$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft File: yZYCtJIcaINWT0smUVwdY-TPNkQ.mft (raw, json) Hash identifier: HRhRenk0aOcW+iRnFxT2Dqe5ERtyN2ZgpFd8/nvomoU= Subject key identifier: A0:B2:8D:22:E8:71:26:76:D5:0B:D8:7F:C3:6D:35:75:E8:5A:3E:97 Authority key identifier: C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44 Certificate issuer: /CN=A91E4EF6/serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644 Certificate serial: 0AB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft Manifest number: 11E9 Signing time: Tue 04 Nov 2025 19:34:25 +0000 Manifest this update: Tue 04 Nov 2025 19:34:24 +0000 Manifest next update: Tue 11 Nov 2025 19:34:24 +0000 Files and hashes: 1: yZYCtJIcaINWT0smUVwdY-TPNkQ.crl (hash: 0CH+hmQu9kuLuLOqBmLzEZ9OojIYMlsa3j0sYyKotyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:34:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2740 (0xab4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF6, serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644 Validity Not Before: Nov 4 19:34:24 2025 GMT Not After : Nov 11 19:34:24 2025 GMT Subject: CN=690a5540-5dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e5:eb:fe:45:d9:e6:ee:20:cb:7a:03:03:20: 2c:86:c8:30:40:b4:3b:7e:52:b3:7b:b9:a1:02:33: ab:d3:41:94:8c:78:ce:a1:a7:aa:67:c8:79:1b:53: 89:5d:4d:59:8b:9c:0a:48:bb:18:af:95:ad:35:b2: 50:a0:1d:7f:7b:0d:0a:e4:4d:8a:fe:dd:ab:96:92: b0:63:b5:53:dc:ae:a2:92:76:93:7b:af:d9:fc:7f: 94:d0:0d:85:9b:49:8b:30:65:1b:21:d3:d4:db:f3: a2:fc:ea:96:9c:e0:4a:2f:36:84:30:9e:73:13:dc: de:ba:95:21:37:42:ce:fe:60:1d:29:54:eb:8f:24: 17:25:a9:bf:f4:94:cd:c7:cc:af:60:74:e7:69:ba: b5:9c:92:53:89:3c:a0:f1:f3:27:87:80:5e:9c:67: b1:e4:10:d6:e1:c5:63:f2:c0:06:d0:cd:59:e2:75: 06:18:99:d6:72:4b:ca:a5:88:ab:26:8e:e0:36:4d: da:99:c4:48:66:73:46:5b:d2:36:26:cd:f4:ee:20: 71:fc:da:49:0a:5e:ca:d5:6e:fd:ea:66:0d:41:10: 3d:78:27:97:f7:c9:6f:4c:64:dd:12:37:82:30:74: a5:61:79:4d:37:cb:ee:93:71:ce:dc:cb:74:5e:85: 9e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B2:8D:22:E8:71:26:76:D5:0B:D8:7F:C3:6D:35:75:E8:5A:3E:97 X509v3 Authority Key Identifier: keyid:C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:48:c8:ae:e2:6c:c0:11:82:1d:37:65:35:da:c8:2e:28:df: c9:0a:ab:cf:e3:71:c4:bf:1a:7f:cc:37:c0:be:2d:96:0b:19: 3a:a8:6b:0a:e0:72:b1:02:4f:bf:ea:e5:69:54:28:32:35:b4: 81:36:88:d1:99:d8:6d:88:06:88:97:5a:0f:f2:d0:f8:49:73: a2:30:31:32:41:71:2e:5b:1d:9d:93:7b:2e:eb:9c:ff:5d:31: 34:32:41:b9:62:6b:02:3a:fc:85:7d:6e:f8:c2:93:5a:77:a3: a1:0e:92:12:f2:2b:a8:93:6e:9a:54:84:65:30:d2:9f:f9:bb: eb:45:db:2d:f2:20:b3:82:2b:7f:d2:52:7e:e8:af:33:15:ec: b6:ec:94:00:8f:6e:0c:de:39:ce:67:3b:a9:24:ae:eb:06:56: 12:8f:60:34:2c:bb:e3:85:94:31:08:91:46:4d:f9:f1:45:8d: 25:8f:c4:3d:61:ff:a5:1e:14:21:f5:b1:64:f4:f6:fa:7a:13: d5:0d:8e:c1:ba:13:98:52:c5:61:1a:cf:58:a9:71:4b:81:5c: 9a:ad:3b:4f:f8:e4:06:dd:eb:89:30:79:29:fb:45:7a:4f:1d: d4:85:b9:74:76:f4:82:38:a8:06:33:34:9d:b3:0a:0a:ef:90: 0a:51:86:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjYxMTAvBgNVBAUTKEM5OTYwMkI0OTIxQzY4ODM1NjRGNEIyNjUxNUMxRDYz RTRDRjM2NDQwHhcNMjUxMTA0MTkzNDI0WhcNMjUxMTExMTkzNDI0WjAYMRYwFAYD VQQDEw02OTBhNTU0MC01ZGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuuXr/kXZ5u4gy3oDAyAshsgwQLQ7flKze7mhAjOr00GUjHjOoaeqZ8h5G1OJ XU1Zi5wKSLsYr5WtNbJQoB1/ew0K5E2K/t2rlpKwY7VT3K6iknaTe6/Z/H+U0A2F m0mLMGUbIdPU2/Oi/OqWnOBKLzaEMJ5zE9zeupUhN0LO/mAdKVTrjyQXJam/9JTN x8yvYHTnabq1nJJTiTyg8fMnh4BenGex5BDW4cVj8sAG0M1Z4nUGGJnWckvKpYir Jo7gNk3amcRIZnNGW9I2Js307iBx/NpJCl7K1W796mYNQRA9eCeX98lvTGTdEjeC MHSlYXlNN8vuk3HO3Mt0XoWewwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCyjSLo cSZ21QvYf8NtNXXoWj6XMB8GA1UdIwQYMBaAFMmWArSSHGiDVk9LJlFcHWPkzzZE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNi85MzgwMDc4RTYx RDYxMUVBQjhEMDE1NUJDNEY5QUUwMi95WllDdEpJY2FJTldUMHNtVVZ3ZFktVFBO a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laWUN0SkljYUlOV1Qwc21VVndkWS1UUE5rUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNi85MzgwMDc4RTYxRDYxMUVBQjhEMDE1NUJDNEY5QUUwMi95WllDdEpJY2FJ TldUMHNtVVZ3ZFktVFBOa1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQSMiu4mzAEYIdN2U12sguKN/JCqvP43HEvxp/zDfAvi2WCxk6qGsK 4HKxAk+/6uVpVCgyNbSBNojRmdhtiAaIl1oP8tD4SXOiMDEyQXEuWx2dk3su65z/ XTE0MkG5YmsCOvyFfW74wpNad6OhDpIS8iuok26aVIRlMNKf+bvrRdst8iCzgit/ 0lJ+6K8zFey27JQAj24M3jnOZzupJK7rBlYSj2A0LLvjhZQxCJFGTfnxRY0lj8Q9 Yf+lHhQh9bFk9Pb6ehPVDY7BuhOYUsVhGs9YqXFLgVyarTtP+OQG3euJMHkp+0V6 Tx3Uhbl0dvSCOKgGMzSdswoK75AKUYZl -----END CERTIFICATE-----Generated at Wed Nov 5 05:27:02 2025 by rpki-client