$ rpki-client -vvf rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft File: Yr76HCON-N6XLqX-GAl7ES7wR3s.mft (raw, json) Hash identifier: /vxwknzsOMDkzhC+k7Zux3CPq2ch+r62eqU5Y3CV2VE= Subject key identifier: 0F:F0:0B:38:2D:45:B0:F0:B4:58:CC:5C:C8:28:E3:EA:52:66:20:4D Authority key identifier: 62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B Certificate issuer: /CN=A91307F0/serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B Certificate serial: 01FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft Manifest number: 01F4 Signing time: Mon 03 Nov 2025 02:26:59 +0000 Manifest this update: Mon 03 Nov 2025 02:26:58 +0000 Manifest next update: Mon 10 Nov 2025 02:26:58 +0000 Files and hashes: 1: Yr76HCON-N6XLqX-GAl7ES7wR3s.crl (hash: 8mnMVyC+XZtnikeuUMx3yz5ahBg2Fcw+tjJTdQMH7bI=) 2: E4E7AE6EB8BE11ED83994B4AC4F9AE02.roa (hash: aPCaqml7t2F2+k6pOKIapyXqL1F8xbtnk+/zEbIo0oM=) 3: E5817A58B8BE11ED83994B4AC4F9AE02.roa (hash: gMPv9NciLB3BAjtT8uTP/7SkhRaSaS/Bj12QLWTIGsk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:26:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 506 (0x1fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91307F0, serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B Validity Not Before: Nov 3 02:26:58 2025 GMT Not After : Nov 10 02:26:58 2025 GMT Subject: CN=690812f3-8a04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d2:4c:30:12:df:f5:5f:3a:57:28:ac:bc:13: 93:05:85:f9:ce:80:d0:d2:58:91:f8:1c:63:cb:93: a2:b6:9f:e2:de:10:c4:b4:45:ef:0f:dc:0d:da:49: 8f:63:af:18:da:77:9a:7d:8a:90:3c:0f:8c:c1:d4: b6:b4:a2:38:b7:23:75:c6:4c:0f:af:71:f8:28:17: 2b:65:34:2d:72:b0:a7:73:23:50:c5:17:d6:89:50: ed:56:e5:12:19:2d:f8:42:7b:66:4b:90:0d:63:fd: 94:a9:49:57:c7:e9:e7:f4:4b:5a:4f:93:84:72:3b: 35:31:e7:07:d1:7b:c1:ec:a3:f4:11:71:f9:7f:92: 9f:18:98:f2:51:f1:d0:73:9b:ce:12:7f:f5:c0:ee: 36:66:da:ee:4a:20:1e:e8:e3:82:f3:09:45:5a:a7: bd:89:61:aa:6d:64:20:3a:4f:35:7c:1f:dc:a0:94: cd:1a:12:e3:d9:1d:2a:ab:1f:ea:12:8b:df:fd:41: 82:d5:ae:33:c7:ea:65:78:fc:dc:4e:69:64:b0:9c: 3e:7c:03:41:cd:70:3e:bf:2e:01:7e:50:ad:1e:2e: d7:e5:d5:7b:bf:81:07:09:04:29:fe:d6:f6:fd:8f: b3:fa:a3:98:df:f7:0b:6a:5d:c1:8d:35:96:2b:af: 3f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F0:0B:38:2D:45:B0:F0:B4:58:CC:5C:C8:28:E3:EA:52:66:20:4D X509v3 Authority Key Identifier: keyid:62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:24:bc:dd:67:10:fc:6c:6f:8c:4e:c5:86:a1:7e:30:b9:17: b0:23:b3:6d:01:4b:a9:43:d9:06:bf:ba:7a:65:6c:df:91:79: dd:20:d0:4c:f2:05:c5:8b:ef:53:e5:ba:dc:1f:12:5f:4a:69: e9:d9:ef:cc:85:d2:2f:0e:6a:d3:50:9c:36:da:40:f7:cc:0f: 9e:7e:39:26:9d:ff:cd:5e:52:1a:f3:82:13:e5:f7:87:1a:7a: 0a:22:31:3b:a8:3e:0d:f1:95:11:c7:da:a7:99:b9:12:63:43: 80:bd:f3:6f:68:9d:f6:cb:98:f5:23:e0:e0:ae:62:3e:c8:2c: 94:96:5c:80:34:d2:ea:12:92:94:b1:b3:45:dd:b4:7e:15:fe: 29:4b:cd:3c:a8:06:56:b5:7e:e0:2b:05:79:f1:f2:aa:9b:db: cf:f4:54:d3:03:8e:5b:bb:fb:6c:47:70:b3:ef:0a:f5:84:10: 32:05:a7:8b:09:d5:d2:bb:a5:53:e4:cf:c7:a1:a3:20:ca:99: 7b:2c:82:a7:78:e4:4d:8b:f4:be:17:f5:42:54:9c:51:c6:6a: a8:a9:93:f8:e6:4b:e4:7d:bf:b2:d0:11:11:ed:43:dd:52:e7: 8e:29:5c:ef:a1:1a:d5:52:72:39:a9:b5:91:59:73:bc:17:dd: 5f:28:bb:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA3RjAxMTAvBgNVBAUTKDYyQkVGQTFDMjM4REY4REU5NzJFQTVGRTE4MDk3QjEx MkVGMDQ3N0IwHhcNMjUxMTAzMDIyNjU4WhcNMjUxMTEwMDIyNjU4WjAYMRYwFAYD VQQDEw02OTA4MTJmMy04YTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdJMMBLf9V86VyisvBOTBYX5zoDQ0liR+Bxjy5Oitp/i3hDEtEXvD9wN2kmP Y68Y2neafYqQPA+MwdS2tKI4tyN1xkwPr3H4KBcrZTQtcrCncyNQxRfWiVDtVuUS GS34QntmS5ANY/2UqUlXx+nn9EtaT5OEcjs1MecH0XvB7KP0EXH5f5KfGJjyUfHQ c5vOEn/1wO42ZtruSiAe6OOC8wlFWqe9iWGqbWQgOk81fB/coJTNGhLj2R0qqx/q Eovf/UGC1a4zx+plePzcTmlksJw+fANBzXA+vy4BflCtHi7X5dV7v4EHCQQp/tb2 /Y+z+qOY3/cLal3BjTWWK68/2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/wCzgt RbDwtFjMXMgo4+pSZiBNMB8GA1UdIwQYMBaAFGK++hwjjfjely6l/hgJexEu8Ed7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDdGMC82MEQwQzlGQUI4 QTgxMUVEOUZBNDc4NDNDNEY5QUUwMi9Zcjc2SENPTi1ONlhMcVgtR0FsN0VTN3dS M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lyNzZIQ09OLU42WExxWC1HQWw3RVM3d1Izcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDdGMC82MEQwQzlGQUI4QTgxMUVEOUZBNDc4NDNDNEY5QUUwMi9Zcjc2SENPTi1O NlhMcVgtR0FsN0VTN3dSM3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTJLzdZxD8bG+MTsWGoX4wuRewI7NtAUupQ9kGv7p6ZWzfkXndINBM 8gXFi+9T5brcHxJfSmnp2e/MhdIvDmrTUJw22kD3zA+efjkmnf/NXlIa84IT5feH GnoKIjE7qD4N8ZURx9qnmbkSY0OAvfNvaJ32y5j1I+DgrmI+yCyUllyANNLqEpKU sbNF3bR+Ff4pS808qAZWtX7gKwV58fKqm9vP9FTTA45bu/tsR3Cz7wr1hBAyBaeL CdXSu6VT5M/HoaMgypl7LIKneORNi/S+F/VCVJxRxmqoqZP45kvkfb+y0BER7UPd UueOKVzvoRrVUnI5qbWRWXO8F91fKLtH -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:21 2025 by rpki-client