$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/YrvIR87fi9d90MN073t-ZMJQ470.mft File: YrvIR87fi9d90MN073t-ZMJQ470.mft (raw, json) Hash identifier: iVDQ/JUia0XCBiM7CRpHtbfRybcvyBJUjQ6FPkOJ8OQ= Subject key identifier: 55:EF:E5:A3:EC:0F:AD:CA:8B:8B:30:09:EA:DC:64:8A:26:6E:11:3D Authority key identifier: 62:BB:C8:47:CE:DF:8B:D7:7D:D0:C3:74:EF:7B:7E:64:C2:50:E3:BD Certificate issuer: /CN=A91EF634/serialNumber=62BBC847CEDF8BD77DD0C374EF7B7E64C250E3BD Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YrvIR87fi9d90MN073t-ZMJQ470.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/YrvIR87fi9d90MN073t-ZMJQ470.mft Manifest number: 28 Signing time: Wed 05 Nov 2025 07:52:45 +0000 Manifest this update: Wed 05 Nov 2025 07:52:45 +0000 Manifest next update: Wed 12 Nov 2025 07:52:45 +0000 Files and hashes: 1: YrvIR87fi9d90MN073t-ZMJQ470.crl (hash: fFiaV6AdVV4HGb3TNSQ6HhOjJvCamTu/kEXkQnE+DNA=) 2: 746CEA6E7CD911F0942A980CC4F9AE02.roa (hash: dtwgvFiT0agZNrnZV5YlHwJWndOHgTVg9Hlvyneymg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/YrvIR87fi9d90MN073t-ZMJQ470.crl rsync://rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/YrvIR87fi9d90MN073t-ZMJQ470.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YrvIR87fi9d90MN073t-ZMJQ470.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:52:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF634, serialNumber=62BBC847CEDF8BD77DD0C374EF7B7E64C250E3BD Validity Not Before: Nov 5 07:52:45 2025 GMT Not After : Nov 12 07:52:45 2025 GMT Subject: CN=690b024d-5b0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2c:d1:fd:4c:4a:4f:05:43:a1:0a:90:28:c9: 96:f8:f2:66:43:1d:b6:ae:98:55:8b:7e:21:db:86: 97:9a:d6:c1:64:d3:4c:16:7b:71:48:ef:74:61:9a: e4:d2:a7:a6:56:64:da:fa:e1:0d:1e:6a:36:f4:26: 02:a7:94:fe:83:18:51:b2:97:de:f6:7b:74:b4:8c: 36:32:d4:86:f4:84:eb:31:45:a8:0e:41:11:c2:2f: 23:b9:20:46:f9:8c:a4:d1:5a:76:e4:2a:50:22:9b: c0:ca:62:ce:e9:10:ec:dc:67:30:b8:91:e1:a2:d6: f8:e7:7b:90:e9:05:0f:71:a4:9e:cd:50:a8:29:c9: cb:27:ef:6c:17:af:a9:93:85:d2:a1:1f:ba:5e:47: 22:3f:ad:11:cd:5e:5a:bd:59:a0:6b:25:81:d8:16: 77:67:2f:84:a1:6a:95:dd:fb:ce:89:97:5a:db:f3: f8:38:c0:55:65:c2:07:16:09:4c:08:af:2d:e0:8e: 09:37:69:0a:b5:c8:00:94:fc:7b:f8:8e:72:79:e4: 3a:1b:f2:20:82:74:2c:5b:6d:b0:02:b8:0f:c4:cc: 9b:e4:5f:5a:eb:a6:ff:e4:42:35:b0:70:11:2e:7f: c7:ca:e6:20:06:23:37:43:4f:e9:f7:54:41:d6:6a: d8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:EF:E5:A3:EC:0F:AD:CA:8B:8B:30:09:EA:DC:64:8A:26:6E:11:3D X509v3 Authority Key Identifier: keyid:62:BB:C8:47:CE:DF:8B:D7:7D:D0:C3:74:EF:7B:7E:64:C2:50:E3:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/YrvIR87fi9d90MN073t-ZMJQ470.