$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft File: Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft (raw, json) Hash identifier: QeA0FOIPsQPYhTj53GJSY19rAcUOwG21bsZdaRGeLHo= Subject key identifier: F8:A3:82:D0:A5:4E:F5:73:C8:B2:AB:6B:8C:7C:87:4B:DB:34:BA:81 Authority key identifier: 62:2E:E7:54:36:D6:F2:F3:9F:B2:3D:2C:EB:22:33:71:84:57:3D:FE Certificate issuer: /CN=A91EB46B/serialNumber=622EE75436D6F2F39FB23D2CEB22337184573DFE Certificate serial: 0CC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft Manifest number: 0CB8 Signing time: Tue 04 Nov 2025 18:19:39 +0000 Manifest this update: Tue 04 Nov 2025 18:19:39 +0000 Manifest next update: Tue 11 Nov 2025 18:19:39 +0000 Files and hashes: 1: Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl (hash: 4Q3hIzHgtu9jcWoswks1rzRmb8TkWA5QE39N9G5uC+E=) 2: BE8369D6053711EA9A24E761C4F9AE02.roa (hash: g/Wu5qsnOXz/tO3fGn1wnKRg6cUfPAvWhJqnHgDxhLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3271 (0xcc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB46B, serialNumber=622EE75436D6F2F39FB23D2CEB22337184573DFE Validity Not Before: Nov 4 18:19:39 2025 GMT Not After : Nov 11 18:19:39 2025 GMT Subject: CN=690a43bb-beee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b6:92:37:22:45:0b:40:df:d2:6f:e1:d0:59: fb:a3:f4:2f:fd:ba:61:9f:10:32:fe:4c:ea:40:fd: 29:9f:af:0f:2c:25:f3:15:68:fb:cf:ba:93:9c:92: c4:a8:8c:59:08:fe:6d:38:f4:18:e0:35:5d:7d:51: 15:77:ca:c2:ae:be:bc:49:0e:8e:4b:c2:88:3f:69: 7f:32:92:d9:0f:55:18:66:9a:77:91:6c:13:cb:9f: 13:49:08:ae:18:c8:03:7a:3b:77:fc:f9:d4:63:54: 40:bd:ac:6a:2b:07:9e:bb:15:f8:51:70:2f:21:84: 66:44:80:30:e4:c2:b5:29:43:96:ac:bc:71:ba:03: 40:7d:7a:af:af:05:ce:75:c6:1d:e9:33:d0:8a:d9: 98:e5:eb:1b:1e:22:52:0f:fa:80:16:52:ed:81:7b: 6c:e6:95:c9:a7:19:4c:47:30:70:31:de:e9:6b:d1: 0c:b9:50:06:fc:b7:35:c8:a6:e5:63:e8:53:a2:52: d0:08:8e:32:39:76:f2:f4:42:54:d4:ee:8c:7e:6d: af:dc:09:8a:f5:12:b4:d4:84:f2:69:b0:36:ee:b6: 26:65:96:15:df:cf:dd:93:aa:3e:b4:f1:ce:d5:c7: b0:9e:9d:9a:f0:f6:2b:13:f4:c9:6f:d4:93:02:e2: c7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A3:82:D0:A5:4E:F5:73:C8:B2:AB:6B:8C:7C:87:4B:DB:34:BA:81 X509v3 Authority Key Identifier: keyid:62:2E:E7:54:36:D6:F2:F3:9F:B2:3D:2C:EB:22:33:71:84:57:3D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:4b:8a:23:8f:5c:1b:16:ca:29:f6:2a:eb:ce:63:2d:ca:9a: