$ rpki-client -vvf rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft File: ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft (raw, json) Hash identifier: 4nqH7WSbtkNpFc1iq5PEYBHG9sgBQunFjn/mdMfcTAE= Subject key identifier: 8A:06:F0:CA:72:EA:83:7C:5D:E7:8D:1D:D7:28:96:72:C7:7A:05:08 Authority key identifier: C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC Certificate issuer: /CN=A91597E8/serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC Certificate serial: 34D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft Manifest number: 34D8 Signing time: Mon 20 Oct 2025 14:48:07 +0000 Manifest this update: Mon 20 Oct 2025 14:48:06 +0000 Manifest next update: Mon 27 Oct 2025 14:48:06 +0000 Files and hashes: 1: ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl (hash: sB9NOpOIsxGDRjfUX6caBC4OobwH7wF5SUfNbDb3eeM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13528 (0x34d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91597E8, serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC Validity Not Before: Oct 20 14:48:06 2025 GMT Not After : Oct 27 14:48:06 2025 GMT Subject: CN=68f64ba6-d1f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:09:c2:38:5d:1d:b9:bd:19:90:ff:3f:4f:c5: ef:6e:63:ef:d8:2f:3f:95:80:28:90:41:d2:cb:a3: 3e:a4:61:1a:82:4d:65:7a:d2:13:61:f4:e3:0e:f6: aa:07:9b:38:c9:fb:e6:ee:06:4d:f0:8e:ee:30:ef: 23:9f:7e:20:9e:53:60:41:05:f5:52:b9:14:83:67: f8:ab:f0:81:d3:c5:bd:25:1d:25:c7:ae:3b:b6:31: 35:d1:e0:3a:cf:e9:ba:de:3d:fb:d2:32:74:0f:93: bc:1c:f1:19:aa:30:c7:10:b5:fc:ae:cd:ee:be:c6: 9d:18:86:81:b1:a6:e6:65:63:63:7a:fa:a8:85:fe: 41:e6:75:04:ac:d0:f3:69:b1:fc:14:7c:27:47:1c: 93:d4:fc:8d:48:26:8a:81:b3:7a:cf:14:88:c7:37: ba:c4:11:c3:da:a7:39:e0:3e:f0:67:a3:0b:94:32: 05:79:fe:1b:c4:80:28:9d:fd:f6:61:66:ef:77:d9: cd:c6:21:c5:ce:07:68:2a:a5:b8:0a:c7:d3:06:b5: a6:c1:eb:40:43:cb:f0:56:ba:f1:21:ee:a0:6d:c9: fa:a7:c6:16:61:9c:09:7b:0b:bd:f4:47:c7:6d:5d: c8:c9:34:df:a8:a9:1c:e2:be:e3:e1:1f:98:99:a2: 76:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:06:F0:CA:72:EA:83:7C:5D:E7:8D:1D:D7:28:96:72:C7:7A:05:08 X509v3 Authority Key Identifier: keyid:C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:24:b9:89:87:08:7c:e9:2f:09:4b:d1:1b:4a:fb:8e:5b:c5: e3:fd:74:29:7b:b4:ee:1f:32:0e:54:7e:15:18:77:b6:ca:93: e3:59:f6:65:13:91:6c:92:e0:79:f7:f3:ec:ac:1c:9b:08:64: b5:cc:09:6e:6f:5b:1c:3d:72:32:71:34:ce:e5:16:96:22:e2: be:70:4d:2a:39:e9:bd:f9:a8:96:1c:b8:10:8f:7c:20:5d:00: c5:69:18:56:e0:59:05:54:ac:61:8b:80:ac:bc:96:31:eb:c0: e1:32:78:5e:b3:92:8c:7b:f3:f0:e5:e7:02:e8:c4:a4:36:1a: a9:f8:39:7c:96:5c:48:83:6d:09:c1:4e:f7:32:6d:ac:d6:82: 5a:a0:32:3b:25:cc:3c:62:50:c6:9b:52:43:2b:43:6d:a7:c0: 01:7c:68:02:5a:f1:82:d7:df:f3:c4:c6:23:d5:e2:08:7b:bc: 1a:90:9a:64:7f:8d:28:6c:c9:e4:d7:7a:d6:4a:06:df:2a:6e: 98:a5:67:c6:09:e0:1d:b1:99:ba:8a:62:f6:08:e5:74:0b:df: 76:b2:43:c6:50:23:6f:d4:b4:f4:32:c3:8d:0b:d0:9d:b3:b3: 05:1a:74:9d:b4:86:96:04:70:87:19:36:cb:e1:1a:52:26:96: 02:e5:54:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk3RTgxMTAvBgNVBAUTKEM5QzI4Rjk5MEI2Mjc0MTJDOTdDMkRDRUM3QzkwNkU2 MUFEMzI1QUMwHhcNMjUxMDIwMTQ0ODA2WhcNMjUxMDI3MTQ0ODA2WjAYMRYwFAYD VQQDEw02OGY2NGJhNi1kMWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQnCOF0dub0ZkP8/T8XvbmPv2C8/lYAokEHSy6M+pGEagk1letITYfTjDvaq B5s4yfvm7gZN8I7uMO8jn34gnlNgQQX1UrkUg2f4q/CB08W9JR0lx647tjE10eA6 z+m63j370jJ0D5O8HPEZqjDHELX8rs3uvsadGIaBsabmZWNjevqohf5B5nUErNDz abH8FHwnRxyT1PyNSCaKgbN6zxSIxze6xBHD2qc54D7wZ6MLlDIFef4bxIAonf32 YWbvd9nNxiHFzgdoKqW4CsfTBrWmwetAQ8vwVrrxIe6gbcn6p8YWYZwJewu99EfH bV3IyTTfqKkc4r7j4R+YmaJ21wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIoG8Mpy 6oN8XeeNHdcolnLHegUIMB8GA1UdIwQYMBaAFMnCj5kLYnQSyXwtzsfJBuYa0yWs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTdFOC83QTBGRTdGQTFE OTIxMUUyQjVCQzc0RjUwOEIwMkNEMi95Y0tQbVF0aWRCTEpmQzNPeDhrRzVoclRK YXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ljS1BtUXRpZEJMSmZDM094OGtHNWhyVEphdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTdFOC83QTBGRTdGQTFEOTIxMUUyQjVCQzc0RjUwOEIwMkNEMi95Y0tQbVF0aWRC TEpmQzNPeDhrRzVoclRKYXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByJLmJhwh86S8JS9EbSvuOW8Xj/XQpe7TuHzIOVH4VGHe2ypPjWfZl E5FskuB59/PsrBybCGS1zAlub1scPXIycTTO5RaWIuK+cE0qOem9+aiWHLgQj3wg XQDFaRhW4FkFVKxhi4CsvJYx68DhMnhes5KMe/Pw5ecC6MSkNhqp+Dl8llxIg20J wU73Mm2s1oJaoDI7Jcw8YlDGm1JDK0Ntp8ABfGgCWvGC19/zxMYj1eIIe7wakJpk f40obMnk13rWSgbfKm6YpWfGCeAdsZm6imL2COV0C992skPGUCNv1LT0MsONC9Cd s7MFGnSdtIaWBHCHGTbL4RpSJpYC5VRl -----END CERTIFICATE-----Generated at Mon Oct 20 17:55:57 2025 by rpki-client