$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft File: yod6eu8duwRWSH9h_uaZNjdUHl0.mft (raw, json) Hash identifier: HKV+iUv0E6rP1LF0+Z31S6QTx2OV7z7HkF+g/0Es9XE= Subject key identifier: 34:FD:BA:EC:B1:F0:92:1C:AD:F5:20:D6:1C:4A:C8:5E:4F:5C:69:F8 Authority key identifier: CA:87:7A:7A:EF:1D:BB:04:56:48:7F:61:FE:E6:99:36:37:54:1E:5D Certificate issuer: /CN=A91AA053/serialNumber=CA877A7AEF1DBB0456487F61FEE6993637541E5D Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft Manifest number: F4 Signing time: Sun 02 Nov 2025 21:33:03 +0000 Manifest this update: Sun 02 Nov 2025 21:33:03 +0000 Manifest next update: Sun 09 Nov 2025 21:33:03 +0000 Files and hashes: 1: yod6eu8duwRWSH9h_uaZNjdUHl0.crl (hash: ZTamrPnJrq95DQJGROCN/coqxWz6l1cEqRHPHHOz4/4=) 2: E098BB864FA311F0B96FBA3DC4F9AE02.roa (hash: C+d1LQ7j4suoEMqt6jmxPLK9+SyxrHsAW+pg0qKDarw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.crl rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:33:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA053, serialNumber=CA877A7AEF1DBB0456487F61FEE6993637541E5D Validity Not Before: Nov 2 21:33:03 2025 GMT Not After : Nov 9 21:33:03 2025 GMT Subject: CN=6907ce0f-7e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:08:96:2d:09:93:23:67:46:05:34:f9:a4:33: e4:57:95:7f:27:9d:ce:95:6a:05:be:b2:e3:9e:bf: da:ad:ce:c4:44:f4:a7:e5:f7:60:66:de:37:37:0f: 76:4e:26:a0:54:42:ab:95:d7:94:0f:30:c6:cf:0f: 80:ec:9f:6e:dd:b8:35:8e:d0:1c:76:1b:83:58:f8: 2d:f5:7a:48:ca:e6:eb:96:1d:78:2a:80:87:bd:1e: 40:40:13:8e:a9:d1:28:50:7e:a1:0b:2e:f9:ff:21: f5:3d:0f:a3:40:ff:31:06:da:65:dd:bc:d0:a3:67: 4f:57:cc:6b:53:6c:94:92:4d:94:bf:f7:86:9f:e1: 45:d2:ee:0c:f1:ec:d5:7c:7f:9c:32:67:a5:4d:cb: bc:3b:a3:f2:2e:33:57:8a:7a:16:b5:03:b0:62:6d: 6b:70:33:2c:62:9b:ce:ee:0e:43:a0:e7:36:d5:8f: 28:cf:0c:ba:3f:6a:e2:86:a2:3e:ca:fd:f4:14:cf: d4:3f:e2:4a:76:29:7c:62:55:dd:4f:07:84:d6:c4: 34:ac:3f:e1:49:a6:5c:b1:64:4b:3d:bf:0c:9c:b1: 01:55:d4:a4:4f:32:c1:d0:6d:b4:b6:79:22:72:05: 42:dc:bb:34:70:04:f7:28:f5:09:79:62:44:3c:34: da:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:FD:BA:EC:B1:F0:92:1C:AD:F5:20:D6:1C:4A:C8:5E:4F:5C:69:F8 X509v3 Authority Key Identifier: keyid:CA:87:7A:7A:EF:1D:BB:04:56:48:7F:61:FE:E6:99:36:37:54:1E:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:13:c7:8b:31:8e:a7:72:d6:10:85:82:a2:c7:e2:44:45:19: 