$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft File: YwXctV_RS1x6opSuN8cCdWkvQYA.mft (raw, json) Hash identifier: ux/LKL8GzrAK37joAAHOtEK5bjLZuQgKdQsEaWDboKU= Subject key identifier: 60:00:F3:F7:B1:D0:26:6B:3D:69:3D:BE:F3:6C:EB:89:02:D4:A3:26 Authority key identifier: 63:05:DC:B5:5F:D1:4B:5C:7A:A2:94:AE:37:C7:02:75:69:2F:41:80 Certificate issuer: /CN=A91A9CD5/serialNumber=6305DCB55FD14B5C7AA294AE37C70275692F4180 Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft Manifest number: CD Signing time: Wed 05 Nov 2025 05:52:18 +0000 Manifest this update: Wed 05 Nov 2025 05:52:18 +0000 Manifest next update: Wed 12 Nov 2025 05:52:18 +0000 Files and hashes: 1: YwXctV_RS1x6opSuN8cCdWkvQYA.crl (hash: NH6KNYXKOBjWxEBtz5HBznehaCTiZzltZNhjvo3J8iY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.crl rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9CD5, serialNumber=6305DCB55FD14B5C7AA294AE37C70275692F4180 Validity Not Before: Nov 5 05:52:18 2025 GMT Not After : Nov 12 05:52:18 2025 GMT Subject: CN=690ae612-a43f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:df:ba:24:1b:bf:ae:75:60:c0:73:f5:b6:12: 54:aa:f4:cc:1f:ec:35:d5:f3:28:6c:61:41:13:26: eb:f9:17:68:c7:3e:bb:f4:08:62:d4:d1:c9:32:e7: 25:f5:3c:62:50:61:5a:68:03:d3:f4:18:de:bc:04: b0:a8:13:6e:84:76:23:5f:de:18:67:14:88:3b:45: cd:e8:54:c9:4d:80:da:66:c8:51:dd:8d:75:6d:ec: 70:78:c4:bc:3a:c7:3d:ea:d1:f1:60:f6:99:2f:c5: e4:e9:ee:fd:e0:9b:52:cf:3b:28:f8:74:a9:28:96: 4e:2d:ef:8f:0f:88:0c:27:81:ea:49:f1:1b:38:73: 2c:0c:68:7f:df:c9:30:dc:77:86:51:43:ad:a2:b0: 0e:e8:1a:2a:b0:11:a4:cf:a4:ec:11:d5:d1:fd:25: 1b:cb:ee:45:fc:f5:f8:47:af:23:ca:0a:0c:28:5b: 2a:fc:9b:a8:42:de:fb:10:63:20:66:fd:f1:49:32: a2:15:02:93:fe:f7:dc:16:1f:3c:6d:49:a4:08:80: b2:22:ed:b3:7f:20:d1:8a:bb:d4:78:2e:95:a2:e8: c2:0e:57:ce:c0:80:67:4e:6a:36:8c:3e:77:be:91: 14:cd:e7:c8:9c:4b:73:99:c9:50:b5:4b:e0:8d:45: 1d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:00:F3:F7:B1:D0:26:6B:3D:69:3D:BE:F3:6C:EB:89:02:D4:A3:26 X509v3 Authority Key Identifier: keyid:63:05:DC:B5:5F:D1:4B:5C:7A:A2:94:AE:37:C7:02:75:69:2F:41:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:a8:bc:83:d5:01:0d:25:12:43:2c:1d:88:0c:a1:f5:3c:f9: 3b:89:14:c3:25:73:38:f9:00:67:9a:f6:7c:7a:25:5f:61:d5: a4:4e:c6:37:8d:f0:68:26:7d:b1:60:f3:a0:ea:23:e4:00:7f: 77:f2:ec:17:01:89:7c:48:ca:7e:7f:d2:be:77:98:c4:22:d7: 56:5e:07:35:49:27:cf:de:39:5f:52:a7:d6:47:39:f7:a3:ea: a8:46:dc:43:36:30:4f:3c:55:94:79:6f:b0:82:53:60:c1:b3: 34:43:44:e3:91:11:70:fa:e2:27:53:c0:69:0c:a9:ac:3d:fa: 8d:0d:b0:cb:6a:d5:52:e6:7b:31:1c:21:2c:1f:0e:cc:40:fc: 34:d2:82:fa:77:ec:ab:f4:82:94:56:a3:4f:b7:40:22:f2:bc: 3f:f3:da:9c:4d:73:a7:a1:22:e7:54:27:3e:f3:26:9d:37:95: b5:7e:21:d0:bf:6a:69:35:24:55:06:6a:bf:ec:b1:d7:2c:c8: ce:8d:86:0d:64:e6:23:26:0c:29:8d:12:42:2b:3c:ac:81:cd: 02:58:47:0b:66:66:78:7c:e4:f0:ab:c3:05:91:08:50:eb:59: 52:51:17:3f:9b:b0:40:c3:46:1a:c7:4e:92:3b:57:f9:a8:0d: be:c5:bb:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlDRDUxMTAvBgNVBAUTKDYzMDVEQ0I1NUZEMTRCNUM3QUEyOTRBRTM3QzcwMjc1 NjkyRjQxODAwHhcNMjUxMTA1MDU1MjE4WhcNMjUxMTEyMDU1MjE4WjAYMRYwFAYD VQQDEw02OTBhZTYxMi1hNDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4d+6JBu/rnVgwHP1thJUqvTMH+w11fMobGFBEybr+Rdoxz679Ahi1NHJMucl 9TxiUGFaaAPT9BjevASwqBNuhHYjX94YZxSIO0XN6FTJTYDaZshR3Y11bexweMS8 Osc96tHxYPaZL8Xk6e794JtSzzso+HSpKJZOLe+PD4gMJ4HqSfEbOHMsDGh/38kw 3HeGUUOtorAO6BoqsBGkz6TsEdXR/SUby+5F/PX4R68jygoMKFsq/JuoQt77EGMg Zv3xSTKiFQKT/vfcFh88bUmkCICyIu2zfyDRirvUeC6VoujCDlfOwIBnTmo2jD53 vpEUzefInEtzmclQtUvgjUUdbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGAA8/ex 0CZrPWk9vvNs64kC1KMmMB8GA1UdIwQYMBaAFGMF3LVf0UtceqKUrjfHAnVpL0GA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUNENS83QTlBMjUxMDdG RUYxMUVGQTgyREY2MzlDNEY5QUUwMi9Zd1hjdFZfUlMxeDZvcFN1TjhjQ2RXa3ZR WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1l3WGN0Vl9SUzF4Nm9wU3VOOGNDZFdrdlFZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUNENS83QTlBMjUxMDdGRUYxMUVGQTgyREY2MzlDNEY5QUUwMi9Zd1hjdFZfUlMx eDZvcFN1TjhjQ2RXa3ZRWUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZqLyD1QENJRJDLB2IDKH1PPk7iRTDJXM4+QBnmvZ8eiVfYdWkTsY3 jfBoJn2xYPOg6iPkAH938uwXAYl8SMp+f9K+d5jEItdWXgc1SSfP3jlfUqfWRzn3 o+qoRtxDNjBPPFWUeW+wglNgwbM0Q0TjkRFw+uInU8BpDKmsPfqNDbDLatVS5nsx HCEsHw7MQPw00oL6d+yr9IKUVqNPt0Ai8rw/89qcTXOnoSLnVCc+8yadN5W1fiHQ v2ppNSRVBmq/7LHXLMjOjYYNZOYjJgwpjRJCKzysgc0CWEcLZmZ4fOTwq8MFkQhQ 61lSURc/m7BAw0Yax06SO1f5qA2+xbt5 -----END CERTIFICATE-----Generated at Wed Nov 5 18:09:42 2025 by rpki-client