$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.mft File: YGHkRpDveLCtqNg1DRHKngGUnBQ.mft (raw, json) Hash identifier: Xcv6f1uwFqSiD/7MUEgxIIHH1qOQnBvajO2FV+axEBU= Subject key identifier: 06:6F:96:A7:A0:DE:B7:B3:02:46:12:87:14:77:57:E0:ED:57:75:6F Authority key identifier: 60:61:E4:46:90:EF:78:B0:AD:A8:D8:35:0D:11:CA:9E:01:94:9C:14 Certificate issuer: /CN=A91BFE76/serialNumber=6061E44690EF78B0ADA8D8350D11CA9E01949C14 Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGHkRpDveLCtqNg1DRHKngGUnBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.mft Manifest number: 03 Signing time: Wed 05 Nov 2025 08:17:30 +0000 Manifest this update: Wed 05 Nov 2025 08:17:30 +0000 Manifest next update: Wed 12 Nov 2025 08:17:30 +0000 Files and hashes: 1: YGHkRpDveLCtqNg1DRHKngGUnBQ.crl (hash: 25ln0MZvIBDM7rFCWWccZvVvYYHBKB97R35vDTTzB2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.crl rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGHkRpDveLCtqNg1DRHKngGUnBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFE76, serialNumber=6061E44690EF78B0ADA8D8350D11CA9E01949C14 Validity Not Before: Nov 5 08:17:30 2025 GMT Not After : Nov 12 08:17:30 2025 GMT Subject: CN=690b081a-dc95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9a:3a:88:c4:24:01:d2:cb:1a:e7:c1:95:86: 27:d9:59:64:f3:89:78:1c:06:8c:61:2f:c5:98:29: c4:3d:5d:ac:10:39:4f:70:0d:8e:18:87:c2:8e:18: 5d:c3:e3:59:15:9a:9b:45:75:65:07:cf:7a:b4:ec: 2c:bc:42:45:94:7f:9c:ff:99:c8:0b:dd:ce:29:32: 0a:0f:70:f3:92:c2:3b:85:fb:41:53:04:6c:41:43: 85:3c:0f:91:4c:a0:5d:0c:87:a2:7b:af:36:76:d5: 3d:0f:a1:2c:a7:6c:c3:77:ea:ce:97:3b:a5:a4:55: 93:f1:ca:ef:b3:2b:e7:75:a1:18:79:27:6a:04:95: 93:1f:07:35:64:79:ab:fb:99:f1:0f:ef:70:68:d3: 24:67:31:50:1d:0f:17:a4:8d:fb:63:f0:a0:dd:5e: 55:c8:5e:2a:11:55:18:17:77:a6:ca:19:72:2a:46: c4:97:54:a2:7b:91:f6:51:f8:b5:c4:0a:0c:ab:db: ba:16:51:44:04:95:ba:9e:68:26:f1:fe:44:93:a1: b3:f0:8e:eb:50:95:ff:38:72:c5:aa:e2:66:ce:76: b1:4e:a4:d8:7b:12:24:dc:6f:0b:6a:9e:e8:2c:c0: a9:95:e5:cb:b5:e8:01:af:c7:54:f9:66:4a:4f:09: ef:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:6F:96:A7:A0:DE:B7:B3:02:46:12:87:14:77:57:E0:ED:57:75:6F X509v3 Authority Key Identifier: keyid:60:61:E4:46:90:EF:78:B0:AD:A8:D8:35:0D:11:CA:9E:01:94:9C:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGHkRpDveLCtqNg1DRHKngGUnBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE76/E333EC2EB92711F0B80EC45EC4F9AE02/YGHkRpDveLCtqNg1DRHKngGUnBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:14:c0:96:90:94:d7:11:7d:c0:42:6d:b8:1c:a3:73:e3:98: 