$ rpki-client -vvf rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft File: YJezTWdAEygGKfiFypA_1pq5W-M.mft (raw, json) Hash identifier: vbUyW06AlgWhKvqZ8zYv4l/lt28QjuDQQVKGe+7se5o= Subject key identifier: 1A:3C:AE:D4:BA:AF:01:E2:A7:9E:75:14:5D:74:27:94:37:4F:F3:AD Authority key identifier: 60:97:B3:4D:67:40:13:28:06:29:F8:85:CA:90:3F:D6:9A:B9:5B:E3 Certificate issuer: /CN=A915E742/serialNumber=6097B34D674013280629F885CA903FD69AB95BE3 Certificate serial: 34FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJezTWdAEygGKfiFypA_1pq5W-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft Manifest number: 34E9 Signing time: Tue 04 Nov 2025 14:26:43 +0000 Manifest this update: Tue 04 Nov 2025 14:26:42 +0000 Manifest next update: Tue 11 Nov 2025 14:26:42 +0000 Files and hashes: 1: YJezTWdAEygGKfiFypA_1pq5W-M.crl (hash: HzMftj3l0CRnj+kSPQJMzrmzOTZz9vtcgxJzFnx2ink=) 2: 41DE51D0DF3E11EEBE02E04AC4F9AE02.roa (hash: c58CEgh4CjRukGrqeNGEEV6pW1Olrp6Yxcjw73N7YrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.crl rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJezTWdAEygGKfiFypA_1pq5W-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:26:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13565 (0x34fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E742, serialNumber=6097B34D674013280629F885CA903FD69AB95BE3 Validity Not Before: Nov 4 14:26:42 2025 GMT Not After : Nov 11 14:26:42 2025 GMT Subject: CN=690a0d23-8b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:80:e1:90:49:cd:1f:de:aa:31:5b:34:34:f0: 49:6d:65:87:11:2b:bf:ed:67:ba:aa:49:11:e4:a1: 24:1a:8b:d4:43:18:c1:e6:1b:be:09:29:eb:16:6e: 91:da:67:7a:b6:44:f1:d1:58:2a:89:1b:f6:a9:93: c8:dd:6f:0d:d2:ae:59:20:51:ef:8c:ea:a6:5d:d0: 01:81:b9:04:9a:af:2d:53:b1:60:3e:b1:e0:48:4f: b6:80:b0:39:89:83:1f:ef:cf:15:45:99:f9:9d:10: eb:70:cd:da:fa:d4:6b:82:95:6a:37:82:17:6c:53: 01:55:e1:d4:b2:46:7b:7d:f8:3f:83:1e:65:13:a7: 38:1e:8a:a9:89:f8:0a:37:f5:24:7d:b6:9f:d0:f6: 17:13:77:00:47:54:59:36:67:27:b5:0e:90:70:3b: 02:a9:a9:4b:d5:82:aa:a1:6a:3f:08:93:5e:ff:4c: 0b:d5:1a:bf:d1:37:09:14:b1:ee:37:fc:48:16:1f: 3e:67:fd:e1:5e:af:60:69:30:54:23:c7:39:56:d3: f1:50:8d:15:12:95:31:01:98:c1:d1:fd:27:d1:63: be:46:96:fe:ca:7b:60:5b:6e:98:72:ff:8f:11:af: 8f:a9:1d:a0:13:f7:99:d6:19:f5:b1:da:13:a7:d5: 53:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:3C:AE:D4:BA:AF:01:E2:A7:9E:75:14:5D:74:27:94:37:4F:F3:AD X509v3 Authority Key Identifier: