$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft File: YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft (raw, json) Hash identifier: XD4zlgxQgVihB1NKkANcnb4a87wwqYbYGKRqL5M4d0E= Subject key identifier: E9:90:8C:22:2D:38:37:88:6B:E2:8A:8E:FD:DC:08:EF:85:03:27:89 Authority key identifier: 60:35:5C:0D:99:72:6F:EE:9E:E4:7A:B6:FA:E6:DF:0E:9F:38:1F:12 Certificate issuer: /CN=A91ABC49/serialNumber=60355C0D99726FEE9EE47AB6FAE6DF0E9F381F12 Certificate serial: 07D8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft Manifest number: 07D8 Signing time: Tue 04 Nov 2025 21:15:18 +0000 Manifest this update: Tue 04 Nov 2025 21:15:18 +0000 Manifest next update: Tue 11 Nov 2025 21:15:18 +0000 Files and hashes: 1: YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl (hash: ih6S9v4RugGnyqmn3SHHnmsRjuCulOlBPQWc8uFPwcQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:15:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2008 (0x7d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABC49, serialNumber=60355C0D99726FEE9EE47AB6FAE6DF0E9F381F12 Validity Not Before: Nov 4 21:15:18 2025 GMT Not After : Nov 11 21:15:18 2025 GMT Subject: CN=690a6ce6-3752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7b:0e:8e:70:9e:f7:c4:ce:32:ce:67:92:46: a1:65:59:f8:0c:df:d6:13:c6:b9:c5:96:42:05:dd: a1:2f:72:93:3e:86:37:3e:4e:45:03:9b:33:5b:64: 6b:b0:22:02:fd:af:4d:89:ce:4a:75:5a:1f:97:0b: 33:b8:b1:f7:62:c4:fc:a4:9c:eb:2b:ad:b2:67:e6: 88:6a:87:c5:09:b3:80:ed:66:71:7b:50:27:7e:6d: 8d:c5:37:1f:b4:00:3a:a3:5a:54:1e:c1:ae:33:db: cb:2d:a2:aa:fc:5d:e7:57:3e:46:c9:80:ff:a7:a1: bb:71:7a:3b:89:65:c4:b4:a1:2c:2f:cc:6e:6b:24: 6d:52:8d:9b:7e:26:ae:f6:69:a5:bd:20:5f:5f:d9: 2f:c0:44:a0:6f:c1:6e:52:61:53:ba:b8:aa:ce:69: 3b:b4:09:74:60:71:9d:3c:19:ec:ff:9e:ae:f1:36: f2:2e:92:44:34:6b:f4:c2:c7:06:7e:31:cd:fd:da: 11:e7:f9:d4:71:ba:11:51:b3:ac:e7:8d:0d:88:0b: bb:a0:6f:89:c9:80:6a:e6:af:be:8e:a4:93:a8:4f: 06:2b:f2:d7:96:88:71:9a:74:d1:68:45:79:cf:a1: f0:d7:2a:da:12:75:22:65:87:f8:5f:8c:41:d3:ec: 4d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:90:8C:22:2D:38:37:88:6B:E2:8A:8E:FD:DC:08:EF:85:03:27:89 X509v3 Authority Key Identifier: keyid:60:35:5C:0D:99:72:6F:EE:9E:E4:7A:B6:FA:E6:DF:0E:9F:38:1F:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:d4:2b:07:40:8e:51:ae:26:e4:e0:93:db:f5:a0:3b:87:15: 