$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft File: YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft (raw, json) Hash identifier: p0guccW4vKW4wTEspn0Bo8ROBixA2Lgyae2niOaKsiE= Subject key identifier: A9:E3:9D:12:44:12:A7:A2:18:16:26:6B:DF:69:A6:CB:11:A6:94:2A Authority key identifier: 60:1D:C5:4B:1F:52:05:08:0E:FD:9A:A6:CF:A5:A5:1C:4A:79:DD:2B Certificate issuer: /CN=A91E5998/serialNumber=601DC54B1F5205080EFD9AA6CFA5A51C4A79DD2B Certificate serial: 067A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft Manifest number: 066F Signing time: Tue 04 Nov 2025 22:39:23 +0000 Manifest this update: Tue 04 Nov 2025 22:39:22 +0000 Manifest next update: Tue 11 Nov 2025 22:39:22 +0000 Files and hashes: 1: YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl (hash: eZcqcUTM1O5kkEegSNWx9zgDSVfNGtJXz/Of4tWDhT0=) 2: 7438DDF0FD4A11EF85D3AC1AC4F9AE02.roa (hash: ZFyON0cFfqWSYmJESFiDKpaoMViJEmJBEJHpK/VixB8=) 3: 24365CBCF51411EFB44F001BC4F9AE02.roa (hash: WNqUPBF8HNjFohXgQh/4EEtiPRYZ8HZnCTlz6HaVU7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:39:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1658 (0x67a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5998, serialNumber=601DC54B1F5205080EFD9AA6CFA5A51C4A79DD2B Validity Not Before: Nov 4 22:39:22 2025 GMT Not After : Nov 11 22:39:22 2025 GMT Subject: CN=690a809a-056e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ac:32:9c:e4:98:ce:e5:78:e7:c8:ad:70:67: f0:84:f3:4c:2d:26:f6:ec:76:ad:ab:14:23:10:81: cb:25:cf:f9:73:a5:3a:9b:d0:07:fc:16:f0:d5:d2: ef:c6:7b:42:68:96:b3:2b:35:cf:65:8c:c5:d7:52: ca:b6:2e:07:17:7f:65:41:8a:3c:32:52:a7:41:66: db:69:bd:d2:08:07:73:30:ca:5b:48:a2:ae:29:81: 04:94:52:7a:b5:94:d2:de:7d:2c:c9:61:7f:12:c5: e1:9e:85:94:6e:cd:4e:a2:86:af:0a:2a:01:0f:f9: 9c:b8:24:33:b1:e6:e9:19:56:c3:3b:b6:e6:26:37: 5f:b5:df:db:2e:4c:63:48:99:24:17:19:1e:10:4f: b9:fc:39:4d:5f:22:6f:f7:f1:a2:06:83:ca:45:06: 12:a8:9a:09:5e:c2:63:cc:55:52:68:bc:ab:5c:ae: 9c:d1:9a:bb:c9:dc:2e:cc:08:7c:a8:a8:17:89:4d: e4:6b:2c:c1:a2:ac:7c:6e:b9:2d:c6:cd:b1:fb:95: af:4d:06:c9:6e:31:79:77:ff:45:40:52:6a:a5:43: f4:36:e6:6a:1a:c3:c0:ce:d5:ab:09:97:f9:27:d6: b3:ec:0a:ea:ba:a0:52:8d:bd:32:2c:5f:60:f9:e5: b1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E3:9D:12:44:12:A7:A2:18:16:26:6B:DF:69:A6:CB:11:A6:94:2A X509v3 Authority Key Identifier: keyid:60:1D:C5:4B:1F:52:05:08:0E:FD:9A:A6:CF:A5:A5:1C:4A:79:DD:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:b9:21:56:5e:78:0d:ea:b7:22:36:02:11:f6:f9:c6:07:4c: 00:12:c8:f1:2c:df:72:84:cd:4e:47:35:64:6d:ce:20:1d:a6: 52:7c:99:88:06:0f:1c:a6:ee:80:5c:e4:b3:4c:f9:68:08:3d: 26:60:2a:f9:9f:cc:1e:a6:ea:fd:d0:09:89:1a:b0:88:0c:64: 67:9b:0d:2e:f9:8f:8b:97:88:5a:c5:44:0e:ca:29:14:db:4c: dc:f1:41:55:9e:ba:cb:b5:0d:37:94:6e:1e:fe:ca:96:5f:2e: c7:f0:ed:5e:15:d1:cf:f3:44:af:14:4a:6e:77:5d:ac:e2:d1: 4a:c0:3a:a4:d7:3f:35:68:38:cf:bd:9c:8c:08:91:03:a2:7e: aa:99:b7:f2:fd:83:21:cf:72:1b:20:26:99:b8:c7:59:11:b3: 71:32:72:61:1d:3e:03:b5:34:ba:6c:5a:cb:4c:0c:1c:58:3b: 43:1f:7c:0f:3a:81:16:20:0f:f9:8a:e9:cd:92:2d:20:1b:ec: cf:9b:1c:ec:46:5f:cb:79:b7:80:81:dc:f9:8b:55:26:a6:0a: de:8a:7a:d9:9f:25:e3:f9:0c:94:4d:83:68:69:ca:fa:83:4e: 55:c9:49:ee:17:c5:77:d6:03:58:47:ca:9b:28:81:fc:10:88: 71:0f:0b:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU5OTgxMTAvBgNVBAUTKDYwMURDNTRCMUY1MjA1MDgwRUZEOUFBNkNGQTVBNTFD NEE3OUREMkIwHhcNMjUxMTA0MjIzOTIyWhcNMjUxMTExMjIzOTIyWjAYMRYwFAYD VQQDEw02OTBhODA5YS0wNTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxawynOSYzuV458itcGfwhPNMLSb27HatqxQjEIHLJc/5c6U6m9AH/Bbw1dLv xntCaJazKzXPZYzF11LKti4HF39lQYo8MlKnQWbbab3SCAdzMMpbSKKuKYEElFJ6 tZTS3n0syWF/EsXhnoWUbs1OooavCioBD/mcuCQzsebpGVbDO7bmJjdftd/bLkxj SJkkFxkeEE+5/DlNXyJv9/GiBoPKRQYSqJoJXsJjzFVSaLyrXK6c0Zq7ydwuzAh8 qKgXiU3kayzBoqx8brktxs2x+5WvTQbJbjF5d/9FQFJqpUP0NuZqGsPAztWrCZf5 J9az7ArquqBSjb0yLF9g+eWxJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKnjnRJE EqeiGBYma99ppssRppQqMB8GA1UdIwQYMBaAFGAdxUsfUgUIDv2aps+lpRxKed0r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTk5OC8yQzU5MkUyODlG MUYxMUVCQjMwRDU3NDNDNEY5QUUwMi9ZQjNGU3g5U0JRZ09fWnFtejZXbEhFcDUz U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lCM0ZTeDlTQlFnT19acW16NldsSEVwNTNTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTk5OC8yQzU5MkUyODlGMUYxMUVCQjMwRDU3NDNDNEY5QUUwMi9ZQjNGU3g5U0JR Z09fWnFtejZXbEhFcDUzU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkuSFWXngN6rciNgIR9vnGB0wAEsjxLN9yhM1ORzVkbc4gHaZSfJmI Bg8cpu6AXOSzTPloCD0mYCr5n8wepur90AmJGrCIDGRnmw0u+Y+Ll4haxUQOyikU 20zc8UFVnrrLtQ03lG4e/sqWXy7H8O1eFdHP80SvFEpud12s4tFKwDqk1z81aDjP vZyMCJEDon6qmbfy/YMhz3IbICaZuMdZEbNxMnJhHT4DtTS6bFrLTAwcWDtDH3wP OoEWIA/5iunNki0gG+zPmxzsRl/LebeAgdz5i1UmpgreinrZnyXj+QyUTYNoacr6 g05VyUnuF8V31gNYR8qbKIH8EIhxDwv9 -----END CERTIFICATE-----Generated at Wed Nov 5 19:29:38 2025 by rpki-client