$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft File: Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft (raw, json) Hash identifier: lv5NY0E+JedP/Dn3rMK00hiigd+s56HZbb/8aPkpzUw= Subject key identifier: D4:F3:B1:8A:07:AF:A9:02:DF:35:B6:9C:83:78:0E:03:25:69:DD:6E Authority key identifier: 63:0E:FC:8B:C8:24:7F:99:A0:12:80:74:1E:4A:1A:0D:B7:F1:47:B0 Certificate issuer: /CN=A91BB629/serialNumber=630EFC8BC8247F99A01280741E4A1A0DB7F147B0 Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yw78i8gkf5mgEoB0HkoaDbfxR7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft Manifest number: F3 Signing time: Mon 03 Nov 2025 05:15:24 +0000 Manifest this update: Mon 03 Nov 2025 05:15:23 +0000 Manifest next update: Mon 10 Nov 2025 05:15:23 +0000 Files and hashes: 1: Yw78i8gkf5mgEoB0HkoaDbfxR7A.crl (hash: lETiWUqCMjRe3PCBjlx1LilwhpYQqBLCf1VhIQnAl4c=) 2: 7CE4326245B511EFBAC06E1EC4F9AE02.roa (hash: bllAWJknG6t7sgMmQWLY59vxPXpNHKXKelWOMC8ypAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.crl rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yw78i8gkf5mgEoB0HkoaDbfxR7A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:15:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB629, serialNumber=630EFC8BC8247F99A01280741E4A1A0DB7F147B0 Validity Not Before: Nov 3 05:15:23 2025 GMT Not After : Nov 10 05:15:23 2025 GMT Subject: CN=69083a6c-469f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b3:d4:d6:2e:39:fd:d4:09:00:51:9c:05:96: e8:2e:db:54:a2:29:ed:97:f0:9a:67:d7:63:37:f4: c7:3b:e0:4a:6d:f6:36:6e:8e:fc:b4:90:94:00:0f: 23:cb:ba:04:00:82:7b:35:70:d8:64:f9:fe:59:98: 9e:6a:f8:28:88:dd:03:3c:e4:fb:72:c1:d5:a0:13: 34:95:fd:57:d5:e7:bc:91:89:c5:ae:8e:5e:fb:9a: 54:e8:ed:42:a7:14:3e:ec:b1:e1:49:c8:ef:a6:16: d4:99:2e:51:a0:c8:8d:da:95:2f:ad:09:4f:73:c6: 90:c2:0f:05:58:5e:b9:53:2e:db:ed:6c:a5:cf:19: 8a:e9:b9:c4:27:e7:e9:4f:8b:82:7e:6e:6f:57:de: 4c:12:9f:ec:a3:89:95:44:ce:ba:19:84:8b:f0:8b: cb:47:13:ad:31:fe:0e:01:7e:a9:62:d6:10:e2:33: 92:4b:95:13:1e:20:00:3f:1e:7e:45:ae:28:23:b8: ad:b7:4f:02:ab:32:28:c0:8e:ec:c9:22:a6:7f:72: f9:4f:d8:4d:c2:e7:4a:e7:02:9c:a2:6c:5c:07:36: 6a:86:38:81:f7:9c:0d:d2:58:b9:1a:43:15:ae:5a: b6:39:25:a9:a4:3d:7e:23:7a:58:09:f0:91:b0:7b: 9c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F3:B1:8A:07:AF:A9:02:DF:35:B6:9C:83:78:0E:03:25:69:DD:6E X509v3 Authority Key Identifier: keyid:63:0E:FC:8B:C8:24:7F:99:A0:12:80:74:1E:4A:1A:0D:B7:F1:47:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yw78i8gkf5mgEoB0HkoaDbfxR7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:df:14:64:10:1b:ce:9c:3b:cf:ff:06:a3:c5:80:e0:06:c1: 24:dd:bf:02:7c:93:d7:a4:11:dc:98:ab:62:dd:da:62:b6:de: a1:de:2e:03:f1:80:88:31:64:fc:72:f2:77:40:12:de:59:28: 70:91:15:f1:f0:c1:76:3a:ee:5a:1e:d9:23:ab:c7:be:83:9c: 28:e6:1e:5c:fc:1a:f6:77:0b:8f:b0:d7:c6:2f:8d:c9:10:f3: 29:1d:79:53:0f:1c:0f:c5:c1:a5:4e:31:12:0b:4a:ef:d6:c1: 58:17:60:4a:59:37:77:59:79:88:dc:c3:e1:76:ae:9d:26:b1: 5c:d5:96:24:19:bc:8a:43:3a:9d:27:45:39:59:68:7e:3a:b9: 68:f1:1c:5a:34:96:bc:60:70:31:fb:38:04:6f:b0:b8:e7:52: 20:3f:b8:9c:21:b5:ab:31:74:ea:10:1d:00:a4:a1:c5:ad:7a: 72:bd:da:8b:6c:98:cb:09:3c:ea:2f:b2:61:b8:19:a4:5f:59: 7b:2b:1b:58:80:6f:e9:40:f0:ba:cd:fa:dd:f0:4f:cf:53:5e: ae:d3:5e:56:17:e1:2d:44:ed:7b:5e:d8:36:6c:c9:41:8d:df: 8a:32:f8:e0:9e:00:8e:9b:1b:15:79:52:38:93:a5:75:4c:ad: ef:b5:f3:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI2MjkxMTAvBgNVBAUTKDYzMEVGQzhCQzgyNDdGOTlBMDEyODA3NDFFNEExQTBE QjdGMTQ3QjAwHhcNMjUxMTAzMDUxNTIzWhcNMjUxMTEwMDUxNTIzWjAYMRYwFAYD VQQDEw02OTA4M2E2Yy00NjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbPU1i45/dQJAFGcBZboLttUointl/CaZ9djN/THO+BKbfY2bo78tJCUAA8j y7oEAIJ7NXDYZPn+WZieavgoiN0DPOT7csHVoBM0lf1X1ee8kYnFro5e+5pU6O1C pxQ+7LHhScjvphbUmS5RoMiN2pUvrQlPc8aQwg8FWF65Uy7b7WylzxmK6bnEJ+fp T4uCfm5vV95MEp/so4mVRM66GYSL8IvLRxOtMf4OAX6pYtYQ4jOSS5UTHiAAPx5+ Ra4oI7itt08CqzIowI7sySKmf3L5T9hNwudK5wKcomxcBzZqhjiB95wN0li5GkMV rlq2OSWppD1+I3pYCfCRsHucRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTzsYoH r6kC3zW2nIN4DgMlad1uMB8GA1UdIwQYMBaAFGMO/IvIJH+ZoBKAdB5KGg238Uew MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjYyOS9FMkNGOTQwQTQ1 QjQxMUVGOEZEQjc0MURDNEY5QUUwMi9Zdzc4aThna2Y1bWdFb0IwSGtvYURiZnhS N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1l3NzhpOGdrZjVtZ0VvQjBIa29hRGJmeFI3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjYyOS9FMkNGOTQwQTQ1QjQxMUVGOEZEQjc0MURDNEY5QUUwMi9Zdzc4aThna2Y1 bWdFb0IwSGtvYURiZnhSN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAg3xRkEBvOnDvP/wajxYDgBsEk3b8CfJPXpBHcmKti3dpitt6h3i4D 8YCIMWT8cvJ3QBLeWShwkRXx8MF2Ou5aHtkjq8e+g5wo5h5c/Br2dwuPsNfGL43J EPMpHXlTDxwPxcGlTjESC0rv1sFYF2BKWTd3WXmI3MPhdq6dJrFc1ZYkGbyKQzqd J0U5WWh+Orlo8RxaNJa8YHAx+zgEb7C451IgP7icIbWrMXTqEB0ApKHFrXpyvdqL bJjLCTzqL7JhuBmkX1l7KxtYgG/pQPC6zfrd8E/PU16u015WF+EtRO17Xtg2bMlB jd+KMvjgngCOmxsVeVI4k6V1TK3vtfN7 -----END CERTIFICATE-----Generated at Tue Nov 4 21:33:15 2025 by rpki-client