$ rpki-client -vvf rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft File: jYqA7HIK5-1T_SED6OachVWtD4Y.mft (raw, json) Hash identifier: NBX3mJWXN0rP8b8wuuIa5cUMC3YmxYTkBqH+7xW7hcQ= Subject key identifier: 5D:EB:2C:F1:E2:04:A4:D7:35:E2:F9:57:A4:46:9E:EB:52:7D:1D:44 Authority key identifier: 8D:8A:80:EC:72:0A:E7:ED:53:FD:21:03:E8:E6:9C:85:55:AD:0F:86 Certificate issuer: /CN=A91BECBA/serialNumber=8D8A80EC720AE7ED53FD2103E8E69C8555AD0F86 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jYqA7HIK5-1T_SED6OachVWtD4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft Manifest number: D3 Signing time: Sun 19 Oct 2025 08:43:37 +0000 Manifest this update: Sun 19 Oct 2025 08:43:36 +0000 Manifest next update: Sun 26 Oct 2025 08:43:36 +0000 Files and hashes: 1: jYqA7HIK5-1T_SED6OachVWtD4Y.crl (hash: 6hib/Yyk6xlNHWHRxl22WfiO6vkDSxbhiOQja2n1HFM=) 2: A0142C706B6611EF88C61580C4F9AE02.roa (hash: WL6knuhT+IT7g3hW2IRpH1KnEWqyPmGpIe/IXLQK6so=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.crl rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jYqA7HIK5-1T_SED6OachVWtD4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:43:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BECBA, serialNumber=8D8A80EC720AE7ED53FD2103E8E69C8555AD0F86 Validity Not Before: Oct 19 08:43:36 2025 GMT Not After : Oct 26 08:43:36 2025 GMT Subject: CN=68f4a4b8-c4a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:da:0d:82:21:92:56:e3:b0:a4:ba:df:de:8b: 50:d6:48:43:01:a5:c6:08:24:27:dc:ec:f0:67:bb: 6d:7b:78:9d:74:9e:9f:19:5a:df:3d:63:d1:c4:8b: d0:21:7c:26:e8:93:c4:ed:f3:b6:00:5a:98:21:61: ff:c4:ea:c8:52:41:2e:52:70:c8:3a:fb:0e:fb:a7: 2f:de:72:9d:b7:85:10:a0:cd:84:39:e2:d8:e6:3b: 67:c0:38:bd:e2:a1:35:73:1e:32:82:84:d5:f6:14: ba:76:60:1b:ab:a7:62:a2:35:23:c5:ff:59:11:39: 00:ec:36:a6:8b:69:77:5f:3c:c4:d7:89:ad:f7:aa: f8:ef:d1:85:94:36:e0:f8:9b:10:05:07:6a:5c:8d: 8d:26:af:31:fd:5a:83:1c:79:bd:cc:9a:23:ba:6e: ee:1b:a2:e2:0e:52:2e:25:13:9c:31:b7:a4:6e:3f: 50:41:2d:28:d1:f7:35:ca:12:7d:f1:34:9e:d6:89: f3:e6:f7:cc:a6:b0:e2:0c:97:0b:07:86:ce:b1:68: f4:73:71:96:84:ea:7c:35:0b:af:6b:69:87:94:32: 00:8b:61:55:80:1e:1d:c3:d9:12:6e:42:68:45:19: 82:6e:d9:bc:8b:54:04:30:49:80:60:ad:89:c1:34: c0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:EB:2C:F1:E2:04:A4:D7:35:E2:F9:57:A4:46:9E:EB:52:7D:1D:44 X509v3 Authority Key Identifier: keyid:8D:8A:80:EC:72:0A:E7:ED:53:FD:21:03:E8:E6:9C:85:55:AD:0F:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jYqA7HIK5-1T_SED6OachVWtD4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:75:2d:fc:1b:b7:ff:fe:f8:71:6a:1b:f0:ef:4f:89:bf:12: b2:d6:e0:37:5d:fb:81:ba:0b:63:16:dd:77:38:30:d9:22:e4: ed:dd:82:0e:85:98:06:b9:e0:b0:77:48:f5:38:6b:77:2d:e8: 49:f3:8d:da:ca:ac:ed:7d:f9:c2:d7:b5:86:69:88:ce:39:29: d8:62:d1:7c:0c:7e:8d:83:35:3a:74:21:44:21:a5:97:95:82: 9d:3a:27:84:e0:66:34:9a:7d:cf:2c:fb:d5:aa:e5:26:79:1f: cb:2e:a8:ac:75:28:a0:ed:14:4f:d0:8c:ef:8c:a8:6e:fd:a1: af:78:7e:54:1f:05:24:0c:67:75:db:af:1d:8b:a6:66:1e:ee: 11:b7:ad:4e:a3:a4:38:e1:fc:bd:1d:a8:0d:15:74:43:a0:86: 31:9b:3c:0e:dc:d6:68:9d:8d:ca:b3:5b:1b:13:3f:bb:33:ac: 21:27:39:67:5d:eb:ff:89:f4:ad:3d:f9:3f:92:ef:9d:5a:9d: 93:ef:23:35:2f:53:f8:39:a0:d6:ed:fa:16:ca:9b:07:d4:d1: 74:4f:ec:9e:3d:f9:06:1d:dd:a9:56:e4:56:be:9b:ec:9f:a7: 04:2d:8a:8e:66:36:8e:a2:f1:b0:a1:a4:03:c9:dd:87:36:50: ca:ae:26:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVDQkExMTAvBgNVBAUTKDhEOEE4MEVDNzIwQUU3RUQ1M0ZEMjEwM0U4RTY5Qzg1 NTVBRDBGODYwHhcNMjUxMDE5MDg0MzM2WhcNMjUxMDI2MDg0MzM2WjAYMRYwFAYD VQQDEw02OGY0YTRiOC1jNGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydoNgiGSVuOwpLrf3otQ1khDAaXGCCQn3OzwZ7tte3iddJ6fGVrfPWPRxIvQ IXwm6JPE7fO2AFqYIWH/xOrIUkEuUnDIOvsO+6cv3nKdt4UQoM2EOeLY5jtnwDi9 4qE1cx4ygoTV9hS6dmAbq6diojUjxf9ZETkA7Dami2l3XzzE14mt96r479GFlDbg +JsQBQdqXI2NJq8x/VqDHHm9zJojum7uG6LiDlIuJROcMbekbj9QQS0o0fc1yhJ9 8TSe1onz5vfMprDiDJcLB4bOsWj0c3GWhOp8NQuva2mHlDIAi2FVgB4dw9kSbkJo RRmCbtm8i1QEMEmAYK2JwTTAJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3rLPHi BKTXNeL5V6RGnutSfR1EMB8GA1UdIwQYMBaAFI2KgOxyCuftU/0hA+jmnIVVrQ+G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUNCQS81ODNFMkI5QTZC NjUxMUVGQTg1N0U4MENDNEY5QUUwMi9qWXFBN0hJSzUtMVRfU0VENk9hY2hWV3RE NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pZcUE3SElLNS0xVF9TRUQ2T2FjaFZXdEQ0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUNCQS81ODNFMkI5QTZCNjUxMUVGQTg1N0U4MENDNEY5QUUwMi9qWXFBN0hJSzUt MVRfU0VENk9hY2hWV3RENFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXdS38G7f//vhxahvw70+JvxKy1uA3XfuBugtjFt13ODDZIuTt3YIO hZgGueCwd0j1OGt3LehJ843ayqztffnC17WGaYjOOSnYYtF8DH6NgzU6dCFEIaWX lYKdOieE4GY0mn3PLPvVquUmeR/LLqisdSig7RRP0IzvjKhu/aGveH5UHwUkDGd1 268di6ZmHu4Rt61Oo6Q44fy9HagNFXRDoIYxmzwO3NZonY3Ks1sbEz+7M6whJzln Xev/ifStPfk/ku+dWp2T7yM1L1P4OaDW7foWypsH1NF0T+yePfkGHd2pVuRWvpvs n6cELYqOZjaOovGwoaQDyd2HNlDKriYj -----END CERTIFICATE-----Generated at Mon Oct 20 23:34:15 2025 by rpki-client