$ rpki-client -vvf rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft File: ypDU0hJfAza1OY7gmXcpby5AkrQ.mft (raw, json) Hash identifier: +X8nuSCKSqfbFSRv/jiaGuyUuAFWK8DmsmwVQIk1cP0= Subject key identifier: 50:0C:93:A4:7F:8E:24:0E:31:4C:8D:7F:D6:B7:DD:40:0D:3B:8E:DF Authority key identifier: CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4 Certificate issuer: /CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4 Certificate serial: 02DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft Manifest number: 02C1 Signing time: Sun 19 Oct 2025 03:44:19 +0000 Manifest this update: Sun 19 Oct 2025 03:44:19 +0000 Manifest next update: Sun 26 Oct 2025 03:44:19 +0000 Files and hashes: 1: ypDU0hJfAza1OY7gmXcpby5AkrQ.crl (hash: KrhdiNfnOMek03HxnufOKGbfSka6bU0KNfNI9n8sKnc=) 2: 69F7328030A611F0BBA4642EC4F9AE02.roa (hash: LeMbdehFC4fTf/TGuaoRSnOw0VY+BgZy7lQOEpG5vyc=) 3: 39FCB4EC4F4E11EDB169BF33C4F9AE02.roa (hash: 0dIG8fQMRzlILpkTDJVo/XSoC64SAKbRto45S4Eicvs=) 4: 4D608CC0800211EF81167A23C4F9AE02.roa (hash: ZQQKFp5iiDEIGLxVFz3G6lECRRriefFnadRp8yKcQoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:44:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 733 (0x2dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91580D2, serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4 Validity Not Before: Oct 19 03:44:19 2025 GMT Not After : Oct 26 03:44:19 2025 GMT Subject: CN=68f45e93-ab29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4b:51:14:da:cf:84:9e:be:86:de:f5:a1:46: 70:45:7b:bb:79:2f:f7:24:04:42:5b:97:f8:c7:87: 1c:cd:26:a9:be:4e:f5:43:25:c2:d4:b0:db:d9:56: 42:b6:61:e7:4a:b9:3d:5c:73:6a:71:6a:a5:50:d1: b6:88:a9:08:2a:12:93:3e:4d:f1:af:a6:d5:57:9a: d5:59:38:7e:a4:d8:ee:0c:ec:fb:ee:aa:26:3c:0e: fa:62:67:eb:b4:44:ec:66:27:05:3e:62:26:b0:db: b6:c7:5c:e9:28:36:d3:92:8c:6b:00:c3:75:fd:e6: c1:53:1c:1e:8e:2c:d7:57:3b:c3:e0:d3:10:83:d1: 82:c2:c0:e0:30:4b:a7:0a:4b:1b:91:f2:11:16:00: 67:12:1c:46:58:63:bb:28:93:4d:88:47:25:c1:2a: 39:42:f3:62:39:02:5f:af:97:a9:25:ba:33:ce:9f: 1b:63:17:d3:c2:72:d2:86:46:40:f9:2b:7f:37:29: 73:ac:f0:9d:fd:a8:34:df:b4:e8:23:a2:17:96:df: 33:2a:3d:95:fc:bf:3e:d5:5f:b6:9d:b7:f7:e1:8c: b5:2b:af:a6:73:44:fb:77:77:74:75:de:53:96:b2: fa:5c:71:ae:e9:c4:24:1b:24:fe:8d:a7:64:dc:50: 15:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:0C:93:A4:7F:8E:24:0E:31:4C:8D:7F:D6:B7:DD:40:0D:3B:8E:DF X509v3 Authority Key Identifier: keyid:CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:a2:04:2d:57:2d:f2:34:27:5f:76:b4:00:db:af:c0:78:78: 1a:89:52:91:13:c9:76:11:73:b7:80:cf:01:4e:a0:30:87:9e: 19:77:19:45:95:bf:7b:10:60:a5:20:9a:60:cd:41:4c:a5:ef: a4:bb:4f:e7:0d:18:14:c1:3d:06:8a:21:9c:03:9f:84:2f:02: 5e:31:c5:32:4e:05:9a:c1:52:61:6f:0e:06:d4:31:9b:fb:8b: 9d:29:24:1d:34:40:7b:ba:af:96:61:56:9d:21:39:59:ee:47: 9d:62:b2:19:0c:11:bc:cb:3f:09:a7:bb:02:c4:ba:9e:94:e5: 3a:97:41:35:60:2f:e6:eb:06:b4:af:97:18:cb:2a:9f:3f:4a: 13:fd:7d:0d:4b:6a:ba:f3:29:fc:da:c3:17:1b:dc:e4:e3:30: 51:6f:fb:fb:3c:33:f2:63:a3:eb:5a:a1:18:bf:d4:28:c0:a3: 0a:06:01:7f:33:25:54:f1:a7:9f:77:76:a3:f7:6b:ca:7a:53: e4:f5:03:70:f0:71:e3:03:78:b2:2b:d3:e9:75:19:dd:f8:d4: 55:83:95:2d:e6:8a:a7:ea:64:97:79:88:f3:c5:ab:26:bf:0a: e4:d6:a5:bf:8d:e9:b6:5a:c7:09:6e:3a:ac:d3:71:9c:34:ad: 8c:0e:a0:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwRDIxMTAvBgNVBAUTKENBOTBENEQyMTI1RjAzMzZCNTM5OEVFMDk5NzcyOTZG MkU0MDkyQjQwHhcNMjUxMDE5MDM0NDE5WhcNMjUxMDI2MDM0NDE5WjAYMRYwFAYD VQQDEw02OGY0NWU5My1hYjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ktRFNrPhJ6+ht71oUZwRXu7eS/3JARCW5f4x4cczSapvk71QyXC1LDb2VZC tmHnSrk9XHNqcWqlUNG2iKkIKhKTPk3xr6bVV5rVWTh+pNjuDOz77qomPA76Ymfr tETsZicFPmImsNu2x1zpKDbTkoxrAMN1/ebBUxwejizXVzvD4NMQg9GCwsDgMEun CksbkfIRFgBnEhxGWGO7KJNNiEclwSo5QvNiOQJfr5epJbozzp8bYxfTwnLShkZA +St/NylzrPCd/ag037ToI6IXlt8zKj2V/L8+1V+2nbf34Yy1K6+mc0T7d3d0dd5T lrL6XHGu6cQkGyT+jadk3FAVCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFAMk6R/ jiQOMUyNf9a33UANO47fMB8GA1UdIwQYMBaAFMqQ1NISXwM2tTmO4Jl3KW8uQJK0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODBEMi9FQkMxQUMyQzE4 NEYxMUVEQURCQzNDNjVDNEY5QUUwMi95cERVMGhKZkF6YTFPWTdnbVhjcGJ5NUFr clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lwRFUwaEpmQXphMU9ZN2dtWGNwYnk1QWtyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODBEMi9FQkMxQUMyQzE4NEYxMUVEQURCQzNDNjVDNEY5QUUwMi95cERVMGhKZkF6 YTFPWTdnbVhjcGJ5NUFrclEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGogQtVy3yNCdfdrQA26/AeHgaiVKRE8l2EXO3gM8BTqAwh54ZdxlF lb97EGClIJpgzUFMpe+ku0/nDRgUwT0GiiGcA5+ELwJeMcUyTgWawVJhbw4G1DGb +4udKSQdNEB7uq+WYVadITlZ7kedYrIZDBG8yz8Jp7sCxLqelOU6l0E1YC/m6wa0 r5cYyyqfP0oT/X0NS2q68yn82sMXG9zk4zBRb/v7PDPyY6PrWqEYv9QowKMKBgF/ MyVU8aefd3aj92vKelPk9QNw8HHjA3iyK9PpdRnd+NRVg5Ut5oqn6mSXeYjzxasm vwrk1qW/jem2WscJbjqs03GcNK2MDqBO -----END CERTIFICATE-----Generated at Mon Oct 20 09:36:56 2025 by rpki-client