$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft File: yJEt9MR_ima8SJ7IQnJICiEbBoI.mft (raw, json) Hash identifier: ca0jok/P0vb0lrtCRSAXtPN5mRt9sFPyc6or0nmqe0I= Subject key identifier: E4:D1:FC:DF:C5:1C:E6:F3:67:E5:E3:EC:FC:6B:EC:A8:3D:AF:D7:09 Authority key identifier: C8:91:2D:F4:C4:7F:8A:66:BC:48:9E:C8:42:72:48:0A:21:1B:06:82 Certificate issuer: /CN=A91C9286/serialNumber=C8912DF4C47F8A66BC489EC84272480A211B0682 Certificate serial: 0C34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft Manifest number: 0C1C Signing time: Sun 02 Nov 2025 18:47:01 +0000 Manifest this update: Sun 02 Nov 2025 18:47:00 +0000 Manifest next update: Sun 09 Nov 2025 18:47:00 +0000 Files and hashes: 1: yJEt9MR_ima8SJ7IQnJICiEbBoI.crl (hash: QhGnnCqtEY7nQLl9oE2kV44XUtc43DnBBrDCzX3aNAY=) 2: 4F0E3CBCD22411ED99FF3546C4F9AE02.roa (hash: RoK/Liyg5Z/zOr0f0lIzQ8yWfepOU0FGv2MoxE2M0l4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.crl rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3124 (0xc34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9286, serialNumber=C8912DF4C47F8A66BC489EC84272480A211B0682 Validity Not Before: Nov 2 18:47:00 2025 GMT Not After : Nov 9 18:47:00 2025 GMT Subject: CN=6907a724-5734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a0:c2:fd:1b:9f:68:45:03:cb:4f:2a:84:be: 95:cc:7e:28:35:40:59:db:80:a3:9d:f8:fe:fc:e9: 59:53:9b:1f:82:bd:4f:e6:3e:31:12:d0:3b:30:38: c6:2a:7d:1b:a1:8a:d5:77:a5:f2:6e:9d:95:69:64: aa:17:77:8c:26:33:0f:16:5b:c9:5a:5c:ac:97:27: 41:0c:53:bc:02:b3:cb:0f:7a:b3:d9:9b:75:69:b0: da:02:f2:14:2d:29:03:66:7f:fc:33:93:b6:f2:b6: f9:05:b0:5b:b1:db:f7:4c:d6:75:26:d5:8c:71:a2: 51:3e:e8:fe:7d:28:e5:d4:69:33:c9:29:df:b2:d1: 52:f5:cf:0b:63:73:9c:4e:c8:0c:1a:2e:80:87:fa: 24:43:a0:da:20:9e:65:d7:d8:4b:1b:7a:df:4a:33: 11:15:7e:7d:d1:6b:38:ff:1a:5f:b1:0b:46:50:7a: 5f:f5:6a:e9:b4:ad:65:07:85:12:45:96:0f:6e:52: d9:bd:58:03:9e:52:91:52:d8:ba:e4:68:7b:14:c9: c2:7b:12:0c:5c:34:89:6a:8e:8b:6a:17:17:d1:54: 27:82:35:39:f1:33:fa:18:09:1d:e4:c3:4f:08:d3: 9c:ae:5b:b4:8c:97:c7:32:ac:5c:c8:72:73:7c:16: c0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D1:FC:DF:C5:1C:E6:F3:67:E5:E3:EC:FC:6B:EC:A8:3D:AF:D7:09 X509v3 Authority Key Identifier: keyid:C8:91:2D:F4:C4:7F:8A:66:BC:48:9E:C8:42:72:48:0A:21:1B:06:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:51:4a:bd:aa:03:d9:52:f8:18:da:f1:d8:65:33:a9:98:91: 