$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft File: yZYCtJIcaINWT0smUVwdY-TPNkQ.mft (raw, json) Hash identifier: 7RpdSr7H+/umFd7IAK6/YYi1nApcGmg7NJ9xh2uCYtE= Subject key identifier: 7C:38:8E:7E:45:45:1E:F7:09:F1:1F:C1:58:D5:F5:8E:94:A8:60:98 Authority key identifier: C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44 Certificate issuer: /CN=A91E4EF6/serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644 Certificate serial: 0AB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft Manifest number: 11E7 Signing time: Sun 02 Nov 2025 19:26:42 +0000 Manifest this update: Sun 02 Nov 2025 19:26:42 +0000 Manifest next update: Sun 09 Nov 2025 19:26:42 +0000 Files and hashes: 1: yZYCtJIcaINWT0smUVwdY-TPNkQ.crl (hash: gpN3i2xhFhW+N7s/p/8nG5t/X8yoPcbspOl7HoXzkHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2739 (0xab3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF6, serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644 Validity Not Before: Nov 2 19:26:42 2025 GMT Not After : Nov 9 19:26:42 2025 GMT Subject: CN=6907b072-7bdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:71:e1:1e:bb:45:6f:f5:0b:b4:01:91:ba:dd: 97:ae:cf:fd:b5:cf:ba:3a:5e:cf:46:71:8f:55:df: 9c:cf:99:c7:fb:bb:22:50:aa:13:6e:bf:f4:da:11: 7a:c7:93:9e:20:3a:11:f9:13:96:cf:13:a3:52:34: b4:4a:ae:25:eb:90:41:92:cc:22:78:dc:a0:65:ff: 21:a9:a8:63:f6:66:3c:ba:08:de:c7:56:dc:ce:1c: 3a:1b:c3:00:7a:bf:e7:5a:50:a8:5f:e2:4f:2e:02: 1a:4c:a6:e8:f1:c2:38:f0:2b:ea:cc:44:36:60:0d: 9d:0c:c6:7f:c6:27:fc:d9:06:b3:ce:a3:53:33:2d: c7:b1:62:5f:13:b5:14:6c:bb:f9:18:b0:5c:78:40: 68:e7:ca:db:dc:0d:4a:b5:e2:58:97:c6:64:b0:c9: de:52:0c:e6:2f:c1:8b:07:17:24:c3:df:94:11:5c: ee:05:94:4d:01:a8:53:85:d1:3c:62:9f:c3:0f:b7: 27:20:4c:20:3a:bc:3b:ea:ee:8e:2b:39:ba:d4:8c: 58:7a:87:26:e6:26:04:32:43:f4:5e:38:d5:08:9f: 0c:23:e2:f0:8a:77:63:61:52:14:d2:0b:0f:da:77: d5:e9:3e:5c:22:30:fd:14:03:87:a0:db:89:d2:86: cf:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:38:8E:7E:45:45:1E:F7:09:F1:1F:C1:58:D5:F5:8E:94:A8:60:98 X509v3 Authority Key Identifier: keyid:C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:3d:e8:8c:30:7d:cd:9a:49:b5:4a:25:f9:02:c3:ef:8b:27: 6f:d5:8b:16:55:08:15:99:c1:67:89:6e:02:fd:9f:a4:08:6e: cc:7e:5c:14:6e:3a:64:de:a3:1d:d9:d3:36:91:4e:2e:6f:50: 8e:05:c1:59:90:59:5d:c4:c3:77:1f:12:66:6f:86:84:b9:38: df:7d:22:3a:7d:69:bd:af:a0:c5:1c:7a:40:b3:a3:dc:ad:ca: 48:13:5b:c5:a8:ec:9b:11:d3:79:4c:db:0b:7a:8a:13:95:53: 62:84:57:35:4d:0d:86:65:42:27:0c:0a:71:d7:cb:4a:50:92: ee:12:e7:1b:3e:ab:6d:b6:fe:fe:dd:f8:04:90:dc:8f:6c:74: 9a:a9:95:b4:b8:09:8f:5a:01:ec:34:8f:6c:38:ce:c5:54:a0: 59:de:11:fc:29:05:0d:90:e3:c3:c0:f1:e8:7a:ae:cf:d1:14: de:8f:41:80:59:b9:ee:d1:e9:1f:36:dd:6f:a0:83:9d:6a:49: aa:21:a1:19:bd:aa:b1:78:9c:ce:6c:54:c3:1d:2a:c5:22:c7: a6:bc:a0:9f:b1:7a:99:fb:20:55:e4:d1:a5:e7:f1:71:73:b2: e9:36:a8:b9:46:cc:38:ce:80:95:58:41:a1:04:df:f6:ca:fa: e0:40:92:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjYxMTAvBgNVBAUTKEM5OTYwMkI0OTIxQzY4ODM1NjRGNEIyNjUxNUMxRDYz RTRDRjM2NDQwHhcNMjUxMTAyMTkyNjQyWhcNMjUxMTA5MTkyNjQyWjAYMRYwFAYD VQQDEw02OTA3YjA3Mi03YmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3XHhHrtFb/ULtAGRut2Xrs/9tc+6Ol7PRnGPVd+cz5nH+7siUKoTbr/02hF6 x5OeIDoR+ROWzxOjUjS0Sq4l65BBkswieNygZf8hqahj9mY8ugjex1bczhw6G8MA er/nWlCoX+JPLgIaTKbo8cI48CvqzEQ2YA2dDMZ/xif82QazzqNTMy3HsWJfE7UU bLv5GLBceEBo58rb3A1KteJYl8ZksMneUgzmL8GLBxckw9+UEVzuBZRNAahThdE8 Yp/DD7cnIEwgOrw76u6OKzm61IxYeocm5iYEMkP0XjjVCJ8MI+LwindjYVIU0gsP 2nfV6T5cIjD9FAOHoNuJ0obPFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHw4jn5F RR73CfEfwVjV9Y6UqGCYMB8GA1UdIwQYMBaAFMmWArSSHGiDVk9LJlFcHWPkzzZE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNi85MzgwMDc4RTYx RDYxMUVBQjhEMDE1NUJDNEY5QUUwMi95WllDdEpJY2FJTldUMHNtVVZ3ZFktVFBO a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laWUN0SkljYUlOV1Qwc21VVndkWS1UUE5rUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNi85MzgwMDc4RTYxRDYxMUVBQjhEMDE1NUJDNEY5QUUwMi95WllDdEpJY2FJ TldUMHNtVVZ3ZFktVFBOa1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1PeiMMH3Nmkm1SiX5AsPviydv1YsWVQgVmcFniW4C/Z+kCG7MflwU bjpk3qMd2dM2kU4ub1COBcFZkFldxMN3HxJmb4aEuTjffSI6fWm9r6DFHHpAs6Pc rcpIE1vFqOybEdN5TNsLeooTlVNihFc1TQ2GZUInDApx18tKUJLuEucbPqtttv7+ 3fgEkNyPbHSaqZW0uAmPWgHsNI9sOM7FVKBZ3hH8KQUNkOPDwPHoeq7P0RTej0GA Wbnu0ekfNt1voIOdakmqIaEZvaqxeJzObFTDHSrFIsemvKCfsXqZ+yBV5NGl5/Fx c7LpNqi5Rsw4zoCVWEGhBN/2yvrgQJJ4 -----END CERTIFICATE-----Generated at Tue Nov 4 12:36:17 2025 by rpki-client