42:cd:04:61:73:db:ff:29:f3:50:c3:72:a8:ff:57:81:6b:4a: f0:f8:0e:9c:09:a7:e3:a8:29:16:c6:54:75:ec:c8:14:9f:55: 16:6c:cd:77:6a:ce:e5:c3:7c:69:69:56:9b:0d:9c:59:f6:60: 79:7f:35:81:e3:c7:e6:00:29:78:ad:d0:90:ca:37:45:b9:e9: 96:40:ef:d9:65:56:fd:76:16:2d:a9:55:2c:84:e2:bf:a6:ba: 7b:a9:35:7e:19:7e:b9:7e:09:a0:9e:47:5b:ec:4b:da:ea:7a: 3c:e7:42:ae:34:4f:e3:33:dd:d3:0f:b2:b0:9b:5c:e7:77:65: 92:fa:98:a7:fa:e1:6f:8a:e7:e5:fd:90:83:3a:0a:ab:4c:97: 41:0b:78:6b:1e:69:c0:ee:5d:ac:2e:e6:5a:e6:7d:fc:8f:f3: 51:9a:f6:f8:57:63:54:b6:34:da:b7:e3:fa:27:e2:1c:59:a0: 98:82:6c:45:13:aa:23:96:09:37:a2:f3:2b:45:47:22:ef:d7: 99:5e:ea:b3:55:d1:64:60:46:1f:05:81:f7:e5:60:b9:f1:fd: ed:a3:80:d7:97:34:24:64:31:dc:9c:51:2e:92:e5:0f:0b:bc: d4:93:ff:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJDNDkxMTAvBgNVBAUTKDYwMzU1QzBEOTk3MjZGRUU5RUU0N0FCNkZBRTZERjBF OUYzODFGMTIwHhcNMjUxMTA0MjExNTE4WhcNMjUxMTExMjExNTE4WjAYMRYwFAYD VQQDEw02OTBhNmNlNi0zNzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3sOjnCe98TOMs5nkkahZVn4DN/WE8a5xZZCBd2hL3KTPoY3Pk5FA5szW2Rr sCIC/a9Nic5KdVoflwszuLH3YsT8pJzrK62yZ+aIaofFCbOA7WZxe1Anfm2NxTcf tAA6o1pUHsGuM9vLLaKq/F3nVz5GyYD/p6G7cXo7iWXEtKEsL8xuayRtUo2bfiau 9mmlvSBfX9kvwESgb8FuUmFTuriqzmk7tAl0YHGdPBns/56u8TbyLpJENGv0wscG fjHN/doR5/nUcboRUbOs540NiAu7oG+JyYBq5q++jqSTqE8GK/LXlohxmnTRaEV5 z6Hw1yraEnUiZYf4X4xB0+xNhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOmQjCIt ODeIa+KKjv3cCO+FAyeJMB8GA1UdIwQYMBaAFGA1XA2Zcm/unuR6tvrm3w6fOB8S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkM0OS9FNTUyMzdFQzBE NzcxMUVCQjUzQUVBNDBDNEY5QUUwMi9ZRFZjRFpseWItNmU1SHEyLXViZkRwODRI eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lEVmNEWmx5Yi02ZTVIcTItdWJmRHA4NEh4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkM0OS9FNTUyMzdFQzBENzcxMUVCQjUzQUVBNDBDNEY5QUUwMi9ZRFZjRFpseWIt NmU1SHEyLXViZkRwODRIeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN1CsHQI5Rribk4JPb9aA7hxVCzQRhc9v/KfNQw3Ko/1eBa0rw+A6c CafjqCkWxlR17MgUn1UWbM13as7lw3xpaVabDZxZ9mB5fzWB48fmACl4rdCQyjdF uemWQO/ZZVb9dhYtqVUshOK/prp7qTV+GX65fgmgnkdb7Eva6no850KuNE/jM93T D7Kwm1znd2WS+pin+uFviufl/ZCDOgqrTJdBC3hrHmnA7l2sLuZa5n38j/NRmvb4 V2NUtjTat+P6J+IcWaCYgmxFE6ojlgk3ovMrRUci79eZXuqzVdFkYEYfBYH35WC5 8f3to4DXlzQkZDHcnFEukuUPC7zUk/+v -----END CERTIFICATE-----Generated at Wed Nov 5 10:29:42 2025 by rpki-client