$ rpki-client -vvf rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.mft File: yPWXElLMBM4--LZy7nTid7LM1hU.mft (raw, json) Hash identifier: dGOzQCBPCwffUghEHeljOPBf5d8J3sP3KYHhIoHw+OM= Subject key identifier: DA:6E:9C:35:71:5C:D7:60:66:79:2D:B2:31:52:42:89:4A:42:A2:29 Authority key identifier: C8:F5:97:12:52:CC:04:CE:3E:F8:B6:72:EE:74:E2:77:B2:CC:D6:15 Certificate issuer: /CN=A91F72E2/serialNumber=C8F5971252CC04CE3EF8B672EE74E277B2CCD615 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPWXElLMBM4--LZy7nTid7LM1hU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.mft Manifest number: 1D Signing time: Mon 03 Nov 2025 07:46:54 +0000 Manifest this update: Mon 03 Nov 2025 07:46:53 +0000 Manifest next update: Mon 10 Nov 2025 07:46:53 +0000 Files and hashes: 1: yPWXElLMBM4--LZy7nTid7LM1hU.crl (hash: 0e259kQeElfT5lzCLK2DP7aHuYy+m1U5eTC/nvLCnPg=) 2: 13542BE28C9311F099562747C4F9AE02.roa (hash: 74FroNCdegFOPZiDBlEbhFtWJ9Myu+nQaF/Cyco73vs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.crl rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPWXElLMBM4--LZy7nTid7LM1hU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:46:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F72E2, serialNumber=C8F5971252CC04CE3EF8B672EE74E277B2CCD615 Validity Not Before: Nov 3 07:46:53 2025 GMT Not After : Nov 10 07:46:53 2025 GMT Subject: CN=69085ded-8a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ed:c5:ea:c1:c2:ed:31:ac:1c:a3:10:e8:48: f9:e6:b2:e8:0e:d4:c9:2c:b6:b3:d1:e9:57:b1:df: 66:52:f8:7d:fa:f3:e8:e1:8f:ac:37:8e:f0:6f:ae: 22:f2:22:4e:b7:e9:49:de:25:5d:0a:d3:58:55:2a: dc:92:bf:d0:4f:b8:81:7b:6e:76:2b:09:5d:45:8b: 6f:8d:15:79:2b:1c:bc:9a:ed:2f:fd:28:21:12:d9: a4:19:a3:aa:d3:54:90:81:61:7b:56:8e:3b:53:11: 5b:22:14:78:b8:52:5c:c8:46:e5:02:da:75:bc:a1: 15:c0:87:7a:49:3f:9c:56:d5:5c:10:fd:8a:ba:2c: 50:23:ee:ba:50:79:0d:47:7f:24:3d:14:f5:0c:e5: 6d:06:c5:52:70:e1:4b:47:c2:a5:86:6d:bb:ee:a5: df:49:47:f9:6e:24:b0:b1:3b:cb:71:9a:05:21:05: dd:2a:45:b7:b1:5b:eb:dd:10:fe:5f:b7:ae:96:6f: d4:59:20:5d:a4:c8:0f:ce:1f:d5:75:fc:ef:a2:7c: 0e:cc:86:a5:62:9e:fb:fe:e9:af:50:76:23:a6:35: 03:a3:b0:b6:69:9d:68:bc:e4:52:18:ce:20:99:ec: 25:83:08:59:95:2c:cc:c5:fe:f6:b5:ad:2b:f5:f3: ae:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:6E:9C:35:71:5C:D7:60:66:79:2D:B2:31:52:42:89:4A:42:A2:29 X509v3 Authority Key Identifier: keyid:C8:F5:97:12:52:CC:04:CE:3E:F8:B6:72:EE:74:E2:77:B2:CC:D6:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPWXElLMBM4--LZy7nTid7LM1hU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:04:24:08:99:d3:71:34:73:33:df:0b:2f:53:1e:8f:24:bd: a8:cd:44:13:c4:e0:f6:39:11:e7:fb:1f:c2:78:94:74:a9:aa: fb:5a:78:4c:b1:c0:ac:42:46:06:91:79:83:31:a0:91:9c:7e: 84:94:17:20:5c:4f:6d:77:5a:f5:82:41:4e:7a:3b:5f:d9:6a: 2e:fe:c2:4b:6e:0e:d9:e9:d3:bf:0e:9f:98:67:65:48:4b:ce: 4b:37:66:df:fd:26:90:36:e8:fa:76:db:d7:fa:f5:d9:0a:6b: 07:b5:d2:bd:56:88:9e:d3:96:7f:39:57:fa:3f:f2:69:c4:42: 38:23:be:13:e3:83:f5:fb:fa:9c:68:9a:36:24:ba:88:27:55: 15:63:b7:24:68:70:95:60:06:88:57:bb:91:ba:d1:f0:ea:b8: d4:b4:cb:8c:84:be:c7:e0:c7:87:cb:9d:4c:82:f3:88:60:4b: 6f:91:76:ba:e4:92:03:b6:4a:89:76:48:fc:0e:e7:7a:7c:5a: eb:b5:48:30:f1:ab:f5:f2:22:51:6f:83:2f:c9:6c:94:ee:38: 50:28:05:81:ae:a0:16:d6:ce:72:29:0e:da:82:23:7c:ec:70: 39:60:09:e9:84:b3:b1:12:a8:0f:5c:f7:8c:cf:fe:bf:ad:54: 78:b5:e1:40 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NzJFMjExMC8GA1UEBRMoQzhGNTk3MTI1MkNDMDRDRTNFRjhCNjcyRUU3NEUyNzdC MkNDRDYxNTAeFw0yNTExMDMwNzQ2NTNaFw0yNTExMTAwNzQ2NTNaMBgxFjAUBgNV BAMTDTY5MDg1ZGVkLThhNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDe7cXqwcLtMawcoxDoSPnmsugO1MkstrPR6Vex32ZS+H368+jhj6w3jvBvriLy Ik636UneJV0K01hVKtySv9BPuIF7bnYrCV1Fi2+NFXkrHLya7S/9KCES2aQZo6rT VJCBYXtWjjtTEVsiFHi4UlzIRuUC2nW8oRXAh3pJP5xW1VwQ/Yq6LFAj7rpQeQ1H fyQ9FPUM5W0GxVJw4UtHwqWGbbvupd9JR/luJLCxO8txmgUhBd0qRbexW+vdEP5f t66Wb9RZIF2kyA/OH9V1/O+ifA7MhqVinvv+6a9QdiOmNQOjsLZpnWi85FIYziCZ 7CWDCFmVLMzF/va1rSv18663AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2m6cNXFc 12BmeS2yMVJCiUpCoikwHwYDVR0jBBgwFoAUyPWXElLMBM4++LZy7nTid7LM1hUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3MkUyL0M2QTFGMjBBOEM4 RjExRjA5NDIzRjExOUM0RjlBRTAyL3lQV1hFbExNQk00LS1MWnk3blRpZDdMTTFo VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveVBXWEVsTE1CTTQtLUxaeTduVGlkN0xNMWhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3 MkUyL0M2QTFGMjBBOEM4RjExRjA5NDIzRjExOUM0RjlBRTAyL3lQV1hFbExNQk00 LS1MWnk3blRpZDdMTTFoVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALIEJAiZ03E0czPfCy9THo8kvajNRBPE4PY5Eef7H8J4lHSpqvtaeEyx wKxCRgaReYMxoJGcfoSUFyBcT213WvWCQU56O1/Zai7+wktuDtnp078On5hnZUhL zks3Zt/9JpA26Pp229f69dkKawe10r1WiJ7Tln85V/o/8mnEQjgjvhPjg/X7+pxo mjYkuognVRVjtyRocJVgBohXu5G60fDquNS0y4yEvsfgx4fLnUyC84hgS2+Rdrrk kgO2Sol2SPwO53p8Wuu1SDDxq/XyIlFvgy/JbJTuOFAoBYGuoBbWznIpDtqCI3zs cDlgCemEs7ESqA9c94zP/r+tVHi14UA= -----END CERTIFICATE-----Generated at Wed Nov 5 07:41:17 2025 by rpki-client