$ rpki-client -vvf rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft File: yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft (raw, json) Hash identifier: 9OnPBZbbe7duaF2KILZkb9ymHRrDBJbVuezFlY42O1U= Subject key identifier: F9:39:00:D3:0B:C6:9D:D6:6F:00:02:9A:F4:4E:85:9B:73:CE:75:23 Authority key identifier: C8:8D:55:B7:BF:D5:43:88:B6:10:20:6A:A4:11:D2:E1:99:77:90:17 Certificate issuer: /CN=A91F277D/serialNumber=C88D55B7BFD54388B610206AA411D2E199779017 Certificate serial: 06CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft Manifest number: 06CD Signing time: Sun 02 Nov 2025 22:00:10 +0000 Manifest this update: Sun 02 Nov 2025 22:00:09 +0000 Manifest next update: Sun 09 Nov 2025 22:00:09 +0000 Files and hashes: 1: yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl (hash: blBW3QWgWTIq0BEg5BYLAEE8ze2sqHgUEULM06ZP/wQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1741 (0x6cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F277D, serialNumber=C88D55B7BFD54388B610206AA411D2E199779017 Validity Not Before: Nov 2 22:00:09 2025 GMT Not After : Nov 9 22:00:09 2025 GMT Subject: CN=6907d469-9689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:39:32:a9:3b:7d:db:02:1a:33:6f:39:8e:59: eb:6b:22:78:21:c2:92:51:0e:3e:74:a9:25:bd:c2: 09:a4:84:ad:0b:aa:18:34:d9:bd:93:2a:1c:57:53: e0:d4:43:a9:9f:01:0d:d4:fa:fc:61:4c:7c:6f:c2: aa:02:6b:af:b9:74:08:27:ef:fa:e8:64:2e:43:8a: 73:1e:08:eb:89:17:0d:d3:13:93:0e:21:2e:1c:85: d0:4b:a7:68:53:9d:25:f8:30:bd:a6:65:f7:53:96: 62:f5:48:a6:1e:42:af:f4:2f:3a:29:b1:d5:13:9c: 77:9d:52:6a:a4:5e:d1:36:df:48:4f:73:15:10:c4: c0:c5:6f:7e:a2:87:92:9e:b6:e0:1d:c9:ab:b1:d8: 72:e1:96:7b:bb:67:69:fe:92:a9:12:ec:73:56:df: 36:7c:6a:e6:0d:a8:a9:ff:8d:a4:57:6e:cb:a2:26: 80:d5:0f:a4:67:c7:2f:1a:d5:8b:f5:53:25:6e:00: af:90:ef:5e:a8:3f:92:55:d7:b4:47:38:d1:ce:9d: 1e:b0:5b:ab:66:97:ca:6e:52:97:b5:98:8f:09:d7: 5a:80:85:62:74:c8:37:48:10:57:d7:76:00:bc:89: 71:67:9b:ec:7b:27:5d:f6:b3:3f:0a:42:95:d1:93: 82:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:39:00:D3:0B:C6:9D:D6:6F:00:02:9A:F4:4E:85:9B:73:CE:75:23 X509v3 Authority Key Identifier: keyid:C8:8D:55:B7:BF:D5:43:88:B6:10:20:6A:A4:11:D2:E1:99:77:90:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:51:ce:7d:95:6f:ab:2c:9a:e0:8d:85:08:d6:8d:37:fa:9d: