$ rpki-client -vvf rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft File: yWKh77HWheqfDoW0F2aCj2oT7-U.mft (raw, json) Hash identifier: SFylAejsHtN66XA7Iqc/xBs/h0y4UhOrOEJtEZoHow4= Subject key identifier: 8E:E2:4C:31:9E:2F:B2:D6:6E:14:B0:1B:84:65:BB:B3:26:E5:5F:68 Authority key identifier: C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5 Certificate issuer: /CN=A91188F4/serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5 Certificate serial: 04B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft Manifest number: 04B0 Signing time: Mon 27 Oct 2025 00:57:03 +0000 Manifest this update: Mon 27 Oct 2025 00:57:02 +0000 Manifest next update: Mon 03 Nov 2025 00:57:02 +0000 Files and hashes: 1: yWKh77HWheqfDoW0F2aCj2oT7-U.crl (hash: 2BM7eXX+EgTrI3jhDZl2LuVxuZV6RPmaYQBKYgfOBJ4=) 2: 7CAFA5C44CA711EC9D22716BC4F9AE02.roa (hash: aRUayRfr0vMR7tS5Y4z3m5ZDFVHmg6WwIEoeJRznQ08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 00:57:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1205 (0x4b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91188F4, serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5 Validity Not Before: Oct 27 00:57:02 2025 GMT Not After : Nov 3 00:57:02 2025 GMT Subject: CN=68fec35f-c213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:de:db:c7:04:f6:51:5a:38:9b:ad:29:34:00: 9e:4d:d0:aa:8d:00:fa:e4:f2:04:90:88:7c:b8:54: c8:30:45:fe:cd:b7:d9:4c:68:ac:cf:c8:e9:a3:b5: bb:5d:44:4b:9f:fb:7a:8e:4c:3c:43:5e:50:49:75: 44:67:45:69:d7:fe:9d:d8:ee:28:da:21:5c:76:93: 01:18:02:7d:32:70:f9:61:9c:5f:b0:3c:a4:40:c9: b0:f0:b2:4d:9c:3e:e9:b3:ab:fa:09:d5:3f:b2:9b: 2c:4f:06:f6:fc:bf:20:73:bc:21:0f:c4:b6:f9:c1: ac:fb:ca:eb:39:be:e3:7e:15:46:dc:dd:67:2d:b3: 61:e0:21:6a:72:c1:0b:9c:24:6b:e3:b6:37:b3:8a: ef:4a:78:18:e7:3f:b9:94:1a:a7:9a:1b:79:fc:ae: 63:29:02:f1:86:a0:41:8e:f2:1c:5f:fd:99:16:5c: 80:d3:8e:fe:5e:e7:74:c5:ca:f0:f7:1b:57:f6:ad: 5d:ce:94:e9:ab:c0:ac:8e:e1:02:54:53:6c:cc:c7: 7e:77:ec:9d:20:11:4e:c0:79:8f:8c:f3:59:13:26: a4:11:ca:b3:b5:2c:71:c4:c4:68:61:5e:2c:5a:4c: 09:a1:74:70:de:83:ab:ef:86:8f:b4:1b:9e:30:aa: f2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E2:4C:31:9E:2F:B2:D6:6E:14:B0:1B:84:65:BB:B3:26:E5:5F:68 X509v3 Authority Key Identifier: keyid:C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ed:d0:0f:8b:1e:54:ae:8d:8f:f9:62:59:3b:75:75:71:ec: 