$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft File: yvogqQGAldIp8KxDkg3NQ6Zr61I.mft (raw, json) Hash identifier: WHCel8lNb1g5br+3ggjOlIraQdrIvcNH1k5XPT0D7eA= Subject key identifier: 18:F7:6F:7A:95:F6:9F:58:F3:5A:92:20:B3:89:15:E4:F5:37:C5:20 Authority key identifier: CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52 Certificate issuer: /CN=A91C4FB5/serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52 Certificate serial: 11C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft Manifest number: 119C Signing time: Fri 24 Oct 2025 17:39:15 +0000 Manifest this update: Fri 24 Oct 2025 17:39:14 +0000 Manifest next update: Fri 31 Oct 2025 17:39:14 +0000 Files and hashes: 1: yvogqQGAldIp8KxDkg3NQ6Zr61I.crl (hash: Z0d3sU2xs176AXHtnbL0EGpXSL6tGAn5+Cwu9JO6p2A=) 2: 08BD74841A4F11EA8DFECB86C4F9AE02.roa (hash: 5pPzlX8jdTNFookFj/rSeOJPoKLM49nAfSCOByjLKkM=) 3: B9F821D4462D11EC93DFE63CC4F9AE02.roa (hash: I8lWHibGq7xqWHXndBv/JsEhBfdVBWJiR9FoofIbTMA=) 4: F7ACE748AD3C11EA95DFF369C4F9AE02.roa (hash: eva2CwxKJKJqWQ6I0wp7A0DX5eeMMT63BYKB14R391I=) 5: F6609DDAAD3C11EA95DFF369C4F9AE02.roa (hash: RU5uDzdAkRAS9qZ8SwVPWAXrYZQRzn4OHSyBtdDYzzE=) 6: D3258BFA7AE711EFB4F5E235C4F9AE02.roa (hash: IqcKshpk+qASTKe+nVLkoXyik/TGszfm7PEMyL1PxRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 17:39:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4546 (0x11c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4FB5, serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52 Validity Not Before: Oct 24 17:39:14 2025 GMT Not After : Oct 31 17:39:14 2025 GMT Subject: CN=68fbb9c2-bdba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d4:d9:4f:1e:28:89:41:11:a0:b9:ad:57:3a: d9:db:a8:ec:75:a7:b3:6e:4e:d4:09:5d:b8:e8:82: ab:4c:9c:07:39:04:b8:73:06:b1:92:e4:b6:2f:a0: b2:79:90:0c:be:34:29:fd:11:64:5e:4e:32:25:78: 9f:d7:14:02:6f:73:c0:52:a7:c1:0d:85:9f:77:76: 7f:cb:8d:3f:45:2e:1d:87:2b:2a:31:38:d5:ea:27: 18:ba:a2:f6:28:d2:a9:08:58:34:3e:99:17:e7:fd: 51:5b:0d:0a:b7:f3:09:e2:f2:51:2a:f2:81:fe:38: 90:f1:a9:1a:ec:61:70:4f:5c:83:13:de:1b:80:f1: 8c:90:b9:d0:9f:a0:b7:20:9b:91:38:f8:4b:e8:48: 4c:55:33:14:81:4b:96:ff:e8:a0:a4:bc:1d:50:bf: bb:24:e5:f4:d3:59:a0:93:4c:66:93:9e:00:98:e3: 37:ee:0c:84:f0:aa:fc:91:c8:2e:a5:91:23:63:34: 54:fd:2a:9d:fd:4b:22:de:c5:04:b8:71:8e:5c:6f: 9c:e7:bb:db:d7:23:30:25:e1:49:d8:80:af:50:fd: 27:39:13:d2:ee:3a:a6:dd:00:df:a6:c1:91:d2:ce: f7:3b:ff:ff:49:43:93:08:46:be:e4:28:cf:62:ad: 57:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F7:6F:7A:95:F6:9F:58:F3:5A:92:20:B3:89:15:E4:F5:37:C5:20 