$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft File: YN1l7H9y62x9qLk3BuLTug8GW_w.mft (raw, json) Hash identifier: JHdz0IBXD0RHbkjT9YNSS6lpmY2Xy7YKPN8/8vao7ro= Subject key identifier: 5F:B6:12:AC:EE:65:B2:90:F5:3F:A9:E9:23:D1:62:08:97:E4:CE:24 Authority key identifier: 60:DD:65:EC:7F:72:EB:6C:7D:A8:B9:37:06:E2:D3:BA:0F:06:5B:FC Certificate issuer: /CN=A91A4264/serialNumber=60DD65EC7F72EB6C7DA8B93706E2D3BA0F065BFC Certificate serial: 1AAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft Manifest number: 1AA0 Signing time: Sat 18 Oct 2025 16:40:32 +0000 Manifest this update: Sat 18 Oct 2025 16:40:31 +0000 Manifest next update: Sat 25 Oct 2025 16:40:31 +0000 Files and hashes: 1: YN1l7H9y62x9qLk3BuLTug8GW_w.crl (hash: bcd3oxTYN4iunHOGHOJkf/3kugtaV6xWTlokaCLfBMs=) 2: D75BE71A410511E7970A2A5FC4F9AE02.roa (hash: rSf0co4QElknqmx/HUwcUze0T308M2kPbS2aUDzOJyo=) 3: 91CB97905BD211EBA9178181C4F9AE02.roa (hash: Wesd0InqJ/VHy6+SYHu7ABNFnSg/btyWb+0cbj+CPEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.crl rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:40:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6831 (0x1aaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4264, serialNumber=60DD65EC7F72EB6C7DA8B93706E2D3BA0F065BFC Validity Not Before: Oct 18 16:40:31 2025 GMT Not After : Oct 25 16:40:31 2025 GMT Subject: CN=68f3c300-1226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1f:94:df:a9:3e:89:33:06:41:bb:76:e3:48: 78:f8:cb:2f:f1:e1:21:aa:5e:92:c4:d9:1f:0f:be: 69:6e:8b:0f:3d:7f:0b:91:c4:d5:2e:11:d0:68:7d: bc:90:7d:8f:8f:21:45:69:2a:0c:0b:44:b8:14:8d: e1:59:a3:2a:cf:43:61:d2:74:dc:18:3c:bd:01:b8: 4f:6e:ef:07:c9:85:97:ac:3f:fe:3c:df:2b:bb:ff: 9a:bc:d5:6b:4d:85:21:fe:b7:39:bb:d0:d5:ea:1a: a0:e0:a2:82:55:ec:a7:2b:da:96:e1:87:af:0a:23: b6:8a:c2:fa:33:c6:2b:a8:4f:1d:4a:e8:d7:50:3d: 43:22:57:e3:39:e4:dd:26:73:ba:4f:56:39:32:25: bc:74:98:8d:9b:39:60:68:82:c8:2c:7d:21:07:da: 38:db:a3:ce:74:94:dd:67:f0:b1:a0:e0:d1:6a:b6: 5c:39:b4:19:02:99:68:d2:69:96:9c:90:a1:b8:d1: 01:b4:69:f0:44:b4:80:33:86:d7:4f:8b:55:bc:ce: 55:c2:fa:53:af:2c:24:ff:69:58:71:7b:b8:a7:6e: 47:0c:0a:f9:94:7d:07:2d:5d:25:67:17:d2:25:55: 2f:8a:f9:7f:82:b0:ed:b4:a1:9a:f3:d8:16:68:2d: af:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B6:12:AC:EE:65:B2:90:F5:3F:A9:E9:23:D1:62:08:97:E4:CE:24 X509v3 Authority Key Identifier: keyid:60:DD:65:EC:7F:72:EB:6C:7D:A8:B9:37:06:E2:D3:BA:0F:06:5B:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:00:cf:79:09:63:07:fc:ef:8e:ca:f1:86:b3:82:23:e3:35: 49:d0:28:ba:75:9f:20:2f:6a:4a:bb:13:9b:57:ed:21:69:49: 9c:1a:b0:b0:e6:13:e0:f6:cb:b4:e2:28:7f:67:49:88:6d:f3: 16:93:f2:07:0b:7c:b6:54:d6:d6:00:06:b6:93:93:61:ef:f0: 55:c5:07:2d:2f:cf:4a:05:4c:5c:cc:12:e3:9d:81:13:b5:79: 2a:49:c8:ef:6c:4e:ec:83:8b:ba:ac:2f:19:25:0f:62:70:8b: 48:ec:9f:23:f2:38:9b:e7:2a:87:ba:04:52:57:33:1d:1a:b9: e6:78:e3:b6:22:d2:81:5e:03:0f:8c:56:2e:6c:c1:ee:29:20: 30:3a:30:a9:db:ff:ef:83:9b:55:14:49:f8:a3:00:35:3a:c2: f5:d4:db:55:b8:a7:48:65:c6:f8:6b:c0:f7:c0:01:35:08:b1: 17:53:c1:6b:16:97:41:be:04:2e:f3:61:06:cf:7a:27:bc:93: 1b:26:4a:71:cd:40:7a:e6:a0:99:9d:32:1c:96:14:8c:3b:72: 2f:64:d2:23:b9:da:d2:a1:23:5f:30:4f:42:fd:72:a2:02:26: 26:74:37:43:01:dc:9d:fd:51:9a:bb:9f:2c:61:9f:ee:0f:66: 53:00:b5:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQyNjQxMTAvBgNVBAUTKDYwREQ2NUVDN0Y3MkVCNkM3REE4QjkzNzA2RTJEM0JB MEYwNjVCRkMwHhcNMjUxMDE4MTY0MDMxWhcNMjUxMDI1MTY0MDMxWjAYMRYwFAYD VQQDEw02OGYzYzMwMC0xMjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1R+U36k+iTMGQbt240h4+Msv8eEhql6SxNkfD75pbosPPX8LkcTVLhHQaH28 kH2PjyFFaSoMC0S4FI3hWaMqz0Nh0nTcGDy9AbhPbu8HyYWXrD/+PN8ru/+avNVr TYUh/rc5u9DV6hqg4KKCVeynK9qW4YevCiO2isL6M8YrqE8dSujXUD1DIlfjOeTd JnO6T1Y5MiW8dJiNmzlgaILILH0hB9o426POdJTdZ/CxoODRarZcObQZAplo0mmW nJChuNEBtGnwRLSAM4bXT4tVvM5VwvpTrywk/2lYcXu4p25HDAr5lH0HLV0lZxfS JVUvivl/grDttKGa89gWaC2vDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+2Eqzu ZbKQ9T+p6SPRYgiX5M4kMB8GA1UdIwQYMBaAFGDdZex/cutsfai5Nwbi07oPBlv8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDI2NC9DNThENkZGQTQx MDQxMUU3OUVDMDM4NURDNEY5QUUwMi9ZTjFsN0g5eTYyeDlxTGszQnVMVHVnOEdX X3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lOMWw3SDl5NjJ4OXFMazNCdUxUdWc4R1dfdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDI2NC9DNThENkZGQTQxMDQxMUU3OUVDMDM4NURDNEY5QUUwMi9ZTjFsN0g5eTYy eDlxTGszQnVMVHVnOEdXX3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgAM95CWMH/O+OyvGGs4Ij4zVJ0Ci6dZ8gL2pKuxObV+0haUmcGrCw 5hPg9su04ih/Z0mIbfMWk/IHC3y2VNbWAAa2k5Nh7/BVxQctL89KBUxczBLjnYET tXkqScjvbE7sg4u6rC8ZJQ9icItI7J8j8jib5yqHugRSVzMdGrnmeOO2ItKBXgMP jFYubMHuKSAwOjCp2//vg5tVFEn4owA1OsL11NtVuKdIZcb4a8D3wAE1CLEXU8Fr FpdBvgQu82EGz3onvJMbJkpxzUB65qCZnTIclhSMO3IvZNIjudrSoSNfME9C/XKi AiYmdDdDAdyd/VGau58sYZ/uD2ZTALU9 -----END CERTIFICATE-----Generated at Mon Oct 20 05:38:44 2025 by rpki-client