$ rpki-client -vvf rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft File: YfcrXpPnk13XngQ1yBj4-acQ9ok.mft (raw, json) Hash identifier: iJi5hxDwFhgBKnboIhpeZ5PfIqLoxBvc4XOgC2qvjXg= Subject key identifier: AF:31:E1:49:84:59:AF:3B:8F:03:F0:9F:64:8F:FC:8D:66:12:E5:8D Authority key identifier: 61:F7:2B:5E:93:E7:93:5D:D7:9E:04:35:C8:18:F8:F9:A7:10:F6:89 Certificate issuer: /CN=A913FE55/serialNumber=61F72B5E93E7935DD79E0435C818F8F9A710F689 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfcrXpPnk13XngQ1yBj4-acQ9ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft Manifest number: 4B Signing time: Mon 03 Nov 2025 07:19:25 +0000 Manifest this update: Mon 03 Nov 2025 07:19:25 +0000 Manifest next update: Mon 10 Nov 2025 07:19:25 +0000 Files and hashes: 1: YfcrXpPnk13XngQ1yBj4-acQ9ok.crl (hash: OhtzWgRsF4hxQgEhmgorKVYNHWQnzL9vNPRSlaV1mW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.crl rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfcrXpPnk13XngQ1yBj4-acQ9ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:19:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FE55, serialNumber=61F72B5E93E7935DD79E0435C818F8F9A710F689 Validity Not Before: Nov 3 07:19:25 2025 GMT Not After : Nov 10 07:19:25 2025 GMT Subject: CN=6908577d-14c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:22:e6:3e:a2:7a:4b:f8:0b:ca:aa:17:4e:2a: 04:c1:f9:a4:26:a9:16:a2:d4:fa:c6:f6:91:30:ce: 4d:0e:f9:45:c5:d8:d2:1b:02:86:ff:85:5d:5e:53: 97:fc:a3:d3:53:12:e7:79:e4:99:c4:cd:7f:f3:ef: f1:20:96:74:a4:0b:1f:ba:d3:ab:d1:ab:8a:1a:a8: 60:c7:e5:13:45:9f:05:45:67:ab:38:ae:0a:be:d2: 99:39:51:f4:5e:34:a4:11:f8:7a:2f:72:9b:b1:46: ec:50:6c:f5:2e:0a:15:e4:16:83:fc:8d:1b:4b:09: 9d:d1:9b:db:cd:47:25:00:99:01:9f:20:ad:f4:78: c5:d0:48:9b:63:fc:83:5d:b1:d2:20:4c:61:60:b6: 1b:9e:22:f6:52:59:14:12:7c:02:f8:07:67:64:00: c6:61:7c:cc:da:46:e8:fc:16:03:0c:32:c5:0a:5f: 1b:7a:31:c8:4f:63:cf:0f:b8:ad:93:5a:5a:82:f6: 58:f9:71:b4:cb:db:c6:d1:7e:db:1a:3a:b0:12:50: 85:19:01:8d:19:21:9b:1e:57:b8:c9:da:cb:88:f2: 47:d2:4f:72:b8:ed:f2:da:a6:20:ac:27:e2:07:6e: 2b:d4:89:7f:15:4d:a1:20:f6:b9:b8:d8:f8:3d:6a: bb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:31:E1:49:84:59:AF:3B:8F:03:F0:9F:64:8F:FC:8D:66:12:E5:8D X509v3 Authority Key Identifier: keyid:61:F7:2B:5E:93:E7:93:5D:D7:9E:04:35:C8:18:F8:F9:A7:10:F6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfcrXpPnk13XngQ1yBj4-acQ9ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:c1:b4:96:f4:87:8c:6f:0b:e0:86:9e:4e:46:d9:ce:b2:75: 