$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.mft File: dBBmhNVnVypTS-yentek_D2x4sY.mft (raw, json) Hash identifier: xlg8FrZCEqtTxFGzBxgpGXQLDZ5CxZRg/IPq6VwPpT0= Subject key identifier: 09:AC:53:3F:E3:67:C7:B6:19:DA:30:41:5E:BB:37:AB:C7:0E:02:C0 Authority key identifier: 74:10:66:84:D5:67:57:2A:53:4B:EC:9E:9E:D7:A4:FC:3D:B1:E2:C6 Certificate issuer: /CN=A911A0B9/serialNumber=74106684D567572A534BEC9E9ED7A4FC3DB1E2C6 Certificate serial: 046C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBBmhNVnVypTS-yentek_D2x4sY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.mft Manifest number: 045F Signing time: Sun 19 Oct 2025 02:05:33 +0000 Manifest this update: Sun 19 Oct 2025 02:05:33 +0000 Manifest next update: Sun 26 Oct 2025 02:05:33 +0000 Files and hashes: 1: dBBmhNVnVypTS-yentek_D2x4sY.crl (hash: +T3eAEIEhQrf3oK5DukVB55aIij+d/Ij5PMc7fJSH7w=) 2: 79B9645874F911F0BD52962FC4F9AE02.roa (hash: wu+Dox9IU3hwRlFzpqIU7gx86wEYNjyUbkdxdJNUmAk=) 3: A4819EE074F811F0B6925F6DC4F9AE02.roa (hash: ZoO9/vgjXlzY6ba7aXl9T6bpn7UBr556K0Ew0N0yuz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.crl rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBBmhNVnVypTS-yentek_D2x4sY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:05:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1132 (0x46c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A0B9, serialNumber=74106684D567572A534BEC9E9ED7A4FC3DB1E2C6 Validity Not Before: Oct 19 02:05:33 2025 GMT Not After : Oct 26 02:05:33 2025 GMT Subject: CN=68f4476d-b439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9e:45:df:28:e2:0f:ba:d4:4a:6a:a1:f7:2f: cc:4d:08:90:f0:57:1b:ab:1b:b5:1c:45:c8:13:4b: b0:57:74:a9:b5:cb:42:73:ea:46:f2:c6:17:82:23: 77:fb:1c:b6:c8:b0:cc:f3:54:a6:f5:45:1c:85:41: 8a:38:5e:2d:2d:2b:de:7e:7e:16:b3:f5:e1:65:cc: 30:df:44:b4:81:24:64:8e:35:ad:be:68:0c:7a:eb: 14:34:fd:5a:e9:d9:e3:63:9b:63:ce:3f:e7:81:cd: 6b:e8:e7:49:e9:ee:69:c1:9e:2d:1e:7c:5b:94:9b: 0a:0c:59:bc:38:e4:b0:f8:15:c7:83:f3:08:5e:90: 28:6b:02:49:d1:f6:e5:e7:34:d6:dc:f3:7f:41:93: ac:e0:2e:b1:f8:bb:12:17:61:75:cd:53:fe:de:7c: b2:02:cb:ef:a4:60:4e:ac:11:61:19:b1:d3:3d:f0: 59:9f:82:05:62:4f:bd:a5:d3:46:35:5a:75:2e:6b: 5f:33:cc:8f:2b:af:5b:45:e6:6f:05:85:b3:c1:9a: f2:48:d2:63:30:b6:69:20:a4:d2:a8:82:bf:e3:2f: 40:54:12:c8:c0:19:b6:d9:1d:66:b7:11:04:f4:96: c8:3a:6f:0f:48:d3:aa:3a:e9:aa:11:39:97:db:51: 62:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:AC:53:3F:E3:67:C7:B6:19:DA:30:41:5E:BB:37:AB:C7:0E:02:C0 X509v3 Authority Key Identifier: keyid:74:10:66:84:D5:67:57:2A:53:4B:EC:9E:9E:D7:A4:FC:3D:B1:E2:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBBmhNVnVypTS-yentek_D2x4sY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:04:72:a1:12:80:63:a1:a7:d5:9c:5e:1e:d7:30:7c:6f:18: 95:4f:a1:5a:dc:cb:21:a3:ff:5b:11:0b:d3:57:01:57:ae:92: d3:de:dc:39:79:14:ee:22:30:10:a9:b9:c5:8a:32:e4:f3:f3: b1:68:66:72:0d:aa:18:5f:da:67:1c:63:e5:02:92:f2:80:02: 77:c3:ea:9d:d7:e1:69:3d:dd:9a:cf:7e:b5:cc:6d:e4:95:30: 14:4c:e0:21:87:04:1e:98:c5:2a:ac:53:cc:0d:6c:d7:4f:c7: 7d:49:d0:3c:3b:f8:8c:63:c8:4f:ae:8c:a1:a9:c3:8e:fa:03: 1c:2a:92:c7:3a:e3:d2:6b:64:d6:ce:bd:3b:5f:12:79:7a:74: 15:f2:a9:1a:f3:73:0e:d7:41:f7:ed:69:7d:58:be:2d:12:a6: 50:00:a0:22:f3:b3:93:22:47:d1:e4:ae:58:62:77:1f:af:e1: d2:04:e2:52:0c:c9:98:58:3e:60:c3:97:9c:12:46:56:0d:bd: 39:56:31:26:b6:69:5c:94:d8:51:2c:cb:73:7a:dc:ce:e3:83: 8b:63:e0:40:0a:85:94:9a:7d:b5:7e:f9:f9:8f:57:3f:e1:83: b2:a9:68:70:45:d1:f7:b7:f6:44:33:b3:d6:bf:f8:01:73:a9: 29:b5:14:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEwQjkxMTAvBgNVBAUTKDc0MTA2Njg0RDU2NzU3MkE1MzRCRUM5RTlFRDdBNEZD M0RCMUUyQzYwHhcNMjUxMDE5MDIwNTMzWhcNMjUxMDI2MDIwNTMzWjAYMRYwFAYD VQQDEw02OGY0NDc2ZC1iNDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Z5F3yjiD7rUSmqh9y/MTQiQ8Fcbqxu1HEXIE0uwV3SptctCc+pG8sYXgiN3 +xy2yLDM81Sm9UUchUGKOF4tLSvefn4Ws/XhZcww30S0gSRkjjWtvmgMeusUNP1a 6dnjY5tjzj/ngc1r6OdJ6e5pwZ4tHnxblJsKDFm8OOSw+BXHg/MIXpAoawJJ0fbl 5zTW3PN/QZOs4C6x+LsSF2F1zVP+3nyyAsvvpGBOrBFhGbHTPfBZn4IFYk+9pdNG NVp1LmtfM8yPK69bReZvBYWzwZrySNJjMLZpIKTSqIK/4y9AVBLIwBm22R1mtxEE 9JbIOm8PSNOqOumqETmX21FicQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmsUz/j Z8e2GdowQV67N6vHDgLAMB8GA1UdIwQYMBaAFHQQZoTVZ1cqU0vsnp7XpPw9seLG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTBCOS8yRTA2RDZERTZG QjgxMUVDQTU2NzdDNzhDNEY5QUUwMi9kQkJtaE5WblZ5cFRTLXllbnRla19EMng0 c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RCQm1oTlZuVnlwVFMteWVudGVrX0QyeDRzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTBCOS8yRTA2RDZERTZGQjgxMUVDQTU2NzdDNzhDNEY5QUUwMi9kQkJtaE5WblZ5 cFRTLXllbnRla19EMng0c1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhBHKhEoBjoafVnF4e1zB8bxiVT6Fa3Msho/9bEQvTVwFXrpLT3tw5 eRTuIjAQqbnFijLk8/OxaGZyDaoYX9pnHGPlApLygAJ3w+qd1+FpPd2az361zG3k lTAUTOAhhwQemMUqrFPMDWzXT8d9SdA8O/iMY8hProyhqcOO+gMcKpLHOuPSa2TW zr07XxJ5enQV8qka83MO10H37Wl9WL4tEqZQAKAi87OTIkfR5K5YYncfr+HSBOJS DMmYWD5gw5ecEkZWDb05VjEmtmlclNhRLMtzetzO44OLY+BACoWUmn21fvn5j1c/ 4YOyqWhwRdH3t/ZEM7PWv/gBc6kptRT9 -----END CERTIFICATE-----Generated at Tue Oct 21 00:38:21 2025 by rpki-client