$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.mft File: yegJAGD4rmNwoBt-HsHW4m5PwBo.mft (raw, json) Hash identifier: BDThSjMJfdGGYHYjm/piE7njQyELyvpmitkQvMseAv4= Subject key identifier: E0:DF:17:55:3B:75:40:C2:07:29:82:DA:DA:E3:55:1F:D1:38:12:6E Authority key identifier: C9:E8:09:00:60:F8:AE:63:70:A0:1B:7E:1E:C1:D6:E2:6E:4F:C0:1A Certificate issuer: /CN=A91A1D4A/serialNumber=C9E8090060F8AE6370A01B7E1EC1D6E26E4FC01A Certificate serial: 01C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yegJAGD4rmNwoBt-HsHW4m5PwBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.mft Manifest number: 01C0 Signing time: Mon 27 Oct 2025 04:45:30 +0000 Manifest this update: Mon 27 Oct 2025 04:45:29 +0000 Manifest next update: Mon 03 Nov 2025 04:45:29 +0000 Files and hashes: 1: yegJAGD4rmNwoBt-HsHW4m5PwBo.crl (hash: enegiVm8dNQNqmcNkwkq2R4nikc/5NY/hu3BG4NnhyU=) 2: 5261CE84068511EE9F71F964C4F9AE02.roa (hash: 7i5mwX4Nmw51+iu1QmxVZVjmeA5dANgMmUQSoCRdNzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.crl rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yegJAGD4rmNwoBt-HsHW4m5PwBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 04:45:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 454 (0x1c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1D4A, serialNumber=C9E8090060F8AE6370A01B7E1EC1D6E26E4FC01A Validity Not Before: Oct 27 04:45:29 2025 GMT Not After : Nov 3 04:45:29 2025 GMT Subject: CN=68fef8ea-85a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:53:b3:85:bd:04:eb:6c:9f:69:f2:dd:ba:11: 36:b0:c9:79:55:71:b8:5c:f9:9f:77:97:6a:6e:74: c5:37:5f:e0:b5:5d:0e:63:44:d6:7e:98:cc:94:9f: cd:68:24:10:0f:1d:51:fa:de:11:b1:c6:04:e8:ef: a4:24:3a:6a:3d:38:d3:76:56:25:0f:70:65:c4:eb: 94:9d:dc:2f:e9:08:6e:a2:40:44:3e:91:29:ef:12: 89:56:b6:79:ea:3d:f4:34:f3:d3:b0:e8:46:23:de: 68:14:99:31:5c:4b:47:37:f4:35:df:4c:75:bd:6f: 4d:82:fc:ba:92:39:67:d6:45:f1:b9:d2:e5:99:23: 30:5e:cd:45:57:94:11:39:e6:cc:78:5c:40:56:15: ac:eb:44:51:05:0f:08:c3:89:47:15:1f:f6:17:34: 04:63:19:f1:69:8a:6d:05:3d:47:1d:99:b8:60:84: 72:80:e7:0e:aa:0d:e3:cd:48:1d:dd:3d:e3:ec:0a: 80:e7:b5:f6:ee:52:af:c5:70:45:4e:bb:32:d2:1c: ab:6d:57:14:62:9b:06:b6:03:3f:eb:c1:17:6b:ce: 22:e3:60:d3:eb:17:6b:02:79:cd:cc:7f:07:ac:ea: 8d:bf:e0:47:36:29:a3:f5:8a:e9:df:b8:09:b2:d7: 9d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:DF:17:55:3B:75:40:C2:07:29:82:DA:DA:E3:55:1F:D1:38:12:6E X509v3 Authority Key Identifier: keyid:C9:E8:09:00:60:F8:AE:63:70:A0:1B:7E:1E:C1:D6:E2:6E:4F:C0:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yegJAGD4rmNwoBt-HsHW4m5PwBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:a7:91:62:47:13:18:ee:40:df:47:b1:9e:e4:32:f3:7a:cd: 6b:87:19:ff:bf:39:8c:d4:77:35:72:69:d7:08:ce:ea:09:a2: 8f:07:ee:ea:59:15:68:87:7e:e9:7d:1c:66:d4:50:86:1c:59: c1:86:6e:69:20:ef:2e:50:b4:d0:62:64:c1:5c:95:dc:8f:e0: 5c:39:c0:c0:b3:94:73:95:c1:71:0e:d6:4b:cb:b8:df:3f:cb: 75:d3:24:48:94:5e:bb:77:a2:06:e0:11:50:13:99:47:92:ad: 6e:8b:15:2c:a9:c7:f3:7d:4c:db:6e:5a:27:58:29:3f:e9:66: 76:cb:c3:c7:e2:49:76:50:f3:6f:7a:03:bb:09:71:9f:ae:96: 3c:e6:ea:34:1e:58:2a:a2:c5:8d:a8:13:9b:cd:bc:50:b4:4a: 31:c1:62:4c:2a:75:aa:b3:b8:d4:e2:5b:2f:27:cb:b7:89:f0: ef:b1:e3:1b:68:f9:ba:b6:32:0f:65:61:98:32:1a:2a:c4:8c: 79:f4:ed:41:d4:06:fb:f4:6b:bb:75:77:8f:83:ca:24:a3:68: 55:0e:3b:fc:2d:ad:1e:6d:67:84:4e:45:62:3c:55:a3:3e:e8: 61:8d:73:9b:f9:3b:78:be:b4:6d:f8:d9:a6:52:49:00:c1:ce: ff:08:ec:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFENEExMTAvBgNVBAUTKEM5RTgwOTAwNjBGOEFFNjM3MEEwMUI3RTFFQzFENkUy NkU0RkMwMUEwHhcNMjUxMDI3MDQ0NTI5WhcNMjUxMTAzMDQ0NTI5WjAYMRYwFAYD VQQDEw02OGZlZjhlYS04NWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtlOzhb0E62yfafLduhE2sMl5VXG4XPmfd5dqbnTFN1/gtV0OY0TWfpjMlJ/N aCQQDx1R+t4RscYE6O+kJDpqPTjTdlYlD3BlxOuUndwv6QhuokBEPpEp7xKJVrZ5 6j30NPPTsOhGI95oFJkxXEtHN/Q130x1vW9Ngvy6kjln1kXxudLlmSMwXs1FV5QR OebMeFxAVhWs60RRBQ8Iw4lHFR/2FzQEYxnxaYptBT1HHZm4YIRygOcOqg3jzUgd 3T3j7AqA57X27lKvxXBFTrsy0hyrbVcUYpsGtgM/68EXa84i42DT6xdrAnnNzH8H rOqNv+BHNimj9Yrp37gJstedBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFODfF1U7 dUDCBymC2trjVR/ROBJuMB8GA1UdIwQYMBaAFMnoCQBg+K5jcKAbfh7B1uJuT8Aa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUQ0QS84MTk2OThGQzA1 RDUxMUVFOTNGOTFDMTVDNEY5QUUwMi95ZWdKQUdENHJtTndvQnQtSHNIVzRtNVB3 Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3llZ0pBR0Q0cm1Od29CdC1Ic0hXNG01UHdCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUQ0QS84MTk2OThGQzA1RDUxMUVFOTNGOTFDMTVDNEY5QUUwMi95ZWdKQUdENHJt TndvQnQtSHNIVzRtNVB3Qm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLp5FiRxMY7kDfR7Ge5DLzes1rhxn/vzmM1Hc1cmnXCM7qCaKPB+7q WRVoh37pfRxm1FCGHFnBhm5pIO8uULTQYmTBXJXcj+BcOcDAs5RzlcFxDtZLy7jf P8t10yRIlF67d6IG4BFQE5lHkq1uixUsqcfzfUzbblonWCk/6WZ2y8PH4kl2UPNv egO7CXGfrpY85uo0HlgqosWNqBObzbxQtEoxwWJMKnWqs7jU4lsvJ8u3ifDvseMb aPm6tjIPZWGYMhoqxIx59O1B1Ab79Gu7dXePg8oko2hVDjv8La0ebWeETkViPFWj PuhhjXOb+Tt4vrRt+NmmUkkAwc7/COzq -----END CERTIFICATE-----Generated at Tue Oct 28 13:39:56 2025 by rpki-client