$ rpki-client -vvf rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft File: yZNZQ2ka0elTZudBwTkwH7f35ts.mft (raw, json) Hash identifier: 0Dh+4i8dp0V4xC6Eh6AZNIwwJ9+/A0Ahei7gHO8wZgI= Subject key identifier: 2E:1C:B4:F1:0C:C1:D0:A8:61:09:46:CB:52:CD:64:E1:B9:43:5D:C0 Authority key identifier: C9:93:59:43:69:1A:D1:E9:53:66:E7:41:C1:39:30:1F:B7:F7:E6:DB Certificate issuer: /CN=A91A531A/serialNumber=C9935943691AD1E95366E741C139301FB7F7E6DB Certificate serial: 07AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft Manifest number: 07A8 Signing time: Tue 04 Nov 2025 21:29:08 +0000 Manifest this update: Tue 04 Nov 2025 21:29:07 +0000 Manifest next update: Tue 11 Nov 2025 21:29:07 +0000 Files and hashes: 1: yZNZQ2ka0elTZudBwTkwH7f35ts.crl (hash: hN91Kk4GsvQ9PopbjQUcO3ZPIxVc5mElXCARgCf+Q3s=) 2: 43C467CA219911EB8F75645EC4F9AE02.roa (hash: 6tZzkzjjo4oBxSeK/R1NOhuzbe0x0nCnZv7oHnkeXMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.crl rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1966 (0x7ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A531A, serialNumber=C9935943691AD1E95366E741C139301FB7F7E6DB Validity Not Before: Nov 4 21:29:07 2025 GMT Not After : Nov 11 21:29:07 2025 GMT Subject: CN=690a7024-19c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:73:d7:5f:9a:0c:41:b3:d9:ff:5f:5a:2f:28: 7a:71:1d:5d:4d:29:d3:01:7c:3a:cb:d5:ba:9d:f0: 9e:ed:be:81:de:73:d5:4a:32:eb:c1:71:b0:75:eb: f5:45:b4:d1:6d:8e:27:85:0c:a5:ca:d6:6a:cb:49: 2e:2f:30:3b:14:23:fb:0a:a4:ff:eb:85:83:48:07: a6:f5:0e:9a:6a:74:1c:85:0e:8e:61:75:5f:c9:ce: 94:0d:86:88:0c:6f:b6:b2:ff:88:64:d6:73:46:02: ca:ea:4f:f9:cc:07:f2:e5:f7:83:56:d4:3f:31:11: 81:fb:e9:ee:46:6f:93:37:36:67:4c:22:bf:ed:be: 8d:7f:e8:0f:0f:c3:a9:db:2d:01:69:d3:a3:7b:68: d6:ae:25:33:be:52:b7:0a:ef:5b:31:c1:4a:7f:ec: f7:9f:50:72:1f:d3:e4:dc:ec:88:0d:03:67:00:2a: cf:8e:a8:af:b5:cb:fe:8b:d3:f0:95:78:5d:89:83: 7a:ea:3c:54:6c:96:c5:3a:3e:2d:20:fb:59:14:25: 99:de:f3:30:3f:f3:02:5d:4f:fa:f9:59:5f:6b:53: 75:c1:08:2a:e7:62:6a:ed:7d:6a:f9:b4:51:34:be: b7:5e:61:41:0f:16:6f:ca:44:7a:2b:8e:e6:12:41: 25:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:1C:B4:F1:0C:C1:D0:A8:61:09:46:CB:52:CD:64:E1:B9:43:5D:C0 X509v3 Authority Key Identifier: keyid:C9:93:59:43:69:1A:D1:E9:53:66:E7:41:C1:39:30:1F:B7:F7:E6:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:51:13:da:d2:26:49:a8:f7:9d:0d:36:f2:e0:05:b7:72:ff: d0:56:4e:fc:4a:4a:96:ab:7b:85:81:66:d5:eb:26:37:64:95: 85:46:61:82:b5:2e:37:e0:24:24:05:99:6d:3f:d2:f1:c2:18: 35:00:b4:80:9e:f3:9a:e1:7e:1d:06:8e:a7:71:9e:67:47:c0: 6b:3e:41:bb:d6:e9:2c:65:9f:07:90:55:b8:e0:1f:49:68:55: 69:4a:4f:a3:9b:70:41:e0:96:07:29:e3:2c:e7:35:3a:9f:42: 76:8a:ff:91:97:0e:d0:1e:37:02:c4:a6:cb:2c:d5:13:1e:a1: 1e:b5:ec:5d:ce:f2:7c:99:99:4e:0f:89:a5:3c:ea:c7:d1:0b: 51:b9:de:98:62:b3:0a:b7:30:aa:58:e5:e6:6a:ba:68:d8:6c: 1e:d1:24:f3:96:bf:b6:2e:6c:89:ed:81:15:80:7c:75:89:6c: 00:63:f3:b5:36:70:b3:ac:e5:bf:fe:3b:4e:c9:c7:a4:bf:cc: f0:7c:0f:2e:42:16:03:8c:d4:eb:0f:80:39:bf:0e:d6:ee:35: 39:2b:2e:cc:d3:84:28:bb:bf:75:c7:a6:32:c0:3e:1b:6b:47: f0:57:61:57:85:17:6b:47:39:26:6a:06:d1:85:79:60:c9:d8: 6d:10:83:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUzMUExMTAvBgNVBAUTKEM5OTM1OTQzNjkxQUQxRTk1MzY2RTc0MUMxMzkzMDFG QjdGN0U2REIwHhcNMjUxMTA0MjEyOTA3WhcNMjUxMTExMjEyOTA3WjAYMRYwFAYD VQQDEw02OTBhNzAyNC0xOWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnPXX5oMQbPZ/19aLyh6cR1dTSnTAXw6y9W6nfCe7b6B3nPVSjLrwXGwdev1 RbTRbY4nhQylytZqy0kuLzA7FCP7CqT/64WDSAem9Q6aanQchQ6OYXVfyc6UDYaI DG+2sv+IZNZzRgLK6k/5zAfy5feDVtQ/MRGB++nuRm+TNzZnTCK/7b6Nf+gPD8Op 2y0BadOje2jWriUzvlK3Cu9bMcFKf+z3n1ByH9Pk3OyIDQNnACrPjqivtcv+i9Pw lXhdiYN66jxUbJbFOj4tIPtZFCWZ3vMwP/MCXU/6+Vlfa1N1wQgq52Jq7X1q+bRR NL63XmFBDxZvykR6K47mEkElGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4ctPEM wdCoYQlGy1LNZOG5Q13AMB8GA1UdIwQYMBaAFMmTWUNpGtHpU2bnQcE5MB+39+bb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTMxQS8yQkRERkFDRTIx OTcxMUVCQjQ1QjAzNTlDNEY5QUUwMi95Wk5aUTJrYTBlbFRadWRCd1Rrd0g3ZjM1 dHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laTlpRMmthMGVsVFp1ZEJ3VGt3SDdmMzV0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTMxQS8yQkRERkFDRTIxOTcxMUVCQjQ1QjAzNTlDNEY5QUUwMi95Wk5aUTJrYTBl bFRadWRCd1Rrd0g3ZjM1dHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0URPa0iZJqPedDTby4AW3cv/QVk78SkqWq3uFgWbV6yY3ZJWFRmGC tS434CQkBZltP9Lxwhg1ALSAnvOa4X4dBo6ncZ5nR8BrPkG71uksZZ8HkFW44B9J aFVpSk+jm3BB4JYHKeMs5zU6n0J2iv+Rlw7QHjcCxKbLLNUTHqEetexdzvJ8mZlO D4mlPOrH0QtRud6YYrMKtzCqWOXmarpo2Gwe0STzlr+2LmyJ7YEVgHx1iWwAY/O1 NnCzrOW//jtOycekv8zwfA8uQhYDjNTrD4A5vw7W7jU5Ky7M04Qou791x6YywD4b a0fwV2FXhRdrRzkmagbRhXlgydhtEIPy -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:15 2025 by rpki-client