$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft File: YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft (raw, json) Hash identifier: Ka/+W7GTpsu5hiTdqs3/eea1L5we914DY02Gpr/xX5o= Subject key identifier: 13:98:C8:C4:D2:E2:71:01:4E:4C:8E:4C:5B:C3:D3:EC:7D:6B:6A:1F Authority key identifier: 60:9A:31:26:E2:36:9A:97:D4:7F:D6:44:98:D8:16:5E:21:E5:25:C5 Certificate issuer: /CN=A91F59DF/serialNumber=609A3126E2369A97D47FD64498D8165E21E525C5 Certificate serial: 067A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft Manifest number: 066C Signing time: Wed 22 Oct 2025 23:31:28 +0000 Manifest this update: Wed 22 Oct 2025 23:31:27 +0000 Manifest next update: Wed 29 Oct 2025 23:31:27 +0000 Files and hashes: 1: YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl (hash: drQt1UbtG53lp57P0275ZcY2DXNgHIdeQR8cKPROR04=) 2: 1348519E9C1211EBA38A7C4CC4F9AE02.roa (hash: jmj2Qf4qhtOu5u36GPmwSsc+P3+wO6jacfxys+6pyWY=) 3: 354314309C0F11EBAEFB6225C4F9AE02.roa (hash: JJP7X3f6AVH5KsSFfVI30UVBcX+xwO84hT0LgBX60uQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 23:31:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1658 (0x67a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59DF, serialNumber=609A3126E2369A97D47FD64498D8165E21E525C5 Validity Not Before: Oct 22 23:31:27 2025 GMT Not After : Oct 29 23:31:27 2025 GMT Subject: CN=68f9694f-100a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:92:27:73:4a:cb:27:82:8d:42:15:dc:17:b3: 03:52:41:9d:97:28:10:a5:27:88:94:c6:b1:8a:aa: 6c:5f:1e:f6:2d:5f:fe:99:8d:a0:b1:ef:a7:22:1d: fc:af:2c:35:93:86:e6:b3:3b:1d:29:33:de:cb:56: f4:34:34:3f:85:84:03:ae:eb:8e:b3:11:51:75:23: 28:a7:28:52:f4:98:80:4a:b7:59:9b:44:90:e4:83: d2:e2:6a:03:00:5d:24:96:ea:91:18:f4:0e:2b:a9: 9f:47:a4:3b:af:af:bc:70:4b:2c:a6:52:4a:4e:fb: 92:5d:cf:44:1e:a2:46:28:6c:87:2c:a6:ef:dd:6b: e3:c7:ae:3e:29:d0:09:f9:47:0b:87:ba:1d:46:4c: 1c:66:54:1e:0e:2c:7b:9b:a6:f6:b9:60:83:2b:e7: 54:e7:08:38:3c:87:3c:e8:1a:09:51:f0:0e:9d:cd: 20:17:80:cc:0b:59:93:38:37:f1:07:51:40:dc:2e: ca:62:22:d4:79:70:25:26:10:29:57:8b:59:23:73: 18:47:ec:91:1b:d0:7e:ff:63:1e:e7:b5:79:14:07: 60:c0:ad:4d:bd:de:0a:94:3f:dd:46:27:3d:91:60: e2:42:01:41:87:73:68:8f:11:b6:4b:03:9a:44:26: e1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:98:C8:C4:D2:E2:71:01:4E:4C:8E:4C:5B:C3:D3:EC:7D:6B:6A:1F X509v3 Authority Key Identifier: keyid:60:9A:31:26:E2:36:9A:97:D4:7F:D6:44:98:D8:16:5E:21:E5:25:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:86:ca:f1:be:6c:66:c4:51:66:1e:7d:9a:6c:59:da:c9:0d: 24:81:19:6a:a9:ff:17:02:b1:5e:05:06:44:6b:9c:8e:91:8e: 6d:a1:23:4e:e2:90:d0:3d:ee:08:e9:b4:29:d1:bd:48:72:58: be:98:d2:0e:f7:54:35:b2:ac:2e:33:c4:6f:ef:59:0f:1b:c8: ed:45:4c:2d:21:fa:a0:91:49:6c:f3:6e:ed:52:90:c3:81:5f: 2b:0a:b9:d6:6b:81:81:42:dc:e2:a6:0b:0d:50:5c:c6:e3:80: 75:7b:3b:07:19:b6:05:a5:a2:32:a0:1e:bd:78:1e:7b:72:24: 4d:bc:5b:c8:62:2e:09:ab:26:28:67:e9:7f:07:ef:5d:43:ca: f6:f8:d7:44:8b:6f:f8:6e:bf:8b:71:97:1f:cc:93:00:5d:12: 9c:e7:ef:80:44:14:fa:e7:c3:bb:09:6d:b0:12:ee:9e:ce:c7: dd:a2:a9:7f:5d:57:12:5a:e3:40:8c:23:75:a8:d6:ce:c7:7a: 5c:a6:fe:09:c0:27:d6:c4:79:8a:79:56:44:6a:0d:d5:56:a2: 78:f5:ad:e6:e6:af:84:76:cf:83:2f:e9:58:27:85:5b:3c:dd: 1f:ec:c4:39:5a:48:3e:1e:5b:68:48:94:c8:40:47:46:34:f9: a4:eb:a3:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5REYxMTAvBgNVBAUTKDYwOUEzMTI2RTIzNjlBOTdENDdGRDY0NDk4RDgxNjVF MjFFNTI1QzUwHhcNMjUxMDIyMjMzMTI3WhcNMjUxMDI5MjMzMTI3WjAYMRYwFAYD VQQDEw02OGY5Njk0Zi0xMDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA95Inc0rLJ4KNQhXcF7MDUkGdlygQpSeIlMaxiqpsXx72LV/+mY2gse+nIh38 ryw1k4bmszsdKTPey1b0NDQ/hYQDruuOsxFRdSMopyhS9JiASrdZm0SQ5IPS4moD AF0kluqRGPQOK6mfR6Q7r6+8cEssplJKTvuSXc9EHqJGKGyHLKbv3Wvjx64+KdAJ +UcLh7odRkwcZlQeDix7m6b2uWCDK+dU5wg4PIc86BoJUfAOnc0gF4DMC1mTODfx B1FA3C7KYiLUeXAlJhApV4tZI3MYR+yRG9B+/2Me57V5FAdgwK1Nvd4KlD/dRic9 kWDiQgFBh3NojxG2SwOaRCbhnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBOYyMTS 4nEBTkyOTFvD0+x9a2ofMB8GA1UdIwQYMBaAFGCaMSbiNpqX1H/WRJjYFl4h5SXF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlERi9CQjUyRjRBQzlD MEQxMUVCQUVEODRCMjRDNEY5QUUwMi9ZSm94SnVJMm1wZlVmOVpFbU5nV1hpSGxK Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lKb3hKdUkybXBmVWY5WkVtTmdXWGlIbEpjVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTlERi9CQjUyRjRBQzlDMEQxMUVCQUVEODRCMjRDNEY5QUUwMi9ZSm94SnVJMm1w ZlVmOVpFbU5nV1hpSGxKY1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwhsrxvmxmxFFmHn2abFnayQ0kgRlqqf8XArFeBQZEa5yOkY5toSNO 4pDQPe4I6bQp0b1Icli+mNIO91Q1sqwuM8Rv71kPG8jtRUwtIfqgkUls827tUpDD gV8rCrnWa4GBQtzipgsNUFzG44B1ezsHGbYFpaIyoB69eB57ciRNvFvIYi4JqyYo Z+l/B+9dQ8r2+NdEi2/4br+LcZcfzJMAXRKc5++ARBT658O7CW2wEu6ezsfdoql/ XVcSWuNAjCN1qNbOx3pcpv4JwCfWxHmKeVZEag3VVqJ49a3m5q+Eds+DL+lYJ4Vb PN0f7MQ5Wkg+HltoSJTIQEdGNPmk66PA -----END CERTIFICATE-----Generated at Thu Oct 23 20:12:23 2025 by rpki-client