$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft File: YmfJfrSg3wHtvW-dQahqh54CeX8.mft (raw, json) Hash identifier: JLD6xntW+yJWnUCdw0QgGzNosy7iBceuqAWiKnn58jA= Subject key identifier: C2:82:EC:ED:1B:1C:C4:41:1E:2B:7B:63:8E:C0:6F:C8:30:B8:71:4A Authority key identifier: 62:67:C9:7E:B4:A0:DF:01:ED:BD:6F:9D:41:A8:6A:87:9E:02:79:7F Certificate issuer: /CN=A91FA66B/serialNumber=6267C97EB4A0DF01EDBD6F9D41A86A879E02797F Certificate serial: 01F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft Manifest number: 01F4 Signing time: Wed 05 Nov 2025 02:41:03 +0000 Manifest this update: Wed 05 Nov 2025 02:41:02 +0000 Manifest next update: Wed 12 Nov 2025 02:41:02 +0000 Files and hashes: 1: YmfJfrSg3wHtvW-dQahqh54CeX8.crl (hash: 3s9yGPEGLqLUQve+XUHYtPtk/43St3DTei7IMRNmby8=) 2: B2DE2498C4FD11ED909F2770C4F9AE02.roa (hash: sz+mmIZs/29Io2xKT3w1Go850hnuQbV97uqO5OCD7zA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.crl rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 503 (0x1f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA66B, serialNumber=6267C97EB4A0DF01EDBD6F9D41A86A879E02797F Validity Not Before: Nov 5 02:41:02 2025 GMT Not After : Nov 12 02:41:02 2025 GMT Subject: CN=690ab93e-825b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f6:91:b2:7a:19:c6:65:30:8e:fa:31:b1:0f: 41:7d:d1:d9:4b:45:fb:be:f4:d5:5a:eb:8d:e9:d4: ad:df:25:9a:cc:76:68:e4:57:6d:e9:53:3c:7c:a2: 44:18:46:e5:49:f7:c5:c5:7f:d6:db:b0:48:c3:29: 16:1c:67:c8:bc:cd:f8:b6:34:07:20:af:bd:99:61: 46:ee:a8:62:06:b3:41:12:c2:a1:07:78:e7:72:25: 39:50:42:0c:f9:be:4e:0f:a3:cd:aa:b6:8f:68:1b: 9f:c9:f5:e1:b2:93:db:46:f3:5c:25:33:65:be:0c: b0:da:7c:65:de:01:91:80:19:29:4b:b9:16:45:9c: bb:b0:fd:7a:e9:5e:17:47:6d:83:c7:48:dc:0b:18: 04:70:0a:c3:cb:72:cf:8e:ac:9b:ab:0f:3e:60:52: 3c:21:7a:0c:49:20:bf:4b:4d:a6:1b:bb:18:6e:0b: 7b:4d:80:c1:0a:3f:32:2c:d5:4d:bb:bc:37:42:49: 6c:9c:97:df:d9:b3:c4:eb:79:c8:da:17:10:6a:50: db:1f:bd:c5:85:ac:42:b0:41:7c:71:32:06:61:84: f7:e1:ba:dd:31:5a:a0:bf:70:d0:d3:3b:db:1e:b2: 2a:4a:28:22:60:dd:2f:40:e4:71:f3:ad:1e:03:84: d0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:82:EC:ED:1B:1C:C4:41:1E:2B:7B:63:8E:C0:6F:C8:30:B8:71:4A X509v3 Authority Key Identifier: keyid:62:67:C9:7E:B4:A0:DF:01:ED:BD:6F:9D:41:A8:6A:87:9E:02:79:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:40:7e:c4:be:ec:3b:43:4f:e5:65:79:2c:cf:03:67:ff:7a: 