$ rpki-client -vvf rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft File: Yv18a2FzzDKVZktYaAWS-ybSuHo.mft (raw, json) Hash identifier: Q86G6gjzQ0sq8moNoY6gWjGdq1pw94ZsZrVASBzr2PE= Subject key identifier: 9E:C3:37:AB:B7:17:DC:A0:29:E2:69:75:50:A8:D8:E9:5C:28:A3:2D Authority key identifier: 62:FD:7C:6B:61:73:CC:32:95:66:4B:58:68:05:92:FB:26:D2:B8:7A Certificate issuer: /CN=A91B488A/serialNumber=62FD7C6B6173CC3295664B58680592FB26D2B87A Certificate serial: 07B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yv18a2FzzDKVZktYaAWS-ybSuHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft Manifest number: 07A8 Signing time: Sun 02 Nov 2025 21:23:44 +0000 Manifest this update: Sun 02 Nov 2025 21:23:43 +0000 Manifest next update: Sun 09 Nov 2025 21:23:43 +0000 Files and hashes: 1: Yv18a2FzzDKVZktYaAWS-ybSuHo.crl (hash: C+gU+OTYzTDVURipbxRJ7/QvnRXrZ+8P47rtaMdDyRY=) 2: FACB1DC6595911ECBE6ACC6BC4F9AE02.roa (hash: sxCFtdRPysjFCbROcFadfDzJw+hZeGG75SF5L5NcahQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.crl rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yv18a2FzzDKVZktYaAWS-ybSuHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:23:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1969 (0x7b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B488A, serialNumber=62FD7C6B6173CC3295664B58680592FB26D2B87A Validity Not Before: Nov 2 21:23:43 2025 GMT Not After : Nov 9 21:23:43 2025 GMT Subject: CN=6907cbdf-569e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:36:44:e7:44:b1:07:b9:c3:38:49:fc:de:79: 68:e4:38:95:a4:fc:9b:f6:b3:2c:49:a9:bd:49:fb: 2e:c2:68:0a:d1:e2:1a:57:a8:60:aa:a1:6a:30:a8: 20:f3:9f:58:17:c2:ac:f9:ce:65:63:6b:c8:54:c4: e0:d1:50:aa:12:c6:35:3d:72:1a:ef:bc:24:f7:50: 4b:80:56:b3:d4:c1:fa:1e:98:c9:28:94:d3:90:96: 67:ab:3a:94:eb:74:cf:bf:ea:21:e6:01:ea:2d:b6: 53:a2:e5:ea:92:56:e6:18:91:fe:ea:c5:73:9b:f2: 30:a3:c3:3c:0f:6c:11:64:f7:06:c6:29:e6:43:89: a3:5d:ad:96:8a:a5:c4:aa:eb:81:09:69:3b:c1:9e: c5:d4:b0:d3:ff:24:1d:de:b0:67:77:0a:01:0b:80: 11:bd:f8:bd:48:52:4c:20:08:7b:5b:82:dd:39:29: 74:bc:3f:11:71:f0:97:33:3c:1a:90:9c:9f:d2:70: 3b:7d:07:9f:04:ee:f8:64:fb:c1:cc:bf:8c:2a:68: b4:a1:92:ab:fd:f6:5f:07:c9:90:12:7e:22:88:5c: 16:e4:cc:85:74:99:26:0b:a1:65:d0:63:9c:fa:35: d1:f5:1d:9d:b0:14:e0:37:d5:ea:5c:11:0e:bd:f3: ad:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C3:37:AB:B7:17:DC:A0:29:E2:69:75:50:A8:D8:E9:5C:28:A3:2D X509v3 Authority Key Identifier: keyid:62:FD:7C:6B:61:73:CC:32:95:66:4B:58:68:05:92:FB:26:D2:B8:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yv18a2FzzDKVZktYaAWS-ybSuHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:d8:a7:77:e6:b1:4f:dd:44:8d:d0:24:60:8c:30:6a:51:5c: 08:b3:21:9c:8d:34:0c:de:76:58:3c:a3:6a:40:a2:13:c8:95: be:f4:05:35:0f:59:37:f7:ec:62:97:44:15:3f:7d:2c:43:b4: ee:c4:47:70:3e:c0:2a:87:e8:ae:9a:cd:50:62:ab:ec:50:0f: 6a:e9:10:61:4a:58:f5:6e:79:40:98:c4:e1:d2:2e:19:cc:9c: 29:78:56:fb:00:3a:56:86:46:5c:c8:37:03:eb:d2:0f:ab:bf: 27:71:da:d0:31:6b:16:44:4a:23:a4:be:7b:8b:59:b7:9a:82: c8:1b:7a:2d:dc:49:68:b1:8d:d7:22:14:3e:c6:b0:c9:3b:5b: cd:24:cc:88:15:3f:c1:b1:f4:03:b8:51:83:15:eb:4b:bd:a1: e5:45:0d:bd:b6:cf:b7:a2:9e:b4:36:40:7c:9d:6d:1a:1d:41: 4e:29:73:7f:a5:ee:53:b4:26:4c:6f:d7:7a:47:9c:02:7b:3b: a0:f9:35:5f:f2:55:2b:11:d1:da:4d:55:73:91:01:a3:cf:51: c8:d9:f4:a9:94:fb:22:5b:c7:bf:8e:41:83:a2:33:16:9f:90: b4:b7:41:61:2b:04:0f:4b:41:9c:5a:16:cc:b7:0b:8d:d0:5c: 24:07:ac:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ4OEExMTAvBgNVBAUTKDYyRkQ3QzZCNjE3M0NDMzI5NTY2NEI1ODY4MDU5MkZC MjZEMkI4N0EwHhcNMjUxMTAyMjEyMzQzWhcNMjUxMTA5MjEyMzQzWjAYMRYwFAYD VQQDEw02OTA3Y2JkZi01NjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3jZE50SxB7nDOEn83nlo5DiVpPyb9rMsSam9SfsuwmgK0eIaV6hgqqFqMKgg 859YF8Ks+c5lY2vIVMTg0VCqEsY1PXIa77wk91BLgFaz1MH6HpjJKJTTkJZnqzqU 63TPv+oh5gHqLbZTouXqklbmGJH+6sVzm/Iwo8M8D2wRZPcGxinmQ4mjXa2WiqXE quuBCWk7wZ7F1LDT/yQd3rBndwoBC4ARvfi9SFJMIAh7W4LdOSl0vD8RcfCXMzwa kJyf0nA7fQefBO74ZPvBzL+MKmi0oZKr/fZfB8mQEn4iiFwW5MyFdJkmC6Fl0GOc +jXR9R2dsBTgN9XqXBEOvfOtGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7DN6u3 F9ygKeJpdVCo2OlcKKMtMB8GA1UdIwQYMBaAFGL9fGthc8wylWZLWGgFkvsm0rh6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDg4QS85QUVGMjNEQzI0 NjkxMUVCOENBRTMzODBDNEY5QUUwMi9ZdjE4YTJGenpES1Zaa3RZYUFXUy15YlN1 SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1l2MThhMkZ6ekRLVlprdFlhQVdTLXliU3VIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDg4QS85QUVGMjNEQzI0NjkxMUVCOENBRTMzODBDNEY5QUUwMi9ZdjE4YTJGenpE S1Zaa3RZYUFXUy15YlN1SG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR2Kd35rFP3USN0CRgjDBqUVwIsyGcjTQM3nZYPKNqQKITyJW+9AU1 D1k39+xil0QVP30sQ7TuxEdwPsAqh+iums1QYqvsUA9q6RBhSlj1bnlAmMTh0i4Z zJwpeFb7ADpWhkZcyDcD69IPq78ncdrQMWsWREojpL57i1m3moLIG3ot3ElosY3X IhQ+xrDJO1vNJMyIFT/BsfQDuFGDFetLvaHlRQ29ts+3op60NkB8nW0aHUFOKXN/ pe5TtCZMb9d6R5wCezug+TVf8lUrEdHaTVVzkQGjz1HI2fSplPsiW8e/jkGDojMW n5C0t0FhKwQPS0GcWhbMtwuN0FwkB6y3 -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:27 2025 by rpki-client