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YrvIR87fi9d90MN073t-ZMJQ470.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/YrvIR87fi9d90MN073t-ZMJQ470.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:42:53:65:75:21:b7:a0:4b:33:d6:14:f4:93:49:20:14:c1: 87:ff:38:76:7b:e1:eb:a9:ed:73:38:5f:5b:ff:84:28:06:1d: 10:fc:b8:ed:2c:fb:b4:60:ca:0f:04:96:92:2f:f2:52:ff:86: 07:ef:5e:55:09:7d:e6:0d:19:e8:d2:1c:bd:f5:64:2d:60:85: 82:16:66:8f:0c:cd:54:b0:5f:cf:c8:24:c2:89:e8:e1:92:2b: 38:22:45:61:8b:16:fc:bb:4e:78:f6:6d:b3:6e:fc:04:47:de: d0:fd:47:12:15:a2:b2:40:5c:d3:d7:51:2d:a8:f9:49:58:2b: e8:98:54:7a:ed:64:81:4f:e5:62:47:6a:46:2f:cd:b1:7d:ad: 21:af:77:28:3d:da:90:8d:c4:4d:65:92:13:60:01:32:32:b1: 92:9e:bb:4e:bc:dd:dd:14:b5:c5:5f:83:80:c6:86:c8:07:ce: c2:3e:b4:7a:4b:ed:f5:fb:09:44:63:fe:41:39:c2:92:0d:d9: 60:98:cf:f5:f8:b1:44:b9:3c:f5:7f:22:fc:11:9a:fd:40:6c: 05:4a:5d:0a:79:84:03:30:32:ea:a2:62:d1:69:ff:56:31:dd: 65:3a:01:56:ff:d7:92:cd:8f:09:81:08:57:f1:a5:14:9e:bd: f1:17:c7:f0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RjYzNDExMC8GA1UEBRMoNjJCQkM4NDdDRURGOEJENzdERDBDMzc0RUY3QjdFNjRD MjUwRTNCRDAeFw0yNTExMDUwNzUyNDVaFw0yNTExMTIwNzUyNDVaMBgxFjAUBgNV BAMTDTY5MGIwMjRkLTViMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeLNH9TEpPBUOhCpAoyZb48mZDHbaumFWLfiHbhpea1sFk00wWe3FI73RhmuTS p6ZWZNr64Q0eajb0JgKnlP6DGFGyl972e3S0jDYy1Ib0hOsxRagOQRHCLyO5IEb5 jKTRWnbkKlAim8DKYs7pEOzcZzC4keGi1vjne5DpBQ9xpJ7NUKgpycsn72wXr6mT hdKhH7peRyI/rRHNXlq9WaBrJYHYFndnL4ShapXd+86Jl1rb8/g4wFVlwgcWCUwI ry3gjgk3aQq1yACU/Hv4jnJ55Dob8iCCdCxbbbACuA/EzJvkX1rrpv/kQjWwcBEu f8fK5iAGIzdDT+n3VEHWatitAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVe/lo+wP rcqLizAJ6txkiiZuET0wHwYDVR0jBBgwFoAUYrvIR87fi9d90MN073t+ZMJQ470w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGNjM0LzFCRkRFRTVBN0NE OTExRjBBOUE0M0QwQkM0RjlBRTAyL1lydklSODdmaTlkOTBNTjA3M3QtWk1KUTQ3 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWXJ2SVI4N2ZpOWQ5ME1OMDczdC1aTUpRNDcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVG NjM0LzFCRkRFRTVBN0NEOTExRjBBOUE0M0QwQkM0RjlBRTAyL1lydklSODdmaTlk OTBNTjA3M3QtWk1KUTQ3MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC9CU2V1IbegSzPWFPSTSSAUwYf/OHZ74eup7XM4X1v/hCgGHRD8uO0s +7Rgyg8ElpIv8lL/hgfvXlUJfeYNGejSHL31ZC1ghYIWZo8MzVSwX8/IJMKJ6OGS KzgiRWGLFvy7Tnj2bbNu/ARH3tD9RxIVorJAXNPXUS2o+UlYK+iYVHrtZIFP5WJH akYvzbF9rSGvdyg92pCNxE1lkhNgATIysZKeu0683d0UtcVfg4DGhsgHzsI+tHpL 7fX7CURj/kE5wpIN2WCYz/X4sUS5PPV/IvwRmv1AbAVKXQp5hAMwMuqiYtFp/1Yx 3WU6AVb/15LNjwmBCFfxpRSevfEXx/A= -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:16 2025 by rpki-client