$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft File: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft (raw, json) Hash identifier: ZhlONOH2W/Dj6mvrKkm6L1tPFu2VzJN1lSEBCPJqyjs= Subject key identifier: 00:F5:C8:A2:11:E9:62:B7:B0:6D:36:13:C3:53:F0:23:1D:C4:CA:FE Authority key identifier: 62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC Certificate issuer: /CN=A91685E9/serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft Manifest number: AD Signing time: Sun 19 Oct 2025 09:45:03 +0000 Manifest this update: Sun 19 Oct 2025 09:45:02 +0000 Manifest next update: Sun 26 Oct 2025 09:45:02 +0000 Files and hashes: 1: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl (hash: jT6Ut5j7LINRG/+zICkBW8bTrLsbrZpxS3u5H7214cQ=) 2: E3239FCAD48C11EFA27EEC37C4F9AE02.roa (hash: eDrkrHM6e7G8MkefF8uO0ebeRL2ZiilrSCVyjl1v/78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91685E9, serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC Validity Not Before: Oct 19 09:45:02 2025 GMT Not After : Oct 26 09:45:02 2025 GMT Subject: CN=68f4b31e-46b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:be:1a:8c:2a:72:63:11:66:11:5b:84:8d:27: b5:ac:b6:e9:f1:bd:0e:57:1e:d5:f3:22:b7:c0:54: 64:8a:03:13:33:31:31:fe:de:ae:70:1a:30:24:b6: b9:84:b8:53:dd:08:f7:20:e4:2a:57:67:b1:7b:2d: c4:c7:97:36:b8:c2:c5:5d:15:79:8b:eb:f0:32:b5: 52:b4:24:da:03:7e:e8:f7:d9:11:00:21:8a:78:19: 4b:6f:0a:8a:3e:4a:44:a4:e4:23:00:f6:c9:fb:7f: b8:c9:13:63:9c:35:ce:cc:28:ad:61:b9:c3:5f:69: 57:40:07:c7:e4:fe:54:cd:0e:06:bc:da:8b:4b:44: 64:5a:6a:dc:d5:24:4b:da:ec:5f:dd:21:4b:72:a0: 9b:2b:e3:0c:50:22:87:3c:5c:90:c5:68:8c:88:be: 8b:0f:29:73:9f:67:a2:b6:a6:3a:c2:78:54:ea:83: 78:cf:9f:bd:01:0e:41:0b:49:c1:87:b6:6e:c7:44: 84:94:c4:d5:87:7f:1f:bc:72:69:70:06:72:83:c9: 00:4c:13:f3:af:c2:9d:b8:b3:d2:85:6c:96:3b:7a: 67:15:cb:b9:4a:07:4b:08:d8:c7:95:a3:b6:d9:2b: 55:c2:51:73:1b:f3:5d:19:63:4b:eb:76:f7:57:0e: e7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F5:C8:A2:11:E9:62:B7:B0:6D:36:13:C3:53:F0:23:1D:C4:CA:FE X509v3 Authority Key Identifier: keyid:62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:35:71:c3:be:ea:1f:3a:6d:91:29:81:91:72:56:cf:9b:50: fb:9b:df:ef:78:c9:86:84:26:42:b6:1e:fe:8b:a6:8c:a1:04: 02:4f:1a:1a:67:09:1f:58:4f:21:39:0b:fe:a6:38:19:c3:e9: 29:ee:cd:c4:7a:d4:f2:c5:16:26:16:29:8f:29:c8:5d:22:d0: aa:80:9a:67:e0:91:70:55:55:7b:3f:fb:1c:47:23:d6:2c:3f: 97:43:30:d5:50:4c:44:fe:75:6c:5e:9e:7a:34:dc:e4:88:62: 37:b6:5d:dc:76:2a:a6:ca:28:9d:05:c4:61:17:10:48:e1:b7: d3:e0:a7:d1:6b:0a:d9:93:0d:e5:dc:0d:4b:06:b7:60:4b:27: dc:20:88:31:1c:92:1e:99:15:6e:81:ed:34:05:a6:55:10:46: cf:dc:50:c0:fa:b9:74:16:00:9d:84:6a:63:4f:f3:1f:2a:16: ef:cb:7c:57:7a:8c:b6:2e:55:b4:e0:e9:5d:d1:46:fa:2b:c1: d2:1c:c6:fe:b0:1d:5e:0b:01:60:7e:5b:b1:40:b7:17:81:ba: 13:ed:88:82:23:73:60:d9:ca:f3:35:d3:50:b4:62:c9:d7:08: 77:27:ec:45:d6:65:42:de:f7:9d:4c:80:a1:2e:f9:52:df:1c: e2:6b:44:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg1RTkxMTAvBgNVBAUTKDYyNEI5NkUxRDY2NUVENzhFNzhERkFGNkMyMjAxOTEw NzNEQjY2Q0MwHhcNMjUxMDE5MDk0NTAyWhcNMjUxMDI2MDk0NTAyWjAYMRYwFAYD VQQDEw02OGY0YjMxZS00NmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvL4ajCpyYxFmEVuEjSe1rLbp8b0OVx7V8yK3wFRkigMTMzEx/t6ucBowJLa5 hLhT3Qj3IOQqV2exey3Ex5c2uMLFXRV5i+vwMrVStCTaA37o99kRACGKeBlLbwqK PkpEpOQjAPbJ+3+4yRNjnDXOzCitYbnDX2lXQAfH5P5UzQ4GvNqLS0RkWmrc1SRL 2uxf3SFLcqCbK+MMUCKHPFyQxWiMiL6LDylzn2eitqY6wnhU6oN4z5+9AQ5BC0nB h7Zux0SElMTVh38fvHJpcAZyg8kATBPzr8KduLPShWyWO3pnFcu5SgdLCNjHlaO2 2StVwlFzG/NdGWNL63b3Vw7nZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAD1yKIR 6WK3sG02E8NT8CMdxMr+MB8GA1UdIwQYMBaAFGJLluHWZe1454369sIgGRBz22bM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODVFOS9DMTEyRjU1Q0Qx NzYxMUVGOTVDNURFNUFDNEY5QUUwMi9Za3VXNGRabDdYam5qZnIyd2lBWkVIUGJa c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lrdVc0ZFpsN1hqbmpmcjJ3aUFaRUhQYlpzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODVFOS9DMTEyRjU1Q0QxNzYxMUVGOTVDNURFNUFDNEY5QUUwMi9Za3VXNGRabDdY am5qZnIyd2lBWkVIUGJac3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7NXHDvuofOm2RKYGRclbPm1D7m9/veMmGhCZCth7+i6aMoQQCTxoa ZwkfWE8hOQv+pjgZw+kp7s3EetTyxRYmFimPKchdItCqgJpn4JFwVVV7P/scRyPW LD+XQzDVUExE/nVsXp56NNzkiGI3tl3cdiqmyiidBcRhFxBI4bfT4KfRawrZkw3l 3A1LBrdgSyfcIIgxHJIemRVuge00BaZVEEbP3FDA+rl0FgCdhGpjT/MfKhbvy3xX eoy2LlW04Old0Ub6K8HSHMb+sB1eCwFgfluxQLcXgboT7YiCI3Ng2crzNdNQtGLJ 1wh3J+xF1mVC3vedTIChLvlS3xzia0Sw -----END CERTIFICATE-----Generated at Mon Oct 20 13:59:19 2025 by rpki-client