$ rpki-client -vvf rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft File: YWOpVUwzBnn36hZnixCNlk7ByAI.mft (raw, json) Hash identifier: x2ZLGTWJdQrlxeaMl2C2980pumjAaRKAGx8/TxFMvCU= Subject key identifier: 0F:8E:DC:11:52:ED:97:FC:7F:AA:2D:5E:80:B9:E5:0A:73:29:24:AA Authority key identifier: 61:63:A9:55:4C:33:06:79:F7:EA:16:67:8B:10:8D:96:4E:C1:C8:02 Certificate issuer: /CN=A91364F5/serialNumber=6163A9554C330679F7EA16678B108D964EC1C802 Certificate serial: 013E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YWOpVUwzBnn36hZnixCNlk7ByAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft Manifest number: 0138 Signing time: Sun 19 Oct 2025 07:22:02 +0000 Manifest this update: Sun 19 Oct 2025 07:22:02 +0000 Manifest next update: Sun 26 Oct 2025 07:22:02 +0000 Files and hashes: 1: YWOpVUwzBnn36hZnixCNlk7ByAI.crl (hash: /FyEgk74ZfEXSeGJNdsXCOImhMCt8y4zExXkoXpctRM=) 2: 0992C84EAC9111EF81B7B058C4F9AE02.roa (hash: 0r1+bjf/CBoFjNEUVu+pdLpoE7fYxxmBMNd9J5fRyzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.crl rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YWOpVUwzBnn36hZnixCNlk7ByAI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91364F5, serialNumber=6163A9554C330679F7EA16678B108D964EC1C802 Validity Not Before: Oct 19 07:22:02 2025 GMT Not After : Oct 26 07:22:02 2025 GMT Subject: CN=68f4919a-96b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ad:24:15:ad:e1:4f:a5:7d:1d:eb:81:96:0c: 0f:b7:90:ff:0a:58:47:42:fc:ad:05:1e:1f:ff:0b: b3:21:db:f5:98:b3:71:e8:39:cc:c0:56:e3:a6:28: f9:15:bd:a7:f0:96:40:69:a9:a1:58:6d:a1:7d:a6: 03:0c:ca:02:58:02:44:b1:d1:20:5d:1d:de:eb:65: 3a:2c:c1:6f:f8:44:24:d3:5e:27:de:15:84:0c:dc: 76:ab:be:db:cc:d3:77:07:d4:b2:60:9c:4a:2c:f3: da:be:7f:e0:82:b3:f5:75:c2:ea:e9:f4:d1:aa:40: 5e:2f:0d:61:22:81:90:71:c6:73:f1:c5:05:8b:44: 38:07:ed:dc:a9:a0:41:94:8e:5c:db:c8:c8:a4:ca: cd:0e:0a:bf:f6:29:db:7c:d1:b1:00:66:6a:1f:7c: 41:9e:b5:8b:89:00:f7:42:d0:ef:c5:3b:24:a4:be: 78:91:58:ac:d2:d4:9a:13:05:1f:3c:71:ab:1d:5e: 5a:d8:02:74:76:9d:5b:22:d3:71:b3:f7:d4:03:a4: 50:ca:17:79:03:2d:1a:9e:ea:17:1c:2c:23:56:ee: 36:b8:84:77:29:52:38:7d:b6:29:f9:ff:bd:17:0c: fe:ca:76:43:53:8f:fe:df:e1:75:e8:1c:e7:29:57: 36:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:8E:DC:11:52:ED:97:FC:7F:AA:2D:5E:80:B9:E5:0A:73:29:24:AA X509v3 Authority Key Identifier: keyid:61:63:A9:55:4C:33:06:79:F7:EA:16:67:8B:10:8D:96:4E:C1:C8:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YWOpVUwzBnn36hZnixCNlk7ByAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:a6:1c:81:76:8f:54:9d:52:33:29:31:2e:c2:c4:cb:b1:b2: d7:20:ab:fc:70:33:e1:2e:8f:28:62:a2:7f:57:27:69:f7:69: d5:c0:ea:79:21:d9:71:b3:15:23:92:5c:2b:ff:c9:cb:4e:3d: 42:9a:14:b3:93:c8:12:b8:d7:bb:19:ae:a2:b4:8c:3b:ff:a2: b7:f9:e7:d5:8e:f0:ff:44:c0:73:e2:c0:24:9e:ac:47:e7:8e: 38:6c:17:00:b5:87:34:a8:a3:97:ae:b3:24:91:e3:a4:5c:32: 97:23:7a:0c:b5:86:12:53:c0:86:e6:8a:ba:86:b9:e9:1b:a9: 84:b8:07:9e:06:a0:3e:12:72:5b:b4:00:4d:f0:8d:21:89:fb: 0f:d1:78:0d:c9:91:1b:13:21:f1:4d:82:a1:0c:80:31:e8:d2: c5:f2:63:39:61:95:e3:a4:d7:64:b0:fc:19:61:c7:47:80:b7: 4e:27:62:f5:fd:a7:7b:f4:11:ec:7b:56:13:ec:f0:54:f0:dd: 65:14:a7:27:6d:36:0c:6f:25:19:c6:1f:d2:71:a3:59:bd:70: 32:c5:e8:31:c7:4f:01:11:db:f6:bf:7e:61:a1:5e:a8:b0:75: 50:7e:16:04:b0:1f:23:3b:e6:73:8a:6d:02:68:bf:c0:f7:a9: 02:ee:93:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY0RjUxMTAvBgNVBAUTKDYxNjNBOTU1NEMzMzA2NzlGN0VBMTY2NzhCMTA4RDk2 NEVDMUM4MDIwHhcNMjUxMDE5MDcyMjAyWhcNMjUxMDI2MDcyMjAyWjAYMRYwFAYD VQQDEw02OGY0OTE5YS05NmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA360kFa3hT6V9HeuBlgwPt5D/ClhHQvytBR4f/wuzIdv1mLNx6DnMwFbjpij5 Fb2n8JZAaamhWG2hfaYDDMoCWAJEsdEgXR3e62U6LMFv+EQk014n3hWEDNx2q77b zNN3B9SyYJxKLPPavn/ggrP1dcLq6fTRqkBeLw1hIoGQccZz8cUFi0Q4B+3cqaBB lI5c28jIpMrNDgq/9inbfNGxAGZqH3xBnrWLiQD3QtDvxTskpL54kVis0tSaEwUf PHGrHV5a2AJ0dp1bItNxs/fUA6RQyhd5Ay0anuoXHCwjVu42uIR3KVI4fbYp+f+9 Fwz+ynZDU4/+3+F16BznKVc2pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA+O3BFS 7Zf8f6otXoC55QpzKSSqMB8GA1UdIwQYMBaAFGFjqVVMMwZ59+oWZ4sQjZZOwcgC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjRGNS81QjVCOTNFQ0Q5 RjkxMUVFOUVBRTVEN0RDNEY5QUUwMi9ZV09wVlV3ekJubjM2aFpuaXhDTmxrN0J5 QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lXT3BWVXd6Qm5uMzZoWm5peENObGs3QnlBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjRGNS81QjVCOTNFQ0Q5RjkxMUVFOUVBRTVEN0RDNEY5QUUwMi9ZV09wVlV3ekJu bjM2aFpuaXhDTmxrN0J5QUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVphyBdo9UnVIzKTEuwsTLsbLXIKv8cDPhLo8oYqJ/Vydp92nVwOp5 IdlxsxUjklwr/8nLTj1CmhSzk8gSuNe7Ga6itIw7/6K3+efVjvD/RMBz4sAknqxH 5444bBcAtYc0qKOXrrMkkeOkXDKXI3oMtYYSU8CG5oq6hrnpG6mEuAeeBqA+EnJb tABN8I0hifsP0XgNyZEbEyHxTYKhDIAx6NLF8mM5YZXjpNdksPwZYcdHgLdOJ2L1 /ad79BHse1YT7PBU8N1lFKcnbTYMbyUZxh/ScaNZvXAyxegxx08BEdv2v35hoV6o sHVQfhYEsB8jO+Zzim0CaL/A96kC7pNV -----END CERTIFICATE-----Generated at Mon Oct 20 23:36:43 2025 by rpki-client