7a:63:5c:04:45:46:9b:a3:53:66:9f:58:77:f3:2e:ee:20:3f: ef:5d:46:2f:9b:8f:8d:d1:fd:f2:dd:9c:e1:a9:a3:9e:75:b4: 80:86:f7:c7:d1:7d:4c:03:24:33:08:a5:44:ef:ae:c5:a4:cf: 5a:3a:68:1f:88:ad:b8:42:cc:24:7a:ec:12:3a:c7:32:20:b1: f6:b2:c8:e4:59:13:02:6f:16:c0:f3:0c:0a:e4:81:72:04:57: a8:99:4d:81:ee:ef:c9:1f:be:91:f3:40:1b:90:ad:e9:63:3f: e1:22:71:8e:29:6b:2c:67:38:3d:c5:fb:8e:71:a8:17:ea:03: c4:fa:67:8c:74:0d:70:9b:91:6a:6e:8a:a7:cc:77:69:74:05: 63:a2:be:b5:86:58:d3:8e:74:ec:b7:52:8b:7f:2c:a8:4d:80: cd:72:35:b6:6b:4f:e1:20:28:c6:66:12:5b:0c:e3:10:22:be: 00:18:a1:08:ee:1d:2b:e4:f0:ce:ec:14:27:14:8e:0a:60:ef: ed:c7:c1:c0:f5:bb:d6:8c:8d:c8:ae:ec:a9:c0:d3:88:e6:b9: 1f:50:4a:4c:67:3e:df:58:51:76:44:fa:ed:64:eb:83:a5:33: fe:25:06:65 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RkU1NTExMC8GA1UEBRMoNjFGNzJCNUU5M0U3OTM1REQ3OUUwNDM1QzgxOEY4RjlB NzEwRjY4OTAeFw0yNTExMDMwNzE5MjVaFw0yNTExMTAwNzE5MjVaMBgxFjAUBgNV BAMTDTY5MDg1NzdkLTE0YzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvIuY+onpL+AvKqhdOKgTB+aQmqRai1PrG9pEwzk0O+UXF2NIbAob/hV1eU5f8 o9NTEud55JnEzX/z7/EglnSkCx+606vRq4oaqGDH5RNFnwVFZ6s4rgq+0pk5UfRe NKQR+HovcpuxRuxQbPUuChXkFoP8jRtLCZ3Rm9vNRyUAmQGfIK30eMXQSJtj/INd sdIgTGFgthueIvZSWRQSfAL4B2dkAMZhfMzaRuj8FgMMMsUKXxt6MchPY88PuK2T WlqC9lj5cbTL28bRftsaOrASUIUZAY0ZIZseV7jJ2suI8kfST3K47fLapiCsJ+IH bivUiX8VTaEg9rm42Pg9arvrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrzHhSYRZ rzuPA/CfZI/8jWYS5Y0wHwYDVR0jBBgwFoAUYfcrXpPnk13XngQ1yBj4+acQ9okw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGRTU1LzJENDU3ODAwNDcz QjExRjA4MzM2Rjc1Q0M0RjlBRTAyL1lmY3JYcFBuazEzWG5nUTF5Qmo0LWFjUTlv ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWWZjclhwUG5rMTNYbmdRMXlCajQtYWNROW9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNG RTU1LzJENDU3ODAwNDczQjExRjA4MzM2Rjc1Q0M0RjlBRTAyL1lmY3JYcFBuazEz WG5nUTF5Qmo0LWFjUTlvay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABfBtJb0h4xvC+CGnk5G2c6ydXpjXARFRpujU2afWHfzLu4gP+9dRi+b j43R/fLdnOGpo551tICG98fRfUwDJDMIpUTvrsWkz1o6aB+IrbhCzCR67BI6xzIg sfayyORZEwJvFsDzDArkgXIEV6iZTYHu78kfvpHzQBuQreljP+EicY4payxnOD3F +45xqBfqA8T6Z4x0DXCbkWpuiqfMd2l0BWOivrWGWNOOdOy3Uot/LKhNgM1yNbZr T+EgKMZmElsM4xAivgAYoQjuHSvk8M7sFCcUjgpg7+3HwcD1u9aMjciu7KnA04jm uR9QSkxnPt9YUXZE+u1k64OlM/4lBmU= -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:50 2025 by rpki-client