5c:e6:8f:c1:4d:f5:53:e3:38:44:c2:71:bd:28:ad:8f:7b:1e: 70:7b:e2:ea:d5:e5:a2:3e:b7:6b:cf:67:0e:7f:4b:54:86:ab: 5c:4f:e4:95:ea:50:a0:82:4e:18:34:97:1b:1c:70:9c:3f:30: de:12:d8:4a:65:70:d1:ef:5f:5f:d1:69:ec:f1:b3:4d:a6:15: 05:4b:6f:4b:44:98:78:84:a5:94:ea:0c:fe:ab:59:e1:28:e8: f0:02:b6:7e:71:db:0a:7f:33:87:0a:16:f1:be:9a:40:7e:2e: 78:4a:68:42:83:88:73:1f:3f:98:97:a0:7c:11:8d:64:4a:35: da:f1:9c:62:5a:a6:fb:fd:e9:1d:6c:70:a6:bd:62:e8:9f:1c: 41:2b:1b:65:01:41:85:02:a1:f9:9f:97:58:53:a3:04:80:00: 84:1e:50:0b:9a:1e:2a:05:51:6e:81:be:e1:78:ad:d5:1c:2f: f0:4b:ce:06:8d:ea:50:ca:8a:dd:9e:bc:90:e6:59:0e:61:54: dc:97:58:83:af:7c:e4:e5:c1:6c:d9:ab:23:ae:04:0c:29:9d: 6d:ca:d5:c9:25:80:07:3a:44:e7:61:ac:b9:79:da:51:37:c9: ce:d3:35:0f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RkU3NjExMC8GA1UEBRMoNjA2MUU0NDY5MEVGNzhCMEFEQThEODM1MEQxMUNBOUUw MTk0OUMxNDAeFw0yNTExMDUwODE3MzBaFw0yNTExMTIwODE3MzBaMBgxFjAUBgNV BAMTDTY5MGIwODFhLWRjOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtmjqIxCQB0ssa58GVhifZWWTziXgcBoxhL8WYKcQ9XawQOU9wDY4Yh8KOGF3D 41kVmptFdWUHz3q07Cy8QkWUf5z/mcgL3c4pMgoPcPOSwjuF+0FTBGxBQ4U8D5FM oF0Mh6J7rzZ21T0PoSynbMN36s6XO6WkVZPxyu+zK+d1oRh5J2oElZMfBzVkeav7 mfEP73Bo0yRnMVAdDxekjftj8KDdXlXIXioRVRgXd6bKGXIqRsSXVKJ7kfZR+LXE Cgyr27oWUUQElbqeaCbx/kSTobPwjutQlf84csWq4mbOdrFOpNh7EiTcbwtqnugs wKmV5cu16AGvx1T5ZkpPCe9HAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBm+Wp6De t7MCRhKHFHdX4O1XdW8wHwYDVR0jBBgwFoAUYGHkRpDveLCtqNg1DRHKngGUnBQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGRTc2L0UzMzNFQzJFQjky NzExRjBCODBFQzQ1RUM0RjlBRTAyL1lHSGtScER2ZUxDdHFOZzFEUkhLbmdHVW5C US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWUdIa1JwRHZlTEN0cU5nMURSSEtuZ0dVbkJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG RTc2L0UzMzNFQzJFQjkyNzExRjBCODBFQzQ1RUM0RjlBRTAyL1lHSGtScER2ZUxD dHFOZzFEUkhLbmdHVW5CUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH0UwJaQlNcRfcBCbbgco3PjmFzmj8FN9VPjOETCcb0orY97HnB74urV 5aI+t2vPZw5/S1SGq1xP5JXqUKCCThg0lxsccJw/MN4S2EplcNHvX1/Raezxs02m FQVLb0tEmHiEpZTqDP6rWeEo6PACtn5x2wp/M4cKFvG+mkB+LnhKaEKDiHMfP5iX oHwRjWRKNdrxnGJapvv96R1scKa9YuifHEErG2UBQYUCofmfl1hTowSAAIQeUAua HioFUW6BvuF4rdUcL/BLzgaN6lDKit2evJDmWQ5hVNyXWIOvfOTlwWzZqyOuBAwp nW3K1cklgAc6ROdhrLl52lE3yc7TNQ8= -----END CERTIFICATE-----Generated at Wed Nov 5 19:35:51 2025 by rpki-client