$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft File: Yg05s6GDeXO9EyafKwasmyc4gg0.mft (raw, json) Hash identifier: hIkXBE6PFYRj5cuAtpKtTjiqVhNsHOd/3F9LTDd6rxc= Subject key identifier: 2C:CB:D2:B2:17:50:E4:D7:C2:08:3C:12:04:FE:A5:10:6D:FC:3A:78 Authority key identifier: 62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D Certificate issuer: /CN=A91A6F68/serialNumber=620D39B3A1837973BD13269F2B06AC9B2738820D Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft Manifest number: 94 Signing time: Mon 27 Oct 2025 08:54:42 +0000 Manifest this update: Mon 27 Oct 2025 08:54:42 +0000 Manifest next update: Mon 03 Nov 2025 08:54:42 +0000 Files and hashes: 1: Yg05s6GDeXO9EyafKwasmyc4gg0.crl (hash: kyXh0OzI8soGGCToM+K75DM0FNg/K8vanAlpweOP1a8=) 2: F2CD19D6E96011EF8940367DC4F9AE02.roa (hash: qc4m83ow/HQw4squEH0ZGSEZLA7zoXhgkL6VJ3EiLOM=) 3: E454FEF2689311F09107C42BC4F9AE02.roa (hash: 3AkXtceE0UqV8/zNzn9ey5ikMm6oLMztcjBsMDD6ykQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.crl rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 08:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F68, serialNumber=620D39B3A1837973BD13269F2B06AC9B2738820D Validity Not Before: Oct 27 08:54:42 2025 GMT Not After : Nov 3 08:54:42 2025 GMT Subject: CN=68ff3352-bbc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:13:6f:e3:1a:12:c5:ff:97:5a:40:04:b0:1b: 52:a5:98:70:fb:ef:30:f4:35:8c:fc:c1:a6:ec:5f: 5a:81:ad:60:8f:24:a5:11:31:58:b9:c2:d8:90:6b: 74:da:44:ce:b6:94:0f:c1:83:76:3d:29:24:82:fc: eb:88:e5:22:51:b4:e0:2e:21:e6:51:96:ff:76:8a: 16:23:4f:fe:63:f3:7c:03:ca:ed:66:4d:fc:84:a8: 95:3b:d7:86:12:e3:34:e8:e5:0f:1e:f6:f8:7a:2e: 2e:ef:65:f1:1e:a5:01:8f:99:c2:d2:9e:c7:ca:a3: 1e:71:52:64:49:64:11:d7:ee:c5:9f:d7:2a:7e:50: 36:1f:ae:c4:94:75:88:2b:03:53:07:9d:5e:46:c1: e3:8e:29:43:ec:ee:f5:28:85:c2:ad:81:2d:b9:70: 98:d8:35:27:ca:61:4b:18:93:c7:09:b7:5c:50:1a: b7:a6:2a:dd:b1:59:87:a1:5c:91:3a:57:f9:1d:6b: 9e:7d:f5:c6:b3:fc:05:a2:4c:da:de:70:cb:31:6d: fe:42:47:b8:76:71:78:8f:4f:65:2f:c0:68:62:78: 85:a6:fd:25:a7:69:ec:64:66:e0:d3:64:b6:bc:21: 2b:ae:97:f0:8c:3a:80:d1:c2:c0:6a:60:3b:ee:39: a2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:CB:D2:B2:17:50:E4:D7:C2:08:3C:12:04:FE:A5:10:6D:FC:3A:78 X509v3 Authority Key Identifier: keyid:62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:ea:7e:b7:01:b1:83:c3:7b:40:cf:42:b6:48:21:25:42:e2: 