$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft File: yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft (raw, json) Hash identifier: 9trFE/5U+wVqVtYyx8OjSy4R5w36XyojibeYaWI+x10= Subject key identifier: A1:79:16:2D:80:9D:5C:27:3F:48:0D:0F:05:54:EE:E7:E1:93:57:4E Authority key identifier: C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54 Certificate issuer: /CN=A91B49F2/serialNumber=C873BB610B913C3ECDC708A265A74B1141A76F54 Certificate serial: 0EA1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft Manifest number: 0E8B Signing time: Tue 04 Nov 2025 17:49:17 +0000 Manifest this update: Tue 04 Nov 2025 17:49:16 +0000 Manifest next update: Tue 11 Nov 2025 17:49:16 +0000 Files and hashes: 1: yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl (hash: qxZxOyzpbqoQb1inpTVERboceTtmnfFQyMuYHg745KA=) 2: BB0AA59C0A3D11EB82ECEA4BC4F9AE02.roa (hash: ecUYAzKP1VHNDV8/DURQ3XmWYJTnzDR9mLUMMYKH7wE=) 3: 79395BE68EB311EF9A8DFC3CC4F9AE02.roa (hash: RU2Bp78eGDXSscZxxDiygRwZ64V3JmS10+rUng9roo8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3745 (0xea1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B49F2, serialNumber=C873BB610B913C3ECDC708A265A74B1141A76F54 Validity Not Before: Nov 4 17:49:16 2025 GMT Not After : Nov 11 17:49:16 2025 GMT Subject: CN=690a3c9d-273e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e0:ce:95:ab:0e:55:2d:6b:37:41:8b:3a:ef: 73:90:af:fe:5b:c2:8b:a2:8c:77:6b:58:0d:26:fd: 70:14:50:5a:89:c2:28:fb:47:cc:ef:37:65:13:ea: 58:48:ac:94:6e:05:79:1c:f0:dc:e6:8d:fe:33:4d: 76:ba:af:bb:cb:f4:2c:28:e8:f1:3c:f0:45:40:71: 10:aa:98:51:5e:5b:bd:3c:be:48:80:0d:b1:10:2b: 75:23:00:66:6d:73:cb:0c:14:d0:aa:14:7f:75:22: d5:d5:b4:a3:d4:7a:09:f6:35:40:ae:64:a4:d4:83: ec:22:06:ad:ee:55:b6:01:6e:14:36:e4:9a:14:fd: b7:29:ef:31:3f:2b:c2:ff:37:29:c4:e4:a0:3d:12: 84:07:c6:c7:27:d7:9a:b5:2f:8a:c5:ed:1a:df:91: 9e:02:32:e2:da:dc:c2:a2:7b:fe:fd:3b:42:ab:84: 42:61:8f:81:e1:9c:70:3d:d4:af:ef:06:d4:22:68: ea:ff:e5:a1:38:6e:9c:1e:0c:2d:16:7b:d6:65:9d: d8:63:d7:f5:89:d1:17:89:24:44:da:ae:8a:75:2d: 63:32:9a:cc:86:e5:f8:b5:d0:36:ad:44:b1:20:5f: bb:ec:2f:53:31:98:51:d6:42:44:a3:c0:7f:b2:46: 06:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:79:16:2D:80:9D:5C:27:3F:48:0D:0F:05:54:EE:E7:E1:93:57:4E X509v3 Authority Key Identifier: keyid:C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:76:71:35:80:a1:41:be:ca:eb:05:cb:f9:1c:e6:dc:6a:47: 33:85:6c:f7:85:78:6e:58:f7:4a:86:35:33:91:7d:9a:3d:67: d7:2f:92:fc:dc:b2:2a:4d:b7:0c:8a:c0:aa:d4:15:81:5a:fa: 09:5e:fe:f5:a0:98:49:ad:a1:a1:1e:93:33:91:0b:e1:e8:bd: 8a:8e:dc:72:a5:b9:6f:ef:56:ec:83:f0:16:fd:af:2d:c0:96: 73:c0:81:58:fe:1a:6d:77:ae:12:15:8a:4b:a5:06:85:f6:21: 8c:97:9f:e8:56:89:3b:9b:27:09:54:bf:72:fb:c4:61:19:50: 98:95:97:4c:b5:8a:b8:e9:54:0b:58:d3:af:63:90:20:f7:e3: 9c:4b:21:79:32:e0:1a:c0:4d:55:54:11:60:f4:03:ee:89:78: f3:1c:04:ac:2c:77:11:51:46:be:4c:a0:fc:22:96:4e:85:31: 25:5d:61:9f:89:92:2c:8b:8a:c8:68:d5:af:44:8b:0a:4e:df: 87:85:03:f0:cb:32:fe:8f:6e:9c:d6:a4:0b:7f:6f:05:9b:2b: e2:75:6c:6e:48:e8:49:23:f7:ce:55:9a:23:44:d4:86:ea:22: 3a:83:93:ea:13:d5:75:86:89:7a:a9:b1:ff:25:cf:08:f7:fa: 97:91:d2:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ5RjIxMTAvBgNVBAUTKEM4NzNCQjYxMEI5MTNDM0VDREM3MDhBMjY1QTc0QjEx NDFBNzZGNTQwHhcNMjUxMTA0MTc0OTE2WhcNMjUxMTExMTc0OTE2WjAYMRYwFAYD VQQDEw02OTBhM2M5ZC0yNzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1uDOlasOVS1rN0GLOu9zkK/+W8KLoox3a1gNJv1wFFBaicIo+0fM7zdlE+pY SKyUbgV5HPDc5o3+M012uq+7y/QsKOjxPPBFQHEQqphRXlu9PL5IgA2xECt1IwBm bXPLDBTQqhR/dSLV1bSj1HoJ9jVArmSk1IPsIgat7lW2AW4UNuSaFP23Ke8xPyvC /zcpxOSgPRKEB8bHJ9eatS+Kxe0a35GeAjLi2tzConv+/TtCq4RCYY+B4ZxwPdSv 7wbUImjq/+WhOG6cHgwtFnvWZZ3YY9f1idEXiSRE2q6KdS1jMprMhuX4tdA2rUSx IF+77C9TMZhR1kJEo8B/skYGUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKF5Fi2A nVwnP0gNDwVU7ufhk1dOMB8GA1UdIwQYMBaAFMhzu2ELkTw+zccIomWnSxFBp29U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDlGMi84MkU0QzJBMEE2 RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi95SE83WVF1UlBEN054d2lpWmFkTEVVR25i MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lITzdZUXVSUEQ3Tnh3aWlaYWRMRVVHbmIxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDlGMi84MkU0QzJBMEE2RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi95SE83WVF1UlBE N054d2lpWmFkTEVVR25iMVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8dnE1gKFBvsrrBcv5HObcakczhWz3hXhuWPdKhjUzkX2aPWfXL5L8 3LIqTbcMisCq1BWBWvoJXv71oJhJraGhHpMzkQvh6L2Kjtxypblv71bsg/AW/a8t wJZzwIFY/hptd64SFYpLpQaF9iGMl5/oVok7mycJVL9y+8RhGVCYlZdMtYq46VQL WNOvY5Ag9+OcSyF5MuAawE1VVBFg9APuiXjzHASsLHcRUUa+TKD8IpZOhTElXWGf iZIsi4rIaNWvRIsKTt+HhQPwyzL+j26c1qQLf28FmyvidWxuSOhJI/fOVZojRNSG 6iI6g5PqE9V1hol6qbH/Jc8I9/qXkdJa -----END CERTIFICATE-----Generated at Wed Nov 5 04:27:33 2025 by rpki-client