$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft File: YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft (raw, json) Hash identifier: udDA2yBF+GiVqRBJyg7CDHL9rb0VCipxIPRXKp7zNsA= Subject key identifier: 3F:5C:E5:E0:5C:3E:E4:34:79:F1:DF:51:13:F3:2F:0C:EA:9E:53:BA Authority key identifier: 60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41 Certificate issuer: /CN=A91AF3C6/serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441 Certificate serial: 0836 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft Manifest number: 082B Signing time: Sun 02 Nov 2025 20:50:29 +0000 Manifest this update: Sun 02 Nov 2025 20:50:29 +0000 Manifest next update: Sun 09 Nov 2025 20:50:29 +0000 Files and hashes: 1: YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl (hash: JnXwDZCRIWpQqPxXqRq7CRSYSEZLdjCtQjxRgviTqB0=) 2: F7F2D20ABCE911EFB7786B63C4F9AE02.roa (hash: SY9pZakTz+Y+bprs2Qaz2rmG63LM9RAeEr8PBsMxkEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2102 (0x836) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF3C6, serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441 Validity Not Before: Nov 2 20:50:29 2025 GMT Not After : Nov 9 20:50:29 2025 GMT Subject: CN=6907c415-407f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a0:8d:34:d1:8f:08:c1:7c:da:29:a9:43:cd: 8a:19:ef:0c:18:35:ae:72:62:f6:55:6b:04:94:ab: 93:2d:93:0b:33:b1:07:5b:ab:14:19:26:70:d8:01: c9:0c:4c:43:84:a2:fa:33:d2:a8:9c:4a:35:9b:dc: be:dc:75:2e:0b:23:f5:d4:60:4f:0d:76:19:35:4f: 8b:3b:db:fc:dc:5a:bb:90:65:39:16:ee:c4:d0:02: 1b:94:fd:32:12:b4:92:c9:f4:f8:e2:ce:f3:68:46: a3:5e:fe:59:82:a9:32:21:bf:c3:b5:57:15:eb:c0: 49:1b:c0:b9:00:3d:2d:b8:8f:78:fd:31:38:03:1d: b4:4d:ae:7b:d3:6c:9c:d7:4a:5c:80:3d:6d:93:ee: 03:b8:37:22:ac:46:fa:8b:ae:81:95:df:6b:de:a5: 7b:e4:fb:7d:ba:57:e2:dd:ac:a8:45:f8:c1:70:8a: cc:89:9f:44:32:a5:a6:64:21:8e:db:11:66:85:f7: cc:da:ff:ed:cf:2d:34:f4:d9:25:a1:72:dc:bd:cb: 00:eb:db:f2:a3:7b:14:3d:42:8e:51:b5:ec:25:df: 4b:63:e0:d3:47:bf:b3:10:25:f7:43:3e:56:3c:08: 0f:66:9d:46:83:09:67:d9:db:87:b5:f3:57:5d:81: 87:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:5C:E5:E0:5C:3E:E4:34:79:F1:DF:51:13:F3:2F:0C:EA:9E:53:BA X509v3 Authority Key Identifier: keyid:60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b5:e2:93:c1:e8:18:69:86:4f:34:ab:b3:32:9f:e2:5e:90: a8:6d:a7:51:3a:2d:75:c3:cc:b5:27:98:72:dc:dd:38:3d:42: 2c:d4:85:5e:01:af:f0:1c:7d:8d:69:7b:dc:ce:1f:82:54:d4: 97:f1:59:b3:df:3e:a7:7a:bd:6a:44:88:12:33:76:ac:ad:45: c8:50:7b:42:36:96:a7:74:ed:45:15:16:98:c0:f4:de:f9:7d: 91:ca:13:19:1b:e9:d0:4c:3f:94:93:be:ed:50:2c:82:cd:6b: fb:01:b2:9d:a4:4b:c3:cb:43:8a:2a:5d:41:c3:3d:0e:f6:3c: ba:b5:4c:b5:55:f2:50:5f:b2:f6:1d:cd:c1:64:18:23:00:73: 24:25:35:b2:52:db:ba:ab:fd:bc:e9:5b:3a:92:ad:fd:c9:79: 48:de:d9:a3:d9:de:b8:c0:65:35:16:62:8b:7f:14:04:d2:b4: 27:90:b0:78:ec:84:36:5c:52:8a:2e:a8:57:ca:b6:82:96:a3: 8b:7e:5b:e8:5c:c8:e3:97:a7:36:e3:b3:c0:76:66:41:d0:71: a1:2a:00:a1:e7:f9:14:e4:97:26:0a:73:f6:83:4b:c6:f2:23: db:d2:06:db:f4:37:53:21:1e:37:62:cb:7e:1d:f5:30:4c:9d: 54:7c:7d:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYzQzYxMTAvBgNVBAUTKDYwNkVFODVEQzNDNDY3RkM0NjRBODk0RUQ0N0E5RjFC RDMyMUI0NDEwHhcNMjUxMTAyMjA1MDI5WhcNMjUxMTA5MjA1MDI5WjAYMRYwFAYD VQQDEw02OTA3YzQxNS00MDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuaCNNNGPCMF82impQ82KGe8MGDWucmL2VWsElKuTLZMLM7EHW6sUGSZw2AHJ DExDhKL6M9KonEo1m9y+3HUuCyP11GBPDXYZNU+LO9v83Fq7kGU5Fu7E0AIblP0y ErSSyfT44s7zaEajXv5ZgqkyIb/DtVcV68BJG8C5AD0tuI94/TE4Ax20Ta5702yc 10pcgD1tk+4DuDcirEb6i66Bld9r3qV75Pt9ulfi3ayoRfjBcIrMiZ9EMqWmZCGO 2xFmhffM2v/tzy009NkloXLcvcsA69vyo3sUPUKOUbXsJd9LY+DTR7+zECX3Qz5W PAgPZp1Ggwln2duHtfNXXYGHpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD9c5eBc PuQ0efHfURPzLwzqnlO6MB8GA1UdIwQYMBaAFGBu6F3DxGf8RkqJTtR6nxvTIbRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjNDNi82MzFDQzE2MEYz MzgxMUVBQTYzRDQxNTRDNEY5QUUwMi9ZRzdvWGNQRVpfeEdTb2xPMUhxZkc5TWh0 RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lHN29YY1BFWl94R1NvbE8xSHFmRzlNaHRFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjNDNi82MzFDQzE2MEYzMzgxMUVBQTYzRDQxNTRDNEY5QUUwMi9ZRzdvWGNQRVpf eEdTb2xPMUhxZkc5TWh0RUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeteKTwegYaYZPNKuzMp/iXpCobadROi11w8y1J5hy3N04PUIs1IVe Aa/wHH2NaXvczh+CVNSX8Vmz3z6ner1qRIgSM3asrUXIUHtCNpandO1FFRaYwPTe +X2RyhMZG+nQTD+Uk77tUCyCzWv7AbKdpEvDy0OKKl1Bwz0O9jy6tUy1VfJQX7L2 Hc3BZBgjAHMkJTWyUtu6q/286Vs6kq39yXlI3tmj2d64wGU1FmKLfxQE0rQnkLB4 7IQ2XFKKLqhXyraClqOLflvoXMjjl6c247PAdmZB0HGhKgCh5/kU5JcmCnP2g0vG 8iPb0gbb9DdTIR43Yst+HfUwTJ1UfH2L -----END CERTIFICATE-----Generated at Tue Nov 4 07:22:43 2025 by rpki-client