$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft File: yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft (raw, json) Hash identifier: C/1qCH53TF01JRAWons9a31gd7VdYu81AudI5zvmOZs= Subject key identifier: FE:8E:0E:29:CC:18:23:57:25:49:D0:EA:37:9B:E8:F3:02:2F:1F:FA Authority key identifier: C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9 Certificate issuer: /CN=A91CCDF3/serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9 Certificate serial: 01C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft Manifest number: 01BE Signing time: Sun 19 Oct 2025 05:28:29 +0000 Manifest this update: Sun 19 Oct 2025 05:28:29 +0000 Manifest next update: Sun 26 Oct 2025 05:28:29 +0000 Files and hashes: 1: yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl (hash: VaHQ8c7Rn5OXW/VOAGw1GGe5QglPQLYdUao6R9vxaPw=) 2: 851A7AD6FF7F11EDA505D70EC4F9AE02.roa (hash: dYTddJDImyu3rpg7QICAEFzGZsVfww3CPHFdjrscptU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 449 (0x1c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCDF3, serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9 Validity Not Before: Oct 19 05:28:29 2025 GMT Not After : Oct 26 05:28:29 2025 GMT Subject: CN=68f476fd-8578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:de:e7:34:06:e6:8f:2d:57:89:14:3d:ad:a2: df:a4:48:55:9c:19:df:3d:5e:97:18:1f:22:6c:2a: c5:63:53:c8:b7:cd:ae:51:0d:4e:b7:09:0d:57:48: 55:23:a9:b3:f0:81:4c:58:ee:e1:46:0e:b3:44:f5: e4:18:12:21:85:82:98:59:c3:88:3f:07:80:49:2d: f4:cd:e6:e5:5f:cb:48:73:f1:ef:5f:48:66:cb:2a: 7f:24:e8:90:dd:fb:2d:12:ec:1a:5c:fa:af:02:60: 9f:1b:b9:ba:24:71:27:f5:5e:44:f0:3f:f4:66:10: c6:da:02:1c:c6:f2:c3:00:27:65:05:23:b9:97:24: a2:0d:d2:fc:61:ab:71:66:a7:b0:ec:f9:7d:6d:d1: 00:7a:34:06:79:b5:c7:b6:b0:90:ce:7b:cc:1d:01: d0:ee:7e:1c:bb:e0:67:34:a9:f6:2c:ac:6e:03:22: 01:43:1d:b8:26:61:6e:94:cb:8c:21:06:52:a1:91: b1:64:96:69:1a:58:17:cd:c3:c9:78:de:de:a0:ad: 87:43:a0:c8:32:b3:83:be:f5:26:af:9c:32:a0:69: 20:89:11:0e:ac:a4:f7:06:f4:3f:65:55:20:ac:26: 22:cb:c2:ba:46:2c:b7:93:7b:a6:db:66:18:46:d3: 5a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:8E:0E:29:CC:18:23:57:25:49:D0:EA:37:9B:E8:F3:02:2F:1F:FA X509v3 Authority Key Identifier: keyid:C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:fa:ca:6d:1e:ea:ad:ff:59:d4:81:0b:ad:0e:f8:38:87:dd: 85:ef:b9:8e:4f:97:8a:64:58:90:df:50:e5:be:86:23:de:fd: fe:44:17:f6:9c:9f:bc:31:2d:2a:25:d7:16:38:47:a5:55:0d: cd:1e:36:54:b0:f5:29:97:9c:81:da:f0:df:a7:d1:a7:3e:96: 38:49:8e:f9:7d:a0:de:70:c2:ec:a9:8a:f1:2b:99:01:57:85: 7b:b2:d6:b0:c2:6e:3d:8c:67:8a:c0:cf:c2:ce:80:dc:20:b7: c9:eb:e1:14:01:ab:e9:2e:df:1a:6c:b9:31:3a:39:32:36:99: 1f:95:0c:e3:97:fb:78:08:c7:50:fa:84:eb:24:10:34:08:5c: d0:d5:62:4a:88:90:c4:ee:74:9b:3d:be:64:9a:eb:1c:19:ab: 69:29:46:de:10:63:14:e6:87:f1:e2:09:02:3e:fa:d1:13:40: e7:c6:01:5f:d0:4b:64:1b:b4:ab:98:9a:0f:44:f2:20:da:5f: a9:0f:7b:6c:e9:c0:23:f5:ac:02:5f:5d:b4:13:4c:58:e6:f9: 2c:16:01:fc:4f:7c:57:6b:60:2d:66:92:96:ff:f0:13:5b:33: 4b:40:39:0a:db:7f:7f:f8:4d:4a:7c:08:57:63:e2:d6:39:57: 28:c2:39:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NERjMxMTAvBgNVBAUTKEM5MTVGRDNCRDQ1QjgyMThCOTVGNTczNzQ5RDNBQTQ5 ODAxNkFBQTkwHhcNMjUxMDE5MDUyODI5WhcNMjUxMDI2MDUyODI5WjAYMRYwFAYD VQQDEw02OGY0NzZmZC04NTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvd7nNAbmjy1XiRQ9raLfpEhVnBnfPV6XGB8ibCrFY1PIt82uUQ1OtwkNV0hV I6mz8IFMWO7hRg6zRPXkGBIhhYKYWcOIPweASS30zeblX8tIc/HvX0hmyyp/JOiQ 3fstEuwaXPqvAmCfG7m6JHEn9V5E8D/0ZhDG2gIcxvLDACdlBSO5lySiDdL8Yatx Zqew7Pl9bdEAejQGebXHtrCQznvMHQHQ7n4cu+BnNKn2LKxuAyIBQx24JmFulMuM IQZSoZGxZJZpGlgXzcPJeN7eoK2HQ6DIMrODvvUmr5wyoGkgiREOrKT3BvQ/ZVUg rCYiy8K6Riy3k3um22YYRtNaKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP6ODinM GCNXJUnQ6jeb6PMCLx/6MB8GA1UdIwQYMBaAFMkV/TvUW4IYuV9XN0nTqkmAFqqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0RGMy80MkRFNDgzNkZG NzYxMUVEQjg5ODE1NThDNEY5QUUwMi95Ulg5TzlSYmdoaTVYMWMzU2RPcVNZQVdx cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lSWDlPOVJiZ2hpNVgxYzNTZE9xU1lBV3Fxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0RGMy80MkRFNDgzNkZGNzYxMUVEQjg5ODE1NThDNEY5QUUwMi95Ulg5TzlSYmdo aTVYMWMzU2RPcVNZQVdxcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCm+sptHuqt/1nUgQutDvg4h92F77mOT5eKZFiQ31DlvoYj3v3+RBf2 nJ+8MS0qJdcWOEelVQ3NHjZUsPUpl5yB2vDfp9GnPpY4SY75faDecMLsqYrxK5kB V4V7stawwm49jGeKwM/CzoDcILfJ6+EUAavpLt8abLkxOjkyNpkflQzjl/t4CMdQ +oTrJBA0CFzQ1WJKiJDE7nSbPb5kmuscGatpKUbeEGMU5ofx4gkCPvrRE0DnxgFf 0EtkG7SrmJoPRPIg2l+pD3ts6cAj9awCX120E0xY5vksFgH8T3xXa2AtZpKW//AT WzNLQDkK239/+E1KfAhXY+LWOVcowjlP -----END CERTIFICATE-----Generated at Tue Oct 21 00:59:31 2025 by rpki-client