$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft File: YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft (raw, json) Hash identifier: Kj9No6NQGuRW5z3zCNJyXfjpcHESaCLuDRBv0oBiMgQ= Subject key identifier: CD:6E:E7:C7:8F:05:B6:9B:51:8F:5E:86:31:CE:87:F2:68:33:7D:8F Authority key identifier: 60:1D:C5:4B:1F:52:05:08:0E:FD:9A:A6:CF:A5:A5:1C:4A:79:DD:2B Certificate issuer: /CN=A91E5998/serialNumber=601DC54B1F5205080EFD9AA6CFA5A51C4A79DD2B Certificate serial: 0679 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft Manifest number: 066E Signing time: Sun 02 Nov 2025 22:34:25 +0000 Manifest this update: Sun 02 Nov 2025 22:34:25 +0000 Manifest next update: Sun 09 Nov 2025 22:34:25 +0000 Files and hashes: 1: YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl (hash: TC6buDIbPahqEUEUoLmUkc65hl8XCXtPX2Xb7ilETF8=) 2: 7438DDF0FD4A11EF85D3AC1AC4F9AE02.roa (hash: ZFyON0cFfqWSYmJESFiDKpaoMViJEmJBEJHpK/VixB8=) 3: 24365CBCF51411EFB44F001BC4F9AE02.roa (hash: WNqUPBF8HNjFohXgQh/4EEtiPRYZ8HZnCTlz6HaVU7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:34:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1657 (0x679) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5998, serialNumber=601DC54B1F5205080EFD9AA6CFA5A51C4A79DD2B Validity Not Before: Nov 2 22:34:25 2025 GMT Not After : Nov 9 22:34:25 2025 GMT Subject: CN=6907dc71-a51d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:eb:d7:8a:99:7a:1e:a0:c7:b7:6a:3d:7b:80: 62:31:e2:2b:58:63:74:b9:88:ab:a0:70:e5:01:fa: 0f:ef:7e:56:e0:a7:3e:40:21:00:e2:d7:a5:37:81: 5c:c8:25:e6:8c:5a:6d:21:58:e6:cc:af:ff:69:77: de:fd:6c:45:5c:41:11:99:2e:02:43:62:f3:33:51: 59:7b:74:81:ce:d9:e4:33:cb:cb:bc:d6:1c:72:94: 65:fd:bd:d8:9e:fb:78:34:87:ea:5e:e8:4f:9f:8d: 0a:d0:e6:5a:b8:5a:e3:f6:97:41:bb:03:b4:0c:5f: 5b:0c:5f:cf:b8:d7:63:dd:70:01:8e:f1:53:c3:42: 1b:8b:6a:5f:d5:aa:e9:9c:5f:1f:3b:f0:57:1d:02: be:9c:9c:c2:78:cb:76:ec:61:25:c1:8e:69:2e:64: 7a:99:4e:74:ca:1f:83:d1:44:a4:a6:ce:f6:16:b6: 84:0d:f8:85:c5:0a:40:43:e2:ce:80:c8:8a:1b:55: d9:8e:6e:a7:de:10:b2:49:4e:8b:c2:60:86:24:18: df:2b:52:1a:f8:ab:14:bf:54:ab:39:c8:e8:88:66: 5b:36:72:2d:d2:ea:b6:c1:8c:cb:fd:8b:c4:d0:d1: 01:74:b7:eb:81:a7:39:fc:c5:43:1f:3f:d7:53:4c: 55:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:6E:E7:C7:8F:05:B6:9B:51:8F:5E:86:31:CE:87:F2:68:33:7D:8F X509v3 Authority Key Identifier: