$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft File: ySRgFCV-7__-gM0-q_7WeomNb1c.mft (raw, json) Hash identifier: Wca5k0VU/KjBZ/71A5k4TASXi/VDw3XVuP2wekNvGGE= Subject key identifier: C6:13:16:FF:A5:B4:34:79:EE:60:29:21:E4:34:48:42:5D:59:B4:16 Authority key identifier: C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57 Certificate issuer: /CN=A91F9766/serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57 Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft Manifest number: 8B Signing time: Wed 05 Nov 2025 06:48:13 +0000 Manifest this update: Wed 05 Nov 2025 06:48:13 +0000 Manifest next update: Wed 12 Nov 2025 06:48:13 +0000 Files and hashes: 1: ySRgFCV-7__-gM0-q_7WeomNb1c.crl (hash: PFmTf42bNlOYCnzjx2AEGnbJavgDGnW/9vG8VBddb/Q=) 2: 28CED806EA5811EF90C1D323C4F9AE02.roa (hash: b2BcNMesZ27DQqzlZd7MPdoju4HvYEGHIF6wjO+48TQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.crl rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9766, serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57 Validity Not Before: Nov 5 06:48:13 2025 GMT Not After : Nov 12 06:48:13 2025 GMT Subject: CN=690af32d-f9ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ee:ad:2d:be:c9:08:4a:1a:3c:45:34:6a:2b: b2:56:e2:62:9c:61:69:e9:6a:f8:21:c6:54:50:dd: da:93:9c:d3:ac:65:da:e1:26:7e:c7:d2:ba:e7:6a: 41:65:c8:9c:9f:aa:be:c2:5e:ca:19:66:be:16:6c: 25:dc:62:c2:e8:c4:97:66:24:93:c2:59:0a:54:b4: e0:60:ad:be:3e:14:e3:5b:af:01:16:98:f1:99:d6: b0:22:fb:2c:c7:ed:66:78:ef:e4:a1:45:35:f2:d2: e8:ae:d9:c0:a9:0e:f1:0a:d6:28:03:cf:01:e8:70: 4b:df:e6:ff:0e:21:d2:5b:78:dc:d7:fb:3a:36:43: 4d:06:0c:42:52:47:d0:93:2b:67:64:c4:c5:47:1c: ad:65:05:81:0e:bd:25:42:3f:ef:43:ce:b9:22:ac: 89:13:0d:bc:0e:1d:83:9c:08:19:bc:a7:78:da:8f: af:4b:33:0e:48:b0:59:7b:d8:c0:19:c0:4e:4e:2e: ae:76:23:97:78:d1:53:b3:b9:1e:14:1b:ee:7a:30: d1:8b:02:57:a4:a5:3e:ce:02:8d:27:27:ae:51:04: a9:7d:dd:cf:4e:49:08:12:5d:1b:0c:8b:31:30:15: ea:8b:8f:8d:7d:c1:eb:44:df:76:61:85:5f:53:b8: 75:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:13:16:FF:A5:B4:34:79:EE:60:29:21:E4:34:48:42:5D:59:B4:16 X509v3 Authority Key Identifier: keyid:C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:4d:6f:d9:12:29:b5:81:04:7a:6d:a1:4d:68:1a:a3:3f:c9: 3e:ba:0c:c6:a7:80:21:dc:34:9c:0c:90:98:42:a0:f6:1f:73: f2:7b:e8:e8:be:7f:77:66:b3:81:4a:92:70:af:04:e1:4c:b7: 47:ae:14:dd:ae:10:51:49:61:e8:59:71:39:41:63:03:f5:c3: 93:fc:78:1f:84:78:71:cf:25:b1:8d:18:6c:2e:3e:a1:b4:17: 62:17:57:ae:07:cb:cc:c0:72:e7:8e:fb:78:5f:25:4b:56:9e: 61:2b:a3:fe:ff:40:cd:2b:36:89:aa:6a:04:05:b8:b4:2c:28: 1f:45:1c:99:6d:0d:9f:8f:8c:9e:db:dd:5b:c8:b8:69:5d:2c: 44:de:2a:21:ca:7f:5d:6b:48:cf:37:39:2b:eb:26:31:85:fe: 0e:e6:c6:2d:36:b7:8e:a8:9d:5f:23:f1:96:bd:cf:4f:f1:77: 8f:20:fb:13:73:88:8a:2e:28:3a:89:c4:54:b6:32:5b:13:09: 90:7d:8b:df:8d:c4:db:e1:68:64:f6:94:fc:03:16:83:b6:ee: 59:34:37:2f:55:91:36:22:74:ac:49:94:65:d1:c7:61:c3:9a: 37:2f:37:18:6c:51:3f:b4:70:5b:73:be:c8:1c:3f:7f:2d:49: c0:c3:29:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk3NjYxMTAvBgNVBAUTKEM5MjQ2MDE0MjU3RUVGRkZGRTgwQ0QzRUFCRkVENjdB ODk4RDZGNTcwHhcNMjUxMTA1MDY0ODEzWhcNMjUxMTEyMDY0ODEzWjAYMRYwFAYD VQQDEw02OTBhZjMyZC1mOWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+6tLb7JCEoaPEU0aiuyVuJinGFp6Wr4IcZUUN3ak5zTrGXa4SZ+x9K652pB Zcicn6q+wl7KGWa+Fmwl3GLC6MSXZiSTwlkKVLTgYK2+PhTjW68BFpjxmdawIvss x+1meO/koUU18tLortnAqQ7xCtYoA88B6HBL3+b/DiHSW3jc1/s6NkNNBgxCUkfQ kytnZMTFRxytZQWBDr0lQj/vQ865IqyJEw28Dh2DnAgZvKd42o+vSzMOSLBZe9jA GcBOTi6udiOXeNFTs7keFBvuejDRiwJXpKU+zgKNJyeuUQSpfd3PTkkIEl0bDIsx MBXqi4+NfcHrRN92YYVfU7h1iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMYTFv+l tDR57mApIeQ0SEJdWbQWMB8GA1UdIwQYMBaAFMkkYBQlfu///oDNPqv+1nqJjW9X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTc2Ni84MEY1OUU5NEVB NTcxMUVGQjQyQ0IyODVDNEY5QUUwMi95U1JnRkNWLTdfXy1nTTAtcV83V2VvbU5i MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lTUmdGQ1YtN19fLWdNMC1xXzdXZW9tTmIxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTc2Ni84MEY1OUU5NEVBNTcxMUVGQjQyQ0IyODVDNEY5QUUwMi95U1JnRkNWLTdf Xy1nTTAtcV83V2VvbU5iMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvTW/ZEim1gQR6baFNaBqjP8k+ugzGp4Ah3DScDJCYQqD2H3Pye+jo vn93ZrOBSpJwrwThTLdHrhTdrhBRSWHoWXE5QWMD9cOT/HgfhHhxzyWxjRhsLj6h tBdiF1euB8vMwHLnjvt4XyVLVp5hK6P+/0DNKzaJqmoEBbi0LCgfRRyZbQ2fj4ye 291byLhpXSxE3iohyn9da0jPNzkr6yYxhf4O5sYtNreOqJ1fI/GWvc9P8XePIPsT c4iKLig6icRUtjJbEwmQfYvfjcTb4Whk9pT8AxaDtu5ZNDcvVZE2InSsSZRl0cdh w5o3LzcYbFE/tHBbc77IHD9/LUnAwym4 -----END CERTIFICATE-----Generated at Wed Nov 5 13:26:12 2025 by rpki-client