$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft File: YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft (raw, json) Hash identifier: j7RLVkNProObsr5a6ul+L2deO6rwRULiK+whnRb+GKc= Subject key identifier: 85:12:EE:E1:06:1E:F5:43:D2:E7:DC:46:4D:A8:3A:6B:9B:A6:1F:B5 Authority key identifier: 61:57:75:A4:DE:23:E4:6A:8B:57:C8:F7:B9:C9:E1:E8:86:E5:D8:D5 Certificate issuer: /CN=A91DF195/serialNumber=615775A4DE23E46A8B57C8F7B9C9E1E886E5D8D5 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft Manifest number: 1A Signing time: Mon 03 Nov 2025 07:50:23 +0000 Manifest this update: Mon 03 Nov 2025 07:50:23 +0000 Manifest next update: Mon 10 Nov 2025 07:50:23 +0000 Files and hashes: 1: YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl (hash: iPzfHJ5nyXLwiKeY10WcvdT+8gIsO5+UG705MDkh9YU=) 2: DD3F28CC93D111F0B0A32B0BC4F9AE02.roa (hash: OJep3Jj5FjQRgEx+dN34IpTpsR0/ZkQ1f2GGqPdjPgg=) 3: B2B63AAC93CF11F0AFB6CD40C4F9AE02.roa (hash: QZkJm8VBjgXrSCDM+VZ1EYZWVut/5O77RoipwMHofMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:50:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF195, serialNumber=615775A4DE23E46A8B57C8F7B9C9E1E886E5D8D5 Validity Not Before: Nov 3 07:50:23 2025 GMT Not After : Nov 10 07:50:23 2025 GMT Subject: CN=69085ebf-dea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cf:10:1b:58:92:88:74:50:f0:65:ab:3d:d2: c4:0e:33:09:19:1f:ed:b8:5e:24:01:e0:74:b6:24: d2:96:4f:c9:3a:34:a3:91:b6:dd:8f:27:bd:db:a1: 8c:4b:e6:51:db:ef:62:a2:26:e2:96:30:38:bf:c0: 9c:fe:5f:f2:7b:2f:3a:9a:6a:cb:53:39:c7:be:f6: 31:e4:75:7e:d7:ce:38:c8:f0:ce:30:e7:8d:06:5f: cf:dd:93:ea:bb:1c:61:77:5c:fa:b7:05:15:be:28: 52:84:f0:54:3d:6b:03:4a:65:eb:26:b2:c2:da:eb: 83:01:a1:44:63:86:c1:e0:1a:fb:06:4b:34:cb:24: 8f:dc:1e:cc:c9:f8:dc:7f:1b:45:30:fc:cd:4d:4a: 21:00:95:0c:65:43:1c:d8:da:89:6d:57:06:e8:a1: e9:14:a6:4f:94:cf:d7:c6:80:75:15:78:af:3e:9e: 16:05:b0:73:18:f9:eb:c1:f6:d3:d8:85:ab:98:10: f2:59:0e:0d:b5:e0:70:b4:e8:1b:2b:88:87:38:5e: 07:73:0b:26:7c:58:49:2f:11:35:c5:ff:15:b5:24: 87:6a:d2:82:7e:11:e5:32:77:67:70:d0:1f:0c:ca: c5:3b:57:e0:bc:fc:89:85:f6:ca:2a:b4:e6:85:95: 20:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:12:EE:E1:06:1E:F5:43:D2:E7:DC:46:4D:A8:3A:6B:9B:A6:1F:B5 X509v3 Authority Key Identifier: keyid:61:57:75:A4:DE:23:E4:6A:8B:57:C8:F7:B9:C9:E1:E8:86:E5:D8:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:7d:e0:c1:31:d0:1d:45:2e:15:28:f3:ef:19:94:61:80:28: f1:37:f1:54:2a:d8:3b:63:f6:ec:6e:f5:4f:74:e8:57:bc:ce: 42:bc:65:32:19:1e:1b:6e:28:bf:59:0f:6a:1a:90:79:de:d2: aa:62:e5:11:34:f6:ab:e0:45:37:0f:e3:a7:00:12:e5:b9:00: 0a:76:09:b8:0e:04:94:93:f9:1b:ec:ab:23:3e:68:b1:3f:1e: 0a:ce:f7:c9:a1:be:cf:36:52:92:87:42:a8:db:7b:70:28:58: 84:da:c2:75:57:9e:09:26:58:80:f5:8d:d4:68:5f:2e:51:5f: 99:50:9f:ba:23:d1:06:80:6f:ca:89:a4:9a:8c:e9:55:e6:3f: 67:b6:0b:0b:b4:4c:76:82:cb:96:8f:d5:f3:ed:75:93:1d:94: 1d:f1:e7:d7:4b:68:ff:1c:d4:72:22:a0:d0:f9:0d:3c:b4:c3: 7c:09:28:cc:d7:0a:2d:33:63:6b:5f:b6:68:e1:bb:cd:06:90: 87:b6:3e:d7:27:60:83:60:18:63:4c:fe:a1:fe:4c:4b:ac:f2: 3e:65:74:01:1e:27:b1:2e:c3:a4:f2:7f:06:62:eb:42:25:1d: 18:60:c4:50:76:cd:05:a2:75:56:bf:8f:91:d1:08:6c:75:4a: 1d:fc:e5:74 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RjE5NTExMC8GA1UEBRMoNjE1Nzc1QTRERTIzRTQ2QThCNTdDOEY3QjlDOUUxRTg4 NkU1RDhENTAeFw0yNTExMDMwNzUwMjNaFw0yNTExMTAwNzUwMjNaMBgxFjAUBgNV BAMTDTY5MDg1ZWJmLWRlYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2zxAbWJKIdFDwZas90sQOMwkZH+24XiQB4HS2JNKWT8k6NKORtt2PJ73boYxL 5lHb72KiJuKWMDi/wJz+X/J7LzqaastTOce+9jHkdX7XzjjI8M4w540GX8/dk+q7 HGF3XPq3BRW+KFKE8FQ9awNKZesmssLa64MBoURjhsHgGvsGSzTLJI/cHszJ+Nx/ G0Uw/M1NSiEAlQxlQxzY2oltVwbooekUpk+Uz9fGgHUVeK8+nhYFsHMY+evB9tPY hauYEPJZDg214HC06BsriIc4XgdzCyZ8WEkvETXF/xW1JIdq0oJ+EeUyd2dw0B8M ysU7V+C8/ImF9soqtOaFlSBpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhRLu4QYe 9UPS59xGTag6a5umH7UwHwYDVR0jBBgwFoAUYVd1pN4j5GqLV8j3ucnh6Ibl2NUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGMTk1Lzc0QzE4RjcwOTM4 QTExRjBCQkQ2MjM4NUM0RjlBRTAyL1lWZDFwTjRqNUdxTFY4ajN1Y25oNklibDJO VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWVZkMXBONGo1R3FMVjhqM3Vjbmg2SWJsMk5VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG MTk1Lzc0QzE4RjcwOTM4QTExRjBCQkQ2MjM4NUM0RjlBRTAyL1lWZDFwTjRqNUdx TFY4ajN1Y25oNklibDJOVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADB94MEx0B1FLhUo8+8ZlGGAKPE38VQq2Dtj9uxu9U906Fe8zkK8ZTIZ HhtuKL9ZD2oakHne0qpi5RE09qvgRTcP46cAEuW5AAp2CbgOBJST+RvsqyM+aLE/ HgrO98mhvs82UpKHQqjbe3AoWITawnVXngkmWID1jdRoXy5RX5lQn7oj0QaAb8qJ pJqM6VXmP2e2Cwu0THaCy5aP1fPtdZMdlB3x59dLaP8c1HIioND5DTy0w3wJKMzX Ci0zY2tftmjhu80GkIe2PtcnYINgGGNM/qH+TEus8j5ldAEeJ7Euw6TyfwZi60Il HRhgxFB2zQWidVa/j5HRCGx1Sh385XQ= -----END CERTIFICATE-----Generated at Tue Nov 4 19:14:02 2025 by rpki-client