X509v3 Authority Key Identifier: keyid:CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:ca:3e:cc:19:05:fa:42:8e:b8:f1:03:e2:a1:22:1c:e1:ec: aa:fb:ca:9f:0c:aa:3b:b7:70:99:2e:aa:8d:1c:5b:b4:74:6a: 97:2b:8a:3a:8c:8a:b3:cc:65:db:5e:98:d7:67:ba:fe:f9:5e: 97:18:f2:cd:da:e5:50:4b:c0:36:8d:b9:09:1e:d7:f4:7d:b1: b7:e8:7f:00:01:02:68:77:73:17:24:72:0c:5c:c0:4d:77:84: ea:6a:cc:a4:c3:48:19:dd:10:df:4a:8f:23:47:26:09:30:7a: 86:a7:09:1b:b9:b3:58:75:c9:76:0e:df:4c:f3:bf:27:2a:7f: 3d:69:59:87:cb:ba:64:be:cb:ca:1b:05:9a:4e:5a:a3:03:38: 83:93:e2:4f:d1:17:78:cd:09:47:b8:cb:3e:d0:c6:c8:b1:ad: a2:fd:21:28:78:a4:aa:71:19:e8:e6:f2:b6:55:a6:e8:22:a8: 25:ed:8f:b6:41:7f:e5:82:39:95:c5:30:44:43:ca:09:83:d0: b8:cf:aa:7e:36:c8:43:c5:c2:7e:52:a9:18:79:5f:80:3a:1a: f9:fe:b3:ad:fb:7b:ec:81:e5:9d:24:72:a3:4e:53:aa:a8:c0: e1:46:a2:6f:18:60:7a:c3:7e:fa:b8:7a:bb:bf:d8:05:86:fa: 89:05:96:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGQjUxMTAvBgNVBAUTKENBRkEyMEE5MDE4MDk1RDIyOUYwQUM0MzkyMERDRDQz QTY2QkVCNTIwHhcNMjUxMDI0MTczOTE0WhcNMjUxMDMxMTczOTE0WjAYMRYwFAYD VQQDEw02OGZiYjljMi1iZGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9TZTx4oiUERoLmtVzrZ26jsdaezbk7UCV246IKrTJwHOQS4cwaxkuS2L6Cy eZAMvjQp/RFkXk4yJXif1xQCb3PAUqfBDYWfd3Z/y40/RS4dhysqMTjV6icYuqL2 KNKpCFg0PpkX5/1RWw0Kt/MJ4vJRKvKB/jiQ8aka7GFwT1yDE94bgPGMkLnQn6C3 IJuROPhL6EhMVTMUgUuW/+igpLwdUL+7JOX001mgk0xmk54AmOM37gyE8Kr8kcgu pZEjYzRU/Sqd/Usi3sUEuHGOXG+c57vb1yMwJeFJ2ICvUP0nORPS7jqm3QDfpsGR 0s73O///SUOTCEa+5CjPYq1XlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBj3b3qV 9p9Y81qSILOJFeT1N8UgMB8GA1UdIwQYMBaAFMr6IKkBgJXSKfCsQ5INzUOma+tS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEZCNS9FRjk4N0VFMjA5 RDExMUU5OTU2MDdCNTJDNEY5QUUwMi95dm9ncVFHQWxkSXA4S3hEa2czTlE2WnI2 MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l2b2dxUUdBbGRJcDhLeERrZzNOUTZacjYxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEZCNS9FRjk4N0VFMjA5RDExMUU5OTU2MDdCNTJDNEY5QUUwMi95dm9ncVFHQWxk SXA4S3hEa2czTlE2WnI2MUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2yj7MGQX6Qo648QPioSIc4eyq+8qfDKo7t3CZLqqNHFu0dGqXK4o6 jIqzzGXbXpjXZ7r++V6XGPLN2uVQS8A2jbkJHtf0fbG36H8AAQJod3MXJHIMXMBN d4Tqasykw0gZ3RDfSo8jRyYJMHqGpwkbubNYdcl2Dt9M878nKn89aVmHy7pkvsvK GwWaTlqjAziDk+JP0Rd4zQlHuMs+0MbIsa2i/SEoeKSqcRno5vK2VaboIqgl7Y+2 QX/lgjmVxTBEQ8oJg9C4z6p+NshDxcJ+UqkYeV+AOhr5/rOt+3vsgeWdJHKjTlOq qMDhRqJvGGB6w376uHq7v9gFhvqJBZbD -----END CERTIFICATE-----Generated at Sun Oct 26 09:36:51 2025 by rpki-client