$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.mft File: YYrgnnRxNtZvEWWnuP6i_3OGffY.mft (raw, json) Hash identifier: IqM/HSmBsTni4zwa68K7OQB6jbgCGX+brhJGvmsubdc= Subject key identifier: 2E:29:2F:9F:69:1E:DF:80:CA:19:D1:09:F0:7C:33:39:F0:0C:4A:A4 Authority key identifier: 61:8A:E0:9E:74:71:36:D6:6F:11:65:A7:B8:FE:A2:FF:73:86:7D:F6 Certificate issuer: /CN=A91B4460/serialNumber=618AE09E747136D66F1165A7B8FEA2FF73867DF6 Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYrgnnRxNtZvEWWnuP6i_3OGffY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.mft Manifest number: 6A Signing time: Wed 05 Nov 2025 07:09:16 +0000 Manifest this update: Wed 05 Nov 2025 07:09:15 +0000 Manifest next update: Wed 12 Nov 2025 07:09:15 +0000 Files and hashes: 1: YYrgnnRxNtZvEWWnuP6i_3OGffY.crl (hash: ILM7sDKiohunGRGjVKeFDti9cZPuv2PtrG/O2o+lKOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.crl rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYrgnnRxNtZvEWWnuP6i_3OGffY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:09:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4460, serialNumber=618AE09E747136D66F1165A7B8FEA2FF73867DF6 Validity Not Before: Nov 5 07:09:15 2025 GMT Not After : Nov 12 07:09:15 2025 GMT Subject: CN=690af81b-3c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5b:bf:13:30:ce:68:d7:2f:ed:ec:d4:35:0c: 1d:75:60:2f:45:39:b0:91:61:a9:d3:ee:84:4b:ab: 7c:f2:35:d7:54:0a:9a:a7:c1:0c:ee:42:20:ee:c3: b0:5d:7a:3b:c5:a0:8c:ca:ad:2c:16:cb:7f:27:db: 61:12:fc:9b:a0:7c:72:21:47:ae:d1:19:bd:88:c6: 5f:8d:8e:9c:d8:90:14:f3:40:58:84:26:5a:e1:a8: 2a:1a:fd:36:57:52:eb:bc:6c:09:10:c1:bc:e5:bf: 03:62:bf:d4:62:cc:09:80:86:69:f6:27:8c:23:ba: 76:c7:10:3c:6a:b9:ac:e8:1b:36:d4:ce:42:e6:5e: d1:5f:08:7a:f9:73:c3:f4:8b:61:71:69:b2:95:c5: b0:e5:c2:eb:3f:3a:e1:f3:94:c3:77:16:46:71:37: 36:89:f2:4f:2e:92:00:f4:df:6d:ca:87:c6:f1:c7: 07:4a:52:fe:ff:52:3a:28:68:58:b2:b1:1f:97:f0: f3:92:f2:5a:dd:fe:59:09:e1:d0:60:69:dc:cd:85: 18:e7:78:6c:20:d3:85:29:a2:9e:9b:c8:3d:22:02: 20:fb:57:30:ea:e0:bb:0a:ad:29:41:4c:ad:60:58: b9:fe:59:ee:ea:27:e8:15:20:9f:94:c4:43:32:83: 42:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:29:2F:9F:69:1E:DF:80:CA:19:D1:09:F0:7C:33:39:F0:0C:4A:A4 X509v3 Authority Key Identifier: keyid:61:8A:E0:9E:74:71:36:D6:6F:11:65:A7:B8:FE:A2:FF:73:86:7D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYrgnnRxNtZvEWWnuP6i_3OGffY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4460/0D46883C148711F0A79EAB26C4F9AE02/YYrgnnRxNtZvEWWnuP6i_3OGffY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:0b:5f:f9:1b:81:f8:7f:3b:83:2f:c6:62:f6:09:79:71:08: c8:c4:f4:85:73:35:88:3e:88:1d:3f:12:15:e2:be:bb:e2:77: 1d:51:67:b6:5f:b5:6f:e0:8b:94:30:2f:87:0c:0c:ea:7f:d2: fb:a9:b3:3c:6b:59:3b:9e:82:56:f4:c6:ac:31:f3:d2:a8:0b: 62:e1:34:a9:c0:8b:ca:2f:57:27:b0:23:7d:cb:8a:2d:d1:3c: 13:01:ae:8a:f5:0e:7c:53:41:34:1f:ce:ff:58:02:5e:90:05: a7:ff:0e:10:02:cb:8b:27:be:87:d9:9c:fd:84:dd:c9:4b:6f: 39:34:13:05:1e:ef:78:e0:41:d2:d6:4a:ae:d2:48:92:6c:f3: 3b:6f:5f:f3:e1:2b:c9:48:85:b1:f3:0b:6f:42:74:cb:0b:10: fd:31:ce:71:7f:fd:46:c5:f1:a8:05:c1:f4:a0:96:c5:7c:b1: b1:30:51:da:bc:cc:eb:4f:f9:86:24:26:84:33:ed:39:ce:e9: ed:a6:65:76:95:f2:4d:23:13:9a:04:31:17:e2:d9:32:4e:95: f7:38:7b:48:da:cc:74:7d:2f:1f:13:19:d2:28:fb:ec:d9:55: 39:85:66:8a:d6:26:de:16:66:d8:15:f9:aa:00:d1:78:d0:40: 2f:b3:3c:08 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NDQ2MDExMC8GA1UEBRMoNjE4QUUwOUU3NDcxMzZENjZGMTE2NUE3QjhGRUEyRkY3 Mzg2N0RGNjAeFw0yNTExMDUwNzA5MTVaFw0yNTExMTIwNzA5MTVaMBgxFjAUBgNV BAMTDTY5MGFmODFiLTNjNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/W78TMM5o1y/t7NQ1DB11YC9FObCRYanT7oRLq3zyNddUCpqnwQzuQiDuw7Bd ejvFoIzKrSwWy38n22ES/JugfHIhR67RGb2Ixl+NjpzYkBTzQFiEJlrhqCoa/TZX Uuu8bAkQwbzlvwNiv9RizAmAhmn2J4wjunbHEDxquazoGzbUzkLmXtFfCHr5c8P0 i2FxabKVxbDlwus/OuHzlMN3FkZxNzaJ8k8ukgD0323Kh8bxxwdKUv7/UjooaFiy sR+X8POS8lrd/lkJ4dBgadzNhRjneGwg04Upop6byD0iAiD7VzDq4LsKrSlBTK1g WLn+We7qJ+gVIJ+UxEMyg0JxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULikvn2ke 34DKGdEJ8HwzOfAMSqQwHwYDVR0jBBgwFoAUYYrgnnRxNtZvEWWnuP6i/3OGffYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0NDYwLzBENDY4ODNDMTQ4 NzExRjBBNzlFQUIyNkM0RjlBRTAyL1lZcmdublJ4TnRadkVXV251UDZpXzNPR2Zm WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWVlyZ25uUnhOdFp2RVdXbnVQNmlfM09HZmZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 NDYwLzBENDY4ODNDMTQ4NzExRjBBNzlFQUIyNkM0RjlBRTAyL1lZcmdublJ4TnRa dkVXV251UDZpXzNPR2ZmWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFMLX/kbgfh/O4MvxmL2CXlxCMjE9IVzNYg+iB0/EhXivrvidx1RZ7Zf tW/gi5QwL4cMDOp/0vupszxrWTueglb0xqwx89KoC2LhNKnAi8ovVyewI33Lii3R PBMBror1DnxTQTQfzv9YAl6QBaf/DhACy4snvofZnP2E3clLbzk0EwUe73jgQdLW Sq7SSJJs8ztvX/PhK8lIhbHzC29CdMsLEP0xznF//UbF8agFwfSglsV8sbEwUdq8 zOtP+YYkJoQz7TnO6e2mZXaV8k0jE5oEMRfi2TJOlfc4e0jazHR9Lx8TGdIo++zZ VTmFZorWJt4WZtgV+aoA0XjQQC+zPAg= -----END CERTIFICATE-----Generated at Wed Nov 5 18:49:11 2025 by rpki-client