$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft File: YDHQYB1cLYetZiNh5jv_2R4EBzM.mft (raw, json) Hash identifier: 3X7m51+FC0j8FYTqUptklCs81Eoilflf+vIb9hCYogA= Subject key identifier: B3:2B:2A:DC:46:FC:5E:AA:21:2C:4C:22:9D:99:8F:3E:DA:FD:ED:4C Authority key identifier: 60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33 Certificate issuer: /CN=A91E8103/serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733 Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft Manifest number: 95 Signing time: Mon 03 Nov 2025 06:31:19 +0000 Manifest this update: Mon 03 Nov 2025 06:31:19 +0000 Manifest next update: Mon 10 Nov 2025 06:31:19 +0000 Files and hashes: 1: YDHQYB1cLYetZiNh5jv_2R4EBzM.crl (hash: u+huloj7kByx/2T1EFWbIsm6w9D9QPaDPznBOyBNSVw=) 2: 9A616002DE0411EFA80D3B34C4F9AE02.roa (hash: SyODw+cJwyZ2yJekBzL0vGtZJRWwofo8zfujkPhkBig=) 3: 6FFDB6E4A30C11F0ABE46042C4F9AE02.roa (hash: d6uVF1i6ZT73+dk+Mk43in2noeNbthxeD9nGk9TeUo8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:31:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8103, serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733 Validity Not Before: Nov 3 06:31:19 2025 GMT Not After : Nov 10 06:31:19 2025 GMT Subject: CN=69084c37-a4f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:91:6e:58:d5:53:79:d3:00:a1:15:7a:15:97: e7:66:b7:35:a0:1a:66:94:f2:2b:53:1d:bf:66:02: bc:77:2c:a7:06:54:a0:92:4f:76:51:0d:ec:54:2b: 93:f1:e3:48:b5:5d:02:6f:92:81:17:16:27:38:4c: b9:f6:39:04:cc:c3:68:b8:90:92:96:32:d7:ce:37: f9:49:ca:b9:94:8e:9a:c4:01:05:ed:88:72:4f:74: 6d:1f:1d:86:9e:73:74:4b:b7:c9:8f:3c:99:a0:08: 26:2b:d9:e5:3a:dc:33:df:d6:09:95:8d:38:cd:ab: 6b:69:40:01:f1:07:f1:4b:92:18:a4:a3:e3:36:1d: b1:1c:6f:f4:0c:f4:bf:25:97:04:41:a8:4a:58:7e: f3:b9:21:83:ac:8a:19:db:c5:bd:5d:9a:12:1e:b7: cd:e2:c8:3f:fb:0d:9e:d5:c8:ef:ed:f0:09:f7:ad: 1f:cd:97:e3:3f:1f:3c:90:43:89:07:b2:56:13:15: 42:94:41:5f:6d:e5:1a:3d:58:0f:b9:bb:6a:ad:bf: eb:84:b2:e3:93:86:b5:39:4c:eb:a5:54:c4:1c:95: 1c:3d:3d:36:f7:1c:66:b9:f7:08:a6:db:38:95:cb: 93:5f:a3:23:b1:29:07:97:2e:a1:fe:0a:77:c7:cc: ad:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:2B:2A:DC:46:FC:5E:AA:21:2C:4C:22:9D:99:8F:3E:DA:FD:ED:4C X509v3 Authority Key Identifier: keyid:60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:31:74:54:2c:3b:07:d6:dc:a9:92:8a:3a:53:14:87:47:5f: c7:68:91:8e:99:dc:d3:c7:7e:83:01:86:95:cf:c8:39:40:c3: ee:56:53:59:2d:11:9a:9c:1d:b6:ff:7d:9f:92:cf:69:eb:2a: 2d:84:29:e2:a7:50:52:89:f8:2d:90:dd:1f:f7:36:f9:2f:7e: e0:73:ca:c5:de:16:73:5c:9c:9c:d2:61:b3:2f:ef:f0:a5:20: 70:ed:d4:3a:7d:2e:b1:1e:5a:80:88:7a:19:3a:8b:40:d0:7c: 74:bf:52:dd:c1:d3:ba:9c:8c:e2:b3:c6:0f:31:97:b9:b1:bd: ea:12:73:b0:e6:19:83:92:4c:05:fe:f0:98:3a:79:63:a1:54: 7a:10:15:7d:59:1f:e9:bc:88:41:51:78:50:1c:d1:5f:a6:48: e1:e8:09:26:af:44:16:81:86:c2:4e:31:6e:bb:8f:10:17:15: 70:96:0f:cd:77:26:fb:da:a8:21:30:56:1f:1e:0a:72:f9:7b: 5d:12:20:04:be:df:58:d5:2e:b5:b6:81:79:da:11:b2:05:42: 2b:83:e0:20:94:8e:b2:c5:0b:90:db:af:2b:36:1d:bc:db:79: 90:ee:75:ca:32:d2:a7:40:7f:9e:a2:06:55:d4:f4:0a:f0:92: 8a:29:76:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgxMDMxMTAvBgNVBAUTKDYwMzFEMDYwMUQ1QzJEODdBRDY2MjM2MUU2M0JGRkQ5 MUUwNDA3MzMwHhcNMjUxMTAzMDYzMTE5WhcNMjUxMTEwMDYzMTE5WjAYMRYwFAYD VQQDEw02OTA4NGMzNy1hNGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZFuWNVTedMAoRV6FZfnZrc1oBpmlPIrUx2/ZgK8dyynBlSgkk92UQ3sVCuT 8eNItV0Cb5KBFxYnOEy59jkEzMNouJCSljLXzjf5Scq5lI6axAEF7YhyT3RtHx2G nnN0S7fJjzyZoAgmK9nlOtwz39YJlY04zatraUAB8QfxS5IYpKPjNh2xHG/0DPS/ JZcEQahKWH7zuSGDrIoZ28W9XZoSHrfN4sg/+w2e1cjv7fAJ960fzZfjPx88kEOJ B7JWExVClEFfbeUaPVgPubtqrb/rhLLjk4a1OUzrpVTEHJUcPT029xxmufcIpts4 lcuTX6MjsSkHly6h/gp3x8ytgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLMrKtxG /F6qISxMIp2Zjz7a/e1MMB8GA1UdIwQYMBaAFGAx0GAdXC2HrWYjYeY7/9keBAcz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODEwMy85M0RDNzU0RURF MDExMUVGOTMzMzVGMEJDNEY5QUUwMi9ZREhRWUIxY0xZZXRaaU5oNWp2XzJSNEVC ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lESFFZQjFjTFlldFppTmg1anZfMlI0RUJ6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODEwMy85M0RDNzU0RURFMDExMUVGOTMzMzVGMEJDNEY5QUUwMi9ZREhRWUIxY0xZ ZXRaaU5oNWp2XzJSNEVCek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgMXRULDsH1typkoo6UxSHR1/HaJGOmdzTx36DAYaVz8g5QMPuVlNZ LRGanB22/32fks9p6yothCnip1BSifgtkN0f9zb5L37gc8rF3hZzXJyc0mGzL+/w pSBw7dQ6fS6xHlqAiHoZOotA0Hx0v1LdwdO6nIzis8YPMZe5sb3qEnOw5hmDkkwF /vCYOnljoVR6EBV9WR/pvIhBUXhQHNFfpkjh6Akmr0QWgYbCTjFuu48QFxVwlg/N dyb72qghMFYfHgpy+XtdEiAEvt9Y1S61toF52hGyBUIrg+AglI6yxQuQ268rNh28 23mQ7nXKMtKnQH+eogZV1PQK8JKKKXZa -----END CERTIFICATE-----Generated at Wed Nov 5 05:24:53 2025 by rpki-client