$ rpki-client -vvf rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft File: YWOpVUwzBnn36hZnixCNlk7ByAI.mft (raw, json) Hash identifier: bz1Qjnbld6IIGK3ylVhyDDOvwnTCCs8AKIV3czMA9lQ= Subject key identifier: D1:54:B9:D0:CE:15:CB:C4:38:E6:85:06:72:E9:54:A5:4B:CD:93:9D Authority key identifier: 61:63:A9:55:4C:33:06:79:F7:EA:16:67:8B:10:8D:96:4E:C1:C8:02 Certificate issuer: /CN=A91364F5/serialNumber=6163A9554C330679F7EA16678B108D964EC1C802 Certificate serial: 0146 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YWOpVUwzBnn36hZnixCNlk7ByAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft Manifest number: 0140 Signing time: Wed 05 Nov 2025 04:37:18 +0000 Manifest this update: Wed 05 Nov 2025 04:37:17 +0000 Manifest next update: Wed 12 Nov 2025 04:37:17 +0000 Files and hashes: 1: YWOpVUwzBnn36hZnixCNlk7ByAI.crl (hash: AI7NtwBU+7HZTz+DF2fcT78H/ZfXQZi5ssuJuPOTJ0o=) 2: 0992C84EAC9111EF81B7B058C4F9AE02.roa (hash: 0r1+bjf/CBoFjNEUVu+pdLpoE7fYxxmBMNd9J5fRyzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.crl rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YWOpVUwzBnn36hZnixCNlk7ByAI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:37:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91364F5, serialNumber=6163A9554C330679F7EA16678B108D964EC1C802 Validity Not Before: Nov 5 04:37:17 2025 GMT Not After : Nov 12 04:37:17 2025 GMT Subject: CN=690ad47d-0d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6b:9c:a0:e1:46:22:2c:d0:6b:81:f9:6b:2f: e9:c7:7f:fd:ba:4b:e2:e5:08:07:30:fd:ba:d6:72: a4:69:61:32:c1:81:84:00:ce:99:ac:5d:d5:65:b8: f7:17:b5:4c:0d:d5:86:c2:6a:6e:00:00:19:45:e6: 82:79:36:55:79:7b:0d:ac:d4:dc:b1:7f:80:87:8f: c0:57:c6:aa:7a:8d:4b:c2:8d:4f:a8:9e:e7:85:6b: 0c:bc:05:02:b6:72:37:e6:fa:b9:3d:60:61:e4:aa: 06:35:ba:61:e1:e4:95:2e:95:f3:52:59:a3:9b:9f: c2:ea:5a:3d:e1:43:a2:ab:03:a1:f5:1d:8b:9a:e5: 7f:ad:04:c2:6a:b5:f6:22:61:0e:ae:fb:3b:35:e8: f4:20:e5:ec:2d:b1:13:29:08:c1:21:c6:32:f3:e4: bc:c6:ba:4b:0c:30:7d:99:18:57:e7:ff:81:ba:34: 5a:70:8a:3e:7d:a9:c0:37:bf:c2:0b:94:26:7d:e1: 26:14:b5:1e:aa:52:75:5c:9e:52:b6:51:12:48:13: 49:7f:78:18:fd:e4:40:c6:df:58:05:58:18:82:80: c6:e2:0d:f8:48:9b:7a:0f:80:f4:3c:56:78:25:36: 68:97:97:ec:bf:c7:43:39:2f:fe:36:01:17:1a:d0: db:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:54:B9:D0:CE:15:CB:C4:38:E6:85:06:72:E9:54:A5:4B:CD:93:9D X509v3 Authority Key Identifier: keyid:61:63:A9:55:4C:33:06:79:F7:EA:16:67:8B:10:8D:96:4E:C1:C8:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YWOpVUwzBnn36hZnixCNlk7ByAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:6b:90:9b:09:9f:8a:56:d8:03:3f:3f:6c:7c:78:3e:ef:af: 1e:45:2c:77:16:96:f3:2b:93:fb:92:65:8c:67:18:05:d1:12: 4e:7e:a2:3f:9b:c4:33:30:31:bf:42:3a:ed:17:c0:71:3b:d0: e1:09:4f:13:cd:e9:da:47:c1:7d:bc:c7:d5:30:06:e4:4c:28: b8:a2:a9:10:e7:4f:ea:97:08:65:32:59:41:3c:15:69:8f:ac: ea:27:8b:f9:72:2a:57:49:0b:9b:96:74:fd:ff:33:7b:58:d9: b9:68:d4:bf:22:51:d1:b7:fb:e6:f1:03:df:e1:a2:c5:b0:4f: af:34:54:5c:29:92:9d:88:8b:f5:e6:b5:c2:1d:d6:51:d4:07: d9:31:84:ac:c7:b2:79:51:c4:f5:04:fe:4b:01:b2:89:0d:cf: 69:cd:92:7b:5d:65:46:db:1a:1c:3a:0c:80:b9:87:ed:75:b7: 67:ac:bf:f7:7f:a5:20:23:75:d1:aa:dd:3a:34:82:13:fe:2a: 31:b7:d0:f9:6a:9b:65:ff:ba:ee:dd:1e:1d:44:03:8d:93:01: fa:bc:35:47:39:cb:2a:a0:a7:19:84:20:01:33:ef:c8:9d:05: fc:ec:3f:92:ac:cd:2d:d3:7d:a2:3a:d2:bd:c4:94:d9:88:1b: f0:c7:a1:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY0RjUxMTAvBgNVBAUTKDYxNjNBOTU1NEMzMzA2NzlGN0VBMTY2NzhCMTA4RDk2 NEVDMUM4MDIwHhcNMjUxMTA1MDQzNzE3WhcNMjUxMTEyMDQzNzE3WjAYMRYwFAYD VQQDEw02OTBhZDQ3ZC0wZDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGucoOFGIizQa4H5ay/px3/9ukvi5QgHMP261nKkaWEywYGEAM6ZrF3VZbj3 F7VMDdWGwmpuAAAZReaCeTZVeXsNrNTcsX+Ah4/AV8aqeo1Lwo1PqJ7nhWsMvAUC tnI35vq5PWBh5KoGNbph4eSVLpXzUlmjm5/C6lo94UOiqwOh9R2LmuV/rQTCarX2 ImEOrvs7Nej0IOXsLbETKQjBIcYy8+S8xrpLDDB9mRhX5/+BujRacIo+fanAN7/C C5QmfeEmFLUeqlJ1XJ5StlESSBNJf3gY/eRAxt9YBVgYgoDG4g34SJt6D4D0PFZ4 JTZol5fsv8dDOS/+NgEXGtDbEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFUudDO FcvEOOaFBnLpVKVLzZOdMB8GA1UdIwQYMBaAFGFjqVVMMwZ59+oWZ4sQjZZOwcgC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjRGNS81QjVCOTNFQ0Q5 RjkxMUVFOUVBRTVEN0RDNEY5QUUwMi9ZV09wVlV3ekJubjM2aFpuaXhDTmxrN0J5 QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lXT3BWVXd6Qm5uMzZoWm5peENObGs3QnlBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjRGNS81QjVCOTNFQ0Q5RjkxMUVFOUVBRTVEN0RDNEY5QUUwMi9ZV09wVlV3ekJu bjM2aFpuaXhDTmxrN0J5QUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0a5CbCZ+KVtgDPz9sfHg+768eRSx3FpbzK5P7kmWMZxgF0RJOfqI/ m8QzMDG/QjrtF8BxO9DhCU8TzenaR8F9vMfVMAbkTCi4oqkQ50/qlwhlMllBPBVp j6zqJ4v5cipXSQublnT9/zN7WNm5aNS/IlHRt/vm8QPf4aLFsE+vNFRcKZKdiIv1 5rXCHdZR1AfZMYSsx7J5UcT1BP5LAbKJDc9pzZJ7XWVG2xocOgyAuYftdbdnrL/3 f6UgI3XRqt06NIIT/ioxt9D5aptl/7ru3R4dRAONkwH6vDVHOcsqoKcZhCABM+/I nQX87D+SrM0t032iOtK9xJTZiBvwx6E8 -----END CERTIFICATE-----Generated at Thu Nov 6 01:19:50 2025 by rpki-client