$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft File: yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft (raw, json) Hash identifier: 3vqqYeYbLtdO9tYfP6ZojdR3EGbP92J5hbnrfLqv18I= Subject key identifier: F1:72:5B:63:CB:8D:6F:BA:50:72:0C:81:54:DE:35:58:78:CC:52:DD Authority key identifier: C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9 Certificate issuer: /CN=A91CCDF3/serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9 Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft Manifest number: 01C1 Signing time: Mon 27 Oct 2025 04:43:20 +0000 Manifest this update: Mon 27 Oct 2025 04:43:19 +0000 Manifest next update: Mon 03 Nov 2025 04:43:19 +0000 Files and hashes: 1: yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl (hash: khBEAljG7ej0C71meE1ZTgLcSNZI+R+60srjBN1rGVk=) 2: 851A7AD6FF7F11EDA505D70EC4F9AE02.roa (hash: dYTddJDImyu3rpg7QICAEFzGZsVfww3CPHFdjrscptU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 04:43:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCDF3, serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9 Validity Not Before: Oct 27 04:43:19 2025 GMT Not After : Nov 3 04:43:19 2025 GMT Subject: CN=68fef868-6051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:32:01:74:4f:24:4c:74:64:d1:e0:19:cc:88: f0:77:57:28:84:c5:d3:75:8c:fa:b7:54:d3:bf:8a: c1:52:1f:4b:28:54:1d:7c:71:64:73:cb:de:14:f5: be:39:e0:fa:dd:36:7f:3f:58:0c:fa:7b:ff:e2:a5: 4c:f4:6f:6a:98:4a:2a:06:66:d1:7e:19:89:2c:b0: 74:45:fe:1f:7c:2c:7c:6b:d0:51:17:68:d7:ec:fa: 1f:1d:69:ba:1f:19:3c:bb:b0:53:18:57:db:5d:de: ac:54:72:34:80:47:2f:7b:36:be:a5:38:ec:1e:ad: 6a:b8:e6:29:a3:a9:42:cb:0a:5d:2a:9d:ad:d1:f3: a1:71:74:91:71:19:a4:a9:48:02:61:62:e4:e0:32: a9:bf:25:18:18:3e:36:b2:16:bb:13:38:d4:a5:92: 4f:67:22:5f:0f:7f:12:09:bf:1b:81:d7:11:e2:40: 9a:e9:7a:bb:34:eb:b9:5e:c5:2b:28:06:49:36:40: 3d:01:8d:e2:af:d8:79:11:d5:6a:3c:79:5d:19:66: f5:d8:e0:fd:e1:98:90:70:25:ad:b5:ec:c7:29:08: a1:2d:c0:b7:b5:7f:19:e5:92:8c:17:b2:34:a6:16: 86:6c:61:53:59:7b:0e:28:d1:5a:46:ff:85:87:eb: 27:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:72:5B:63:CB:8D:6F:BA:50:72:0C:81:54:DE:35:58:78:CC:52:DD X509v3 Authority Key Identifier: keyid:C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:7b:18:69:c3:d2:5d:88:b0:9d:cc:fa:64:75:3e:01:6c:e9: 9d:cc:ab:fe:0e:03:a4:5e:d8:fb:99:d7:ff:88:7d:18:e9:1d: ad:f4:65:ef:06:32:6f:73:95:18:63:5a:07:24:da:4f:5c:a4: ab:ea:6c:5a:dc:54:f9:18:ac:18:5a:33:a0:f4:93:cd:e8:c3: 4d:9b:8c:f3:c4:0a:d6:43:65:20:9f:91:30:00:fe:75:e8:a7: 00:a9:00:61:1b:20:57:1a:81:9e:9d:fd:c2:e1:e4:da:5e:3e: a4:2a:6b:5b:04:7e:b3:35:48:11:59:9a:91:12:0a:d8:28:06: db:b5:3c:67:43:4a:77:d4:dc:59:cd:1c:5a:e4:53:77:59:d6: 36:f9:a5:cf:f1:b0:39:7d:b7:3c:37:de:5c:6a:4f:6c:32:9f: 86:ab:58:61:3a:e5:25:db:07:c5:bb:9f:a1:cb:24:1d:69:26: 53:c2:20:0f:f1:aa:7b:53:7e:4c:9b:ef:ec:7d:34:77:dc:b5: 5c:49:61:1c:9c:dc:01:e2:dc:2a:ee:69:38:17:8a:c6:db:21: 4f:46:88:be:41:c8:2d:81:5b:b8:66:82:d4:7b:df:bd:99:be: 18:a2:86:01:23:1f:fa:24:ab:27:b6:00:af:50:c6:14:29:71: 1c:9b:1a:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NERjMxMTAvBgNVBAUTKEM5MTVGRDNCRDQ1QjgyMThCOTVGNTczNzQ5RDNBQTQ5 ODAxNkFBQTkwHhcNMjUxMDI3MDQ0MzE5WhcNMjUxMTAzMDQ0MzE5WjAYMRYwFAYD VQQDEw02OGZlZjg2OC02MDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5TIBdE8kTHRk0eAZzIjwd1cohMXTdYz6t1TTv4rBUh9LKFQdfHFkc8veFPW+ OeD63TZ/P1gM+nv/4qVM9G9qmEoqBmbRfhmJLLB0Rf4ffCx8a9BRF2jX7PofHWm6 Hxk8u7BTGFfbXd6sVHI0gEcveza+pTjsHq1quOYpo6lCywpdKp2t0fOhcXSRcRmk qUgCYWLk4DKpvyUYGD42sha7EzjUpZJPZyJfD38SCb8bgdcR4kCa6Xq7NOu5XsUr KAZJNkA9AY3ir9h5EdVqPHldGWb12OD94ZiQcCWttezHKQihLcC3tX8Z5ZKMF7I0 phaGbGFTWXsOKNFaRv+Fh+snHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFyW2PL jW+6UHIMgVTeNVh4zFLdMB8GA1UdIwQYMBaAFMkV/TvUW4IYuV9XN0nTqkmAFqqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0RGMy80MkRFNDgzNkZG NzYxMUVEQjg5ODE1NThDNEY5QUUwMi95Ulg5TzlSYmdoaTVYMWMzU2RPcVNZQVdx cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lSWDlPOVJiZ2hpNVgxYzNTZE9xU1lBV3Fxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0RGMy80MkRFNDgzNkZGNzYxMUVEQjg5ODE1NThDNEY5QUUwMi95Ulg5TzlSYmdo aTVYMWMzU2RPcVNZQVdxcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2exhpw9JdiLCdzPpkdT4BbOmdzKv+DgOkXtj7mdf/iH0Y6R2t9GXv BjJvc5UYY1oHJNpPXKSr6mxa3FT5GKwYWjOg9JPN6MNNm4zzxArWQ2Ugn5EwAP51 6KcAqQBhGyBXGoGenf3C4eTaXj6kKmtbBH6zNUgRWZqREgrYKAbbtTxnQ0p31NxZ zRxa5FN3WdY2+aXP8bA5fbc8N95cak9sMp+Gq1hhOuUl2wfFu5+hyyQdaSZTwiAP 8ap7U35Mm+/sfTR33LVcSWEcnNwB4twq7mk4F4rG2yFPRoi+QcgtgVu4ZoLUe9+9 mb4YooYBIx/6JKsntgCvUMYUKXEcmxp5 -----END CERTIFICATE-----Generated at Mon Oct 27 09:22:54 2025 by rpki-client