$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft File: yJEt9MR_ima8SJ7IQnJICiEbBoI.mft (raw, json) Hash identifier: jdgQ8oclTzVj7oFSVPtLm19/r7ragYlhimvulvpa8OQ= Subject key identifier: 20:22:21:DE:54:8A:E0:F8:9F:2B:5B:9B:70:32:BC:8F:77:D4:41:2A Authority key identifier: C8:91:2D:F4:C4:7F:8A:66:BC:48:9E:C8:42:72:48:0A:21:1B:06:82 Certificate issuer: /CN=A91C9286/serialNumber=C8912DF4C47F8A66BC489EC84272480A211B0682 Certificate serial: 0C2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft Manifest number: 0C14 Signing time: Sat 18 Oct 2025 19:38:02 +0000 Manifest this update: Sat 18 Oct 2025 19:38:01 +0000 Manifest next update: Sat 25 Oct 2025 19:38:01 +0000 Files and hashes: 1: yJEt9MR_ima8SJ7IQnJICiEbBoI.crl (hash: pIvW9iu+8sJrjihzLPzGvckhOIjzl0Nzuco9J1sbTE4=) 2: 4F0E3CBCD22411ED99FF3546C4F9AE02.roa (hash: RoK/Liyg5Z/zOr0f0lIzQ8yWfepOU0FGv2MoxE2M0l4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.crl rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:38:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3116 (0xc2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9286, serialNumber=C8912DF4C47F8A66BC489EC84272480A211B0682 Validity Not Before: Oct 18 19:38:01 2025 GMT Not After : Oct 25 19:38:01 2025 GMT Subject: CN=68f3ec9a-d859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c2:35:a3:9f:39:3c:97:4f:98:d7:9f:b3:1e: 77:18:d4:c2:29:7a:c3:7e:b3:a6:db:d6:c2:14:eb: 64:8c:22:3b:5d:b1:e2:34:f1:6e:80:c4:6b:d1:0b: 03:df:48:9d:d8:5b:38:27:d2:41:6a:e2:da:8e:34: 67:9c:74:a7:1d:99:06:8a:90:6d:24:ad:f0:6a:ba: bf:ed:11:ae:61:04:49:ea:05:50:6a:ef:e2:86:4f: b5:a8:f4:64:31:7b:9f:05:a5:3c:6a:37:6a:c9:ce: ce:29:5e:ee:99:72:cf:67:03:70:3d:7a:33:66:87: 32:64:67:fb:07:be:d7:55:b0:e6:82:20:1a:4e:0e: a5:2b:2b:5f:a5:13:61:60:1b:97:80:7b:b1:39:3c: b4:c5:8e:98:5a:16:d3:63:81:35:0e:99:c4:17:ba: 9d:f6:3e:26:f4:94:39:3d:42:73:5a:2d:72:65:08: 0f:3b:9b:58:c5:3e:22:c6:88:c8:67:bb:a0:a6:21: b5:21:7b:95:15:fd:46:1a:03:2f:ef:b4:c3:73:51: 69:fa:e8:90:4c:c4:5e:0a:37:02:6b:00:58:45:c3: b1:a0:2b:44:59:b3:d6:f5:cb:62:b5:e2:98:b9:27: e4:8f:62:3c:c7:9c:74:a4:0c:38:c3:d7:70:15:27: 32:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:22:21:DE:54:8A:E0:F8:9F:2B:5B:9B:70:32:BC:8F:77:D4:41:2A X509v3 Authority Key Identifier: keyid:C8:91:2D:F4:C4:7F:8A:66:BC:48:9E:C8:42:72:48:0A:21:1B:06:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:ab:04:ff:3a:9c:8b:2e:a4:d4:49:34:f7:68:37:77:9b:b2: 