fc:a7:12:a2:5e:1f:72:b2:3d:b2:02:a1:8e:14:04:3d:a7:cf: e0:40:6a:0f:53:db:bd:cd:37:ee:e2:25:a5:bf:19:95:61:f3: 38:cb:a2:78:33:90:27:57:3b:35:b4:0f:6d:ea:18:be:cc:46: 00:c9:d7:5b:12:41:27:82:89:25:81:e6:73:bc:7b:16:3e:2c: a8:1b:a6:d0:14:33:f6:7e:ab:dc:83:be:c6:65:30:4f:fc:02: d8:2c:69:cf:d6:fc:65:cd:8e:be:18:e3:45:b9:dc:e9:d0:c7: 63:47:72:f6:4c:db:18:62:fd:ab:88:fd:b2:b8:7e:d9:c1:de: b8:85:34:c9:36:61:c0:43:be:91:a8:f3:5a:60:f9:2a:ff:3a: 92:5d:93:7a:67:30:6d:8c:73:89:f5:a8:c8:3a:15:2b:bb:67: a5:1e:90:3c:f7:fd:5d:20:76:e8:84:49:9d:0a:d0:f1:b1:39: 31:ca:59:b0:30:a6:7f:8e:24:e9:d6:c5:7c:83:2f:38:7d:91: 7c:15:2e:ca:98:f6:36:34:aa:4d:a9:02:98:52:d5:11:d5:3f: 21:42:1a:8f:b4:2c:6e:b5:1f:9a:aa:5d:28:1c:19:0f:68:32: 80:ec:d1:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI0NkIxMTAvBgNVBAUTKDYyMkVFNzU0MzZENkYyRjM5RkIyM0QyQ0VCMjIzMzcx ODQ1NzNERkUwHhcNMjUxMTA0MTgxOTM5WhcNMjUxMTExMTgxOTM5WjAYMRYwFAYD VQQDEw02OTBhNDNiYi1iZWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7baSNyJFC0Df0m/h0Fn7o/Qv/bphnxAy/kzqQP0pn68PLCXzFWj7z7qTnJLE qIxZCP5tOPQY4DVdfVEVd8rCrr68SQ6OS8KIP2l/MpLZD1UYZpp3kWwTy58TSQiu GMgDejt3/PnUY1RAvaxqKweeuxX4UXAvIYRmRIAw5MK1KUOWrLxxugNAfXqvrwXO dcYd6TPQitmY5esbHiJSD/qAFlLtgXts5pXJpxlMRzBwMd7pa9EMuVAG/Lc1yKbl Y+hTolLQCI4yOXby9EJU1O6Mfm2v3AmK9RK01ITyabA27rYmZZYV38/dk6o+tPHO 1cewnp2a8PYrE/TJb9STAuLHDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPijgtCl TvVzyLKra4x8h0vbNLqBMB8GA1UdIwQYMBaAFGIu51Q21vLzn7I9LOsiM3GEVz3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjQ2Qi80OTMxRUU0NjAw N0QxMUVBQjQ4OTEzMUJDNEY5QUUwMi9ZaTduVkRiVzh2T2ZzajBzNnlJemNZUlhQ ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lpN25WRGJXOHZPZnNqMHM2eUl6Y1lSWFBmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjQ2Qi80OTMxRUU0NjAwN0QxMUVBQjQ4OTEzMUJDNEY5QUUwMi9ZaTduVkRiVzh2 T2ZzajBzNnlJemNZUlhQZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuS4ojj1wbFsop9irrzmMtypr8pxKiXh9ysj2yAqGOFAQ9p8/gQGoP U9u9zTfu4iWlvxmVYfM4y6J4M5AnVzs1tA9t6hi+zEYAyddbEkEngoklgeZzvHsW PiyoG6bQFDP2fqvcg77GZTBP/ALYLGnP1vxlzY6+GONFudzp0MdjR3L2TNsYYv2r iP2yuH7Zwd64hTTJNmHAQ76RqPNaYPkq/zqSXZN6ZzBtjHOJ9ajIOhUru2elHpA8 9/1dIHbohEmdCtDxsTkxylmwMKZ/jiTp1sV8gy84fZF8FS7KmPY2NKpNqQKYUtUR 1T8hQhqPtCxutR+aql0oHBkPaDKA7NFS -----END CERTIFICATE-----Generated at Wed Nov 5 05:42:09 2025 by rpki-client