2e:1d:e0:90:0d:5f:12:d1:43:ae:eb:fb:79:80:de:4a:35:82: f0:c7:ad:97:32:f8:8e:dc:1f:e1:87:62:c7:e6:73:8e:b8:f0: bf:49:de:84:2a:ac:15:2c:05:1b:89:d8:4e:1d:6f:59:c6:32: 18:f1:57:68:e7:4f:de:c6:d3:aa:8e:4a:0a:a4:75:71:6c:14: 40:96:e5:a9:2e:d5:e2:d7:e7:4b:7a:b4:e4:11:67:a8:4b:2c: cf:f1:04:18:4f:a4:64:36:e1:90:2c:5f:21:6a:b2:78:88:f1: a0:3c:2d:c8:65:f2:ac:18:35:ce:56:bf:b3:63:7b:c3:b0:28: 8a:d9:b3:ed:53:f9:ac:9b:f2:d0:e5:5e:a0:f7:ce:c0:36:11: 6c:0d:2e:2f:81:58:d8:cd:81:a0:a7:5b:63:86:e0:6d:62:c6: 76:66:62:7c:6e:59:b6:cb:81:ae:30:a5:ee:e4:08:2d:1f:84: 51:e4:46:c2:8e:82:bc:c0:c5:22:c4:4e:be:a3:36:8c:91:32: c6:e9:e9:9e:a6:ae:b4:d3:41:26:d6:2c:12:b9:e7:44:80:b5: 9f:93:44:4f:f7:d2:e8:e4:a4:49:4d:33:a3:66:77:54:a3:02: 1e:40:9b:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2NkIxMTAvBgNVBAUTKDYyNjdDOTdFQjRBMERGMDFFREJENkY5RDQxQTg2QTg3 OUUwMjc5N0YwHhcNMjUxMTA1MDI0MTAyWhcNMjUxMTEyMDI0MTAyWjAYMRYwFAYD VQQDEw02OTBhYjkzZS04MjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPaRsnoZxmUwjvoxsQ9BfdHZS0X7vvTVWuuN6dSt3yWazHZo5Fdt6VM8fKJE GEblSffFxX/W27BIwykWHGfIvM34tjQHIK+9mWFG7qhiBrNBEsKhB3jnciU5UEIM +b5OD6PNqraPaBufyfXhspPbRvNcJTNlvgyw2nxl3gGRgBkpS7kWRZy7sP166V4X R22Dx0jcCxgEcArDy3LPjqybqw8+YFI8IXoMSSC/S02mG7sYbgt7TYDBCj8yLNVN u7w3QklsnJff2bPE63nI2hcQalDbH73FhaxCsEF8cTIGYYT34brdMVqgv3DQ0zvb HrIqSigiYN0vQORx860eA4TQ7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMKC7O0b HMRBHit7Y47Ab8gwuHFKMB8GA1UdIwQYMBaAFGJnyX60oN8B7b1vnUGoaoeeAnl/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY2Qi8xNDJCQ0I5NkM0 RkExMUVEOUJERjMxNTdDNEY5QUUwMi9ZbWZKZnJTZzN3SHR2Vy1kUWFocWg1NENl WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ltZkpmclNnM3dIdHZXLWRRYWhxaDU0Q2VYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTY2Qi8xNDJCQ0I5NkM0RkExMUVEOUJERjMxNTdDNEY5QUUwMi9ZbWZKZnJTZzN3 SHR2Vy1kUWFocWg1NENlWDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkQH7Evuw7Q0/lZXkszwNn/3ouHeCQDV8S0UOu6/t5gN5KNYLwx62X MviO3B/hh2LH5nOOuPC/Sd6EKqwVLAUbidhOHW9ZxjIY8Vdo50/extOqjkoKpHVx bBRAluWpLtXi1+dLerTkEWeoSyzP8QQYT6RkNuGQLF8harJ4iPGgPC3IZfKsGDXO Vr+zY3vDsCiK2bPtU/msm/LQ5V6g987ANhFsDS4vgVjYzYGgp1tjhuBtYsZ2ZmJ8 blm2y4GuMKXu5AgtH4RR5EbCjoK8wMUixE6+ozaMkTLG6emepq6000Em1iwSuedE gLWfk0RP99Lo5KRJTTOjZndUowIeQJvJ -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:41 2025 by rpki-client