95:af:ec:0e:b1:b6:46:fe:5b:9c:a1:0b:6c:71:9d:74:28:6a: 72:4c:90:d7:76:d7:6f:43:94:fb:5a:bf:6c:77:e2:fd:1b:c9: 95:05:96:68:99:bc:9d:46:51:81:5b:0c:a7:b4:2a:02:26:e7: 59:7c:a4:0c:50:1c:f0:ee:38:53:c4:57:76:e7:fc:be:29:85: 91:7c:a7:3d:00:4b:92:9b:b7:2e:81:a8:15:72:7c:53:09:4d: 0a:34:c5:78:ff:49:c9:72:8c:4a:ef:27:a4:15:97:81:ed:51: 38:2b:15:49:9a:d7:36:1e:4d:24:c0:df:09:c3:55:3c:30:9d: 19:93:0e:36:3e:cd:26:b4:4a:72:bb:77:17:67:3b:28:0b:77: 5b:04:52:f7:76:4b:d8:7a:d4:b3:10:a9:98:95:20:cf:4e:56: 03:fe:ad:f7:6f:c9:0d:70:6e:67:8d:f4:95:67:d1:83:c0:52: 2c:00:72:a0:14:0f:1d:0e:fa:66:3e:9e:2c:24:88:20:88:f8: 36:7f:11:ce:e9:b7:06:79:7f:f0:cb:96:41:2d:6f:ee:87:80: ff:54:33:a9:37:33:b3:0a:aa:44:4c:e9:99:69:e6:ef:d9:c0: c1:34:e4:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUEwNTMxMTAvBgNVBAUTKENBODc3QTdBRUYxREJCMDQ1NjQ4N0Y2MUZFRTY5OTM2 Mzc1NDFFNUQwHhcNMjUxMTAyMjEzMzAzWhcNMjUxMTA5MjEzMzAzWjAYMRYwFAYD VQQDEw02OTA3Y2UwZi03ZTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2wiWLQmTI2dGBTT5pDPkV5V/J53OlWoFvrLjnr/arc7ERPSn5fdgZt43Nw92 TiagVEKrldeUDzDGzw+A7J9u3bg1jtAcdhuDWPgt9XpIyubrlh14KoCHvR5AQBOO qdEoUH6hCy75/yH1PQ+jQP8xBtpl3bzQo2dPV8xrU2yUkk2Uv/eGn+FF0u4M8ezV fH+cMmelTcu8O6PyLjNXinoWtQOwYm1rcDMsYpvO7g5DoOc21Y8ozwy6P2rihqI+ yv30FM/UP+JKdil8YlXdTweE1sQ0rD/hSaZcsWRLPb8MnLEBVdSkTzLB0G20tnki cgVC3Ls0cAT3KPUJeWJEPDTaHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDT9uuyx 8JIcrfUg1hxKyF5PXGn4MB8GA1UdIwQYMBaAFMqHenrvHbsEVkh/Yf7mmTY3VB5d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTA1My84NzIwMzA1RTQ0 OTkxMUVGQkFDNjcxNTNDNEY5QUUwMi95b2Q2ZXU4ZHV3UldTSDloX3VhWk5qZFVI bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3lvZDZldThkdXdSV1NIOWhfdWFaTmpkVUhsMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTA1My84NzIwMzA1RTQ0OTkxMUVGQkFDNjcxNTNDNEY5QUUwMi95b2Q2ZXU4ZHV3 UldTSDloX3VhWk5qZFVIbDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNE8eLMY6nctYQhYKix+JERRmVr+wOsbZG/lucoQtscZ10KGpyTJDX dtdvQ5T7Wr9sd+L9G8mVBZZombydRlGBWwyntCoCJudZfKQMUBzw7jhTxFd25/y+ KYWRfKc9AEuSm7cugagVcnxTCU0KNMV4/0nJcoxK7yekFZeB7VE4KxVJmtc2Hk0k wN8Jw1U8MJ0Zkw42Ps0mtEpyu3cXZzsoC3dbBFL3dkvYetSzEKmYlSDPTlYD/q33 b8kNcG5njfSVZ9GDwFIsAHKgFA8dDvpmPp4sJIggiPg2fxHO6bcGeX/wy5ZBLW/u h4D/VDOpNzOzCqpETOmZaebv2cDBNOTX -----END CERTIFICATE-----Generated at Tue Nov 4 21:35:46 2025 by rpki-client