$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft File: YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft (raw, json) Hash identifier: hYAbjUbW33sCn47lFue56QlPz9fVZfRKQrAmRJqGgcU= Subject key identifier: B7:A9:92:70:05:E0:80:1E:05:66:96:5E:CC:12:4B:EF:0B:D1:08:89 Authority key identifier: 61:57:75:A4:DE:23:E4:6A:8B:57:C8:F7:B9:C9:E1:E8:86:E5:D8:D5 Certificate issuer: /CN=A91DF195/serialNumber=615775A4DE23E46A8B57C8F7B9C9E1E886E5D8D5 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft Manifest number: 1B Signing time: Wed 05 Nov 2025 08:01:56 +0000 Manifest this update: Wed 05 Nov 2025 08:01:56 +0000 Manifest next update: Wed 12 Nov 2025 08:01:55 +0000 Files and hashes: 1: YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl (hash: E26Nx0UL6kx/TUKBdkaWoGOnCXAYhjrBPYAXyl0tJss=) 2: DD3F28CC93D111F0B0A32B0BC4F9AE02.roa (hash: OJep3Jj5FjQRgEx+dN34IpTpsR0/ZkQ1f2GGqPdjPgg=) 3: B2B63AAC93CF11F0AFB6CD40C4F9AE02.roa (hash: QZkJm8VBjgXrSCDM+VZ1EYZWVut/5O77RoipwMHofMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF195, serialNumber=615775A4DE23E46A8B57C8F7B9C9E1E886E5D8D5 Validity Not Before: Nov 5 08:01:56 2025 GMT Not After : Nov 12 08:01:55 2025 GMT Subject: CN=690b0474-fd88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4d:c7:ac:d2:1e:57:c5:d7:a4:48:b9:41:43: d4:65:fb:9a:d1:ca:a0:8c:eb:93:95:1a:67:fa:d4: ea:3c:b2:37:62:91:64:65:a5:a1:f7:55:f5:b7:76: 5f:48:b9:57:1b:f9:35:b9:9d:f2:5e:b8:f7:76:47: 48:3a:e0:f9:78:08:ff:c1:2d:1c:c4:06:7f:7a:96: 70:32:23:51:c5:e1:5a:3a:f9:d8:47:ba:b0:f6:1e: 87:9a:6a:72:03:5c:78:da:b2:a6:4d:30:0d:06:67: 07:81:26:30:ad:dd:36:95:8c:c5:0e:c6:b8:ee:da: 4a:d5:82:0d:d9:fd:87:8a:fa:91:bd:e6:c0:5f:30: 60:2a:ce:4a:8f:c8:fc:d5:b0:4e:e3:59:70:b8:61: b6:e6:a5:88:56:40:70:2a:7b:10:f7:91:02:54:53: ab:04:a9:70:0b:98:52:1f:9b:97:8f:1b:4b:d8:c1: 34:fd:07:55:a3:eb:b5:6a:f9:98:33:3d:49:1d:e4: d0:02:40:ce:5a:40:8e:de:3c:d7:a4:b8:63:89:9d: 4c:be:3d:30:47:cc:a4:ea:fa:bc:83:01:fa:df:e0: e5:dc:6f:e4:a8:8c:a6:8f:44:e1:7d:0a:de:25:90: 1b:f6:8a:8e:96:ec:f4:e3:dc:b0:3b:43:51:20:00: 3e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A9:92:70:05:E0:80:1E:05:66:96:5E:CC:12:4B:EF:0B:D1:08:89 X509v3 Authority Key Identifier: keyid:61:57:75:A4:DE:23:E4:6A:8B:57:C8:F7:B9:C9:E1:E8:86:E5:D8:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:9e:9f:69:ff:06:ec:d1:29:ee:d2:9a:1e:9a:b0:4b:11:fb: 