$ rpki-client -vvf rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.mft File: YkYyDes0LSw9wa7bkPF2dyt_x38.mft (raw, json) Hash identifier: 5BDADJ3gsYQDMj5wFK3ExJzvlRONtNwvsRAj32Pb9XA= Subject key identifier: D4:69:B9:E2:D9:FD:59:C2:77:CC:20:A1:C0:34:D9:E5:64:30:83:83 Authority key identifier: 62:46:32:0D:EB:34:2D:2C:3D:C1:AE:DB:90:F1:76:77:2B:7F:C7:7F Certificate issuer: /CN=A911AD1F/serialNumber=6246320DEB342D2C3DC1AEDB90F176772B7FC77F Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YkYyDes0LSw9wa7bkPF2dyt_x38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.mft Manifest number: 13 Signing time: Mon 03 Nov 2025 07:55:02 +0000 Manifest this update: Mon 03 Nov 2025 07:55:02 +0000 Manifest next update: Mon 10 Nov 2025 07:55:02 +0000 Files and hashes: 1: YkYyDes0LSw9wa7bkPF2dyt_x38.crl (hash: wHnwPx0/EO+mjqF/pHrwnTdFbb7cT4bSf4RFapOPn90=) 2: 5CA352A49DAB11F0B1E32C64C4F9AE02.roa (hash: +QKL7YQeAFpSt5nMMIAz5oWErQmX2UUEoZKFT1MpXb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.crl rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YkYyDes0LSw9wa7bkPF2dyt_x38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:55:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AD1F, serialNumber=6246320DEB342D2C3DC1AEDB90F176772B7FC77F Validity Not Before: Nov 3 07:55:02 2025 GMT Not After : Nov 10 07:55:02 2025 GMT Subject: CN=69085fd6-427a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3a:ee:10:b8:d0:6d:f1:2a:c8:ae:46:88:61: 05:32:86:10:3d:50:0f:72:f1:d2:5b:2e:e0:18:9b: ca:16:a3:dc:a9:3e:5a:f2:00:04:e4:7a:c8:8c:66: 9a:f2:f8:60:84:f6:47:d6:5b:69:87:19:49:41:73: 8b:3b:80:f6:ff:3d:b1:ef:8d:c7:16:28:50:9d:83: b6:fc:a9:96:8c:3a:a3:04:cf:6c:64:55:51:00:5d: 14:29:6b:79:a0:e3:05:04:51:6b:0a:02:2f:3e:f3: 45:bd:ef:99:be:af:65:d6:b0:73:f0:dc:75:9e:42: eb:f9:b5:82:23:8c:3f:22:a7:ea:76:cf:c2:d0:56: 8c:0b:e0:e2:24:78:26:65:96:4d:ed:ba:37:f5:18: 6b:22:01:97:35:65:6d:f4:96:93:0e:93:da:75:27: db:aa:04:66:df:94:22:cc:2f:79:a8:d0:8d:c6:8d: 4e:56:d0:30:4a:34:54:2c:26:8a:0e:17:e2:2f:2a: 14:da:c0:75:15:56:a1:3a:5f:95:b1:4a:fc:37:41: 47:f2:02:8c:12:1b:df:99:b2:a5:17:62:5c:4a:72: 63:f4:c8:ed:d2:c4:22:c8:e1:0c:a4:9c:93:44:6c: f9:50:29:9d:91:05:fe:88:bb:45:f5:0d:d3:58:87: 2e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:69:B9:E2:D9:FD:59:C2:77:CC:20:A1:C0:34:D9:E5:64:30:83:83 X509v3 Authority Key Identifier: keyid:62:46:32:0D:EB:34:2D:2C:3D:C1:AE:DB:90:F1:76:77:2B:7F:C7:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YkYyDes0LSw9wa7bkPF2dyt_x38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:d8:2d:92:9e:bd:4e:77:42:c8:ec:d3:29:b4:fc:63:7b:08: 41:0d:a0:ea:b6:38:62:ef:88:37:c8:3d:e9:05:cd:d7:e4:d3: 2a:d8:cc:1b:c8:91:e1:b8:c8:29:14:8a:13:19:c8:9e:6b:a1: a1:b4:a8:00:50:13:2c:e6:11:62:f0:c7:e8:ff:f2:cf:f5:2c: 4f:74:fe:85:0c:30:9a:cf:e5:5d:f1:c7:84:b1:49:4d:5a:f4: 8d:ac:b8:2e:47:80:fe:9e:c6:64:d8:8a:bc:cd:52:6a:6e:ca: c1:23:6a:5b:ec:73:cd:7d:8e:43:cd:e7:4e:d7:7c:50:ae:63: 60:c5:b1:c0:f0:55:33:e1:7f:f9:bb:28:ad:25:42:83:8b:f7: 76:76:fe:3b:64:70:a5:94:e2:ce:53:44:37:29:47:a6:ff:f7: 35:ff:60:8e:37:3e:46:c9:ea:55:41:f4:f0:29:a7:65:2a:6d: 1f:cc:e9:5c:ff:e2:ef:fc:5b:2a:c6:71:91:61:0a:33:63:c4: 35:ca:6b:8a:9b:50:f8:5c:44:cf:99:4d:36:13:56:15:b7:f4: 7d:d5:ec:f7:74:ca:15:51:1f:6f:52:91:d2:50:63:08:94:62: e2:c3:d7:42:0d:05:e9:d6:85:cc:0b:52:cf:e0:42:c9:b8:91: 07:45:e3:30 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QUQxRjExMC8GA1UEBRMoNjI0NjMyMERFQjM0MkQyQzNEQzFBRURCOTBGMTc2Nzcy QjdGQzc3RjAeFw0yNTExMDMwNzU1MDJaFw0yNTExMTAwNzU1MDJaMBgxFjAUBgNV BAMTDTY5MDg1ZmQ2LTQyN2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClOu4QuNBt8SrIrkaIYQUyhhA9UA9y8dJbLuAYm8oWo9ypPlryAATkesiMZpry +GCE9kfWW2mHGUlBc4s7gPb/PbHvjccWKFCdg7b8qZaMOqMEz2xkVVEAXRQpa3mg 4wUEUWsKAi8+80W975m+r2XWsHPw3HWeQuv5tYIjjD8ip+p2z8LQVowL4OIkeCZl lk3tujf1GGsiAZc1ZW30lpMOk9p1J9uqBGbflCLML3mo0I3GjU5W0DBKNFQsJooO F+IvKhTawHUVVqE6X5WxSvw3QUfyAowSG9+ZsqUXYlxKcmP0yO3SxCLI4QyknJNE bPlQKZ2RBf6Iu0X1DdNYhy4VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1Gm54tn9 WcJ3zCChwDTZ5WQwg4MwHwYDVR0jBBgwFoAUYkYyDes0LSw9wa7bkPF2dyt/x38w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBRDFGLzE0RDA5QzAyOURB QjExRjBBMUM1QjM2M0M0RjlBRTAyL1lrWXlEZXMwTFN3OXdhN2JrUEYyZHl0X3gz OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWWtZeURlczBMU3c5d2E3YmtQRjJkeXRfeDM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB RDFGLzE0RDA5QzAyOURBQjExRjBBMUM1QjM2M0M0RjlBRTAyL1lrWXlEZXMwTFN3 OXdhN2JrUEYyZHl0X3gzOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALjYLZKevU53Qsjs0ym0/GN7CEENoOq2OGLviDfIPekFzdfk0yrYzBvI keG4yCkUihMZyJ5roaG0qABQEyzmEWLwx+j/8s/1LE90/oUMMJrP5V3xx4SxSU1a 9I2suC5HgP6exmTYirzNUmpuysEjalvsc819jkPN507XfFCuY2DFscDwVTPhf/m7 KK0lQoOL93Z2/jtkcKWU4s5TRDcpR6b/9zX/YI43PkbJ6lVB9PApp2UqbR/M6Vz/ 4u/8WyrGcZFhCjNjxDXKa4qbUPhcRM+ZTTYTVhW39H3V7Pd0yhVRH29SkdJQYwiU YuLD10INBenWhcwLUs/gQsm4kQdF4zA= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:53 2025 by rpki-client