$ rpki-client -vvf rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft File: Yja2yVcFRCapTOamlDI45v5tH1Y.mft (raw, json) Hash identifier: i7nrz3SIgHdu7gPHqJOmjgw9NxsrjD8x2VG7BwSOh7o= Subject key identifier: BB:5F:5F:C6:15:04:96:B4:1B:48:B4:70:ED:7D:2D:21:D0:81:58:75 Authority key identifier: 62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56 Certificate issuer: /CN=A915D655/serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56 Certificate serial: 0422 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft Manifest number: 041D Signing time: Mon 03 Nov 2025 00:19:36 +0000 Manifest this update: Mon 03 Nov 2025 00:19:35 +0000 Manifest next update: Mon 10 Nov 2025 00:19:35 +0000 Files and hashes: 1: Yja2yVcFRCapTOamlDI45v5tH1Y.crl (hash: YECmPoUwWTyqLUU8kpbg+7q3YgjxFXf/W1HfDULriLY=) 2: 8B626F5487C911EC908CE327C4F9AE02.roa (hash: 4ePFqqTPP+4ZfS7bacR18941px2N5kQ0emROx+NaWmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1058 (0x422) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D655, serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56 Validity Not Before: Nov 3 00:19:35 2025 GMT Not After : Nov 10 00:19:35 2025 GMT Subject: CN=6907f518-d976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b7:88:99:0c:67:8c:5a:cb:c2:4d:87:3d:1e: aa:60:24:cb:d1:b2:cb:56:96:71:6b:f1:c4:5d:74: 30:a1:23:16:c0:32:96:52:0f:3c:7a:06:3c:9a:ef: 68:12:9b:de:03:33:71:79:98:87:09:c1:88:62:26: 7b:3f:ba:1f:2c:3f:4f:27:9b:eb:91:3c:7b:db:f5: d8:c3:f5:19:36:9f:f3:cb:40:93:0b:81:76:c7:17: 5f:f0:08:4d:5a:b5:ed:92:0c:2a:33:97:37:51:7d: f6:74:af:77:fc:42:2b:be:46:fb:b5:9b:11:35:06: d1:a1:7b:fe:da:f1:75:7c:93:b9:0c:b8:5e:2a:14: 94:86:36:78:44:ab:a3:97:c0:d2:9b:a2:f2:3c:2f: e7:af:f2:32:a7:73:fb:a3:97:2c:fa:19:d3:b0:a3: 99:36:50:a0:c4:b4:8e:3f:0c:25:92:af:3c:39:df: 50:ff:e8:34:1d:1c:d8:84:4d:b7:f7:fb:b3:71:77: 37:1a:33:ff:9d:d5:86:b9:0a:1e:a2:0e:e0:5b:ed: 2c:dc:de:a9:b4:0c:0b:f1:cb:f7:33:cb:9e:40:4a: d5:a5:74:8d:2d:93:8f:45:a8:8f:21:77:6b:d7:de: ec:8c:84:88:4e:db:b9:fd:47:eb:7d:85:12:5d:39: 1a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:5F:5F:C6:15:04:96:B4:1B:48:B4:70:ED:7D:2D:21:D0:81:58:75 X509v3 Authority Key Identifier: keyid:62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:77:a2:e1:19:42:7e:42:18:6e:9a:e9:46:81:46:93:c5:5a: 1f:b7:8a:18:2d:a9:29:38:9c:32:af:c6:6b:49:d7:29:f8:b1: 8b:dd:fc:7d:3a:02:ac:75:50:1d:9e:61:71:a6:41:e8:ce:0d: f7:c1:40:de:b8:9b:f5:64:fd:7b:0b:42:e6:69:c2:9e:97:28: 81:d4:5c:50:af:2f:66:2d:e5:22:2a:75:e9:da:f0:2d:c1:23: 67:cd:7e:a8:74:d5:69:4e:52:50:b7:76:46:be:1b:c8:b7:ca: 87:86:2a:35:e4:af:69:97:9a:9f:e0:df:35:71:a2:5e:fd:60: bf:78:2f:e3:40:e0:95:59:1b:a7:36:d4:ce:f0:3d:46:53:11: 88:41:e8:04:99:cc:8d:d3:55:38:fb:20:e7:30:1e:6c:21:f6: 77:90:c5:e9:76:97:a5:08:94:a9:a2:ea:21:9f:a9:0e:5b:ff: 36:15:98:16:67:3c:f6:fc:80:4c:65:b2:c0:cd:54:66:03:83: 71:05:76:ad:84:10:af:f0:2b:cb:3d:3b:3a:6b:f9:e8:8d:7f: 76:7a:14:b2:e5:a7:06:fe:aa:a7:6e:ab:88:16:62:72:04:d0: 2b:1d:0a:47:02:6a:1e:eb:3b:63:f5:2e:41:19:dc:3e:6d:a0: 28:74:8f:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2NTUxMTAvBgNVBAUTKDYyMzZCNkM5NTcwNTQ0MjZBOTRDRTZBNjk0MzIzOEU2 RkU2RDFGNTYwHhcNMjUxMTAzMDAxOTM1WhcNMjUxMTEwMDAxOTM1WjAYMRYwFAYD VQQDEw02OTA3ZjUxOC1kOTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnreImQxnjFrLwk2HPR6qYCTL0bLLVpZxa/HEXXQwoSMWwDKWUg88egY8mu9o EpveAzNxeZiHCcGIYiZ7P7ofLD9PJ5vrkTx72/XYw/UZNp/zy0CTC4F2xxdf8AhN WrXtkgwqM5c3UX32dK93/EIrvkb7tZsRNQbRoXv+2vF1fJO5DLheKhSUhjZ4RKuj l8DSm6LyPC/nr/Iyp3P7o5cs+hnTsKOZNlCgxLSOPwwlkq88Od9Q/+g0HRzYhE23 9/uzcXc3GjP/ndWGuQoeog7gW+0s3N6ptAwL8cv3M8ueQErVpXSNLZOPRaiPIXdr 197sjISITtu5/UfrfYUSXTkaawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLtfX8YV BJa0G0i0cO19LSHQgVh1MB8GA1UdIwQYMBaAFGI2tslXBUQmqUzmppQyOOb+bR9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDY1NS9FN0JBQTBCRTg3 QzQxMUVDOTY5MjgxMUNDNEY5QUUwMi9ZamEyeVZjRlJDYXBUT2FtbERJNDV2NXRI MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lqYTJ5VmNGUkNhcFRPYW1sREk0NXY1dEgxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDY1NS9FN0JBQTBCRTg3QzQxMUVDOTY5MjgxMUNDNEY5QUUwMi9ZamEyeVZjRlJD YXBUT2FtbERJNDV2NXRIMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdd6LhGUJ+QhhumulGgUaTxVoft4oYLakpOJwyr8ZrSdcp+LGL3fx9 OgKsdVAdnmFxpkHozg33wUDeuJv1ZP17C0LmacKelyiB1FxQry9mLeUiKnXp2vAt wSNnzX6odNVpTlJQt3ZGvhvIt8qHhio15K9pl5qf4N81caJe/WC/eC/jQOCVWRun NtTO8D1GUxGIQegEmcyN01U4+yDnMB5sIfZ3kMXpdpelCJSpouohn6kOW/82FZgW Zzz2/IBMZbLAzVRmA4NxBXathBCv8CvLPTs6a/nojX92ehSy5acG/qqnbquIFmJy BNArHQpHAmoe6ztj9S5BGdw+baAodI+v -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:12 2025 by rpki-client