$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft File: YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft (raw, json) Hash identifier: iBM25tpg/PVSonWr9Q3Aktg8F3KDF98Y0Q3j5qufB38= Subject key identifier: 6E:3C:38:96:26:88:94:FE:6F:83:43:0E:B7:76:10:3D:D8:96:B8:7F Authority key identifier: 60:9A:31:26:E2:36:9A:97:D4:7F:D6:44:98:D8:16:5E:21:E5:25:C5 Certificate issuer: /CN=A91F59DF/serialNumber=609A3126E2369A97D47FD64498D8165E21E525C5 Certificate serial: 0681 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft Manifest number: 0673 Signing time: Tue 04 Nov 2025 22:36:48 +0000 Manifest this update: Tue 04 Nov 2025 22:36:47 +0000 Manifest next update: Tue 11 Nov 2025 22:36:47 +0000 Files and hashes: 1: YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl (hash: 6MxNZaaDY3vn5GH4dKeOnAoAVUZVDUz3vkmPI3pab2Q=) 2: 1348519E9C1211EBA38A7C4CC4F9AE02.roa (hash: jmj2Qf4qhtOu5u36GPmwSsc+P3+wO6jacfxys+6pyWY=) 3: 354314309C0F11EBAEFB6225C4F9AE02.roa (hash: JJP7X3f6AVH5KsSFfVI30UVBcX+xwO84hT0LgBX60uQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:36:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1665 (0x681) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59DF, serialNumber=609A3126E2369A97D47FD64498D8165E21E525C5 Validity Not Before: Nov 4 22:36:47 2025 GMT Not After : Nov 11 22:36:47 2025 GMT Subject: CN=690a7fff-b18e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:29:d0:88:e9:39:b6:ca:6a:e8:94:d1:9f:89: 44:1b:4a:3b:79:47:92:9a:cc:00:5b:c4:2c:6a:98: 96:42:74:c0:3d:00:a6:a8:75:fd:1e:1a:85:7a:f1: aa:78:ea:fe:d1:c3:28:8f:35:de:32:b3:e3:3f:7d: 27:d1:2c:ba:4d:e6:3f:a0:fa:70:87:9e:14:f1:f2: b1:a2:8e:21:54:f4:21:ce:b6:5e:65:3a:83:4e:4c: 87:c5:59:dc:7d:17:3c:cd:04:af:e3:bf:da:8c:d3: 61:5d:2c:1c:6f:e3:28:70:6c:b2:c1:4e:4b:c7:e4: 49:a6:9f:ac:91:01:f0:f2:c5:08:55:53:bb:f6:69: 4b:f2:cd:f0:88:e1:46:bb:81:ed:08:15:91:ef:ba: e1:74:21:ed:12:2a:07:22:1d:72:90:1c:d2:2e:0f: b5:d7:3a:e0:b8:c5:ff:59:d5:46:4d:0f:d3:54:5a: 92:d7:b0:54:69:39:95:46:21:d5:b1:c0:e8:53:48: d8:ad:57:38:6c:d8:f3:69:3e:fd:47:67:8b:d2:53: c8:7c:17:73:b6:78:d3:58:3d:11:fe:04:f1:33:16: 43:34:5c:e0:56:b3:64:08:78:5c:ec:77:c2:6f:aa: 4f:a3:c1:b4:b2:4c:ef:a2:d3:60:da:3d:ca:b8:0f: b0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:3C:38:96:26:88:94:FE:6F:83:43:0E:B7:76:10:3D:D8:96:B8:7F X509v3 Authority Key Identifier: keyid:60:9A:31:26:E2:36:9A:97:D4:7F:D6:44:98:D8:16:5E:21:E5:25:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:33:18:b9:1d:85:b1:33:ec:c9:a7:1b:73:42:42:5d:74:69: 6d:c6:d0:ea:79:ec:1f:16:83:ec:49:dd:04:79:90:47:a6:57: bd:01:54:e1:74:dd:00:e8:6b:b3:3a:d3:1a:e6:e9:91:e3:c8: f9:a9:00:09:07:a4:8b:42:f5:60:f0:25:20:a8:7f:83:b9:02: 72:69:c0:30:de:d5:c5:95:d6:2b:bc:9c:91:a3:92:6d:31:d0: 0a:a0:61:76:16:95:d8:0a:56:1c:45:9f:87:a7:1c:16:35:eb: 1e:5f:49:41:9b:af:a5:74:b6:07:5c:b4:22:ca:a7:d0:90:19: 3b:76:30:ac:29:a4:6a:d8:f1:c3:93:4a:eb:66:2e:7e:32:67: 64:d3:01:82:5a:4d:be:97:06:c3:c8:72:c2:2e:25:b7:68:9d: 2e:ae:97:16:10:fd:4a:47:37:45:e5:8f:cb:18:35:00:b4:83: 6f:05:0a:1c:b9:c6:44:90:68:4a:21:5f:e7:c4:fe:49:f3:7e: 46:f7:3a:64:67:34:f0:f0:ee:df:b2:16:bd:81:cd:8e:3c:70: 4d:d5:81:99:7f:80:de:3a:48:93:78:57:d0:d4:f7:81:e4:b9: 44:37:d1:cc:13:52:29:7f:cc:f6:6b:ee:bf:d6:a5:d9:6a:11: dd:c8:38:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5REYxMTAvBgNVBAUTKDYwOUEzMTI2RTIzNjlBOTdENDdGRDY0NDk4RDgxNjVF MjFFNTI1QzUwHhcNMjUxMTA0MjIzNjQ3WhcNMjUxMTExMjIzNjQ3WjAYMRYwFAYD VQQDEw02OTBhN2ZmZi1iMThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsynQiOk5tspq6JTRn4lEG0o7eUeSmswAW8QsapiWQnTAPQCmqHX9HhqFevGq eOr+0cMojzXeMrPjP30n0Sy6TeY/oPpwh54U8fKxoo4hVPQhzrZeZTqDTkyHxVnc fRc8zQSv47/ajNNhXSwcb+MocGyywU5Lx+RJpp+skQHw8sUIVVO79mlL8s3wiOFG u4HtCBWR77rhdCHtEioHIh1ykBzSLg+11zrguMX/WdVGTQ/TVFqS17BUaTmVRiHV scDoU0jYrVc4bNjzaT79R2eL0lPIfBdztnjTWD0R/gTxMxZDNFzgVrNkCHhc7HfC b6pPo8G0skzvotNg2j3KuA+wUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG48OJYm iJT+b4NDDrd2ED3Ylrh/MB8GA1UdIwQYMBaAFGCaMSbiNpqX1H/WRJjYFl4h5SXF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlERi9CQjUyRjRBQzlD MEQxMUVCQUVEODRCMjRDNEY5QUUwMi9ZSm94SnVJMm1wZlVmOVpFbU5nV1hpSGxK Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lKb3hKdUkybXBmVWY5WkVtTmdXWGlIbEpjVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTlERi9CQjUyRjRBQzlDMEQxMUVCQUVEODRCMjRDNEY5QUUwMi9ZSm94SnVJMm1w ZlVmOVpFbU5nV1hpSGxKY1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTMxi5HYWxM+zJpxtzQkJddGltxtDqeewfFoPsSd0EeZBHple9AVTh dN0A6GuzOtMa5umR48j5qQAJB6SLQvVg8CUgqH+DuQJyacAw3tXFldYrvJyRo5Jt MdAKoGF2FpXYClYcRZ+HpxwWNeseX0lBm6+ldLYHXLQiyqfQkBk7djCsKaRq2PHD k0rrZi5+Mmdk0wGCWk2+lwbDyHLCLiW3aJ0urpcWEP1KRzdF5Y/LGDUAtINvBQoc ucZEkGhKIV/nxP5J835G9zpkZzTw8O7fsha9gc2OPHBN1YGZf4DeOkiTeFfQ1PeB 5LlEN9HME1Ipf8z2a+6/1qXZahHdyDhx -----END CERTIFICATE-----Generated at Wed Nov 5 19:47:39 2025 by rpki-client