keyid:60:1D:C5:4B:1F:52:05:08:0E:FD:9A:A6:CF:A5:A5:1C:4A:79:DD:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:f3:07:ed:2a:25:2b:95:47:02:0e:02:0e:03:41:e9:37:1a: 65:0e:28:ac:27:72:8e:a0:0d:90:48:97:6a:9b:8b:8a:6c:a9: 87:84:27:25:69:7f:d7:64:e6:68:92:de:77:10:38:ce:a9:4c: 3f:ca:b7:f6:82:72:d2:34:94:ba:b2:ed:e9:1a:4a:55:50:6b: 76:9e:df:7f:d9:36:c7:f2:33:c2:48:aa:a5:d8:77:c4:d7:09: 53:02:f4:ee:55:30:13:8c:15:37:3a:33:0b:d0:34:57:d2:c0: 58:2b:a6:08:d4:af:5e:d8:33:2e:e6:4e:0c:7f:cf:0c:91:cb: e6:09:8e:c1:15:2c:78:1d:74:d0:de:3f:fe:89:ae:1c:b1:f5: e0:20:17:3a:25:67:fb:33:30:5d:e9:54:9e:d1:d8:12:ff:b6: db:17:13:9e:21:d9:c0:77:8d:5c:71:15:29:90:9c:19:a0:c7: 7a:83:ed:cd:48:a7:1e:6d:c7:2d:b1:a7:25:a7:75:0b:c0:7b: 15:5b:fc:f3:70:3f:34:a2:8f:64:dd:e5:45:20:ca:0e:74:bd: 57:83:3e:3f:49:50:6d:3c:28:42:56:d7:9a:0f:59:29:2e:6b: 61:fa:d2:97:54:87:6b:bc:50:d5:a8:74:50:b2:67:83:4a:ad: 6b:61:20:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU5OTgxMTAvBgNVBAUTKDYwMURDNTRCMUY1MjA1MDgwRUZEOUFBNkNGQTVBNTFD NEE3OUREMkIwHhcNMjUxMTAyMjIzNDI1WhcNMjUxMTA5MjIzNDI1WjAYMRYwFAYD VQQDEw02OTA3ZGM3MS1hNTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtuvXipl6HqDHt2o9e4BiMeIrWGN0uYiroHDlAfoP735W4Kc+QCEA4telN4Fc yCXmjFptIVjmzK//aXfe/WxFXEERmS4CQ2LzM1FZe3SBztnkM8vLvNYccpRl/b3Y nvt4NIfqXuhPn40K0OZauFrj9pdBuwO0DF9bDF/PuNdj3XABjvFTw0Ibi2pf1arp nF8fO/BXHQK+nJzCeMt27GElwY5pLmR6mU50yh+D0USkps72FraEDfiFxQpAQ+LO gMiKG1XZjm6n3hCySU6LwmCGJBjfK1Ia+KsUv1SrOcjoiGZbNnIt0uq2wYzL/YvE 0NEBdLfrgac5/MVDHz/XU0xV1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM1u58eP BbabUY9ehjHOh/JoM32PMB8GA1UdIwQYMBaAFGAdxUsfUgUIDv2aps+lpRxKed0r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTk5OC8yQzU5MkUyODlG MUYxMUVCQjMwRDU3NDNDNEY5QUUwMi9ZQjNGU3g5U0JRZ09fWnFtejZXbEhFcDUz U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lCM0ZTeDlTQlFnT19acW16NldsSEVwNTNTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTk5OC8yQzU5MkUyODlGMUYxMUVCQjMwRDU3NDNDNEY5QUUwMi9ZQjNGU3g5U0JR Z09fWnFtejZXbEhFcDUzU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ8wftKiUrlUcCDgIOA0HpNxplDiisJ3KOoA2QSJdqm4uKbKmHhCcl aX/XZOZokt53EDjOqUw/yrf2gnLSNJS6su3pGkpVUGt2nt9/2TbH8jPCSKql2HfE 1wlTAvTuVTATjBU3OjML0DRX0sBYK6YI1K9e2DMu5k4Mf88MkcvmCY7BFSx4HXTQ 3j/+ia4csfXgIBc6JWf7MzBd6VSe0dgS/7bbFxOeIdnAd41ccRUpkJwZoMd6g+3N SKcebcctsaclp3ULwHsVW/zzcD80oo9k3eVFIMoOdL1Xgz4/SVBtPChCVteaD1kp Lmth+tKXVIdrvFDVqHRQsmeDSq1rYSCr -----END CERTIFICATE-----Generated at Tue Nov 4 12:37:02 2025 by rpki-client