$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft File: yvogqQGAldIp8KxDkg3NQ6Zr61I.mft (raw, json) Hash identifier: +g2CU9H2WajwJyGVZYp2DzM/IVUxcrnPCZRxtclngDI= Subject key identifier: CE:22:67:9D:01:DC:D6:5F:15:5F:8B:58:DA:0A:17:70:20:65:A1:4F Authority key identifier: CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52 Certificate issuer: /CN=A91C4FB5/serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52 Certificate serial: 11C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft Manifest number: 11A1 Signing time: Sun 02 Nov 2025 17:14:07 +0000 Manifest this update: Sun 02 Nov 2025 17:14:06 +0000 Manifest next update: Sun 09 Nov 2025 17:14:06 +0000 Files and hashes: 1: yvogqQGAldIp8KxDkg3NQ6Zr61I.crl (hash: RsWf+2u3W9EI9799PWnkBlI0LRy7sIYA8+cF8AU6xS0=) 2: 08BD74841A4F11EA8DFECB86C4F9AE02.roa (hash: 5pPzlX8jdTNFookFj/rSeOJPoKLM49nAfSCOByjLKkM=) 3: B9F821D4462D11EC93DFE63CC4F9AE02.roa (hash: I8lWHibGq7xqWHXndBv/JsEhBfdVBWJiR9FoofIbTMA=) 4: F7ACE748AD3C11EA95DFF369C4F9AE02.roa (hash: eva2CwxKJKJqWQ6I0wp7A0DX5eeMMT63BYKB14R391I=) 5: F6609DDAAD3C11EA95DFF369C4F9AE02.roa (hash: RU5uDzdAkRAS9qZ8SwVPWAXrYZQRzn4OHSyBtdDYzzE=) 6: D3258BFA7AE711EFB4F5E235C4F9AE02.roa (hash: IqcKshpk+qASTKe+nVLkoXyik/TGszfm7PEMyL1PxRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:14:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4551 (0x11c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4FB5, serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52 Validity Not Before: Nov 2 17:14:06 2025 GMT Not After : Nov 9 17:14:06 2025 GMT Subject: CN=6907915e-55e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9f:5c:e2:ba:96:28:20:f6:cb:c7:0e:1c:7c: db:8c:a0:03:36:ab:e4:e9:a1:60:67:00:f9:e7:2c: 08:dc:6b:b3:92:96:15:09:67:b7:97:16:a2:c5:5c: 80:2a:8e:33:f5:6d:5c:67:a4:78:d5:7e:38:5d:18: 5a:23:e1:fe:b5:37:cc:d7:16:3c:50:a4:19:ea:de: 9e:55:ff:8a:8f:07:92:af:26:2a:59:ee:00:00:51: 77:64:80:4e:f3:30:5d:32:96:26:86:f8:ed:43:b1: 66:d5:94:1c:49:0f:26:c6:57:1d:d0:4e:4b:bd:98: 05:75:32:31:ea:24:82:89:4d:2c:f8:bc:70:29:34: 94:59:50:15:a0:79:20:46:cc:58:90:21:a2:fd:54: 5e:ba:29:d4:6b:cd:f9:b3:71:af:03:8f:2e:ea:28: 14:b3:0f:da:62:a1:57:ff:f4:20:fe:de:18:65:df: e7:66:ed:c5:6f:53:bf:3a:9d:61:8c:be:7a:61:05: 35:33:62:26:34:11:f8:ee:5b:07:a7:47:84:cf:db: ca:4e:dd:9f:55:5d:ff:f5:c2:8a:18:15:64:87:48: e1:13:1f:b5:ad:e9:88:34:de:37:c2:91:7d:99:82: ae:8e:51:e4:04:e7:dc:8b:85:d2:e0:22:63:0f:98: 80:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:22:67:9D:01:DC:D6:5F:15:5F:8B:58:DA:0A:17:70:20:65:A1:4F