02:a1:fb:1c:0d:43:52:64:bb:9d:2f:86:b7:38:b9:93:a9:df: 56:76:e9:36:42:f9:4c:0e:ca:8d:0a:7f:c1:a3:7e:da:e7:9b: 75:fb:35:b3:72:c1:b3:4a:cc:2c:26:20:cf:5a:d2:10:df:3f: f7:b6:31:65:71:83:1c:1d:5d:80:d9:47:ac:a7:d2:0b:68:9a: eb:12:72:34:61:e5:8c:d0:17:18:8d:be:66:b0:0e:a0:84:e8: 1e:b0:52:a6:4f:87:5d:38:f5:bd:9a:b5:51:c7:18:10:c9:f3: 74:09:fd:19:f9:27:71:a8:13:fb:6b:44:cc:94:a4:d7:fc:a9: cb:e3:27:d6:b5:fc:0c:65:1f:ca:89:2e:93:c4:0f:22:4d:92: b0:5b:d7:52:6b:ec:51:96:11:ad:75:bb:14:38:57:6f:fa:3e: 49:96:d4:e8:20:a2:f3:40:85:c6:14:ea:1b:f2:57:cc:0e:a9: 20:1a:b3:eb:f8:c8:11:71:82:22:67:df:d8:e7:76:47:84:f7: bd:34:f6:bd:83:c4:ca:ab:e3:1c:14:f2:a2:64:43:85:b6:81: dc:da:d4:a7:8d:cc:b8:ae:0b:7d:82:d8:db:cc:28:00:2e:b0: 60:b2:2c:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkyODYxMTAvBgNVBAUTKEM4OTEyREY0QzQ3RjhBNjZCQzQ4OUVDODQyNzI0ODBB MjExQjA2ODIwHhcNMjUxMTAyMTg0NzAwWhcNMjUxMTA5MTg0NzAwWjAYMRYwFAYD VQQDEw02OTA3YTcyNC01NzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA16DC/RufaEUDy08qhL6VzH4oNUBZ24Cjnfj+/OlZU5sfgr1P5j4xEtA7MDjG Kn0boYrVd6Xybp2VaWSqF3eMJjMPFlvJWlyslydBDFO8ArPLD3qz2Zt1abDaAvIU LSkDZn/8M5O28rb5BbBbsdv3TNZ1JtWMcaJRPuj+fSjl1GkzySnfstFS9c8LY3Oc TsgMGi6Ah/okQ6DaIJ5l19hLG3rfSjMRFX590Ws4/xpfsQtGUHpf9WrptK1lB4US RZYPblLZvVgDnlKRUti65Gh7FMnCexIMXDSJao6LahcX0VQngjU58TP6GAkd5MNP CNOcrlu0jJfHMqxcyHJzfBbAlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOTR/N/F HObzZ+Xj7Pxr7Kg9r9cJMB8GA1UdIwQYMBaAFMiRLfTEf4pmvEieyEJySAohGwaC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTI4Ni9DQTk2MUMwMjIw OEQxMUVBOUZCN0NBM0ZDNEY5QUUwMi95SkV0OU1SX2ltYThTSjdJUW5KSUNpRWJC b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lKRXQ5TVJfaW1hOFNKN0lRbkpJQ2lFYkJvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTI4Ni9DQTk2MUMwMjIwOEQxMUVBOUZCN0NBM0ZDNEY5QUUwMi95SkV0OU1SX2lt YThTSjdJUW5KSUNpRWJCb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAUUq9qgPZUvgY2vHYZTOpmJECofscDUNSZLudL4a3OLmTqd9Wduk2 QvlMDsqNCn/Bo37a55t1+zWzcsGzSswsJiDPWtIQ3z/3tjFlcYMcHV2A2Uesp9IL aJrrEnI0YeWM0BcYjb5msA6ghOgesFKmT4ddOPW9mrVRxxgQyfN0Cf0Z+SdxqBP7 a0TMlKTX/KnL4yfWtfwMZR/KiS6TxA8iTZKwW9dSa+xRlhGtdbsUOFdv+j5JltTo IKLzQIXGFOob8lfMDqkgGrPr+MgRcYIiZ9/Y53ZHhPe9NPa9g8TKq+McFPKiZEOF toHc2tSnjcy4rgt9gtjbzCgALrBgsiwY -----END CERTIFICATE-----Generated at Tue Nov 4 19:05:03 2025 by rpki-client