$ rpki-client -vvf rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft File: Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft (raw, json) Hash identifier: kRu4GFyxtiV5kIbMcF4iMP5B4Tj2Uj8nA/Wz9OEWIzc= Subject key identifier: 7F:6F:52:D2:33:28:EC:2C:CF:52:65:25:30:7A:5F:8D:66:04:FA:4A Authority key identifier: 63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00 Certificate issuer: /CN=A913EE46/serialNumber=63515B364113848FA554D2842F5841877CF6AF00 Certificate serial: 02BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft Manifest number: 02BA Signing time: Mon 03 Nov 2025 01:24:28 +0000 Manifest this update: Mon 03 Nov 2025 01:24:28 +0000 Manifest next update: Mon 10 Nov 2025 01:24:28 +0000 Files and hashes: 1: Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl (hash: hrQIFDHdUVfBT+kmR8XPS5J/MEs5c75ZmDQSRS8jmB0=) 2: 9DFFBC7C12F011EDA0DB0B12C4F9AE02.roa (hash: JWAO5OM1htkOqA8zsEncfXnArds8hOb3Z7zkeDNiSm4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 703 (0x2bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EE46, serialNumber=63515B364113848FA554D2842F5841877CF6AF00 Validity Not Before: Nov 3 01:24:28 2025 GMT Not After : Nov 10 01:24:28 2025 GMT Subject: CN=6908044c-6c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cd:aa:6e:57:8c:ee:35:5c:c9:97:54:11:a3: 46:7d:ff:7f:2a:a1:5b:c0:5e:0d:f9:27:97:ed:3c: 27:56:21:36:ee:ce:1d:b3:57:28:eb:88:3e:64:ec: a6:24:06:2b:03:57:b3:05:f2:a3:b0:68:19:ec:e7: ba:9f:3b:55:ac:5b:7b:a8:12:6e:df:6e:54:03:a7: 9f:08:cc:95:a6:58:45:2f:90:7b:04:84:9d:14:55: ad:f1:dd:cd:10:56:06:4d:f1:99:bf:ff:0e:b6:1f: 3b:a7:d7:dd:bf:54:fd:bd:52:3a:87:f2:3d:24:62: 0a:32:a2:f3:ec:88:a1:0a:d8:8a:f9:a3:6e:23:b1: d2:4d:db:1a:f8:d6:ea:1f:33:59:1f:21:c1:b6:51: 2a:74:b5:70:65:5e:d5:0b:76:c7:27:b3:50:aa:25: db:4f:00:9e:6f:b2:c1:b4:f1:49:fe:2d:9c:87:eb: d2:a9:43:55:c0:90:8f:0e:8b:b9:e1:1b:a6:5c:9a: cc:1c:98:52:4b:67:98:d8:ec:bc:ec:f5:f7:ed:d9: f3:dd:62:36:80:2c:4c:06:49:13:62:11:84:4a:89: c6:45:2f:da:1f:f5:c5:58:8c:93:fa:27:44:0a:11: fb:71:2a:8a:5f:78:d6:94:13:e7:50:7f:68:84:6a: 25:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:6F:52:D2:33:28:EC:2C:CF:52:65:25:30:7A:5F:8D:66:04:FA:4A X509v3 Authority Key Identifier: keyid:63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:6f:a7:b1:a8:50:06:2b:06:47:9d:51:05:61:dd:2f:8b:7c: 