e3:7d:69:9c:59:ad:7e:28:04:66:4c:e1:a2:5c:a9:0f:14:d3: e8:2a:d8:e0:3f:05:e1:ad:bb:08:ec:a5:d4:ff:b6:72:68:6a: 7a:d5:be:51:a4:22:e8:6c:cd:86:ec:5f:57:4d:11:b5:ce:3d: a9:05:08:b5:30:b1:6e:f3:7c:dd:98:9e:31:5e:e4:43:5b:fa: ac:e7:60:a5:82:0b:b4:b5:15:c0:42:de:37:e9:e7:ea:f9:73: 81:1f:bb:c5:3f:cc:60:c1:fa:e7:f5:33:44:c1:c1:0f:a0:fd: af:63:28:1f:01:eb:66:e3:e8:33:e0:f7:18:da:ee:31:99:f6: 7b:40:d5:94:4a:fc:f3:55:e2:4a:53:18:5e:a1:6f:a4:4f:99: 1d:b5:ce:7c:3c:80:b1:e9:08:4f:68:76:57:94:e3:64:c7:0a: 3b:25:41:77:e5:77:e4:b1:41:60:d8:d3:3f:fc:8a:b1:93:82: 0c:c6:49:98:1b:00:9b:d0:77:c5:1a:13:7c:aa:b5:8b:16:07: 36:ae:16:bd:c7:af:af:c8:e0:45:82:7b:f0:fc:96:a7:61:b7: 41:da:b8:33:56:7c:f9:1e:5e:8e:14:7b:76:64:b6:c3:3c:63: 8a:52:5a:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjI3N0QxMTAvBgNVBAUTKEM4OEQ1NUI3QkZENTQzODhCNjEwMjA2QUE0MTFEMkUx OTk3NzkwMTcwHhcNMjUxMTAyMjIwMDA5WhcNMjUxMTA5MjIwMDA5WjAYMRYwFAYD VQQDEw02OTA3ZDQ2OS05Njg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjkyqTt92wIaM285jlnrayJ4IcKSUQ4+dKklvcIJpIStC6oYNNm9kyocV1Pg 1EOpnwEN1Pr8YUx8b8KqAmuvuXQIJ+/66GQuQ4pzHgjriRcN0xOTDiEuHIXQS6do U50l+DC9pmX3U5Zi9UimHkKv9C86KbHVE5x3nVJqpF7RNt9IT3MVEMTAxW9+ooeS nrbgHcmrsdhy4ZZ7u2dp/pKpEuxzVt82fGrmDaip/42kV27LoiaA1Q+kZ8cvGtWL 9VMlbgCvkO9eqD+SVde0RzjRzp0esFurZpfKblKXtZiPCddagIVidMg3SBBX13YA vIlxZ5vseydd9rM/CkKV0ZOCUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPk5ANML xp3WbwACmvROhZtzznUjMB8GA1UdIwQYMBaAFMiNVbe/1UOIthAgaqQR0uGZd5AX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjc3RC8xQjg4RDJBMDc0 RjAxMUVCOENFM0Y3MUNDNEY5QUUwMi95STFWdDdfVlE0aTJFQ0JxcEJIUzRabDNr QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lJMVZ0N19WUTRpMkVDQnFwQkhTNFpsM2tCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mjc3RC8xQjg4RDJBMDc0RjAxMUVCOENFM0Y3MUNDNEY5QUUwMi95STFWdDdfVlE0 aTJFQ0JxcEJIUzRabDNrQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgUc59lW+rLJrgjYUI1o03+p3jfWmcWa1+KARmTOGiXKkPFNPoKtjg PwXhrbsI7KXU/7ZyaGp61b5RpCLobM2G7F9XTRG1zj2pBQi1MLFu83zdmJ4xXuRD W/qs52Clggu0tRXAQt436efq+XOBH7vFP8xgwfrn9TNEwcEPoP2vYygfAetm4+gz 4PcY2u4xmfZ7QNWUSvzzVeJKUxheoW+kT5kdtc58PICx6QhPaHZXlONkxwo7JUF3 5XfksUFg2NM//Iqxk4IMxkmYGwCb0HfFGhN8qrWLFgc2rha9x6+vyOBFgnvw/Jan YbdB2rgzVnz5Hl6OFHt2ZLbDPGOKUlok -----END CERTIFICATE-----Generated at Tue Nov 4 16:13:36 2025 by rpki-client