$ rpki-client -vvf rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft File: Yv18a2FzzDKVZktYaAWS-ybSuHo.mft (raw, json) Hash identifier: 8FB9d9R04jMqR6QtRt/usMa5HIOskwA4wBAq1a8LbeQ= Subject key identifier: FD:ED:23:93:C1:32:13:79:3F:72:C1:98:2F:7A:7E:20:5C:57:80:11 Authority key identifier: 62:FD:7C:6B:61:73:CC:32:95:66:4B:58:68:05:92:FB:26:D2:B8:7A Certificate issuer: /CN=A91B488A/serialNumber=62FD7C6B6173CC3295664B58680592FB26D2B87A Certificate serial: 07B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yv18a2FzzDKVZktYaAWS-ybSuHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft Manifest number: 07A9 Signing time: Tue 04 Nov 2025 21:30:10 +0000 Manifest this update: Tue 04 Nov 2025 21:30:10 +0000 Manifest next update: Tue 11 Nov 2025 21:30:10 +0000 Files and hashes: 1: Yv18a2FzzDKVZktYaAWS-ybSuHo.crl (hash: rKyi8xp9n5e6n8JbSaYB1av7eviuVOJvKMQR2hTVv5k=) 2: FACB1DC6595911ECBE6ACC6BC4F9AE02.roa (hash: sxCFtdRPysjFCbROcFadfDzJw+hZeGG75SF5L5NcahQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.crl rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yv18a2FzzDKVZktYaAWS-ybSuHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:30:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1970 (0x7b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B488A, serialNumber=62FD7C6B6173CC3295664B58680592FB26D2B87A Validity Not Before: Nov 4 21:30:10 2025 GMT Not After : Nov 11 21:30:10 2025 GMT Subject: CN=690a7062-4b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:35:c1:7c:b4:3c:eb:2f:55:20:ab:46:37:d5: 22:65:24:ea:e9:b1:5f:ac:83:d7:e6:01:55:6d:0e: 12:40:fb:c1:cd:4e:61:27:da:10:26:42:f1:6b:bd: 41:96:39:7e:4d:71:34:ac:18:83:63:57:9f:4f:27: 2e:0e:29:07:08:fe:f5:99:21:1e:22:c9:37:18:e1: b9:27:60:7b:7b:fb:89:fb:1d:c7:f9:ab:91:1f:07: 56:cd:43:4f:8d:04:51:d9:e1:9b:e2:3a:52:79:a9: 53:b0:c0:fc:18:e9:ad:1d:6d:2b:a1:cf:7f:94:bb: 24:ac:bb:1d:ed:0f:41:06:70:85:aa:15:1d:71:95: ac:19:ea:ca:63:7e:95:1a:cc:25:c1:a5:12:d6:1f: 12:04:77:f9:23:52:4e:5f:76:c3:3d:4e:84:ef:31: 1d:79:12:71:8f:d3:91:96:3f:5f:c2:de:98:d6:e9: b9:d0:26:4f:c6:2c:07:6d:34:f1:f2:83:47:f1:19: 63:46:89:49:d4:60:22:ef:db:fe:df:ab:0c:bf:97: e1:59:17:4b:18:83:57:38:c6:39:07:41:7a:a1:37: b8:83:28:ed:bb:4c:50:1d:3e:32:55:bf:4f:ca:db: a1:b0:b7:99:d6:32:69:bb:29:c9:a1:42:f2:af:20: 9b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:ED:23:93:C1:32:13:79:3F:72:C1:98:2F:7A:7E:20:5C:57:80:11 X509v3 Authority Key Identifier: keyid:62:FD:7C:6B:61:73:CC:32:95:66:4B:58:68:05:92:FB:26:D2:B8:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yv18a2FzzDKVZktYaAWS-ybSuHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:60:20:2e:ff:87:05:be:77:ab:41:6e:a1:42:f9:36:a1:28: 76:4d:47:5e:ff:04:20:30:13:78:93:cc:aa:06:ae:01:6e:22: b8:e8:2b:7b:d9:7f:3b:e4:60:3b:a6:b2:30:5f:90:2c:9e:1e: 45:a6:39:4e:66:39:98:4d:f0:2e:82:2b:39:50:7e:a2:2a:0a: 35:61:2d:a8:3b:77:ef:75:f8:ca:2f:fd:77:61:10:05:82:1f: 78:fe:1f:cd:9a:08:63:b0:b4:51:81:13:20:12:84:1a:f2:b2: b5:e1:ea:04:8e:e5:55:59:9a:05:26:58:41:c5:70:60:97:82: 66:ce:36:72:75:e2:3b:4e:66:d8:c5:7f:28:47:9d:73:a7:c5: d7:4e:2f:d0:69:5b:dc:c6:c1:b6:d7:40:2d:77:e3:c9:e4:72: 65:74:b7:e8:7b:8e:77:7f:14:90:a7:c3:90:25:91:6e:8e:a4: cd:8d:fb:2d:a3:25:fe:e6:88:1b:26:85:0d:94:a6:45:ef:fb: 00:b4:ca:e2:43:82:a5:c4:d2:d2:d2:52:0b:3e:8a:4e:e1:a2: c9:7e:e3:69:c8:65:50:6c:78:d4:6b:6c:56:2f:05:c0:ea:2e: bc:d4:ad:b4:1e:b4:86:b5:d2:91:bc:c4:37:80:a3:ed:3b:1d: 26:73:d0:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ4OEExMTAvBgNVBAUTKDYyRkQ3QzZCNjE3M0NDMzI5NTY2NEI1ODY4MDU5MkZC MjZEMkI4N0EwHhcNMjUxMTA0MjEzMDEwWhcNMjUxMTExMjEzMDEwWjAYMRYwFAYD VQQDEw02OTBhNzA2Mi00YjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDXBfLQ86y9VIKtGN9UiZSTq6bFfrIPX5gFVbQ4SQPvBzU5hJ9oQJkLxa71B ljl+TXE0rBiDY1efTycuDikHCP71mSEeIsk3GOG5J2B7e/uJ+x3H+auRHwdWzUNP jQRR2eGb4jpSealTsMD8GOmtHW0roc9/lLskrLsd7Q9BBnCFqhUdcZWsGerKY36V GswlwaUS1h8SBHf5I1JOX3bDPU6E7zEdeRJxj9ORlj9fwt6Y1um50CZPxiwHbTTx 8oNH8RljRolJ1GAi79v+36sMv5fhWRdLGINXOMY5B0F6oTe4gyjtu0xQHT4yVb9P ytuhsLeZ1jJpuynJoULyryCbCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP3tI5PB MhN5P3LBmC96fiBcV4ARMB8GA1UdIwQYMBaAFGL9fGthc8wylWZLWGgFkvsm0rh6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDg4QS85QUVGMjNEQzI0 NjkxMUVCOENBRTMzODBDNEY5QUUwMi9ZdjE4YTJGenpES1Zaa3RZYUFXUy15YlN1 SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1l2MThhMkZ6ekRLVlprdFlhQVdTLXliU3VIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDg4QS85QUVGMjNEQzI0NjkxMUVCOENBRTMzODBDNEY5QUUwMi9ZdjE4YTJGenpE S1Zaa3RZYUFXUy15YlN1SG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPYCAu/4cFvnerQW6hQvk2oSh2TUde/wQgMBN4k8yqBq4BbiK46Ct7 2X875GA7prIwX5Asnh5FpjlOZjmYTfAugis5UH6iKgo1YS2oO3fvdfjKL/13YRAF gh94/h/NmghjsLRRgRMgEoQa8rK14eoEjuVVWZoFJlhBxXBgl4JmzjZydeI7TmbY xX8oR51zp8XXTi/QaVvcxsG210Atd+PJ5HJldLfoe453fxSQp8OQJZFujqTNjfst oyX+5ogbJoUNlKZF7/sAtMriQ4KlxNLS0lILPopO4aLJfuNpyGVQbHjUa2xWLwXA 6i681K20HrSGtdKRvMQ3gKPtOx0mc9AF -----END CERTIFICATE-----Generated at Wed Nov 5 07:58:54 2025 by rpki-client