6e:3b:f1:2f:2e:9d:b3:53: d7:7a:74:24:a7:b1:18:08:f1:4c:9d:a3:83:0e:2a:f9:d8:e4: 0d:b8:e3:58:81:c5:98:60:d3:3c:9b:19:8d:d8:b5:48:c4:7b: 6d:97:df:8c:b6:a8:67:72:2f:6d:9b:45:a7:8d:eb:63:3b:42: 38:7b:ed:9c:7e:0f:d4:71:21:f0:1d:b2:98:09:cb:e5:7a:62: b2:b2:12:69:c1:91:fb:0a:99:90:ad:c7:a6:ab:38:55:47:6e: eb:10:af:97:1f:e3:39:79:b8:2f:8b:a7:f7:d4:7a:d3:25:34: 54:f8:d9:74:6a:05:b2:8e:c7:c5:84:ae:3d:93:e0:9b:77:46: 51:17:0a:fe:eb:ad:5f:af:0b:d9:74:66:98:61:34:e8:e0:dc: d0:f4:dc:f2:d7:14:e5:01:f1:07:1e:e6:f8:a5:55:da:7d:1b: b3:db:c6:79:b0:a2:5c:f4:a5:12:fe:f6:e5:c9:dc:1d:8b:2c: 46:54:79:f2:8f:f1:f4:11:6a:ac:ed:21:60:2b:b8:f5:91:79: f6:35:b8:a5:92:7a:20:43:df:85:89:d0:86:18:33:db:d8:36: 6f:6c:e3:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ5QzExMTAvBgNVBAUTKEY5OEJFOTQyRDlFQjc4NTZBNDMwRDFCQzI5NDczQkM0 REQ2NzdGRUEwHhcNMjUxMTA1MDUxMjMwWhcNMjUxMTEyMDUxMjMwWjAYMRYwFAYD VQQDEw02OTBhZGNiZS01MTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy51gFwkY+WPWoU3OdS0xZZpJ7rrmyp8oh2Gna6DYott2ok22YzwmdMfVMTwF dK3/7cIDWvMiQp1uOcXKijgIFxEknevzKq7hkngPxk373zANohOHjG9HgSctQku0 OuIrF4MLbACyE3//lj7Ve1YE01o5V3UVx/6sjEhlSGaI4QxxMMgoWB5cPpJ/QFNC OFg52X4G8i+Hlea7yQqpxzsswFc+yE9a8wboaPolarn6sJmNJDg/Wy6rPKpo7ul7 bTEowitcoP1q4GynAfI5bE+v5ScrijY4+snib9wUEqChNVdDq/8phzo+izqHT3Wc jTuFRl4ZUdEH7107Y3SImacvywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJcCX99o ez70hefL4R3esQ5ap2QwMB8GA1UdIwQYMBaAFPmL6ULZ63hWpDDRvClHO8TdZ3/q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDlDMS8wOUY1MkIxNDJE RDUxMUVGOUU1MDVFNURDNEY5QUUwMi8tWXZwUXRucmVGYWtNTkc4S1VjN3hOMW5m LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1ZdnBRdG5yZUZha01ORzhLVWM3eE4xbmYtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDlDMS8wOUY1MkIxNDJERDUxMUVGOUU1MDVFNURDNEY5QUUwMi8tWXZwUXRucmVG YWtNTkc4S1VjN3hOMW5mLW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTInw/pSfyiEyvtiUms/52XSOxEhkM0mFuaN9ZbjvxLy6ds1PXenQk p7EYCPFMnaODDir52OQNuONYgcWYYNM8mxmN2LVIxHttl9+Mtqhnci9tm0Wnjetj O0I4e+2cfg/UcSHwHbKYCcvlemKyshJpwZH7CpmQrcemqzhVR27rEK+XH+M5ebgv i6f31HrTJTRU+Nl0agWyjsfFhK49k+Cbd0ZRFwr+661frwvZdGaYYTTo4NzQ9Nzy 1xTlAfEHHub4pVXafRuz28Z5sKJc9KUS/vblydwdiyxGVHnyj/H0EWqs7SFgK7j1 kXn2NbilknogQ9+FidCGGDPb2DZvbOME -----END CERTIFICATE-----Generated at Wed Nov 5 17:59:55 2025 by rpki-client