$ rpki-client -vvf rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft File: YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft (raw, json) Hash identifier: yIK7IqU6DfWM69ge8Rl+B0OhgCzT+SFPMf6VhijWYnY= Subject key identifier: 86:EE:75:8C:83:B7:56:61:69:79:93:9C:F1:A5:7F:9D:4C:17:E2:DD Authority key identifier: 63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54 Certificate issuer: /CN=A91F428C/serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254 Certificate serial: 34DF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft Manifest number: 34DA Signing time: Tue 04 Nov 2025 15:06:48 +0000 Manifest this update: Tue 04 Nov 2025 15:06:47 +0000 Manifest next update: Tue 11 Nov 2025 15:06:47 +0000 Files and hashes: 1: YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl (hash: kN1VauYzi2oE+FpVLVW8r+xBTLdule+af0IY1rcb3j0=) 2: 8852DDDEBED411ECBA66025BC4F9AE02.roa (hash: 3hsbI0PrBL5LI5VaCiCNQ0sMN2EIkZA6LenSvD9t9yA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:06:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13535 (0x34df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F428C, serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254 Validity Not Before: Nov 4 15:06:47 2025 GMT Not After : Nov 11 15:06:47 2025 GMT Subject: CN=690a1687-69c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a5:20:b9:08:42:b7:d8:89:3d:8b:ea:42:79: b1:e4:1c:3f:db:a1:f6:b8:a0:f7:08:bd:00:71:60: ae:6e:1a:18:3b:11:13:a1:33:b9:ef:08:47:6a:25: fe:10:83:cf:ef:d5:c4:08:60:84:62:3c:c2:d7:d6: a5:e2:7e:35:e2:c7:b0:51:65:7c:5b:89:15:6f:c6: f2:ec:e4:3a:2e:69:0b:6b:e6:46:8b:69:a6:50:5f: 69:fc:a0:67:2e:76:9c:d3:17:a8:36:30:54:df:33: 43:01:02:a6:cc:24:ab:af:84:ae:d3:98:ef:8a:5c: d1:28:26:c2:36:49:a2:8f:18:01:f9:d7:19:89:d7: c3:f2:41:9d:f5:f2:d6:d7:4d:ed:67:55:ca:fd:67: ff:76:0f:0d:f7:7e:29:31:49:7f:42:e8:c4:00:5f: c8:68:3c:ee:b8:32:e9:7f:ad:ce:9b:08:92:39:bd: 15:17:f6:7b:a6:ef:4a:35:ee:06:88:04:3b:d3:e6: c9:fc:d8:ca:18:db:8a:51:95:3d:bd:51:f0:bf:15: ee:39:03:53:da:cc:90:c0:d0:d0:96:28:24:0d:4f: 74:b0:d7:48:39:ee:65:3b:6e:1f:e4:e8:e1:5d:58: 40:53:d8:f8:77:b1:75:08:30:ab:94:5d:64:39:44: 9c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:EE:75:8C:83:B7:56:61:69:79:93:9C:F1:A5:7F:9D:4C:17:E2:DD X509v3 Authority Key Identifier: keyid:63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:5d:59:ac:63:d8:e0:c8:fd:de:5d:be:2a:86:81:a9:ba:87: bb:0b:b9:72:11:ea:ea:53:a9:dc:3d:63:ab:7b:00:8f:bc:0d: d0:37:1c:15:4d:78:b5:97:64:2e:03:e2:34:fc:22:d3:9e:cf: a3:05:15:2e:f7:ef:ee:3a:01:4d:7b:85:32:a8:ca:1a:1e:0c: 79:14:01:14:88:9e:33:dc:82:63:5c:b1:bf:bb:00:e0:92:5c: 5e:31:d0:d4:12:20:04:45:ef:38:fd:41:ba:11:0d:cf:3e:1e: 6c:17:b7:da:36:fd:a6:8a:09:9e:68:4c:43:ab:ff:6a:09:c3: 7a:d6:13:e3:a4:8b:ba:eb:d6:cc:24:bf:1b:50:e0:2e:6d:3c: fb:c4:6a:86:6a:8d:64:8c:af:f0:a2:26:b5:2c:48:de:60:19: 86:9d:bc:10:d3:f0:a8:27:59:84:67:f6:bc:68:0e:fb:61:b5: 07:0c:b7:13:d0:d9:46:69:c1:5e:4f:40:d7:d3:3e:62:25:2e: c9:4a:f3:74:5a:61:fa:78:d4:1b:32:74:d3:b0:51:f8:ed:82: 05:00:d9:96:a4:81:ca:5f:39:1a:2f:80:b4:03:09:16:81:90: 71:12:b0:b9:fc:52:5f:dd:3c:24:bc:e6:77:0b:5a:df:33:a4: a0:19:bf:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOEMxMTAvBgNVBAUTKDYzMkM4REUwMjIwQjhDMTBCNDFGRjQ5QkZGOEI0MzJD RjhGRkQyNTQwHhcNMjUxMTA0MTUwNjQ3WhcNMjUxMTExMTUwNjQ3WjAYMRYwFAYD VQQDEw02OTBhMTY4Ny02OWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuaUguQhCt9iJPYvqQnmx5Bw/26H2uKD3CL0AcWCubhoYOxEToTO57whHaiX+ EIPP79XECGCEYjzC19al4n414sewUWV8W4kVb8by7OQ6LmkLa+ZGi2mmUF9p/KBn Lnac0xeoNjBU3zNDAQKmzCSrr4Su05jvilzRKCbCNkmijxgB+dcZidfD8kGd9fLW 103tZ1XK/Wf/dg8N934pMUl/QujEAF/IaDzuuDLpf63OmwiSOb0VF/Z7pu9KNe4G iAQ70+bJ/NjKGNuKUZU9vVHwvxXuOQNT2syQwNDQligkDU90sNdIOe5lO24f5Ojh XVhAU9j4d7F1CDCrlF1kOUSc5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbudYyD t1ZhaXmTnPGlf51MF+LdMB8GA1UdIwQYMBaAFGMsjeAiC4wQtB/0m/+LQyz4/9JU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4Qy80NDlCQTUwNjFE QTAxMUUyQjZEODcwOTEwOEIwMkNEMi9ZeXlONENJTGpCQzBIX1NiXzR0RExQal8w bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1l5eU40Q0lMakJDMEhfU2JfNHRETFBqXzBsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI4Qy80NDlCQTUwNjFEQTAxMUUyQjZEODcwOTEwOEIwMkNEMi9ZeXlONENJTGpC QzBIX1NiXzR0RExQal8wbFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnXVmsY9jgyP3eXb4qhoGpuoe7C7lyEerqU6ncPWOrewCPvA3QNxwV TXi1l2QuA+I0/CLTns+jBRUu9+/uOgFNe4UyqMoaHgx5FAEUiJ4z3IJjXLG/uwDg klxeMdDUEiAERe84/UG6EQ3PPh5sF7faNv2migmeaExDq/9qCcN61hPjpIu669bM JL8bUOAubTz7xGqGao1kjK/woia1LEjeYBmGnbwQ0/CoJ1mEZ/a8aA77YbUHDLcT 0NlGacFeT0DX0z5iJS7JSvN0WmH6eNQbMnTTsFH47YIFANmWpIHKXzkaL4C0AwkW gZBxErC5/FJf3TwkvOZ3C1rfM6SgGb97 -----END CERTIFICATE-----Generated at Wed Nov 5 03:51:30 2025 by rpki-client