$ rpki-client -vvf rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft File: YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft (raw, json) Hash identifier: vH8O5Ue6tc6RiHB1+c0EEhe+qC3VC7vIZt34eai4Bw0= Subject key identifier: 38:CD:84:99:95:59:1F:DC:08:29:4F:84:49:0C:D2:2E:9F:BF:17:FE Authority key identifier: 60:AB:3C:FF:AB:88:A5:13:42:B8:16:F0:59:01:9F:07:3E:95:00:AA Certificate issuer: /CN=A913A839/serialNumber=60AB3CFFAB88A51342B816F059019F073E9500AA Certificate serial: 0A8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YKs8_6uIpRNCuBbwWQGfBz6VAKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft Manifest number: 0A83 Signing time: Sun 02 Nov 2025 19:33:36 +0000 Manifest this update: Sun 02 Nov 2025 19:33:36 +0000 Manifest next update: Sun 09 Nov 2025 19:33:36 +0000 Files and hashes: 1: YKs8_6uIpRNCuBbwWQGfBz6VAKo.crl (hash: 2gYufnCplHHe0wpX1kL8Exs0sqit2oZuXzfKOap5llc=) 2: 0DCB1BDC6C3111EA8F4E9B70C4F9AE02.roa (hash: oNJE5bj6Ow/7pljSaqdBQ3poJgn7jCyxhJR6Se/yVrg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.crl rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YKs8_6uIpRNCuBbwWQGfBz6VAKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:33:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2698 (0xa8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A839, serialNumber=60AB3CFFAB88A51342B816F059019F073E9500AA Validity Not Before: Nov 2 19:33:36 2025 GMT Not After : Nov 9 19:33:36 2025 GMT Subject: CN=6907b210-b397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:35:5e:54:ac:8f:48:db:09:be:31:90:1e:44: fd:28:e9:d2:c8:b2:fb:fb:c9:23:15:e3:89:e0:1a: 2c:e4:d5:63:89:a3:d2:f0:e3:42:9f:3a:32:d6:8a: 01:0d:73:80:16:33:14:ac:ce:2a:d2:8e:9b:ed:2e: 3c:21:e6:41:ed:ff:01:2b:c4:7c:89:de:73:47:40: 4a:06:d6:73:75:aa:af:89:67:5f:d3:7d:d5:fa:bb: 42:90:03:26:2e:ca:11:0d:c1:e6:3b:bb:eb:66:59: b3:27:3b:7f:12:3b:33:8c:2d:07:98:05:ae:83:ff: 60:4e:ff:5c:aa:ab:47:29:e1:18:df:c1:02:ec:fa: 82:e2:82:22:c4:5d:2c:f3:0d:a6:a7:42:cc:d0:89: 14:89:50:40:2d:3a:ab:cb:f2:b5:ca:9d:b8:21:90: 68:8d:da:d7:6c:6b:58:36:c2:3f:1f:a4:1a:e8:c6: 6e:77:cb:9f:19:df:49:1d:75:28:c8:d0:47:01:ee: d4:3b:d4:b3:b8:3a:f7:46:f9:11:cc:bd:6b:37:59: 7e:ec:c2:45:06:6e:89:9a:df:26:b9:7c:a9:cd:70: 07:bf:00:bc:b4:a4:72:85:32:ef:a9:d5:46:bc:20: 0f:c9:f0:9c:f4:ba:a2:28:b8:53:66:15:a9:42:76: 93:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:CD:84:99:95:59:1F:DC:08:29:4F:84:49:0C:D2:2E:9F:BF:17:FE X509v3 Authority Key Identifier: keyid:60:AB:3C:FF:AB:88:A5:13:42:B8:16:F0:59:01:9F:07:3E:95:00:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YKs8_6uIpRNCuBbwWQGfBz6VAKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:7b:09:23:17:0f:82:d7:71:7a:d5:f7:7e:19:77:eb:15:1f: 86:d2:7d:b9:81:62:fe:71:b3:8d:f2:a9:ac:22:69:6d:c1:97: f6:cb:4c:13:b3:68:7b:13:1b:b5:71:cf:5c:36:3c:53:fc:4d: 67:a0:bc:d7:3e:85:be:eb:94:ee:d5:f5:72:6e:7c:77:ee:4e: 96:76:99:66:c6:4f:3a:c5:d1:47:cf:f2:54:36:7b:92:0c:ba: 59:b0:ef:7a:a4:cc:f3:2a:66:b9:74:d9:0d:d2:38:17:4e:6e: a6:19:30:c2:c8:79:50:85:a5:a3:1f:c5:1e:5b:27:41:1e:c6: ca:cc:a1:2d:94:a9:ab:6a:03:72:22:e0:1e:c3:9c:b1:ea:a4: cb:c6:67:6f:e8:2b:f9:f7:0c:4a:80:18:fa:a4:df:59:6c:72: 10:dc:cb:27:15:7f:4b:0d:1d:9a:71:19:6f:74:5e:64:75:4c: 13:c9:3f:b4:09:d5:ea:0f:d9:fb:03:60:12:35:a7:00:2d:95: 51:e8:6c:8c:69:05:cf:f4:dc:20:6d:1d:cf:58:79:ed:c4:92: d1:2a:c2:19:de:ca:b2:15:c2:f8:eb:2f:c9:0d:69:4c:5e:42: 20:26:bc:68:06:a8:fe:99:2e:df:e5:d1:ef:b4:da:68:5c:71: 6f:07:3f:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E4MzkxMTAvBgNVBAUTKDYwQUIzQ0ZGQUI4OEE1MTM0MkI4MTZGMDU5MDE5RjA3 M0U5NTAwQUEwHhcNMjUxMTAyMTkzMzM2WhcNMjUxMTA5MTkzMzM2WjAYMRYwFAYD VQQDEw02OTA3YjIxMC1iMzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0zVeVKyPSNsJvjGQHkT9KOnSyLL7+8kjFeOJ4Bos5NVjiaPS8ONCnzoy1ooB DXOAFjMUrM4q0o6b7S48IeZB7f8BK8R8id5zR0BKBtZzdaqviWdf033V+rtCkAMm LsoRDcHmO7vrZlmzJzt/EjszjC0HmAWug/9gTv9cqqtHKeEY38EC7PqC4oIixF0s 8w2mp0LM0IkUiVBALTqry/K1yp24IZBojdrXbGtYNsI/H6Qa6MZud8ufGd9JHXUo yNBHAe7UO9SzuDr3RvkRzL1rN1l+7MJFBm6Jmt8muXypzXAHvwC8tKRyhTLvqdVG vCAPyfCc9LqiKLhTZhWpQnaTtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDjNhJmV WR/cCClPhEkM0i6fvxf+MB8GA1UdIwQYMBaAFGCrPP+riKUTQrgW8FkBnwc+lQCq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTgzOS9DMEUwM0NGNDZD MkYxMUVBOENFQzk0NkVDNEY5QUUwMi9ZS3M4XzZ1SXBSTkN1QmJ3V1FHZkJ6NlZB S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lLczhfNnVJcFJOQ3VCYndXUUdmQno2VkFLby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTgzOS9DMEUwM0NGNDZDMkYxMUVBOENFQzk0NkVDNEY5QUUwMi9ZS3M4XzZ1SXBS TkN1QmJ3V1FHZkJ6NlZBS28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKewkjFw+C13F61fd+GXfrFR+G0n25gWL+cbON8qmsImltwZf2y0wT s2h7Exu1cc9cNjxT/E1noLzXPoW+65Tu1fVybnx37k6Wdplmxk86xdFHz/JUNnuS DLpZsO96pMzzKma5dNkN0jgXTm6mGTDCyHlQhaWjH8UeWydBHsbKzKEtlKmragNy IuAew5yx6qTLxmdv6Cv59wxKgBj6pN9ZbHIQ3MsnFX9LDR2acRlvdF5kdUwTyT+0 CdXqD9n7A2ASNacALZVR6GyMaQXP9NwgbR3PWHntxJLRKsIZ3sqyFcL46y/JDWlM XkIgJrxoBqj+mS7f5dHvtNpoXHFvBz+v -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:34 2025 by rpki-client