$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft File: yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft (raw, json) Hash identifier: mA12hYbJz8D7ADpz/sG9KDxLeqGRMCdcFCIcnPwUr8g= Subject key identifier: 77:BE:87:41:1A:F0:FD:99:E5:03:1C:D4:18:D1:DC:54:F9:3E:5B:1F Authority key identifier: CA:A9:69:FF:37:74:BC:D9:ED:60:27:73:D2:9D:87:8B:C4:E2:65:6B Certificate issuer: /CN=A916B4B7/serialNumber=CAA969FF3774BCD9ED602773D29D878BC4E2656B Certificate serial: 094B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft Manifest number: 0945 Signing time: Tue 04 Nov 2025 20:15:42 +0000 Manifest this update: Tue 04 Nov 2025 20:15:41 +0000 Manifest next update: Tue 11 Nov 2025 20:15:41 +0000 Files and hashes: 1: yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl (hash: PJsG6d8ZyLCFbEeFh8PeRTOp49xx1w5eoS2gHVy4BA8=) 2: 90798692AA0A11EA89D5161EC4F9AE02.roa (hash: SjfL0z+V8r1mG2yvSd88vw9Fy41PjMV8KGz6ODEkn2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:15:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2379 (0x94b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B4B7, serialNumber=CAA969FF3774BCD9ED602773D29D878BC4E2656B Validity Not Before: Nov 4 20:15:41 2025 GMT Not After : Nov 11 20:15:41 2025 GMT Subject: CN=690a5eee-64b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:db:47:47:45:95:78:e7:51:8a:af:49:84:de: 9e:a3:8a:b3:c8:dd:90:c2:54:34:c7:09:1b:c9:80: 1b:34:49:ed:dc:2b:cf:2b:22:02:33:dc:26:b0:c5: 4a:0c:26:cd:5b:c8:eb:d3:ba:bc:ca:c7:0d:f3:60: de:69:55:b7:6f:b8:b4:50:11:59:55:d4:d6:b1:78: 7b:94:75:3b:74:1c:c6:f9:c3:6e:01:82:61:f8:cf: f3:de:c0:5b:61:d7:1c:4a:9d:50:33:5d:cd:42:ca: 67:7b:ac:1d:31:3f:53:21:90:b2:f5:92:e4:a8:d3: 1a:fe:b7:25:d7:c9:b9:40:d1:fa:f2:50:a4:7b:0c: e7:a7:d6:b7:cf:e1:99:72:4a:b3:27:e1:78:f0:2e: dd:6e:27:0b:03:cc:45:33:2d:8f:fe:1e:e4:4f:33: 86:32:d4:d7:47:82:36:d2:b0:25:21:7c:ec:86:d1: 07:93:0d:55:76:79:a2:4a:2e:79:01:02:f5:6f:d5: 0c:d5:7e:fd:bd:1a:8a:d4:48:da:54:0c:1f:7b:51: 62:64:88:b1:ec:be:83:74:cc:d4:f2:13:31:47:46: 0e:a0:56:a6:e2:2b:69:fd:56:86:ba:46:e0:d4:a7: d7:cd:44:98:aa:fc:39:2e:8a:8b:ef:77:34:2c:9c: 90:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:BE:87:41:1A:F0:FD:99:E5:03:1C:D4:18:D1:DC:54:F9:3E:5B:1F X509v3 Authority Key Identifier: keyid:CA:A9:69:FF:37:74:BC:D9:ED:60:27:73:D2:9D:87:8B:C4:E2:65:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:9a:e1:6f:9b:08:5f:3d:5a:a4:b6:08:12:f9:05:cf:9a:e0: ef:c5:f6:0d:26:23:60:02:df:b5:49:b3:8c:6b:a2:2c:2f:2f: 9a:76:d1:76:1a:fa:ce:52:79:a3:a6:eb:62:5a:67:85:70:54: 71:61:f8:42:04:a4:2d:f4:a0:34:30:70:dc:d4:f2:3b:bb:85: 65:3a:1a:c2:4d:db:60:bb:60:e5:25:65:9b:6a:43:0d:cf:a4: fe:e1:21:75:fb:1a:68:df:21:55:6b:c5:4c:8e:df:51:cb:b2: e5:38:05:7b:83:00:7f:02:fc:5b:1d:30:7a:63:c5:ae:69:5b: 71:fd:48:75:53:59:02:28:a6:ff:44:7d:55:99:79:df:15:bf: 13:e6:23:5e:1a:eb:2e:71:e5:ba:ae:e3:da:19:b7:ae:5d:43: 69:25:10:5e:72:c9:26:8e:a8:6d:8d:da:27:9a:5a:25:c9:69: c3:11:ba:5f:1e:27:15:8b:ac:e0:7f:0f:2b:21:68:ba:96:75: 20:8e:ed:fb:ab:4b:90:66:99:83:95:93:13:52:d0:80:c0:2d: 29:2c:33:27:38:4d:d4:ae:e6:ae:1e:fe:02:55:42:f4:8f:91: b4:7b:94:10:01:7f:46:f6:0b:e6:15:42:39:b1:44:b4:88:4f: 0b:26:12:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI0QjcxMTAvBgNVBAUTKENBQTk2OUZGMzc3NEJDRDlFRDYwMjc3M0QyOUQ4NzhC QzRFMjY1NkIwHhcNMjUxMTA0MjAxNTQxWhcNMjUxMTExMjAxNTQxWjAYMRYwFAYD VQQDEw02OTBhNWVlZS02NGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4dtHR0WVeOdRiq9JhN6eo4qzyN2QwlQ0xwkbyYAbNEnt3CvPKyICM9wmsMVK DCbNW8jr07q8yscN82DeaVW3b7i0UBFZVdTWsXh7lHU7dBzG+cNuAYJh+M/z3sBb YdccSp1QM13NQspne6wdMT9TIZCy9ZLkqNMa/rcl18m5QNH68lCkewznp9a3z+GZ ckqzJ+F48C7dbicLA8xFMy2P/h7kTzOGMtTXR4I20rAlIXzshtEHkw1VdnmiSi55 AQL1b9UM1X79vRqK1EjaVAwfe1FiZIix7L6DdMzU8hMxR0YOoFam4itp/VaGukbg 1KfXzUSYqvw5LoqL73c0LJyQmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHe+h0Ea 8P2Z5QMc1BjR3FT5PlsfMB8GA1UdIwQYMBaAFMqpaf83dLzZ7WAnc9Kdh4vE4mVr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjRCNy8wOTcyQzc0MEFB MDkxMUVBOEZFM0I2MUJDNEY5QUUwMi95cWxwX3pkMHZObnRZQ2R6MHAySGk4VGla V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lxbHBfemQwdk5udFlDZHowcDJIaThUaVpXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjRCNy8wOTcyQzc0MEFBMDkxMUVBOEZFM0I2MUJDNEY5QUUwMi95cWxwX3pkMHZO bnRZQ2R6MHAySGk4VGlaV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0muFvmwhfPVqktggS+QXPmuDvxfYNJiNgAt+1SbOMa6IsLy+adtF2 GvrOUnmjputiWmeFcFRxYfhCBKQt9KA0MHDc1PI7u4VlOhrCTdtgu2DlJWWbakMN z6T+4SF1+xpo3yFVa8VMjt9Ry7LlOAV7gwB/AvxbHTB6Y8WuaVtx/Uh1U1kCKKb/ RH1VmXnfFb8T5iNeGusuceW6ruPaGbeuXUNpJRBecskmjqhtjdonmlolyWnDEbpf HicVi6zgfw8rIWi6lnUgju37q0uQZpmDlZMTUtCAwC0pLDMnOE3UruauHv4CVUL0 j5G0e5QQAX9G9gvmFUI5sUS0iE8LJhLy -----END CERTIFICATE-----Generated at Wed Nov 5 21:12:53 2025 by rpki-client