$ rpki-client -vvf rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft File: yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft (raw, json) Hash identifier: 45IrPIPobJc8xYm+JGmatNcIS+DA5i/IZtKnkyCUrXY= Subject key identifier: E7:FC:2F:DF:E3:46:B9:BC:1F:0A:92:2C:B0:BA:93:80:6C:5F:62:DC Authority key identifier: C8:24:34:74:25:BA:C8:AF:59:B4:E1:96:6B:C1:0D:BF:A8:BD:AB:82 Certificate issuer: /CN=A912B2EE/serialNumber=C824347425BAC8AF59B4E1966BC10DBFA8BDAB82 Certificate serial: 0FCA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft Manifest number: 0FB5 Signing time: Tue 04 Nov 2025 17:36:47 +0000 Manifest this update: Tue 04 Nov 2025 17:36:47 +0000 Manifest next update: Tue 11 Nov 2025 17:36:47 +0000 Files and hashes: 1: yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl (hash: HCJm3aiYY75Vj5wo6bLGM/TNiKE1zRueWw3OlZP47c4=) 2: 05449490E17B11EC93AB7473C4F9AE02.roa (hash: TQO7DA2C+52oraPsdnjGz3A009856ZzetwGGv8/CUtg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4042 (0xfca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B2EE, serialNumber=C824347425BAC8AF59B4E1966BC10DBFA8BDAB82 Validity Not Before: Nov 4 17:36:47 2025 GMT Not After : Nov 11 17:36:47 2025 GMT Subject: CN=690a39af-34e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:35:60:60:89:46:5b:0d:a2:ed:35:fe:2c:f6: 6e:1f:27:e2:e5:fa:21:5d:23:8e:61:33:f7:91:f7: 9c:f1:11:33:f0:1b:a7:66:fe:18:6d:3f:36:5a:bc: b3:b7:67:be:b6:d5:a4:ab:53:7f:d4:78:3b:1d:50: 0b:39:d0:7a:4c:29:f1:cf:a0:30:01:6f:1e:ef:0b: 35:e3:36:c5:80:29:3b:a0:ff:1d:06:e8:fb:22:ef: b1:e4:dd:6c:89:82:79:f2:87:e9:e5:65:c8:c7:d5: 01:e5:ca:e5:ff:03:46:da:b4:03:69:e1:36:ce:85: f0:b7:5d:07:87:aa:67:0e:aa:8a:2a:34:79:91:11: 89:9d:6b:ad:60:6c:4e:4d:f6:da:a8:99:97:5b:24: 38:b9:28:e3:3c:c5:d2:ff:d0:58:79:2a:be:55:0a: 8a:88:97:1c:df:a9:b2:45:5f:8d:e8:9b:2f:d5:a1: 7d:49:7a:8a:75:2f:ba:1e:45:6a:31:7b:9f:4d:a2: 9a:44:b2:d7:dd:3a:29:fb:93:ce:d1:af:3f:20:3d: 56:0a:c3:7c:2f:8e:47:2f:70:2d:ac:bb:9b:df:e8: 0d:46:a8:49:44:61:59:1f:8a:23:9b:87:3a:0b:89: 84:e8:c7:a1:ed:ca:a2:00:e8:93:17:2d:84:22:2c: a9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:FC:2F:DF:E3:46:B9:BC:1F:0A:92:2C:B0:BA:93:80:6C:5F:62:DC X509v3 Authority Key Identifier: keyid:C8:24:34:74:25:BA:C8:AF:59:B4:E1:96:6B:C1:0D:BF:A8:BD:AB:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:bb:fd:a5:d7:4c:44:c7:85:5d:29:4b:c9:9b:89:fa:fe:3b: 