$ rpki-client -vvf rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft File: yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft (raw, json) Hash identifier: z9MX0I0KUHZ6kSzkL5vhHVg26SudokDs5Kgq94KeVqE= Subject key identifier: 3D:51:3E:6F:AB:FE:8A:33:FA:9F:38:72:A6:FE:73:78:2D:50:AC:2B Authority key identifier: CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97 Certificate issuer: /CN=A91706CE/serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597 Certificate serial: 01C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft Manifest number: 01C0 Signing time: Sun 19 Oct 2025 05:36:09 +0000 Manifest this update: Sun 19 Oct 2025 05:36:08 +0000 Manifest next update: Sun 26 Oct 2025 05:36:08 +0000 Files and hashes: 1: yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl (hash: BtpLTVEi51YKmjpSONdSVuLsZ37lSd8DLGfhmRiTCv0=) 2: 4C93B0C80F8E11EEA5B58045C4F9AE02.roa (hash: vIvtHj4TVv3QcsCJzYo0IznJMaTQQl47vgi8rc8e+n4=) 3: CBECEF26736C11F0AB1C0331C4F9AE02.roa (hash: PohdabGkRRj8yF6hYAyIfaJYtFhBZ6QjhxOMrxm3cjY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:36:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 457 (0x1c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91706CE, serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597 Validity Not Before: Oct 19 05:36:08 2025 GMT Not After : Oct 26 05:36:08 2025 GMT Subject: CN=68f478c9-900d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ce:4a:eb:77:b6:bc:4b:e0:f1:6f:87:9d:b7: dd:5e:c5:90:25:15:8b:ad:1a:aa:f4:aa:d4:92:a6: dd:c4:35:23:e6:27:c2:ef:fb:1f:85:87:80:55:99: 8a:d9:78:8a:70:38:4b:11:64:1b:84:f7:fa:46:39: a4:36:e1:b4:1a:35:1d:4d:9e:d0:f3:63:14:4e:75: b6:8a:24:57:6e:8a:be:88:93:cf:f4:2e:69:61:29: 83:33:a0:f2:63:ae:c2:cd:71:af:7f:8e:8f:f7:d6: 12:ae:ab:dc:08:d3:6d:4f:35:50:b6:9e:2e:5e:4c: bf:20:53:b4:5b:32:f8:80:56:42:0f:83:bd:93:dc: 06:14:bb:87:9e:67:df:47:e6:f1:f9:48:a9:e6:d8: 3c:85:22:c1:48:c1:bc:99:a7:17:e7:7a:d6:15:5e: 11:71:c3:0f:91:07:8d:9c:e6:1a:ca:ba:2a:a6:0f: 97:40:81:a6:d9:05:f7:20:d9:7e:92:c1:8e:61:68: 29:aa:ab:d7:60:6e:ff:ef:fe:a2:83:6e:f9:9d:5a: ee:a6:41:a5:f0:d1:60:1c:b2:7f:f6:60:f0:b1:49: 79:58:bb:88:1a:46:1a:51:e7:a2:f1:aa:62:84:0c: ec:24:17:cc:a3:f2:1f:1b:f7:8a:ae:44:01:5e:df: c6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:51:3E:6F:AB:FE:8A:33:FA:9F:38:72:A6:FE:73:78:2D:50:AC:2B X509v3 Authority Key Identifier: keyid:CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:4f:88:ef:11:b1:10:56:75:b6:15:e0:ec:17:62:96:ea:e9: 4b:3f:ad:63:46:ee:4d:cf:59:6b:4f:e4:e9:17:e6:95:88:c8: af:58:c1:ad:a9:ef:a7:fe:ca:ed:a0:16:98:eb:3c:17:db:37: 82:76:24:0e:ea:d8:ee:6f:5a:f3:dc:36:c6:a4:79:3b:64:98: c9:9b:9c:d1:d6:9f:3b:c1:36:f1:92:f4:95:1f:72:f1:6e:22: 67:7a:85:64:e9:43:eb:4f:c9:2c:7f:ed:33:db:e4:18:b4:6d: 99:6c:cf:37:5e:f7:40:40:40:b6:c2:4b:3f:ca:77:53:98:77: c0:67:9b:72:c6:da:02:84:d0:c4:88:a4:37:9b:cb:ab:cf:b2: c6:0a:d6:c9:a3:19:9c:18:81:df:7a:45:b5:f3:9a:14:1f:31: bb:ee:7b:e6:72:c4:7f:15:39:52:ca:3a:22:8d:aa:79:29:44: 8a:f6:5d:7e:bf:d3:7a:0a:6b:26:f2:86:90:e7:78:29:5a:d9: 6f:10:2c:73:23:73:13:b5:0a:b8:02:d4:4b:c4:65:17:15:18: ba:8f:5c:7e:1a:f0:99:be:74:83:7a:3c:cf:a2:73:94:2c:8d: 9d:fc:5b:31:f5:94:d9:2b:9c:b0:a6:12:09:fa:af:82:2f:42: a1:c3:50:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA2Q0UxMTAvBgNVBAUTKENBQTQxNTMyQjdGNzJBQTJDM0UyQUQ2REY0MEI4RDRE MUVCMDM1OTcwHhcNMjUxMDE5MDUzNjA4WhcNMjUxMDI2MDUzNjA4WjAYMRYwFAYD VQQDEw02OGY0NzhjOS05MDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyM5K63e2vEvg8W+HnbfdXsWQJRWLrRqq9KrUkqbdxDUj5ifC7/sfhYeAVZmK 2XiKcDhLEWQbhPf6RjmkNuG0GjUdTZ7Q82MUTnW2iiRXboq+iJPP9C5pYSmDM6Dy Y67CzXGvf46P99YSrqvcCNNtTzVQtp4uXky/IFO0WzL4gFZCD4O9k9wGFLuHnmff R+bx+Uip5tg8hSLBSMG8macX53rWFV4RccMPkQeNnOYayroqpg+XQIGm2QX3INl+ ksGOYWgpqqvXYG7/7/6ig275nVrupkGl8NFgHLJ/9mDwsUl5WLuIGkYaUeei8api hAzsJBfMo/IfG/eKrkQBXt/G5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1RPm+r /ooz+p84cqb+c3gtUKwrMB8GA1UdIwQYMBaAFMqkFTK39yqiw+KtbfQLjU0esDWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDZDRS9FOTBCRDY2ODBG ODYxMUVFQTU2RUJCMjJDNEY5QUUwMi95cVFWTXJmM0txTEQ0cTF0OUF1TlRSNndO WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lxUVZNcmYzS3FMRDRxMXQ5QXVOVFI2d05aYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDZDRS9FOTBCRDY2ODBGODYxMUVFQTU2RUJCMjJDNEY5QUUwMi95cVFWTXJmM0tx TEQ0cTF0OUF1TlRSNndOWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqT4jvEbEQVnW2FeDsF2KW6ulLP61jRu5Nz1lrT+TpF+aViMivWMGt qe+n/srtoBaY6zwX2zeCdiQO6tjub1rz3DbGpHk7ZJjJm5zR1p87wTbxkvSVH3Lx biJneoVk6UPrT8ksf+0z2+QYtG2ZbM83XvdAQEC2wks/yndTmHfAZ5tyxtoChNDE iKQ3m8urz7LGCtbJoxmcGIHfekW185oUHzG77nvmcsR/FTlSyjoijap5KUSK9l1+ v9N6Cmsm8oaQ53gpWtlvECxzI3MTtQq4AtRLxGUXFRi6j1x+GvCZvnSDejzPonOU LI2d/Fsx9ZTZK5ywphIJ+q+CL0Khw1Dh -----END CERTIFICATE-----Generated at Mon Oct 20 05:42:09 2025 by rpki-client