$ rpki-client -vvf rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft File: Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft (raw, json) Hash identifier: vDClfBN0I1i/mdDUsSk0+3r5SNRzrlJmaLbiZ7eDCw8= Subject key identifier: A1:4F:AF:AC:E0:1B:89:F2:16:C4:FA:E2:8A:C8:8D:B2:E1:26:DB:1E Authority key identifier: 63:59:30:9E:F4:9B:44:5F:6E:B5:33:1B:DF:0A:94:C5:C6:EF:C3:7B Certificate issuer: /CN=A91A935D/serialNumber=6359309EF49B445F6EB5331BDF0A94C5C6EFC37B Certificate serial: 06A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft Manifest number: 069D Signing time: Tue 04 Nov 2025 22:24:43 +0000 Manifest this update: Tue 04 Nov 2025 22:24:42 +0000 Manifest next update: Tue 11 Nov 2025 22:24:42 +0000 Files and hashes: 1: Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl (hash: z0o/NhcYiEdo+o2vbHgPD4GWC24bq5n6/Bg7R6wYvnA=) 2: 47EB76428ABA11EB8A85C01BC4F9AE02.roa (hash: Aj09uU6MhDmU5Pp5fUZKM/VJnCnWU68ZEpcYdjejU1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1701 (0x6a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A935D, serialNumber=6359309EF49B445F6EB5331BDF0A94C5C6EFC37B Validity Not Before: Nov 4 22:24:42 2025 GMT Not After : Nov 11 22:24:42 2025 GMT Subject: CN=690a7d2a-4995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2e:c0:ee:4b:94:25:ef:1f:45:ea:7c:3e:c8: d1:c3:91:21:a6:3e:b6:73:f6:ba:79:27:aa:ec:3a: 77:28:6a:42:fc:6b:35:c6:70:37:04:9d:05:8e:d9: 24:ba:b6:f0:9a:cf:2f:bb:1f:02:b4:c3:f7:16:94: 2f:b1:16:2d:59:18:f9:d3:34:e6:26:a5:6d:9c:0d: 39:10:2f:94:f9:e0:3d:8e:e4:6d:a6:61:72:3c:33: 42:76:c1:68:b1:36:95:53:8f:3a:b2:05:7a:91:27: b4:5f:4b:a3:27:6c:45:99:35:7f:51:54:87:64:e5: 02:e0:f4:df:ce:ca:50:e8:a6:2d:fa:58:ad:fa:6b: fa:c9:e2:c2:54:9b:9c:c3:2d:aa:31:0e:35:6f:ef: 4f:53:e2:60:77:73:18:9b:e6:5e:6a:b5:a6:39:2d: 08:64:d7:b9:1b:0c:6d:74:76:c0:ac:2a:b0:2a:c8: fd:79:53:8a:a2:b9:cc:8b:91:5f:19:01:6f:07:a2: 77:84:55:71:de:69:2f:fc:6b:21:9c:22:77:98:21: f8:2a:51:29:2b:fe:0c:88:75:b8:69:ac:55:3f:19: 19:f4:f2:8b:0e:45:d3:cc:db:26:1c:d2:bc:76:b4: 40:ec:4e:82:67:45:d1:1a:6a:9e:65:82:d1:ef:da: bc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:4F:AF:AC:E0:1B:89:F2:16:C4:FA:E2:8A:C8:8D:B2:E1:26:DB:1E X509v3 Authority Key Identifier: keyid:63:59:30:9E:F4:9B:44:5F:6E:B5:33:1B:DF:0A:94:C5:C6:EF:C3:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:80:0a:19:ff:25:92:76:60:b6:ad:b4:b8:3a:d0:86:f0:d7: 