6c:dd:1f:5c:d5:31:ad:32:a0:73:53:81:27:6e:c9:6b:d2:08: 2a:5b:90:e0:16:83:e8:31:1a:b5:d7:d2:1c:fa:fb:66:ce:f1: 9a:0b:ba:f8:20:9e:c2:1c:5c:74:5c:5b:c9:8b:7c:08:df:3d: cc:5a:be:6e:00:f1:76:7d:ff:ad:01:cb:f9:f1:c0:5b:6c:e1: 79:5a:fe:00:90:c7:c6:23:d5:bc:6a:a6:45:65:9c:55:41:db: 19:00:0e:31:55:18:b1:fb:f7:46:93:25:98:e9:9d:59:53:d7: b0:49:69:7a:66:57:45:db:38:b7:ea:3b:b2:74:ea:e6:3f:d6: 6d:2d:f5:16:27:82:9d:9e:fc:29:96:68:93:b2:d0:4e:69:d3: 0c:01:e2:f2:14:af:47:11:ff:42:4e:cc:31:4b:1c:62:01:ff: 79:e3:4d:c1:e3:72:1a:b3:d7:4e:70:ba:c0:13:9b:18:c6:72: 89:9e:91:4e:3e:16:7b:3d:0a:f2:b5:98:f6:98:84:8c:34:5f: e4:10:c5:db:53:47:4b:72:2c:9e:de:50:f6:c1:4e:aa:0d:b1: 2b:6e:81:0d:c7:d2:9f:39:a8:92:a2:8b:34:10:40:7c:01:31: b8:7f:82:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkyODYxMTAvBgNVBAUTKEM4OTEyREY0QzQ3RjhBNjZCQzQ4OUVDODQyNzI0ODBB MjExQjA2ODIwHhcNMjUxMDE4MTkzODAxWhcNMjUxMDI1MTkzODAxWjAYMRYwFAYD VQQDEw02OGYzZWM5YS1kODU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8I1o585PJdPmNefsx53GNTCKXrDfrOm29bCFOtkjCI7XbHiNPFugMRr0QsD 30id2Fs4J9JBauLajjRnnHSnHZkGipBtJK3warq/7RGuYQRJ6gVQau/ihk+1qPRk MXufBaU8ajdqyc7OKV7umXLPZwNwPXozZocyZGf7B77XVbDmgiAaTg6lKytfpRNh YBuXgHuxOTy0xY6YWhbTY4E1DpnEF7qd9j4m9JQ5PUJzWi1yZQgPO5tYxT4ixojI Z7ugpiG1IXuVFf1GGgMv77TDc1Fp+uiQTMReCjcCawBYRcOxoCtEWbPW9ctiteKY uSfkj2I8x5x0pAw4w9dwFScykwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCAiId5U iuD4nytbm3AyvI931EEqMB8GA1UdIwQYMBaAFMiRLfTEf4pmvEieyEJySAohGwaC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTI4Ni9DQTk2MUMwMjIw OEQxMUVBOUZCN0NBM0ZDNEY5QUUwMi95SkV0OU1SX2ltYThTSjdJUW5KSUNpRWJC b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lKRXQ5TVJfaW1hOFNKN0lRbkpJQ2lFYkJvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTI4Ni9DQTk2MUMwMjIwOEQxMUVBOUZCN0NBM0ZDNEY5QUUwMi95SkV0OU1SX2lt YThTSjdJUW5KSUNpRWJCb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDqwT/OpyLLqTUSTT3aDd3m7Js3R9c1TGtMqBzU4Enbslr0ggqW5Dg FoPoMRq119Ic+vtmzvGaC7r4IJ7CHFx0XFvJi3wI3z3MWr5uAPF2ff+tAcv58cBb bOF5Wv4AkMfGI9W8aqZFZZxVQdsZAA4xVRix+/dGkyWY6Z1ZU9ewSWl6ZldF2zi3 6juydOrmP9ZtLfUWJ4KdnvwplmiTstBOadMMAeLyFK9HEf9CTswxSxxiAf95403B 43Ias9dOcLrAE5sYxnKJnpFOPhZ7PQrytZj2mISMNF/kEMXbU0dLciye3lD2wU6q DbErboENx9KfOaiSoos0EEB8ATG4f4L0 -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:56 2025 by rpki-client