$ rpki-client -vvf rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft File: yIwqqUquXvn01JfoOHo53RvOk50.mft (raw, json) Hash identifier: z9yJoujploG63jF18t3a4mZQhcHk3VmRsVTIc9nfmv4= Subject key identifier: 64:95:91:10:D2:3A:F4:00:E1:D5:75:E2:06:CD:9C:83:7C:2A:B9:6E Authority key identifier: C8:8C:2A:A9:4A:AE:5E:F9:F4:D4:97:E8:38:7A:39:DD:1B:CE:93:9D Certificate issuer: /CN=A91228E2/serialNumber=C88C2AA94AAE5EF9F4D497E8387A39DD1BCE939D Certificate serial: 017E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft Manifest number: 017B Signing time: Mon 03 Nov 2025 03:43:08 +0000 Manifest this update: Mon 03 Nov 2025 03:43:08 +0000 Manifest next update: Mon 10 Nov 2025 03:43:08 +0000 Files and hashes: 1: yIwqqUquXvn01JfoOHo53RvOk50.crl (hash: BTMzPPrml2zY023EMTMTzbwDknxGlHxSW+N1GP9o6/M=) 2: EF98E11472E211EEB93A4F72C4F9AE02.roa (hash: zjnMnu7RY/dZWeqb3tnlHnJORJa1AYwPA3wCVz3+WfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.crl rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91228E2, serialNumber=C88C2AA94AAE5EF9F4D497E8387A39DD1BCE939D Validity Not Before: Nov 3 03:43:08 2025 GMT Not After : Nov 10 03:43:08 2025 GMT Subject: CN=690824cc-5908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:bd:c3:8d:73:6b:a5:4a:f0:cc:df:20:b9:5e: 3a:9f:86:5d:a2:fb:88:29:a3:1c:6b:53:53:51:32: 15:f1:29:94:44:01:b2:d2:8b:e1:1a:91:8b:94:31: 8c:3f:69:96:5d:05:36:f3:54:61:ff:d7:ec:7c:c5: 65:ba:25:29:ec:0a:0c:36:77:ec:0d:1f:da:12:7e: 76:c2:99:86:7e:94:6b:13:5c:90:1f:2a:9f:c7:68: 14:b8:bd:88:79:b8:04:44:9f:77:2b:c0:e4:d1:0a: fd:9d:74:62:c9:4b:11:98:9a:0d:28:d5:ad:03:e5: 11:68:f0:cb:98:b2:9d:ac:ab:46:5a:81:f3:3c:a0: dc:0b:e4:7d:39:50:b5:99:fd:02:33:39:ff:a4:26: 91:66:19:f5:99:fd:24:d0:1d:91:ec:60:18:e2:3d: a1:36:b5:d7:b5:22:c8:70:be:46:48:1e:c7:c6:4f: 5b:58:c1:75:79:8f:88:b4:e0:73:0d:77:92:8d:72: 70:26:93:75:66:b9:e8:40:15:b3:ca:17:90:f3:89: 1e:19:06:4c:b9:69:0e:01:57:56:56:f3:98:50:1d: 8b:ab:e6:a7:eb:d7:d2:f1:50:8f:81:f2:7d:2a:5d: 57:20:b0:99:5f:e8:3a:9c:ce:19:9b:03:df:df:88: 2b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:95:91:10:D2:3A:F4:00:E1:D5:75:E2:06:CD:9C:83:7C:2A:B9:6E X509v3 Authority Key Identifier: keyid:C8:8C:2A:A9:4A:AE:5E:F9:F4:D4:97:E8:38:7A:39:DD:1B:CE:93:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:15:44:d2:a3:c3:99:01:64:f9:b2:55:97:25:32:56:e9:1f: a2:ec:34:dd:e8:51:39:87:0a:3d:d4:a0:1b:c8:0a:17:54:9e: a5:a4:3d:10:28:db:72:74:0c:36:8b:f5:f9:31:9d:54:fc:9b: 65:9f:fc:7a:79:e8:75:55:71:76:79:3c:67:33:85:8f:4f:c8: ba:d3:80:9f:67:3e:b4:e0:b6:a8:ce:bf:e3:ae:63:7e:44:5e: 7b:f4:34:1d:ae:26:c3:65:8f:82:3f:41:f1:6b:7a:db:2a:cf: 0e:07:6b:65:93:1c:00:ce:07:78:12:44:14:ac:92:65:87:0b: 22:be:b1:e0:40:80:b4:58:62:b9:53:af:bc:c4:50:a8:17:77: 74:3c:35:a6:b5:0b:bd:dc:89:11:cb:25:b8:21:f2:d8:8b:8f: 29:aa:f1:d3:fa:45:22:50:bc:43:7d:fd:fb:6c:92:5c:09:52: 36:6a:3e:55:68:9f:88:1a:70:93:ec:d1:41:c5:89:c4:5e:ee: 3f:56:05:8e:84:4c:93:7f:91:0f:dc:57:e5:9a:91:53:ea:ef: 3e:49:75:ee:03:ec:dc:f5:db:46:2d:dd:ff:fe:38:bd:55:c0: c8:07:b0:f0:b8:ba:0b:3a:20:a6:0f:2a:be:b4:b5:52:56:d4: 1b:c9:fa:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI4RTIxMTAvBgNVBAUTKEM4OEMyQUE5NEFBRTVFRjlGNEQ0OTdFODM4N0EzOURE MUJDRTkzOUQwHhcNMjUxMTAzMDM0MzA4WhcNMjUxMTEwMDM0MzA4WjAYMRYwFAYD VQQDEw02OTA4MjRjYy01OTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3L3DjXNrpUrwzN8guV46n4ZdovuIKaMca1NTUTIV8SmURAGy0ovhGpGLlDGM P2mWXQU281Rh/9fsfMVluiUp7AoMNnfsDR/aEn52wpmGfpRrE1yQHyqfx2gUuL2I ebgERJ93K8Dk0Qr9nXRiyUsRmJoNKNWtA+URaPDLmLKdrKtGWoHzPKDcC+R9OVC1 mf0CMzn/pCaRZhn1mf0k0B2R7GAY4j2hNrXXtSLIcL5GSB7Hxk9bWMF1eY+ItOBz DXeSjXJwJpN1ZrnoQBWzyheQ84keGQZMuWkOAVdWVvOYUB2Lq+an69fS8VCPgfJ9 Kl1XILCZX+g6nM4ZmwPf34griQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGSVkRDS OvQA4dV14gbNnIN8KrluMB8GA1UdIwQYMBaAFMiMKqlKrl759NSX6Dh6Od0bzpOd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjhFMi9DRTU0MDZGNjcy RTExMUVFQjA3ODE2MTlDNEY5QUUwMi95SXdxcVVxdVh2bjAxSmZvT0hvNTNSdk9r NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lJd3FxVXF1WHZuMDFKZm9PSG81M1J2T2s1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjhFMi9DRTU0MDZGNjcyRTExMUVFQjA3ODE2MTlDNEY5QUUwMi95SXdxcVVxdVh2 bjAxSmZvT0hvNTNSdk9rNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALFUTSo8OZAWT5slWXJTJW6R+i7DTd6FE5hwo91KAbyAoXVJ6lpD0Q KNtydAw2i/X5MZ1U/Jtln/x6eeh1VXF2eTxnM4WPT8i604CfZz604Laozr/jrmN+ RF579DQdribDZY+CP0Hxa3rbKs8OB2tlkxwAzgd4EkQUrJJlhwsivrHgQIC0WGK5 U6+8xFCoF3d0PDWmtQu93IkRyyW4IfLYi48pqvHT+kUiULxDff37bJJcCVI2aj5V aJ+IGnCT7NFBxYnEXu4/VgWOhEyTf5EP3FflmpFT6u8+SXXuA+zc9dtGLd3//ji9 VcDIB7DwuLoLOiCmDyq+tLVSVtQbyfr3 -----END CERTIFICATE-----Generated at Tue Nov 4 12:21:14 2025 by rpki-client