99:8f:da:5d:b9:d7:f9:5b:5e:3c:7f:16:e0:a8:70:08:c6:a4: 7f:50:39:ef:6e:20:c4:b0:f0:4d:94:90:a0:e3:69:37:a6:88: 72:58:c7:de:07:d3:4b:47:4a:8c:b6:9c:a3:75:be:9f:ad:94: 36:cc:d5:29:cf:a9:34:7d:76:4b:47:6e:9e:7f:87:4d:be:75: 90:a5:b9:36:8b:64:63:f3:89:fa:fe:31:90:b1:3d:30:37:73: f4:e3:71:eb:02:2a:30:33:13:ef:68:9e:9e:78:0d:d1:0f:73: 96:7d:16:89:d1:75:3a:5f:05:15:7d:e8:df:c4:4e:57:ab:40: 2c:34:86:4d:34:cd:a0:4c:a4:b5:cd:4b:a3:9d:3f:f8:8a:98: dd:89:b9:66:ee:9e:19:72:a4:56:c0:7e:b7:ad:46:35:55:0e: ca:f2:06:14:a0:98:4f:86:51:e4:f8:30:f6:df:13:82:77:c4: ed:29:f5:e1:93:f0:81:49:ae:27:63:17:c0:55:de:d9:df:6c: a0:72:19:04:e0:6f:3a:b5:05:3c:b8:65:87:12:da:5f:1a:b1: c1:43:37:c5:f8:11:fd:0f:cc:20:ab:8c:9f:9e:41:78:9a:0d: 2d:a7:3c:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkzNUQxMTAvBgNVBAUTKDYzNTkzMDlFRjQ5QjQ0NUY2RUI1MzMxQkRGMEE5NEM1 QzZFRkMzN0IwHhcNMjUxMTA0MjIyNDQyWhcNMjUxMTExMjIyNDQyWjAYMRYwFAYD VQQDEw02OTBhN2QyYS00OTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvS7A7kuUJe8fRep8PsjRw5Ehpj62c/a6eSeq7Dp3KGpC/Gs1xnA3BJ0Fjtkk urbwms8vux8CtMP3FpQvsRYtWRj50zTmJqVtnA05EC+U+eA9juRtpmFyPDNCdsFo sTaVU486sgV6kSe0X0ujJ2xFmTV/UVSHZOUC4PTfzspQ6KYt+lit+mv6yeLCVJuc wy2qMQ41b+9PU+Jgd3MYm+ZearWmOS0IZNe5GwxtdHbArCqwKsj9eVOKornMi5Ff GQFvB6J3hFVx3mkv/GshnCJ3mCH4KlEpK/4MiHW4aaxVPxkZ9PKLDkXTzNsmHNK8 drRA7E6CZ0XRGmqeZYLR79q8PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFPr6zg G4nyFsT64orIjbLhJtseMB8GA1UdIwQYMBaAFGNZMJ70m0RfbrUzG98KlMXG78N7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTM1RC9GNTAwRjcyODhB QjgxMUVCODcwN0UxMUFDNEY5QUUwMi9ZMWt3bnZTYlJGOXV0VE1iM3dxVXhjYnZ3 M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kxa3dudlNiUkY5dXRUTWIzd3FVeGNidnczcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTM1RC9GNTAwRjcyODhBQjgxMUVCODcwN0UxMUFDNEY5QUUwMi9ZMWt3bnZTYlJG OXV0VE1iM3dxVXhjYnZ3M3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCogAoZ/yWSdmC2rbS4OtCG8NeZj9pdudf5W148fxbgqHAIxqR/UDnv biDEsPBNlJCg42k3pohyWMfeB9NLR0qMtpyjdb6frZQ2zNUpz6k0fXZLR26ef4dN vnWQpbk2i2Rj84n6/jGQsT0wN3P043HrAiowMxPvaJ6eeA3RD3OWfRaJ0XU6XwUV fejfxE5Xq0AsNIZNNM2gTKS1zUujnT/4ipjdiblm7p4ZcqRWwH63rUY1VQ7K8gYU oJhPhlHk+DD23xOCd8TtKfXhk/CBSa4nYxfAVd7Z32ygchkE4G86tQU8uGWHEtpf GrHBQzfF+BH9D8wgq4yfnkF4mg0tpzx3 -----END CERTIFICATE-----Generated at Wed Nov 5 10:25:33 2025 by rpki-client