$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft File: yDkkRRVKIRRXRo3JJnXGsrycRIs.mft (raw, json) Hash identifier: GDfPJC/e8pI+Ejb7Oy0ryyg5opj2iYsxvteCOEqLdgI= Subject key identifier: 57:82:FA:2E:35:33:8C:E0:74:2F:A7:2C:B3:8A:8D:6A:9B:2C:6E:CA Authority key identifier: C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B Certificate issuer: /CN=A91A7890/serialNumber=C8392445154A211457468DC92675C6B2BC9C448B Certificate serial: 01E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft Manifest number: 01E0 Signing time: Mon 03 Nov 2025 02:41:11 +0000 Manifest this update: Mon 03 Nov 2025 02:41:10 +0000 Manifest next update: Mon 10 Nov 2025 02:41:10 +0000 Files and hashes: 1: yDkkRRVKIRRXRo3JJnXGsrycRIs.crl (hash: fUCyvc1ss1G+AJeZXSkU4nNfsSiWD4GOVDuXsC9uyIo=) 2: EC8CA72CDAE311EDA0A6B03DC4F9AE02.roa (hash: F7qGiUSXmfTHkG4rLsiz9f3fhRuXMOAIShVR1Seg7DE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:41:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 485 (0x1e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7890, serialNumber=C8392445154A211457468DC92675C6B2BC9C448B Validity Not Before: Nov 3 02:41:10 2025 GMT Not After : Nov 10 02:41:10 2025 GMT Subject: CN=69081647-eeb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5a:80:df:43:56:aa:80:2c:3f:fe:16:97:0e: 97:71:3a:a6:67:18:d6:2f:1c:e7:81:85:fb:10:c9: 62:15:93:58:44:78:0e:a1:59:27:1e:70:0f:12:3c: 31:93:54:53:8a:ca:c9:9b:2f:a7:23:46:4e:dc:da: c5:fd:f3:eb:d0:33:2e:63:b5:45:31:f2:65:88:8d: 06:19:39:c1:86:f8:bf:7e:50:27:f8:61:68:12:2e: 34:b4:cf:89:2b:c2:38:15:2b:0a:a1:9c:53:da:d3: 07:15:23:d1:d5:e0:73:31:8e:60:d0:54:4e:90:6d: 9f:46:b5:e1:4a:0f:41:88:57:82:7c:96:f8:7f:4e: 24:23:93:77:46:84:fb:ce:10:dd:52:91:34:d6:86: 11:89:16:8b:58:d9:8c:4e:c4:ec:89:8a:5e:f4:08: 6e:7d:6c:bb:43:b3:17:bc:46:cd:c7:5d:f6:98:9d: a7:33:9f:b6:1c:38:20:b5:dd:e3:50:d3:f6:6b:70: 00:f8:13:4b:2d:27:75:38:18:d9:3a:0e:f7:73:13: 7a:6e:29:1b:95:44:c8:43:49:e9:40:83:f2:f7:a2: 4a:d2:af:43:34:11:d5:38:d2:6d:5d:1a:77:4a:16: 69:21:d1:5e:f1:6f:e5:e6:ec:a0:80:f6:cb:9a:40: ca:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:82:FA:2E:35:33:8C:E0:74:2F:A7:2C:B3:8A:8D:6A:9B:2C:6E:CA X509v3 Authority Key Identifier: keyid:C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:c0:e1:29:d7:7e:72:12:e6:7b:5c:0c:ca:b9:a9:6a:8d:7b: d2:34:ad:1a:01:c1:ae:c2:cf:c3:f6:06:4f:88:d9:23:73:bd: 1f:ac:12:bc:35:2c:73:00:23:6a:37:7f:cd:8a:f1:c9:e9:96: 60:23:fc:30:2e:98:9b:be:9f:bb:7f:c7:b6:f1:84:32:38:22: b2:0d:17:55:9c:ab:b9:66:ab:ea:56:5d:06:59:26:be:6c:ec: da:21:af:e5:f3:14:1c:ee:52:20:b1:97:c8:eb:31:aa:38:3c: d2:2d:a1:d0:a9:81:2c:7c:dd:f7:4c:cf:6c:18:04:f8:2d:c1: 51:8e:54:10:a4:08:9a:72:5f:ac:47:0a:38:2d:fc:01:fd:a8: d1:ed:f8:71:e1:06:1d:40:fc:e2:d9:f7:5f:ac:00:63:b2:7b: 1b:1c:19:6f:cc:0c:0c:7b:b0:23:7f:0f:a8:13:a1:9c:ab:ad: eb:b4:ec:03:59:ca:4f:bf:88:7a:79:91:2d:17:b5:1c:da:51: 61:a6:23:65:36:51:f6:75:61:7e:e0:24:be:a7:15:54:6e:68: 5e:32:e9:5b:7e:e1:b3:9d:74:60:76:d4:00:22:85:f7:09:c9: e7:b1:6d:43:8f:7a:eb:e7:c8:8a:ec:c2:85:4b:20:43:ad:06: a7:f5:dc:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4OTAxMTAvBgNVBAUTKEM4MzkyNDQ1MTU0QTIxMTQ1NzQ2OERDOTI2NzVDNkIy QkM5QzQ0OEIwHhcNMjUxMTAzMDI0MTEwWhcNMjUxMTEwMDI0MTEwWjAYMRYwFAYD VQQDEw02OTA4MTY0Ny1lZWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1qA30NWqoAsP/4Wlw6XcTqmZxjWLxzngYX7EMliFZNYRHgOoVknHnAPEjwx k1RTisrJmy+nI0ZO3NrF/fPr0DMuY7VFMfJliI0GGTnBhvi/flAn+GFoEi40tM+J K8I4FSsKoZxT2tMHFSPR1eBzMY5g0FROkG2fRrXhSg9BiFeCfJb4f04kI5N3RoT7 zhDdUpE01oYRiRaLWNmMTsTsiYpe9AhufWy7Q7MXvEbNx132mJ2nM5+2HDggtd3j UNP2a3AA+BNLLSd1OBjZOg73cxN6bikblUTIQ0npQIPy96JK0q9DNBHVONJtXRp3 ShZpIdFe8W/l5uyggPbLmkDKswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFeC+i41 M4zgdC+nLLOKjWqbLG7KMB8GA1UdIwQYMBaAFMg5JEUVSiEUV0aNySZ1xrK8nESL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzg5MC9BREUxMzE4NkRB REYxMUVEQjFGOUQ3MTlDNEY5QUUwMi95RGtrUlJWS0lSUlhSbzNKSm5YR3NyeWNS SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lEa2tSUlZLSVJSWFJvM0pKblhHc3J5Y1JJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzg5MC9BREUxMzE4NkRBREYxMUVEQjFGOUQ3MTlDNEY5QUUwMi95RGtrUlJWS0lS UlhSbzNKSm5YR3NyeWNSSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlwOEp135yEuZ7XAzKualqjXvSNK0aAcGuws/D9gZPiNkjc70frBK8 NSxzACNqN3/NivHJ6ZZgI/wwLpibvp+7f8e28YQyOCKyDRdVnKu5ZqvqVl0GWSa+ bOzaIa/l8xQc7lIgsZfI6zGqODzSLaHQqYEsfN33TM9sGAT4LcFRjlQQpAiacl+s Rwo4LfwB/ajR7fhx4QYdQPzi2fdfrABjsnsbHBlvzAwMe7Ajfw+oE6Gcq63rtOwD WcpPv4h6eZEtF7Uc2lFhpiNlNlH2dWF+4CS+pxVUbmheMulbfuGznXRgdtQAIoX3 CcnnsW1Dj3rr58iK7MKFSyBDrQan9dwD -----END CERTIFICATE-----Generated at Tue Nov 4 18:55:54 2025 by rpki-client