$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft File: YcuQhfAv-PpF5zL1gDQPQkngDKI.mft (raw, json) Hash identifier: kmerlHbwjmYK9vo7PE56WnNQHMFeuQC16ZhWbI2UXzQ= Subject key identifier: B5:58:39:40:AD:14:FB:EB:2A:02:D1:21:88:B0:1B:F9:52:F4:E7:08 Authority key identifier: 61:CB:90:85:F0:2F:F8:FA:45:E7:32:F5:80:34:0F:42:49:E0:0C:A2 Certificate issuer: /CN=A91DCB25/serialNumber=61CB9085F02FF8FA45E732F580340F4249E00CA2 Certificate serial: 11D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft Manifest number: 11CC Signing time: Sun 02 Nov 2025 17:12:07 +0000 Manifest this update: Sun 02 Nov 2025 17:12:06 +0000 Manifest next update: Sun 09 Nov 2025 17:12:06 +0000 Files and hashes: 1: YcuQhfAv-PpF5zL1gDQPQkngDKI.crl (hash: VWeTwABAoIMJkaoXE+GTspb7EA0faLNHeHS2PH7D1IU=) 2: BDC1AB0AFDA611E88FA5E26DC4F9AE02.roa (hash: SB9Ipu4AFekvf7xWy+dJxrZfjpqZ4b1Xx/G1XVRpODY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.crl rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:12:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4565 (0x11d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCB25, serialNumber=61CB9085F02FF8FA45E732F580340F4249E00CA2 Validity Not Before: Nov 2 17:12:06 2025 GMT Not After : Nov 9 17:12:06 2025 GMT Subject: CN=690790e6-b57f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:37:b1:b8:35:9f:b3:58:8a:c4:f8:57:9f:1d: 55:25:38:16:86:d1:42:9a:96:53:f7:e8:1b:3c:44: da:2d:9e:44:c8:a6:99:9d:43:72:f7:49:db:38:a9: 38:34:03:cd:73:25:7f:73:ab:e7:bb:ce:e4:36:4b: 33:c6:08:ff:68:2e:4c:70:47:1c:27:12:70:83:b2: da:5a:7d:a1:bc:2e:a8:a0:32:1c:25:49:2e:15:6f: 00:9a:8e:fe:ac:f5:bd:d9:d0:bb:89:18:49:3e:8c: 14:8a:87:49:af:56:28:ac:65:43:d5:15:e7:de:cb: 3c:9b:3a:67:ad:e4:2b:94:a9:1d:33:b6:e5:b5:57: 39:09:ce:df:5e:f2:bd:56:b6:7b:5a:eb:a4:a1:89: 03:02:8d:fa:37:d7:56:e9:72:2f:b1:4c:e0:02:ea: 1f:52:f6:e0:44:5d:0a:93:7d:66:17:e5:63:a5:42: 30:b4:cb:61:c6:fa:c7:4c:e9:e8:f7:ff:eb:a8:38: 7c:41:8b:ad:df:b3:56:81:d7:ad:35:ca:e0:ec:23: 85:c7:26:80:b1:c9:17:b6:52:fb:59:dc:14:84:de: 9e:a4:d6:4a:ae:84:ac:d7:62:5c:0a:2e:5b:a3:10: 55:74:02:71:ba:00:a4:c2:4e:d1:59:8d:6e:18:a8: e7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:58:39:40:AD:14:FB:EB:2A:02:D1:21:88:B0:1B:F9:52:F4:E7:08 X509v3 Authority Key Identifier: keyid:61:CB:90:85:F0:2F:F8:FA:45:E7:32:F5:80:34:0F:42:49:E0:0C:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:e6:8a:44:5a:4e:f2:cd:1f:db:58:ce:54:6d:e0:24:e8:9d: c4:d6:62:2b:f5:e1:48:bf:98:5d:93:1d:a4:00:bf:bc:66:da: 8a:ea:95:46:17:25:cf:37:ab:d3:23:43:9e:0f:98:d1:27:84: a0:62:50:8f:8a:af:dd:a8:b2:ea:2e:e3:d3:07:22:ce:07:97: a7:71:05:58:72:f8:0c:4e:55:d5:a7:c9:57:8e:5b:6b:38:de: 79:d0:89:a3:42:34:7e:d2:d1:9a:ed:e8:aa:e9:2e:41:1c:8c: 8b:c9:35:d3:c1:b7:02:d4:2e:c5:0d:c5:87:3c:59:c2:a1:16: 4e:63:a8:d5:54:22:15:45:6d:87:3b:7f:33:a1:3a:23:88:78: f8:18:30:26:f7:fa:2b:05:70:d9:50:b3:13:dc:6d:60:ee:4e: fc:93:93:83:76:8d:d5:63:76:6c:6c:cb:96:d8:3a:c9:6c:81: 28:c3:3f:31:37:e4:a6:17:a3:9a:54:7f:d6:14:7e:2b:cb:06: 54:ba:1d:87:b0:4c:19:74:e3:f7:f4:3d:fa:f3:72:f8:4b:4e: 7d:a2:95:83:5c:46:0e:75:e2:0c:1b:4f:89:9c:36:ee:a6:ac: 28:a3:04:3f:f7:dd:3f:d8:26:74:90:4c:d2:55:de:89:ee:b1: 85:28:fd:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENCMjUxMTAvBgNVBAUTKDYxQ0I5MDg1RjAyRkY4RkE0NUU3MzJGNTgwMzQwRjQy NDlFMDBDQTIwHhcNMjUxMTAyMTcxMjA2WhcNMjUxMTA5MTcxMjA2WjAYMRYwFAYD VQQDEw02OTA3OTBlNi1iNTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0TexuDWfs1iKxPhXnx1VJTgWhtFCmpZT9+gbPETaLZ5EyKaZnUNy90nbOKk4 NAPNcyV/c6vnu87kNkszxgj/aC5McEccJxJwg7LaWn2hvC6ooDIcJUkuFW8Amo7+ rPW92dC7iRhJPowUiodJr1YorGVD1RXn3ss8mzpnreQrlKkdM7bltVc5Cc7fXvK9 VrZ7WuukoYkDAo36N9dW6XIvsUzgAuofUvbgRF0Kk31mF+VjpUIwtMthxvrHTOno 9//rqDh8QYut37NWgdetNcrg7COFxyaAsckXtlL7WdwUhN6epNZKroSs12JcCi5b oxBVdAJxugCkwk7RWY1uGKjn3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLVYOUCt FPvrKgLRIYiwG/lS9OcIMB8GA1UdIwQYMBaAFGHLkIXwL/j6Recy9YA0D0JJ4Ayi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0IyNS8yQzYwREZEOEZE QTUxMUU4ODg1OUMwNkJDNEY5QUUwMi9ZY3VRaGZBdi1QcEY1ekwxZ0RRUFFrbmdE S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ljdVFoZkF2LVBwRjV6TDFnRFFQUWtuZ0RLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0IyNS8yQzYwREZEOEZEQTUxMUU4ODg1OUMwNkJDNEY5QUUwMi9ZY3VRaGZBdi1Q cEY1ekwxZ0RRUFFrbmdES0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCn5opEWk7yzR/bWM5UbeAk6J3E1mIr9eFIv5hdkx2kAL+8ZtqK6pVG FyXPN6vTI0OeD5jRJ4SgYlCPiq/dqLLqLuPTByLOB5encQVYcvgMTlXVp8lXjltr ON550ImjQjR+0tGa7eiq6S5BHIyLyTXTwbcC1C7FDcWHPFnCoRZOY6jVVCIVRW2H O38zoTojiHj4GDAm9/orBXDZULMT3G1g7k78k5ODdo3VY3ZsbMuW2DrJbIEowz8x N+SmF6OaVH/WFH4rywZUuh2HsEwZdOP39D3683L4S059opWDXEYOdeIMG0+JnDbu pqwoowQ/990/2CZ0kEzSVd6J7rGFKP20 -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:41 2025 by rpki-client