$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft File: YU0eyLaT57tfMs-lJ7UCgyad_is.mft (raw, json) Hash identifier: zfMEcag1fjCtKjVucJF+mMMJHqMDhDysyEC7xeM1Nmc= Subject key identifier: 56:93:AA:F1:AC:B9:C6:C2:94:7B:80:DF:4C:7A:4E:D3:9E:EA:10:88 Authority key identifier: 61:4D:1E:C8:B6:93:E7:BB:5F:32:CF:A5:27:B5:02:83:26:9D:FE:2B Certificate issuer: /CN=A91FBD7B/serialNumber=614D1EC8B693E7BB5F32CFA527B50283269DFE2B Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft Manifest number: 95 Signing time: Wed 05 Nov 2025 06:40:47 +0000 Manifest this update: Wed 05 Nov 2025 06:40:46 +0000 Manifest next update: Wed 12 Nov 2025 06:40:46 +0000 Files and hashes: 1: YU0eyLaT57tfMs-lJ7UCgyad_is.crl (hash: zWwDIQKyqH3AveCFT8C+4bPKNHf3T3Do6umcrz122m0=) 2: EE380826D87211EFBAE0FC19C4F9AE02.roa (hash: Z/MKQEZHBao6uUjy3KntQF19ACE4AX6KONtzOcMde7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.crl rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:40:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD7B, serialNumber=614D1EC8B693E7BB5F32CFA527B50283269DFE2B Validity Not Before: Nov 5 06:40:46 2025 GMT Not After : Nov 12 06:40:46 2025 GMT Subject: CN=690af16e-fd87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:77:db:53:c3:bf:30:43:1c:7f:3b:19:57:a9: 20:cf:c0:91:15:7b:f5:4a:d6:57:e9:cd:b2:12:be: c5:19:5e:1d:42:68:81:d6:cd:d9:6c:7d:d8:95:3d: d4:6e:cc:dc:8e:94:07:d3:eb:13:92:75:01:76:9b: a4:11:78:a6:cb:b7:a4:b1:3a:08:84:c2:2a:b0:ad: 74:92:fc:e8:2d:50:86:93:a3:b0:9d:61:b6:1e:4d: 94:a1:5f:25:25:c9:f5:e6:cd:72:13:24:bf:05:f2: a1:4f:2a:1e:73:13:10:e5:34:56:7b:6a:ec:e8:fe: 82:e9:82:36:8b:3b:4d:cb:bf:4d:86:88:ff:8a:65: 3b:2f:6e:7b:81:a0:9c:64:27:06:1f:7c:36:0f:28: bd:4e:92:e6:b5:a8:fe:0d:a0:c3:93:ab:ff:ce:bd: c1:18:d1:57:2b:b1:d8:e9:fe:7a:ce:7a:9d:54:c8: e0:24:51:92:94:df:ed:5c:b1:ac:78:22:ba:ff:0d: c4:99:3b:db:71:b8:40:cf:2a:e9:3b:ee:05:b7:4c: b8:fc:e2:4f:c9:85:3a:95:d1:6d:7f:d9:f7:1c:8f: 18:eb:c7:ab:aa:dd:d0:56:8e:d7:9e:5d:58:35:f8: 3c:ae:f0:a0:c5:aa:0e:7d:db:27:db:26:1e:9f:05: 7a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:93:AA:F1:AC:B9:C6:C2:94:7B:80:DF:4C:7A:4E:D3:9E:EA:10:88 X509v3 Authority Key Identifier: keyid:61:4D:1E:C8:B6:93:E7:BB:5F:32:CF:A5:27:B5:02:83:26:9D:FE:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:00:0a:ef:ac:7c:ab:54:41:ea:19:0f:fc:20:56:78:fd:7d: bd:78:15:e2:8a:47:73:ca:27:18:d1:73:4e:99:74:c8:ef:e9: 9d:d8:dc:9c:17:a5:b7:02:59:12:c8:a9:02:c7:41:f9:3e:19: 59:32:50:18:1b:42:dc:a4:18:c1:42:c6:0a:1a:b3:ea:f3:7d: f3:66:cb:9a:11:0a:d8:34:1b:9e:73:d9:48:e0:2d:4a:ad:27: 47:d4:45:c9:db:a7:9a:f0:f3:0f:31:ab:e3:a4:68:37:fb:22: 73:58:bf:52:4c:c8:d4:bd:4a:b1:7e:c9:bb:cf:0e:99:78:a5: 74:53:c1:2e:66:07:d5:a9:db:61:0e:17:2a:07:5d:a0:28:e9: 8a:95:46:51:17:6d:26:5f:71:4f:a7:51:9c:58:d6:e3:76:a3: 90:df:f4:99:06:a7:85:07:5c:93:1c:1c:33:29:01:a2:17:7e: cf:7a:ee:81:86:06:f5:56:40:f8:4e:d6:48:fa:eb:cc:cc:a8: b4:cb:58:27:72:f9:eb:58:46:07:87:7c:11:f2:ed:e1:58:63: 5b:b9:f1:d2:f6:31:91:3e:2c:cd:62:fe:0b:7f:02:b8:ec:45: 5f:bf:0c:2e:1b:07:1d:f2:04:c4:0c:2a:41:8d:41:a9:a6:76: dd:fc:1e:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEN0IxMTAvBgNVBAUTKDYxNEQxRUM4QjY5M0U3QkI1RjMyQ0ZBNTI3QjUwMjgz MjY5REZFMkIwHhcNMjUxMTA1MDY0MDQ2WhcNMjUxMTEyMDY0MDQ2WjAYMRYwFAYD VQQDEw02OTBhZjE2ZS1mZDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7XfbU8O/MEMcfzsZV6kgz8CRFXv1StZX6c2yEr7FGV4dQmiB1s3ZbH3YlT3U bszcjpQH0+sTknUBdpukEXimy7eksToIhMIqsK10kvzoLVCGk6OwnWG2Hk2UoV8l Jcn15s1yEyS/BfKhTyoecxMQ5TRWe2rs6P6C6YI2iztNy79Nhoj/imU7L257gaCc ZCcGH3w2Dyi9TpLmtaj+DaDDk6v/zr3BGNFXK7HY6f56znqdVMjgJFGSlN/tXLGs eCK6/w3EmTvbcbhAzyrpO+4Ft0y4/OJPyYU6ldFtf9n3HI8Y68erqt3QVo7Xnl1Y Nfg8rvCgxaoOfdsn2yYenwV6+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFaTqvGs ucbClHuA30x6TtOe6hCIMB8GA1UdIwQYMBaAFGFNHsi2k+e7XzLPpSe1AoMmnf4r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQ3Qi9BNzRGNUVEQ0Q4 NzIxMUVGQTMxRjg0MTlDNEY5QUUwMi9ZVTBleUxhVDU3dGZNcy1sSjdVQ2d5YWRf aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lVMGV5TGFUNTd0Zk1zLWxKN1VDZ3lhZF9pcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQ3Qi9BNzRGNUVEQ0Q4NzIxMUVGQTMxRjg0MTlDNEY5QUUwMi9ZVTBleUxhVDU3 dGZNcy1sSjdVQ2d5YWRfaXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuAArvrHyrVEHqGQ/8IFZ4/X29eBXiikdzyicY0XNOmXTI7+md2Nyc F6W3AlkSyKkCx0H5PhlZMlAYG0LcpBjBQsYKGrPq833zZsuaEQrYNBuec9lI4C1K rSdH1EXJ26ea8PMPMavjpGg3+yJzWL9STMjUvUqxfsm7zw6ZeKV0U8EuZgfVqdth DhcqB12gKOmKlUZRF20mX3FPp1GcWNbjdqOQ3/SZBqeFB1yTHBwzKQGiF37Peu6B hgb1VkD4TtZI+uvMzKi0y1gncvnrWEYHh3wR8u3hWGNbufHS9jGRPizNYv4LfwK4 7EVfvwwuGwcd8gTEDCpBjUGppnbd/B55 -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:20 2025 by rpki-client