$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft File: YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft (raw, json) Hash identifier: lbbezS9KHagpioR8xfzaq+UNX0v/oTA38bIqzC0D63g= Subject key identifier: 83:47:44:6C:DC:47:00:40:03:1B:CE:DD:19:13:33:48:2A:AF:0B:AD Authority key identifier: 60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04 Certificate issuer: /CN=A91BBED0/serialNumber=609FEC2594380FC7639694173C3CFE5F2B596204 Certificate serial: 0182 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft Manifest number: 017D Signing time: Wed 05 Nov 2025 03:54:26 +0000 Manifest this update: Wed 05 Nov 2025 03:54:25 +0000 Manifest next update: Wed 12 Nov 2025 03:54:25 +0000 Files and hashes: 1: YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl (hash: xDqFIGj6DKyln8xZdrj7JMjjOc/f+7maU4hXydBGlS0=) 2: 2BA240AC994111F096074C40C4F9AE02.roa (hash: muY8FRyGGtKORkz0DPbnMxy7K5goG6Kn9e6MVRZPVic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:54:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 386 (0x182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBED0, serialNumber=609FEC2594380FC7639694173C3CFE5F2B596204 Validity Not Before: Nov 5 03:54:25 2025 GMT Not After : Nov 12 03:54:25 2025 GMT Subject: CN=690aca71-7e04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:de:b6:c7:c6:ed:7e:a9:e8:a5:e1:38:aa:86: 27:ea:f6:2f:e4:ea:27:b0:e3:33:ee:fd:f8:1c:9b: 80:8a:3e:45:cf:58:0a:31:0f:be:1f:b9:c6:10:6b: d1:b4:f1:7b:f9:a0:b4:cd:53:ab:4b:a6:03:e5:6b: a5:7e:de:74:74:8b:07:b8:0d:ad:ea:60:a5:89:d4: 10:e2:de:d5:dd:5c:23:93:f6:51:9c:9f:ae:34:9b: a4:0f:dc:c4:b3:7f:ec:2a:39:18:eb:87:30:11:1f: bb:9c:07:91:4c:c0:67:3d:62:40:dc:2e:83:2d:22: 24:7a:c6:d7:e2:cc:4f:5f:f5:a2:ed:38:09:5a:c4: e2:5d:13:d7:88:19:23:b4:7f:b5:6b:69:9c:bd:cb: de:16:ae:25:6a:d4:79:16:7d:d1:df:3c:97:61:f8: 25:a0:82:e8:ce:d8:85:16:fb:e3:fe:fb:0e:ec:0f: e5:a2:79:75:02:3c:a4:1e:bb:12:60:3f:c8:00:53: 27:31:5c:23:f4:f4:ff:d2:7a:fe:f2:c4:34:a4:d6: 3d:1b:c3:f9:53:02:3d:f1:fb:57:25:14:d1:fb:5c: fe:98:f7:7e:b9:54:7b:50:da:c8:07:71:26:d4:65: 32:67:a0:69:a9:4b:3a:47:f2:c9:55:38:44:02:c1: a0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:47:44:6C:DC:47:00:40:03:1B:CE:DD:19:13:33:48:2A:AF:0B:AD X509v3 Authority Key Identifier: keyid:60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:de:ec:64:46:4a:56:d9:6f:b0:e2:fe:53:a7:dd:51:87:b1: 72:97:7f:03:6d:c3:5a:97:a6:ff:8c:00:fb:b1:17:bd:eb:62: 50:2c:b7:5a:46:0f:7e:bc:9b:d4:dc:b4:0b:fa:ce:6a:af:7b: 16:d9:69:98:34:96:25:81:04:8e:7f:15:1b:96:6b:dc:9e:91: 7e:55:79:9b:78:f2:a1:5a:4c:f1:55:50:44:e8:5f:94:ef:6d: ec:dc:21:21:af:e4:61:e7:39:e3:f2:46:a0:96:e1:86:f3:e2: cf:22:2d:6f:15:03:61:9c:08:b9:73:31:3d:64:5c:f1:e6:33: 78:17:97:0b:e8:84:41:ea:8f:db:5a:be:32:29:ee:ff:a0:99: 2e:8d:f8:1e:4c:d1:0e:78:3d:b0:20:91:d3:ba:fc:69:7e:47: 59:7e:57:5a:6b:5f:3f:c7:48:63:00:9c:37:e9:b9:67:ad:6c: e3:1d:78:2e:ca:78:92:7b:df:03:5a:40:c8:8c:52:3b:6e:8e: ea:9b:04:10:3e:19:75:b5:55:e4:e1:01:67:26:5d:b1:4f:87: 6d:c7:66:f4:9b:5e:6f:c7:68:04:4d:22:1c:7b:d9:3e:38:48: be:25:d1:b5:bb:a2:c1:44:54:b0:a3:23:b5:bc:f3:11:af:f0: 64:18:ea:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJFRDAxMTAvBgNVBAUTKDYwOUZFQzI1OTQzODBGQzc2Mzk2OTQxNzNDM0NGRTVG MkI1OTYyMDQwHhcNMjUxMTA1MDM1NDI1WhcNMjUxMTEyMDM1NDI1WjAYMRYwFAYD VQQDEw02OTBhY2E3MS03ZTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8N62x8btfqnopeE4qoYn6vYv5OonsOMz7v34HJuAij5Fz1gKMQ++H7nGEGvR tPF7+aC0zVOrS6YD5Wulft50dIsHuA2t6mClidQQ4t7V3Vwjk/ZRnJ+uNJukD9zE s3/sKjkY64cwER+7nAeRTMBnPWJA3C6DLSIkesbX4sxPX/Wi7TgJWsTiXRPXiBkj tH+1a2mcvcveFq4latR5Fn3R3zyXYfgloILoztiFFvvj/vsO7A/lonl1AjykHrsS YD/IAFMnMVwj9PT/0nr+8sQ0pNY9G8P5UwI98ftXJRTR+1z+mPd+uVR7UNrIB3Em 1GUyZ6BpqUs6R/LJVThEAsGgBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFINHRGzc RwBAAxvO3RkTM0gqrwutMB8GA1UdIwQYMBaAFGCf7CWUOA/HY5aUFzw8/l8rWWIE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkVEMC80QzE3QTA0RTc3 RTExMUVFQUI0QUVGNTNDNEY5QUUwMi9ZSl9zSlpRNEQ4ZGpscFFYUER6LVh5dFpZ Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lKX3NKWlE0RDhkamxwUVhQRHotWHl0WllnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkVEMC80QzE3QTA0RTc3RTExMUVFQUI0QUVGNTNDNEY5QUUwMi9ZSl9zSlpRNEQ4 ZGpscFFYUER6LVh5dFpZZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBM3uxkRkpW2W+w4v5Tp91Rh7Fyl38DbcNal6b/jAD7sRe962JQLLda Rg9+vJvU3LQL+s5qr3sW2WmYNJYlgQSOfxUblmvcnpF+VXmbePKhWkzxVVBE6F+U 723s3CEhr+Rh5znj8kagluGG8+LPIi1vFQNhnAi5czE9ZFzx5jN4F5cL6IRB6o/b Wr4yKe7/oJkujfgeTNEOeD2wIJHTuvxpfkdZfldaa18/x0hjAJw36blnrWzjHXgu yniSe98DWkDIjFI7bo7qmwQQPhl1tVXk4QFnJl2xT4dtx2b0m15vx2gETSIce9k+ OEi+JdG1u6LBRFSwoyO1vPMRr/BkGOp+ -----END CERTIFICATE-----Generated at Wed Nov 5 15:17:09 2025 by rpki-client