$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft File: YwXctV_RS1x6opSuN8cCdWkvQYA.mft (raw, json) Hash identifier: M3qusognLAHiFuxVqRQEbsp1/W66Re0raO+VNxvVe5o= Subject key identifier: CE:EF:F5:F7:51:8B:14:7E:A2:5B:90:9F:02:4B:40:BB:62:B8:3B:D1 Authority key identifier: 63:05:DC:B5:5F:D1:4B:5C:7A:A2:94:AE:37:C7:02:75:69:2F:41:80 Certificate issuer: /CN=A91A9CD5/serialNumber=6305DCB55FD14B5C7AA294AE37C70275692F4180 Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft Manifest number: C5 Signing time: Sun 19 Oct 2025 08:54:03 +0000 Manifest this update: Sun 19 Oct 2025 08:54:03 +0000 Manifest next update: Sun 26 Oct 2025 08:54:03 +0000 Files and hashes: 1: YwXctV_RS1x6opSuN8cCdWkvQYA.crl (hash: 4BrVje8IG2dbAi+s/WrdyHiPlaKaO1RDJT0Lymv3Tvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.crl rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9CD5, serialNumber=6305DCB55FD14B5C7AA294AE37C70275692F4180 Validity Not Before: Oct 19 08:54:03 2025 GMT Not After : Oct 26 08:54:03 2025 GMT Subject: CN=68f4a72b-abe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0a:b6:66:10:00:4a:dd:a1:56:43:e7:dc:e5: 32:63:c3:f0:7b:8f:11:98:20:a1:61:43:7b:34:2b: 5f:5c:bd:71:01:f6:82:34:0e:57:d9:51:d4:3e:5e: fb:1c:20:f5:a6:e1:cc:b6:f1:5d:bf:6d:24:73:8b: de:52:03:a8:ff:3d:d2:d9:1e:b8:65:67:6a:3b:b5: ba:4e:0b:89:92:34:d5:ac:60:bf:6c:e9:6e:53:4c: 27:50:4e:c6:c8:08:9a:8b:94:8b:45:82:af:dd:31: 08:06:1a:f6:ec:08:7a:a7:ae:f4:bd:ce:d3:6a:d8: ea:7f:b7:25:4f:26:b4:73:af:2c:1e:a6:28:85:80: 11:70:90:ba:b5:78:ee:84:57:0a:19:8c:aa:14:8d: 44:46:9e:d5:d6:7f:28:6a:e5:8f:76:be:c1:e3:40: ca:fa:8c:3a:25:67:02:6d:75:8d:7a:88:09:c7:cc: 54:01:e3:39:d9:4e:5e:a3:8b:49:cd:3a:0e:a1:a3: 58:0f:ca:42:a3:35:56:96:cd:1b:79:89:19:23:70: 41:56:c1:06:29:85:69:86:38:65:1d:09:69:1f:55: 59:a2:08:0b:d0:2e:78:71:9a:83:4a:34:a0:77:2b: be:33:f4:b2:85:87:c1:58:a3:46:c8:d6:a6:3c:c8: 71:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:EF:F5:F7:51:8B:14:7E:A2:5B:90:9F:02:4B:40:BB:62:B8:3B:D1 X509v3 Authority Key Identifier: keyid:63:05:DC:B5:5F:D1:4B:5C:7A:A2:94:AE:37:C7:02:75:69:2F:41:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:56:be:32:9b:e4:de:53:5b:1d:33:e8:e1:b4:67:37:3a:68: fb:a2:cd:15:2a:2a:3a:ca:63:80:e9:31:33:7c:19:d2:86:2a: 