keyid:60:97:B3:4D:67:40:13:28:06:29:F8:85:CA:90:3F:D6:9A:B9:5B:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJezTWdAEygGKfiFypA_1pq5W-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:24:0d:3a:a5:9e:ca:e8:ce:dd:88:8c:78:91:57:8f:19:47: 4d:4b:82:0c:b3:44:56:64:72:82:7c:7e:b7:a7:2c:4c:5b:ae: fd:e9:6c:06:73:a3:5c:b3:4d:44:cc:05:20:b0:bc:a4:fe:57: 0e:8b:1c:49:05:50:15:e4:f8:79:34:23:be:d6:c3:f2:42:c9: 75:37:57:ed:b0:26:78:44:96:30:26:02:11:e4:13:1f:2d:f5: 94:53:60:8d:7b:32:1d:00:96:85:c2:e3:bd:f0:aa:7c:c8:21: a5:0d:4d:29:c0:c9:3b:41:ee:8d:47:1c:da:1a:e5:6f:c9:34: ca:7e:f7:03:da:cc:1c:9a:2b:6c:8b:00:da:30:fa:d7:a8:d8: 0f:45:b9:c0:36:e2:a3:45:cd:30:bc:be:fd:dc:38:26:da:49: d4:b1:3a:60:f8:a2:14:86:fa:ee:2b:61:d0:63:53:6d:73:ba: b9:fc:f4:63:8f:5a:2f:f9:b8:53:42:55:d5:35:9c:56:52:cc: d2:97:a1:c3:4f:5f:2f:35:3a:98:6d:79:bc:52:59:d3:82:c5: fb:ee:cd:6b:d3:e0:5e:48:93:83:7e:7c:95:0e:0e:b8:ca:4c: 88:b0:59:dc:34:b1:cf:12:a0:32:b2:9d:3a:6e:08:86:cd:cb: 84:1a:c4:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU3NDIxMTAvBgNVBAUTKDYwOTdCMzRENjc0MDEzMjgwNjI5Rjg4NUNBOTAzRkQ2 OUFCOTVCRTMwHhcNMjUxMTA0MTQyNjQyWhcNMjUxMTExMTQyNjQyWjAYMRYwFAYD VQQDEw02OTBhMGQyMy04YjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0IDhkEnNH96qMVs0NPBJbWWHESu/7We6qkkR5KEkGovUQxjB5hu+CSnrFm6R 2md6tkTx0VgqiRv2qZPI3W8N0q5ZIFHvjOqmXdABgbkEmq8tU7FgPrHgSE+2gLA5 iYMf788VRZn5nRDrcM3a+tRrgpVqN4IXbFMBVeHUskZ7ffg/gx5lE6c4HoqpifgK N/Ukfbaf0PYXE3cAR1RZNmcntQ6QcDsCqalL1YKqoWo/CJNe/0wL1Rq/0TcJFLHu N/xIFh8+Z/3hXq9gaTBUI8c5VtPxUI0VEpUxAZjB0f0n0WO+Rpb+yntgW26Ycv+P Ea+PqR2gE/eZ1hn1sdoTp9VTnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBo8rtS6 rwHip551FF10J5Q3T/OtMB8GA1UdIwQYMBaAFGCXs01nQBMoBin4hcqQP9aauVvj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTc0Mi8yRUQwRjVGQzFE ODUxMUUyQjAzMkE5REIwOEIwMkNEMi9ZSmV6VFdkQUV5Z0dLZmlGeXBBXzFwcTVX LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lKZXpUV2RBRXlnR0tmaUZ5cEFfMXBxNVctTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTc0Mi8yRUQwRjVGQzFEODUxMUUyQjAzMkE5REIwOEIwMkNEMi9ZSmV6VFdkQUV5 Z0dLZmlGeXBBXzFwcTVXLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbJA06pZ7K6M7diIx4kVePGUdNS4IMs0RWZHKCfH63pyxMW6796WwG c6Ncs01EzAUgsLyk/lcOixxJBVAV5Ph5NCO+1sPyQsl1N1ftsCZ4RJYwJgIR5BMf LfWUU2CNezIdAJaFwuO98Kp8yCGlDU0pwMk7Qe6NRxzaGuVvyTTKfvcD2swcmits iwDaMPrXqNgPRbnANuKjRc0wvL793Dgm2knUsTpg+KIUhvruK2HQY1Ntc7q5/PRj j1ov+bhTQlXVNZxWUszSl6HDT18vNTqYbXm8UlnTgsX77s1r0+BeSJODfnyVDg64 ykyIsFncNLHPEqAysp06bgiGzcuEGsSY -----END CERTIFICATE-----Generated at Wed Nov 5 13:29:39 2025 by rpki-client