$ rpki-client -vvf rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.mft File: YGtPQu6X90iOwgtj2LGq9tQtnKc.mft (raw, json) Hash identifier: cZjhJ95a0/IkX72HUgIAesjuSs5kJdtSesPp28NHPRY= Subject key identifier: 02:A0:8C:A0:77:FD:70:88:70:9A:64:42:6D:C7:58:B3:D5:7A:B7:0A Authority key identifier: 60:6B:4F:42:EE:97:F7:48:8E:C2:0B:63:D8:B1:AA:F6:D4:2D:9C:A7 Certificate issuer: /CN=A91523FF/serialNumber=606B4F42EE97F7488EC20B63D8B1AAF6D42D9CA7 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGtPQu6X90iOwgtj2LGq9tQtnKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.mft Manifest number: 1F Signing time: Sat 01 Nov 2025 08:08:01 +0000 Manifest this update: Sat 01 Nov 2025 08:08:01 +0000 Manifest next update: Sat 08 Nov 2025 08:08:01 +0000 Files and hashes: 1: YGtPQu6X90iOwgtj2LGq9tQtnKc.crl (hash: 0iFTItM3da+2SuYjWC+R/VwC+cm7o0wAJrVv5e96zlQ=) 2: 720ED6F487CB11F0B605C67DC4F9AE02.roa (hash: Rjr6eKNeN1KpnMLB6OZbv1JZX2fU2WirfbjPXhZ6QK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.crl rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGtPQu6X90iOwgtj2LGq9tQtnKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 08:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91523FF, serialNumber=606B4F42EE97F7488EC20B63D8B1AAF6D42D9CA7 Validity Not Before: Nov 1 08:08:01 2025 GMT Not After : Nov 8 08:08:01 2025 GMT Subject: CN=6905bfe1-2d9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:64:01:c2:ca:e8:28:70:36:08:a0:3b:9b:f2: 53:1f:48:1f:ae:fc:56:f8:0c:6a:88:9c:08:a2:21: b3:38:26:65:87:78:61:02:24:4c:25:ff:5b:17:ae: 58:c3:f1:80:40:d1:23:ea:71:9a:c8:c6:a0:eb:cc: 5a:6e:3d:07:db:77:6c:5a:3e:92:7d:51:a4:c0:af: 03:4b:a0:f6:15:3a:e6:83:15:80:43:a6:2c:07:aa: ab:d7:a3:a0:29:31:8d:52:c0:69:a4:9c:b1:04:84: 23:52:90:09:b1:08:b2:32:e1:8c:9c:38:44:b0:18: 10:fc:32:99:c2:92:cb:9a:fb:25:7e:a8:06:1f:00: d4:f4:16:30:76:86:50:5b:c9:68:7e:67:5e:77:71: fb:5c:c0:0a:a0:f0:dc:4a:e0:cd:24:f3:63:70:d1: e1:4e:24:be:1e:ef:95:2f:28:fd:98:fa:e7:e3:1a: c3:85:2f:9e:31:11:68:5d:fc:d5:33:ae:49:47:d7: 15:a8:e9:fa:a2:ea:d8:56:ea:0b:7c:6d:76:58:8f: 71:f3:ff:b6:28:3d:f0:0a:53:84:81:92:23:95:81: 06:ef:9e:d2:e2:e0:47:9a:f6:e4:4a:ee:74:0a:cb: 2b:4b:1a:3e:d2:15:93:c6:f8:16:56:a1:69:0c:05: 08:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A0:8C:A0:77:FD:70:88:70:9A:64:42:6D:C7:58:B3:D5:7A:B7:0A X509v3 Authority Key Identifier: keyid:60:6B:4F:42:EE:97:F7:48:8E:C2:0B:63:D8:B1:AA:F6:D4:2D:9C:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGtPQu6X90iOwgtj2LGq9tQtnKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:7c:46:96:dd:aa:f1:dc:86:8e:e7:47:91:e3:0f:2e:67:9b: 64:88:b0:4f:44:da:c0:a8:24:17:f8:05:27:4a:16:48:61:66: f0:61:38:25:65:94:d4:92:f6:fe:72:46:83:cc:57:28:3d:38: dc:db:94:78:4b:35:09:0e:07:8f:44:00:c6:d7:1f:38:c9:49: bf:78:5b:7a:2b:1d:b2:a9:da:c2:44:ad:3b:39:16:c4:f4:29: df:dd:2f:9d:e5:09:57:25:29:46:fa:81:f9:0e:23:22:bb:ec: b9:35:ab:60:9e:52:44:b3:1f:54:b8:b3:e9:b8:1c:f8:d9:7d: 88:43:b2:de:a7:fa:9d:a3:60:aa:14:5e:47:fc:7a:7a:27:d3: 9d:c5:25:3c:c3:92:ad:b9:fc:d1:94:5d:74:8b:ac:ec:aa:84: 3a:99:74:bd:f4:7f:d6:35:d3:ba:b5:04:32:d1:8a:d6:42:6d: 08:3a:b7:f5:f8:9f:97:5d:25:69:c4:51:44:c2:72:6b:20:86: 71:2f:8c:4e:5a:4d:39:47:a9:ae:29:cf:0e:10:27:05:83:06: 6d:49:64:ff:fe:ad:e4:5f:7c:4a:2c:42:35:a4:a6:16:1d:99: 89:4e:7c:91:bb:4a:9e:82:c9:8d:ca:ef:fa:50:85:d0:14:17: b3:7a:15:7b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MjNGRjExMC8GA1UEBRMoNjA2QjRGNDJFRTk3Rjc0ODhFQzIwQjYzRDhCMUFBRjZE NDJEOUNBNzAeFw0yNTExMDEwODA4MDFaFw0yNTExMDgwODA4MDFaMBgxFjAUBgNV BAMTDTY5MDViZmUxLTJkOWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxZAHCyugocDYIoDub8lMfSB+u/Fb4DGqInAiiIbM4JmWHeGECJEwl/1sXrljD 8YBA0SPqcZrIxqDrzFpuPQfbd2xaPpJ9UaTArwNLoPYVOuaDFYBDpiwHqqvXo6Ap MY1SwGmknLEEhCNSkAmxCLIy4YycOESwGBD8MpnCksua+yV+qAYfANT0FjB2hlBb yWh+Z153cftcwAqg8NxK4M0k82Nw0eFOJL4e75UvKP2Y+ufjGsOFL54xEWhd/NUz rklH1xWo6fqi6thW6gt8bXZYj3Hz/7YoPfAKU4SBkiOVgQbvntLi4Eea9uRK7nQK yytLGj7SFZPG+BZWoWkMBQh5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAqCMoHf9 cIhwmmRCbcdYs9V6twowHwYDVR0jBBgwFoAUYGtPQu6X90iOwgtj2LGq9tQtnKcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyM0ZGLzIwMEMzNzdBODdD QjExRjA4MDJCMjI3REM0RjlBRTAyL1lHdFBRdTZYOTBpT3dndGoyTEdxOXRRdG5L Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWUd0UFF1Nlg5MGlPd2d0ajJMR3E5dFF0bktjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUy M0ZGLzIwMEMzNzdBODdDQjExRjA4MDJCMjI3REM0RjlBRTAyL1lHdFBRdTZYOTBp T3dndGoyTEdxOXRRdG5LYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFB8RpbdqvHcho7nR5HjDy5nm2SIsE9E2sCoJBf4BSdKFkhhZvBhOCVl lNSS9v5yRoPMVyg9ONzblHhLNQkOB49EAMbXHzjJSb94W3orHbKp2sJErTs5FsT0 Kd/dL53lCVclKUb6gfkOIyK77Lk1q2CeUkSzH1S4s+m4HPjZfYhDst6n+p2jYKoU Xkf8enon053FJTzDkq25/NGUXXSLrOyqhDqZdL30f9Y107q1BDLRitZCbQg6t/X4 n5ddJWnEUUTCcmsghnEvjE5aTTlHqa4pzw4QJwWDBm1JZP/+reRffEosQjWkphYd mYlOfJG7Sp6CyY3K7/pQhdAUF7N6FXs= -----END CERTIFICATE-----Generated at Sun Nov 2 23:51:47 2025 by rpki-client