71:f0:29:5d:fa:97:6d:1c:73:76:9b:4e:90:07:ab:f9:61:01: 4c:65:a4:b3:f0:07:95:27:87:e5:a2:28:57:37:f3:0f:8b:55: d3:02:74:7b:0a:be:8a:56:bd:f5:56:38:e5:26:d9:a2:3f:e1: c7:ad:67:82:de:76:6a:64:b9:59:f4:f0:c7:3e:62:e8:61:ef: 61:27:4b:17:2c:91:88:b0:c2:d7:5f:e2:4b:76:c4:7a:f7:12: ae:fd:d8:dd:26:b9:74:f3:8e:dc:b8:a7:50:2f:9e:09:d1:0a: 9b:05:c5:2a:8d:d2:20:01:b3:f0:a6:41:5f:fd:97:ef:4d:3f: bb:ed:1e:30:75:ed:8e:c4:f8:d9:3d:33:6d:d6:83:b5:47:36: 14:68:81:0c:a1:f1:7e:ec:a0:94:c8:1e:e0:f3:51:e5:15:fe: d2:50:fb:e3:fd:b1:45:5f:72:d8:a8:97:8e:cf:e0:dc:6b:0b: 8d:67:d1:c7:78:e7:eb:15:63:4a:ca:1e:54:53:cc:20:f8:0b: 6d:0c:f4:50:af:1f:30:b7:4a:bc:c4:5a:41:79:bd:eb:24:bb: a1:f4:da:63:d2:60:0c:fa:a2:cc:c3:81:fe:1e:98:6b:b5:a9: 57:12:8c:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIyRUUxMTAvBgNVBAUTKEM4MjQzNDc0MjVCQUM4QUY1OUI0RTE5NjZCQzEwREJG QThCREFCODIwHhcNMjUxMTA0MTczNjQ3WhcNMjUxMTExMTczNjQ3WjAYMRYwFAYD VQQDEw02OTBhMzlhZi0zNGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDVgYIlGWw2i7TX+LPZuHyfi5fohXSOOYTP3kfec8REz8BunZv4YbT82Wryz t2e+ttWkq1N/1Hg7HVALOdB6TCnxz6AwAW8e7ws14zbFgCk7oP8dBuj7Iu+x5N1s iYJ58ofp5WXIx9UB5crl/wNG2rQDaeE2zoXwt10Hh6pnDqqKKjR5kRGJnWutYGxO TfbaqJmXWyQ4uSjjPMXS/9BYeSq+VQqKiJcc36myRV+N6Jsv1aF9SXqKdS+6HkVq MXufTaKaRLLX3Top+5PO0a8/ID1WCsN8L45HL3AtrLub3+gNRqhJRGFZH4ojm4c6 C4mE6Meh7cqiAOiTFy2EIiypYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOf8L9/j Rrm8HwqSLLC6k4BsX2LcMB8GA1UdIwQYMBaAFMgkNHQlusivWbThlmvBDb+ovauC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjJFRS8xRjQxMUY1ODZD MjExMUU5Qjc2RkE5MDlDNEY5QUUwMi95Q1EwZENXNnlLOVp0T0dXYThFTnY2aTlx NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lDUTBkQ1c2eUs5WnRPR1dhOEVOdjZpOXE0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjJFRS8xRjQxMUY1ODZDMjExMUU5Qjc2RkE5MDlDNEY5QUUwMi95Q1EwZENXNnlL OVp0T0dXYThFTnY2aTlxNEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYu/2l10xEx4VdKUvJm4n6/jtx8Cld+pdtHHN2m06QB6v5YQFMZaSz 8AeVJ4floihXN/MPi1XTAnR7Cr6KVr31VjjlJtmiP+HHrWeC3nZqZLlZ9PDHPmLo Ye9hJ0sXLJGIsMLXX+JLdsR69xKu/djdJrl0847cuKdQL54J0QqbBcUqjdIgAbPw pkFf/ZfvTT+77R4wde2OxPjZPTNt1oO1RzYUaIEMofF+7KCUyB7g81HlFf7SUPvj /bFFX3LYqJeOz+DcawuNZ9HHeOfrFWNKyh5UU8wg+AttDPRQrx8wt0q8xFpBeb3r JLuh9Npj0mAM+qLMw4H+HphrtalXEow3 -----END CERTIFICATE-----Generated at Wed Nov 5 13:55:33 2025 by rpki-client