17:98:00:83:6c:f5:3f:b6:f2:c9:59:ca:62:e9:3d:c8:3c:f1: 59:30:12:40:13:04:f7:bb:03:0a:af:84:bd:b2:68:99:94:ec: 47:db:5e:c0:eb:a2:4f:41:79:41:76:23:5d:79:fe:e8:43:cb: dc:56:c5:b8:4d:be:79:23:3f:c3:35:f1:00:a5:2e:37:32:99: 35:ae:fe:6d:6a:18:0c:7d:44:5f:b8:53:8d:32:b3:0b:7c:5a: 33:c7:f9:47:6e:1c:81:5a:c8:79:cb:b5:b5:18:36:f0:95:50: aa:25:fc:2d:22:1c:f7:04:ca:1c:70:d7:a3:de:53:65:54:4e: 33:84:01:5d:22:b5:83:86:38:e4:cd:8b:9e:41:a9:7d:4b:a6: 44:b4:d3:5f:bf:40:60:8f:5a:01:21:7d:13:ac:ee:82:eb:8d: 4f:f5:a1:2f:55:e4:55:e5:06:db:54:33:b1:25:dd:3b:31:e7: d8:12:31:7c:f7:01:eb:f5:41:29:e2:02:fa:67:90:45:00:1c: 2d:71:f5:88:89:11:0f:27:26:c4:7f:da:1c:cf:73:33:0c:54: 19:e9:b6:22:1e:97:58:87:75:cb:87:34:a4:d6:2e:9f:e6:30: 6a:09:d7:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg4RjQxMTAvBgNVBAUTKEM5NjJBMUVGQjFENjg1RUE5RjBFODVCNDE3NjY4MjhG NkExM0VGRTUwHhcNMjUxMDI3MDA1NzAyWhcNMjUxMTAzMDA1NzAyWjAYMRYwFAYD VQQDEw02OGZlYzM1Zi1jMjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwN7bxwT2UVo4m60pNACeTdCqjQD65PIEkIh8uFTIMEX+zbfZTGisz8jpo7W7 XURLn/t6jkw8Q15QSXVEZ0Vp1/6d2O4o2iFcdpMBGAJ9MnD5YZxfsDykQMmw8LJN nD7ps6v6CdU/spssTwb2/L8gc7whD8S2+cGs+8rrOb7jfhVG3N1nLbNh4CFqcsEL nCRr47Y3s4rvSngY5z+5lBqnmht5/K5jKQLxhqBBjvIcX/2ZFlyA047+Xud0xcrw 9xtX9q1dzpTpq8CsjuECVFNszMd+d+ydIBFOwHmPjPNZEyakEcqztSxxxMRoYV4s WkwJoXRw3oOr74aPtBueMKryzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7iTDGe L7LWbhSwG4Rlu7Mm5V9oMB8GA1UdIwQYMBaAFMlioe+x1oXqnw6FtBdmgo9qE+/l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODhGNC85MjhEQjBGNjRD QTMxMUVDODIzQTg5NjVDNEY5QUUwMi95V0toNzdIV2hlcWZEb1cwRjJhQ2oyb1Q3 LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lXS2g3N0hXaGVxZkRvVzBGMmFDajJvVDctVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODhGNC85MjhEQjBGNjRDQTMxMUVDODIzQTg5NjVDNEY5QUUwMi95V0toNzdIV2hl cWZEb1cwRjJhQ2oyb1Q3LVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA77dAPix5Uro2P+WJZO3V1cewXmACDbPU/tvLJWcpi6T3IPPFZMBJA EwT3uwMKr4S9smiZlOxH217A66JPQXlBdiNdef7oQ8vcVsW4Tb55Iz/DNfEApS43 Mpk1rv5tahgMfURfuFONMrMLfFozx/lHbhyBWsh5y7W1GDbwlVCqJfwtIhz3BMoc cNej3lNlVE4zhAFdIrWDhjjkzYueQal9S6ZEtNNfv0Bgj1oBIX0TrO6C641P9aEv VeRV5QbbVDOxJd07MefYEjF89wHr9UEp4gL6Z5BFABwtcfWIiREPJybEf9ocz3Mz DFQZ6bYiHpdYh3XLhzSk1i6f5jBqCdct -----END CERTIFICATE-----Generated at Tue Oct 28 14:21:14 2025 by rpki-client