$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft File: yGngpTh1_BJZeGtSfmeEy_H4m0A.mft (raw, json) Hash identifier: J/Kx19KtEdc7KwuB8PjFNH088KscX06RY2A1KoRtlqw= Subject key identifier: 32:88:9A:E0:30:41:1E:9D:43:06:2E:34:B1:14:E4:58:1B:BD:D8:DC Authority key identifier: C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40 Certificate issuer: /CN=A912AC3E/serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40 Certificate serial: 0BC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft Manifest number: 0BAF Signing time: Sun 26 Oct 2025 19:26:36 +0000 Manifest this update: Sun 26 Oct 2025 19:26:35 +0000 Manifest next update: Sun 02 Nov 2025 19:26:35 +0000 Files and hashes: 1: yGngpTh1_BJZeGtSfmeEy_H4m0A.crl (hash: prYH+mlvUMy33I0WzOGC6eFceSzE0ZjCeJbP3u0b/90=) 2: 736F8DBA819311EB8964C17EC4F9AE02.roa (hash: 9VkEhYHF3f19k3ccapKOmWUnQN3qe0LKW0bGLzgAj2Q=) 3: B81176247CC811EBAAFADC27C4F9AE02.roa (hash: UVKRHigELp+/xtOJ9hxFUzKgCIBL/cBJ5XfcHMgTaRI=) 4: 72CF780C819311EB8964C17EC4F9AE02.roa (hash: qEnxbXTZjYArRGRzDWZrlZe2tR2ZHb8POdNuo8ieu30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 19:26:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3012 (0xbc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC3E, serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40 Validity Not Before: Oct 26 19:26:35 2025 GMT Not After : Nov 2 19:26:35 2025 GMT Subject: CN=68fe75eb-94c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:82:94:da:70:89:b9:f0:15:c5:1c:e2:30:43: 61:bf:f4:a5:e9:20:b0:fb:ba:e0:8a:23:25:27:46: 1a:aa:bf:28:1e:a3:50:c7:41:01:a0:b4:ac:ac:3f: 7c:b7:c1:da:07:3c:77:fc:9c:e9:59:e2:b4:e0:67: b8:51:97:e5:dd:22:77:1d:ab:ce:ef:2d:09:cd:83: 64:15:02:0d:d7:3d:e9:c2:00:83:70:0f:c5:b2:82: 7b:05:da:9d:af:5c:d1:e8:d8:92:e8:46:71:1a:4a: 4e:56:7f:42:84:43:7b:7c:99:95:62:59:6a:6b:6f: 5e:f7:80:11:8b:23:1b:2f:bc:51:93:c0:92:45:38: ec:22:b3:23:8f:9a:28:25:8a:24:ec:d2:0c:7b:9c: a0:33:2b:15:18:63:06:b9:39:2c:0d:82:42:a3:9f: 1f:4e:d2:28:d9:42:43:d6:b5:c7:f1:4a:d7:ec:09: 5b:9e:a6:bc:e5:26:a4:09:e9:11:1a:a5:4c:2b:3c: 2e:74:09:24:37:9b:68:9d:36:e8:f3:22:9a:77:5d: 90:ad:9f:9d:61:3b:c2:d3:cc:97:c1:38:77:57:46: 15:45:81:b3:25:ca:58:ec:0b:b0:01:76:aa:47:ef: d2:4e:83:51:00:32:d4:3e:9b:cc:cd:0f:6f:0f:e6: 2e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:88:9A:E0:30:41:1E:9D:43:06:2E:34:B1:14:E4:58:1B:BD:D8:DC X509v3 Authority Key Identifier: keyid:C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:46:ea:14:80:31:da:13:40:37:19:19:c3:07:6b:d1:ff:dc: b9:84:8b:87:8c:da:d8:58:dc:b8:07:2a:1f:7e:33:c4:47:97: a7:53:c6:57:90:f3:60:58:2d:00:1d:45:f9:87:6f:71:b8:2a: 14:f9:23:ea:0e:cd:47:05:87:9b:b9:74:3e:29:0b:a7:85:df: cf:f7:65:86:ab:75:3a:ed:1c:27:ca:d3:19:fb:f0:3c:eb:55: cc:5a:c4:f3:b1:b0:f2:2f:84:82:e5:ae:42:29:eb:a2:8a:5d: de:ef:11:62:51:df:78:83:f8:14:a0:58:33:80:5c:e0:93:8d: ab:5f:30:80:08:27:df:1c:e0:d4:1f:af:cc:63:6f:bf:0c:95: 45:62:ff:19:a2:0c:15:58:fb:d2:b2:c5:58:01:00:22:c2:aa: fa:8c:aa:e3:92:fc:f1:64:c0:6f:e3:89:eb:81:59:1b:c9:a5: ac:ae:ea:dd:f8:93:db:2d:a3:48:21:b8:0a:ec:73:18:bb:2a: fd:4c:94:86:4c:7a:ad:b6:5e:8d:73:a7:a2:bc:f4:e1:26:cb: 7b:9c:d2:f1:b9:fd:ed:de:51:af:8c:98:5a:a2:8c:2e:8b:3a: e7:cb:30:f3:bb:07:87:ef:82:62:13:1a:f9:0e:1e:9f:52:8e: 64:73:48:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDM0UxMTAvBgNVBAUTKEM4NjlFMEE1Mzg3NUZDMTI1OTc4NkI1MjdFNjc4NENC RjFGODlCNDAwHhcNMjUxMDI2MTkyNjM1WhcNMjUxMTAyMTkyNjM1WjAYMRYwFAYD VQQDEw02OGZlNzVlYi05NGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIKU2nCJufAVxRziMENhv/Sl6SCw+7rgiiMlJ0Yaqr8oHqNQx0EBoLSsrD98 t8HaBzx3/JzpWeK04Ge4UZfl3SJ3HavO7y0JzYNkFQIN1z3pwgCDcA/FsoJ7Bdqd r1zR6NiS6EZxGkpOVn9ChEN7fJmVYllqa29e94ARiyMbL7xRk8CSRTjsIrMjj5oo JYok7NIMe5ygMysVGGMGuTksDYJCo58fTtIo2UJD1rXH8UrX7Albnqa85SakCekR GqVMKzwudAkkN5tonTbo8yKad12QrZ+dYTvC08yXwTh3V0YVRYGzJcpY7AuwAXaq R+/SToNRADLUPpvMzQ9vD+YusQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDKImuAw QR6dQwYuNLEU5FgbvdjcMB8GA1UdIwQYMBaAFMhp4KU4dfwSWXhrUn5nhMvx+JtA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUMzRS8wRjUwRTAzNjMz QkExMUVBOTU4Mjg1ODFDNEY5QUUwMi95R25ncFRoMV9CSlplR3RTZm1lRXlfSDRt MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lHbmdwVGgxX0JKWmVHdFNmbWVFeV9ING0wQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUMzRS8wRjUwRTAzNjMzQkExMUVBOTU4Mjg1ODFDNEY5QUUwMi95R25ncFRoMV9C SlplR3RTZm1lRXlfSDRtMEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8RuoUgDHaE0A3GRnDB2vR/9y5hIuHjNrYWNy4ByoffjPER5enU8ZX kPNgWC0AHUX5h29xuCoU+SPqDs1HBYebuXQ+KQunhd/P92WGq3U67RwnytMZ+/A8 61XMWsTzsbDyL4SC5a5CKeuiil3e7xFiUd94g/gUoFgzgFzgk42rXzCACCffHODU H6/MY2+/DJVFYv8ZogwVWPvSssVYAQAiwqr6jKrjkvzxZMBv44nrgVkbyaWsrurd +JPbLaNIIbgK7HMYuyr9TJSGTHqttl6Nc6eivPThJst7nNLxuf3t3lGvjJhaoowu izrnyzDzuweH74JiExr5Dh6fUo5kc0he -----END CERTIFICATE-----Generated at Tue Oct 28 07:11:09 2025 by rpki-client