X509v3 Authority Key Identifier: keyid:CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:56:ed:a8:e6:1a:ac:af:f3:09:e1:41:6b:63:cd:b1:99:42: 6b:98:30:c1:c6:5c:c3:58:25:96:5a:aa:a9:a8:e2:18:ae:c0: 60:02:be:96:6b:47:58:bc:ea:d9:9d:df:d9:1a:20:df:fa:af: 1d:b8:24:58:1c:45:b5:90:01:b5:55:78:65:ae:50:84:11:d5: bb:ea:e8:69:27:63:25:32:9e:06:69:e2:0d:df:10:9a:4f:12: 8e:f4:db:a6:7c:11:c2:05:9e:42:c5:1d:d8:6f:aa:eb:f9:85: ee:b0:c9:59:00:33:81:e8:d3:ec:e9:9d:df:55:d4:0f:05:f9: 93:29:f4:ef:dc:c5:06:4a:07:08:1e:56:3c:00:d3:f5:45:02: 79:f6:37:c7:5a:df:ed:c3:e2:dd:1d:06:fb:60:2d:21:7a:50: fe:7e:ea:ce:38:2e:6d:c1:e2:b4:84:1d:08:bf:49:4b:11:48: f4:33:2d:89:1d:e2:81:f4:0d:37:a1:c3:73:8a:4e:5d:bf:fa: bf:25:84:a8:6e:3d:2d:4d:67:0a:ea:26:c2:da:ea:67:90:71: 64:51:a2:c4:db:1d:3e:b7:07:5c:be:c8:6c:58:bc:22:82:13: aa:a5:23:0c:e0:ac:fe:6b:8e:d1:98:86:03:39:bb:cb:b0:ed: f7:82:3c:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGQjUxMTAvBgNVBAUTKENBRkEyMEE5MDE4MDk1RDIyOUYwQUM0MzkyMERDRDQz QTY2QkVCNTIwHhcNMjUxMTAyMTcxNDA2WhcNMjUxMTA5MTcxNDA2WjAYMRYwFAYD VQQDEw02OTA3OTE1ZS01NWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr59c4rqWKCD2y8cOHHzbjKADNqvk6aFgZwD55ywI3GuzkpYVCWe3lxaixVyA Ko4z9W1cZ6R41X44XRhaI+H+tTfM1xY8UKQZ6t6eVf+KjweSryYqWe4AAFF3ZIBO 8zBdMpYmhvjtQ7Fm1ZQcSQ8mxlcd0E5LvZgFdTIx6iSCiU0s+LxwKTSUWVAVoHkg RsxYkCGi/VReuinUa835s3GvA48u6igUsw/aYqFX//Qg/t4YZd/nZu3Fb1O/Op1h jL56YQU1M2ImNBH47lsHp0eEz9vKTt2fVV3/9cKKGBVkh0jhEx+1remINN43wpF9 mYKujlHkBOfci4XS4CJjD5iADwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM4iZ50B 3NZfFV+LWNoKF3AgZaFPMB8GA1UdIwQYMBaAFMr6IKkBgJXSKfCsQ5INzUOma+tS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEZCNS9FRjk4N0VFMjA5 RDExMUU5OTU2MDdCNTJDNEY5QUUwMi95dm9ncVFHQWxkSXA4S3hEa2czTlE2WnI2 MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l2b2dxUUdBbGRJcDhLeERrZzNOUTZacjYxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEZCNS9FRjk4N0VFMjA5RDExMUU5OTU2MDdCNTJDNEY5QUUwMi95dm9ncVFHQWxk SXA4S3hEa2czTlE2WnI2MUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvVu2o5hqsr/MJ4UFrY82xmUJrmDDBxlzDWCWWWqqpqOIYrsBgAr6W a0dYvOrZnd/ZGiDf+q8duCRYHEW1kAG1VXhlrlCEEdW76uhpJ2MlMp4GaeIN3xCa TxKO9NumfBHCBZ5CxR3Yb6rr+YXusMlZADOB6NPs6Z3fVdQPBfmTKfTv3MUGSgcI HlY8ANP1RQJ59jfHWt/tw+LdHQb7YC0helD+furOOC5tweK0hB0Iv0lLEUj0My2J HeKB9A03ocNzik5dv/q/JYSobj0tTWcK6ibC2upnkHFkUaLE2x0+twdcvshsWLwi ghOqpSMM4Kz+a47RmIYDObvLsO33gjyM -----END CERTIFICATE-----Generated at Tue Nov 4 12:36:18 2025 by rpki-client