6b:da:ce:c3:15:55:29:0b:96:17:ab:6c:51:5a:5b:ac:0b:03: cd:7a:d6:01:fb:8a:e1:f4:52:1a:ae:54:c7:23:73:41:b9:c0: dd:57:65:ff:1e:de:7a:3a:11:73:50:ec:2a:ce:a8:f3:04:97: 63:76:72:a1:1f:07:44:df:5e:1e:6b:7a:b0:ba:4a:17:96:a3: ce:cb:3a:8e:f4:59:21:80:30:81:e7:59:cf:32:28:12:30:e2: 35:41:b9:af:82:e7:37:2a:f0:f4:ba:b8:a2:a1:7f:2e:6f:35: 95:ba:8f:b7:81:31:ea:c3:43:41:a3:a1:19:05:5a:6a:ae:3d: 64:8d:17:3e:81:60:a1:68:67:d4:8d:9e:44:8d:e6:41:27:19: bd:52:64:40:21:6c:17:a6:d8:a5:73:4e:0d:9a:cf:34:ef:89: ad:9a:53:cd:bd:2b:16:2f:fa:68:ed:44:72:c7:82:35:98:b3: 15:fe:6d:a3:46:1e:39:ca:5c:c3:8d:81:87:26:71:97:4d:5b: a1:34:5a:40:e5:93:dc:ca:88:fe:c2:f5:c2:ef:c3:9f:e7:4d: 3a:42:04:0d:93:1c:21:2c:c0:aa:c5:a3:96:4d:c2:e0:0e:69: e7:bc:2c:c2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RjE5NTExMC8GA1UEBRMoNjE1Nzc1QTRERTIzRTQ2QThCNTdDOEY3QjlDOUUxRTg4 NkU1RDhENTAeFw0yNTExMDUwODAxNTZaFw0yNTExMTIwODAxNTVaMBgxFjAUBgNV BAMTDTY5MGIwNDc0LWZkODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6Tces0h5XxdekSLlBQ9Rl+5rRyqCM65OVGmf61Oo8sjdikWRlpaH3VfW3dl9I uVcb+TW5nfJeuPd2R0g64Pl4CP/BLRzEBn96lnAyI1HF4Vo6+dhHurD2HoeaanID XHjasqZNMA0GZweBJjCt3TaVjMUOxrju2krVgg3Z/YeK+pG95sBfMGAqzkqPyPzV sE7jWXC4YbbmpYhWQHAqexD3kQJUU6sEqXALmFIfm5ePG0vYwTT9B1Wj67Vq+Zgz PUkd5NACQM5aQI7ePNekuGOJnUy+PTBHzKTq+ryDAfrf4OXcb+SojKaPROF9Ct4l kBv2io6W7PTj3LA7Q1EgAD6NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUt6mScAXg gB4FZpZezBJL7wvRCIkwHwYDVR0jBBgwFoAUYVd1pN4j5GqLV8j3ucnh6Ibl2NUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGMTk1Lzc0QzE4RjcwOTM4 QTExRjBCQkQ2MjM4NUM0RjlBRTAyL1lWZDFwTjRqNUdxTFY4ajN1Y25oNklibDJO VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWVZkMXBONGo1R3FMVjhqM3Vjbmg2SWJsMk5VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG MTk1Lzc0QzE4RjcwOTM4QTExRjBCQkQ2MjM4NUM0RjlBRTAyL1lWZDFwTjRqNUdx TFY4ajN1Y25oNklibDJOVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAeen2n/BuzRKe7Smh6asEsR+2vazsMVVSkLlherbFFaW6wLA8161gH7 iuH0UhquVMcjc0G5wN1XZf8e3no6EXNQ7CrOqPMEl2N2cqEfB0TfXh5rerC6SheW o87LOo70WSGAMIHnWc8yKBIw4jVBua+C5zcq8PS6uKKhfy5vNZW6j7eBMerDQ0Gj oRkFWmquPWSNFz6BYKFoZ9SNnkSN5kEnGb1SZEAhbBem2KVzTg2azzTvia2aU829 KxYv+mjtRHLHgjWYsxX+baNGHjnKXMONgYcmcZdNW6E0WkDlk9zKiP7C9cLvw5/n TTpCBA2THCEswKrFo5ZNwuAOaee8LMI= -----END CERTIFICATE-----Generated at Wed Nov 5 20:56:00 2025 by rpki-client