$ rpki-client -vvf rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft File: YeQBev9HdnE8_cggXML7IXhGK6E.mft (raw, json) Hash identifier: KnUrHZE3lZefVr67yz3lhHsyH7CQGK9pyFsOU4Fq/WY= Subject key identifier: F3:28:06:81:23:FD:DC:27:C7:86:CD:BA:51:D2:5B:74:6C:90:EF:4F Authority key identifier: 61:E4:01:7A:FF:47:76:71:3C:FD:C8:20:5C:C2:FB:21:78:46:2B:A1 Certificate issuer: /CN=A919A824/serialNumber=61E4017AFF4776713CFDC8205CC2FB2178462BA1 Certificate serial: 0A8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft Manifest number: 0A7D Signing time: Sun 02 Nov 2025 19:34:53 +0000 Manifest this update: Sun 02 Nov 2025 19:34:52 +0000 Manifest next update: Sun 09 Nov 2025 19:34:52 +0000 Files and hashes: 1: YeQBev9HdnE8_cggXML7IXhGK6E.crl (hash: IcvfWJkKO3iUskfiAwUhVl6w/h8MXVCZxrzNdTs3uMA=) 2: 1B2FD0247B3511F0AB5E9728C4F9AE02.roa (hash: BSU1YtaPy+k/TzpvEr7vkS6sqBC2QgKnaMQMqvgHJ20=) 3: E3DD6362787A11ED89732760C4F9AE02.roa (hash: VMcYRd+8siR3JswMEyznU2Fdgu69nUJbPEZeRjRvvQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.crl rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:34:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2699 (0xa8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A824, serialNumber=61E4017AFF4776713CFDC8205CC2FB2178462BA1 Validity Not Before: Nov 2 19:34:52 2025 GMT Not After : Nov 9 19:34:52 2025 GMT Subject: CN=6907b25d-ae17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:46:c7:c8:6d:bc:d3:bd:4c:fe:c5:9e:b2:fd: 6d:6e:58:b4:5d:e5:f6:bd:69:a9:9d:7c:8f:05:d6: f4:51:c2:25:45:99:ed:2d:36:ae:9a:34:aa:b3:bd: 9e:fd:78:f5:02:d5:74:c2:8b:07:fe:72:81:47:b3: 11:62:1c:12:a6:ce:59:57:98:88:a6:8c:86:c9:c8: 76:bb:e7:c3:3b:aa:00:34:38:c9:ea:cd:f7:f2:c1: 61:98:9c:6f:12:c6:c9:f9:94:00:db:37:af:e1:14: 33:ed:a7:c0:2f:bb:31:22:84:d2:c8:87:74:c9:72: 5b:16:f9:bc:09:96:c7:80:b4:77:5e:bb:ae:d8:f7: ed:af:10:d0:82:92:b0:74:1d:83:6c:08:fb:7b:c0: df:a4:32:92:43:5d:22:6c:a1:e9:5c:45:d0:14:59: 03:39:c7:6b:9a:44:c7:9a:e1:4e:6c:c7:3a:e4:a5: 6f:61:c5:c3:00:3f:d1:b4:8d:5d:a1:4f:d3:25:7e: 98:46:3c:7c:7a:7b:c5:a0:dc:3d:b5:90:a6:12:8d: 76:70:2a:77:5c:12:c3:22:38:04:d1:ba:ec:62:41: 1d:7a:fd:07:fb:4c:fb:8c:ec:a4:ea:67:27:82:52: 0f:2d:70:44:f4:58:2f:f7:5a:b0:13:85:bc:a9:4c: 99:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:28:06:81:23:FD:DC:27:C7:86:CD:BA:51:D2:5B:74:6C:90:EF:4F X509v3 Authority Key Identifier: keyid:61:E4:01:7A:FF:47:76:71:3C:FD:C8:20:5C:C2:FB:21:78:46:2B:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:38:01:51:45:ce:a9:9e:67:c0:77:77:a6:d1:0a:c5:65:c8: 82:8b:cf:18:bd:42:53:33:80:4c:a5:3d:d3:b8:3b:43:62:89: 4f:b5:1b:16:33:92:03:19:97:74:1b:8f:61:f2:13:85:7b:9f: c4:3b:f7:6f:d9:66:28:89:80:44:c9:1a:4d:28:7c:53:fd:1d: fd:76:f2:5f:31:0c:18:a0:f2:2a:73:74:75:81:65:c5:a6:8b: 38:05:18:16:0f:22:43:62:69:9c:7a:cb:99:70:f6:80:14:c1: 29:82:4d:d1:75:86:51:a6:24:cc:f9:43:4d:c4:cc:7b:e0:31: 5f:a3:06:2c:99:40:48:30:20:92:36:e1:73:ab:1d:71:1c:dc: bb:71:e8:a4:13:ad:74:fd:2b:5e:6c:0e:99:4b:80:69:dd:76: 50:0c:43:3f:16:d3:ce:74:b3:49:fd:5d:34:0d:36:6b:dc:e4: 1f:6d:21:30:a9:33:61:21:da:2a:9d:ab:a8:6c:6b:87:71:50: f5:af:5b:7b:72:56:0d:07:dc:bb:df:68:b5:9c:3c:a3:c9:60: c7:af:fd:f7:f6:26:95:34:77:79:0e:a9:7d:ce:d1:3e:fe:46: ec:23:ec:22:96:ed:7a:28:26:11:07:89:f8:8d:1b:7a:2f:f5: 8a:c7:16:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE4MjQxMTAvBgNVBAUTKDYxRTQwMTdBRkY0Nzc2NzEzQ0ZEQzgyMDVDQzJGQjIx Nzg0NjJCQTEwHhcNMjUxMTAyMTkzNDUyWhcNMjUxMTA5MTkzNDUyWjAYMRYwFAYD VQQDEw02OTA3YjI1ZC1hZTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUbHyG28071M/sWesv1tbli0XeX2vWmpnXyPBdb0UcIlRZntLTaumjSqs72e /Xj1AtV0wosH/nKBR7MRYhwSps5ZV5iIpoyGych2u+fDO6oANDjJ6s338sFhmJxv EsbJ+ZQA2zev4RQz7afAL7sxIoTSyId0yXJbFvm8CZbHgLR3Xruu2PftrxDQgpKw dB2DbAj7e8DfpDKSQ10ibKHpXEXQFFkDOcdrmkTHmuFObMc65KVvYcXDAD/RtI1d oU/TJX6YRjx8envFoNw9tZCmEo12cCp3XBLDIjgE0brsYkEdev0H+0z7jOyk6mcn glIPLXBE9Fgv91qwE4W8qUyZwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMoBoEj /dwnx4bNulHSW3RskO9PMB8GA1UdIwQYMBaAFGHkAXr/R3ZxPP3IIFzC+yF4Riuh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTgyNC84QkZGM0JCNDZF N0YxMUVBOTVFRjE4NjFDNEY5QUUwMi9ZZVFCZXY5SGRuRThfY2dnWE1MN0lYaEdL NkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1llUUJldjlIZG5FOF9jZ2dYTUw3SVhoR0s2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTgyNC84QkZGM0JCNDZFN0YxMUVBOTVFRjE4NjFDNEY5QUUwMi9ZZVFCZXY5SGRu RThfY2dnWE1MN0lYaEdLNkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyOAFRRc6pnmfAd3em0QrFZciCi88YvUJTM4BMpT3TuDtDYolPtRsW M5IDGZd0G49h8hOFe5/EO/dv2WYoiYBEyRpNKHxT/R39dvJfMQwYoPIqc3R1gWXF pos4BRgWDyJDYmmcesuZcPaAFMEpgk3RdYZRpiTM+UNNxMx74DFfowYsmUBIMCCS NuFzqx1xHNy7ceikE610/StebA6ZS4Bp3XZQDEM/FtPOdLNJ/V00DTZr3OQfbSEw qTNhIdoqnauobGuHcVD1r1t7clYNB9y732i1nDyjyWDHr/339iaVNHd5Dql9ztE+ /kbsI+wilu16KCYRB4n4jRt6L/WKxxbu -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:12 2025 by rpki-client