70:07:53:68:90:75:37:76:cf:67:c8:9f:b4:88:51:df:7a:02: e3:0f:b8:4c:59:8b:2c:36:53:dd:08:00:10:4d:2b:64:04:c8: 26:e5:30:44:9c:18:8c:b9:4e:b0:84:a5:b6:d7:a8:e2:2a:4c: 5a:66:67:a3:61:93:34:98:7f:87:ff:ae:33:4a:de:3d:bc:d2: db:f8:a8:95:ed:67:d4:5d:e8:78:04:22:7a:da:67:37:9e:0e: 29:f8:4b:6c:42:c5:df:e5:60:ad:51:23:fc:29:e1:7b:0e:45: cd:7d:47:cb:2d:19:49:86:90:e0:7b:1c:ea:4a:57:5f:74:c7: c7:67:9f:ed:ef:f2:59:e3:2c:49:cd:d8:bb:7c:a9:13:b6:01: 20:99:cc:1e:c1:bd:b0:1d:33:36:87:64:6a:28:83:07:0d:5a: 8e:0f:f0:51:51:78:02:e8:6a:bf:b9:32:80:5a:62:da:9f:77: 2f:47:83:6c:72:43:b6:9f:87:ce:04:73:b4:76:50:d0:b0:a3: 46:0a:e5:2f:c0:2b:3a:4f:af:6f:73:8f:31:d8:48:a5:74:81: 4c:22:96:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlDRDUxMTAvBgNVBAUTKDYzMDVEQ0I1NUZEMTRCNUM3QUEyOTRBRTM3QzcwMjc1 NjkyRjQxODAwHhcNMjUxMDE5MDg1NDAzWhcNMjUxMDI2MDg1NDAzWjAYMRYwFAYD VQQDEw02OGY0YTcyYi1hYmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwq2ZhAASt2hVkPn3OUyY8Pwe48RmCChYUN7NCtfXL1xAfaCNA5X2VHUPl77 HCD1puHMtvFdv20kc4veUgOo/z3S2R64ZWdqO7W6TguJkjTVrGC/bOluU0wnUE7G yAiai5SLRYKv3TEIBhr27Ah6p670vc7Tatjqf7clTya0c68sHqYohYARcJC6tXju hFcKGYyqFI1ERp7V1n8oauWPdr7B40DK+ow6JWcCbXWNeogJx8xUAeM52U5eo4tJ zToOoaNYD8pCozVWls0beYkZI3BBVsEGKYVphjhlHQlpH1VZoggL0C54cZqDSjSg dyu+M/SyhYfBWKNGyNamPMhxtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7v9fdR ixR+oluQnwJLQLtiuDvRMB8GA1UdIwQYMBaAFGMF3LVf0UtceqKUrjfHAnVpL0GA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUNENS83QTlBMjUxMDdG RUYxMUVGQTgyREY2MzlDNEY5QUUwMi9Zd1hjdFZfUlMxeDZvcFN1TjhjQ2RXa3ZR WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1l3WGN0Vl9SUzF4Nm9wU3VOOGNDZFdrdlFZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUNENS83QTlBMjUxMDdGRUYxMUVGQTgyREY2MzlDNEY5QUUwMi9Zd1hjdFZfUlMx eDZvcFN1TjhjQ2RXa3ZRWUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAVr4ym+TeU1sdM+jhtGc3Omj7os0VKio6ymOA6TEzfBnShipwB1No kHU3ds9nyJ+0iFHfegLjD7hMWYssNlPdCAAQTStkBMgm5TBEnBiMuU6whKW216ji KkxaZmejYZM0mH+H/64zSt49vNLb+KiV7WfUXeh4BCJ62mc3ng4p+EtsQsXf5WCt USP8KeF7DkXNfUfLLRlJhpDgexzqSldfdMfHZ5/t7/JZ4yxJzdi7fKkTtgEgmcwe wb2wHTM2h2RqKIMHDVqOD/BRUXgC6Gq/uTKAWmLan3cvR4NsckO2n4fOBHO0dlDQ sKNGCuUvwCs6T69vc48x2EildIFMIpZb -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:42 2025 by rpki-client