65:42:70:70:56:d3:b4:41:64:0e:c3:20:9b:a4:4a:93:ad:2f: 5b:53:b3:c2:c4:a0:50:28:6a:1a:55:84:e3:2f:3a:0b:ef:a4: bc:26:c9:23:ad:c4:e4:9f:ec:63:50:d7:86:b9:45:a6:0a:ac: 7d:e2:90:c5:a0:e8:f1:a4:a6:45:a6:f2:d4:15:fa:cc:b2:3b: 7a:6a:ea:d7:b5:6f:bf:06:5e:06:d9:b1:79:66:b1:83:90:a8: 25:a1:ac:00:f2:88:b7:60:bf:02:65:80:17:19:b7:a5:89:93: 4e:cb:bd:bf:cc:55:7d:0c:20:ad:25:0e:d9:62:09:30:55:29: 16:3d:35:e3:51:7c:66:ed:cf:1e:1a:d4:c7:51:85:04:e5:99: a7:dd:32:ac:1d:1c:4e:0e:9f:23:9a:df:7f:06:41:8e:ac:89: a7:1f:63:92:9f:dc:87:bf:1c:d8:e1:68:c6:ab:ad:9e:bf:7e: 81:4e:5c:c2:f1:81:1c:ca:64:aa:0a:d9:10:51:ec:12:e9:74: c3:9b:c7:25:5b:95:42:95:c2:08:d7:1e:6f:88:00:f8:d5:11: 55:cd:d4:6c:43:b6:17:35:d8:be:f8:b1:21:dd:ad:23:be:96: 48:2f:44:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VFNDYxMTAvBgNVBAUTKDYzNTE1QjM2NDExMzg0OEZBNTU0RDI4NDJGNTg0MTg3 N0NGNkFGMDAwHhcNMjUxMTAzMDEyNDI4WhcNMjUxMTEwMDEyNDI4WjAYMRYwFAYD VQQDEw02OTA4MDQ0Yy02YzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsM2qbleM7jVcyZdUEaNGff9/KqFbwF4N+SeX7TwnViE27s4ds1co64g+ZOym JAYrA1ezBfKjsGgZ7Oe6nztVrFt7qBJu325UA6efCMyVplhFL5B7BISdFFWt8d3N EFYGTfGZv/8Oth87p9fdv1T9vVI6h/I9JGIKMqLz7IihCtiK+aNuI7HSTdsa+Nbq HzNZHyHBtlEqdLVwZV7VC3bHJ7NQqiXbTwCeb7LBtPFJ/i2ch+vSqUNVwJCPDou5 4RumXJrMHJhSS2eY2Oy87PX37dnz3WI2gCxMBkkTYhGESonGRS/aH/XFWIyT+idE ChH7cSqKX3jWlBPnUH9ohGolvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9vUtIz KOwsz1JlJTB6X41mBPpKMB8GA1UdIwQYMBaAFGNRWzZBE4SPpVTShC9YQYd89q8A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUU0Ni9BRTgyRTEyNjEy RUQxMUVEOUU0RDc2MEVDNEY5QUUwMi9ZMUZiTmtFVGhJLWxWTktFTDFoQmgzejJy d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kxRmJOa0VUaEktbFZOS0VMMWhCaDN6MnJ3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUU0Ni9BRTgyRTEyNjEyRUQxMUVEOUU0RDc2MEVDNEY5QUUwMi9ZMUZiTmtFVGhJ LWxWTktFTDFoQmgzejJyd0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQb6exqFAGKwZHnVEFYd0vi3xlQnBwVtO0QWQOwyCbpEqTrS9bU7PC xKBQKGoaVYTjLzoL76S8JskjrcTkn+xjUNeGuUWmCqx94pDFoOjxpKZFpvLUFfrM sjt6aurXtW+/Bl4G2bF5ZrGDkKgloawA8oi3YL8CZYAXGbeliZNOy72/zFV9DCCt JQ7ZYgkwVSkWPTXjUXxm7c8eGtTHUYUE5Zmn3TKsHRxODp8jmt9/BkGOrImnH2OS n9yHvxzY4WjGq62ev36BTlzC8YEcymSqCtkQUewS6XTDm8clW5VClcII1x5viAD4 1RFVzdRsQ7YXNdi++LEh3a0jvpZIL0R+ -----END CERTIFICATE-----Generated at Tue Nov 4 08:33:09 2025 by rpki-client