7f:56:69:6e:4e:84:94:29:06:48:2b:ee:fe:07:fe:ae:5b:52: 7d:94:5c:f6:51:72:00:9c:1c:ce:a8:4b:5c:c4:2e:61:26:e4: 4d:ff:d4:b4:50:3a:7a:24:32:8c:4b:b6:d7:3d:77:72:11:98: e0:a2:fb:5d:65:62:ce:0a:da:2e:53:6e:87:01:96:cb:40:ef: ef:93:68:42:21:df:97:77:6e:88:84:f9:e1:c3:e9:13:98:59: 6f:1f:cf:10:25:a5:b8:6f:f8:db:a7:15:15:eb:9a:0c:b5:0e: 5b:f6:b9:95:1f:d6:75:d7:12:62:16:6e:58:18:81:51:20:d0: 5e:28:5e:6d:d8:24:86:ef:89:c9:ed:f6:4a:d6:8a:ef:1d:70: 2e:b1:ea:4c:a6:c1:69:a8:79:41:d6:12:44:5d:8a:58:c8:7e: 65:08:c4:f6:57:1e:50:5e:81:e2:c9:26:76:7e:04:98:d3:30: 32:31:8b:c3:41:fe:39:9a:c1:e9:48:4c:fa:b6:6b:29:eb:db: 1c:43:ee:d2:c2:0a:2e:b7:7c:85:8b:84:b0:1e:0a:a4:72:d5: 8b:03:5b:3c:62:c0:ba:fb:7e:e3:23:0d:73:40:0c:65:5d:9b: 83:07:a6:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZGNjgxMTAvBgNVBAUTKDYyMEQzOUIzQTE4Mzc5NzNCRDEzMjY5RjJCMDZBQzlC MjczODgyMEQwHhcNMjUxMDI3MDg1NDQyWhcNMjUxMTAzMDg1NDQyWjAYMRYwFAYD VQQDEw02OGZmMzM1Mi1iYmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxNv4xoSxf+XWkAEsBtSpZhw++8w9DWM/MGm7F9aga1gjySlETFYucLYkGt0 2kTOtpQPwYN2PSkkgvzriOUiUbTgLiHmUZb/dooWI0/+Y/N8A8rtZk38hKiVO9eG EuM06OUPHvb4ei4u72XxHqUBj5nC0p7HyqMecVJkSWQR1+7Fn9cqflA2H67ElHWI KwNTB51eRsHjjilD7O71KIXCrYEtuXCY2DUnymFLGJPHCbdcUBq3pirdsVmHoVyR Olf5HWueffXGs/wFokza3nDLMW3+Qke4dnF4j09lL8BoYniFpv0lp2nsZGbg02S2 vCErrpfwjDqA0cLAamA77jmimQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCzL0rIX UOTXwgg8EgT+pRBt/Dp4MB8GA1UdIwQYMBaAFGINObOhg3lzvRMmnysGrJsnOIIN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkY2OC85MkUyNTk2MkRG MjExMUVGODMzRjRGMkNDNEY5QUUwMi9ZZzA1czZHRGVYTzlFeWFmS3dhc215YzRn ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lnMDVzNkdEZVhPOUV5YWZLd2FzbXljNGdnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkY2OC85MkUyNTk2MkRGMjExMUVGODMzRjRGMkNDNEY5QUUwMi9ZZzA1czZHRGVY TzlFeWFmS3dhc215YzRnZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCE6n63AbGDw3tAz0K2SCElQuJ/VmluToSUKQZIK+7+B/6uW1J9lFz2 UXIAnBzOqEtcxC5hJuRN/9S0UDp6JDKMS7bXPXdyEZjgovtdZWLOCtouU26HAZbL QO/vk2hCId+Xd26IhPnhw+kTmFlvH88QJaW4b/jbpxUV65oMtQ5b9rmVH9Z11xJi Fm5YGIFRINBeKF5t2CSG74nJ7fZK1orvHXAusepMpsFpqHlB1hJEXYpYyH5lCMT2 Vx5QXoHiySZ2fgSY0zAyMYvDQf45msHpSEz6tmsp69scQ+7Swgout3yFi4SwHgqk ctWLA1s8YsC6+37jIw1zQAxlXZuDB6b3 -----END CERTIFICATE-----Generated at Tue Oct 28 13:44:12 2025 by rpki-client