$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft File: W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft (raw, json) Hash identifier: ty4MWZmrlIO9zAagIljmCxyVDTX5cBLq2ZX6J7+o0TY= Subject key identifier: 68:44:6F:EE:64:08:07:41:1B:B7:03:C8:65:76:59:C8:E5:22:31:21 Authority key identifier: 5B:F6:24:39:90:A9:46:4C:85:B7:82:3D:B4:26:E2:AB:96:72:0A:3C Certificate issuer: /CN=A91D1E29/serialNumber=5BF6243990A9464C85B7823DB426E2AB96720A3C Certificate serial: 0918 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft Manifest number: 0911 Signing time: Sat 18 Oct 2025 21:23:44 +0000 Manifest this update: Sat 18 Oct 2025 21:23:43 +0000 Manifest next update: Sat 25 Oct 2025 21:23:43 +0000 Files and hashes: 1: W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl (hash: tkF7a+NBRm++9+B0QozR9xbE10ZfGWtPB5phX0oVMpM=) 2: 108B7DAAB2A711EAABBE8663C4F9AE02.roa (hash: bY9iBRTWTxnL3x5BGOrTrK8i1l/rZN5Ru7pBpcmVZwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:23:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2328 (0x918) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E29, serialNumber=5BF6243990A9464C85B7823DB426E2AB96720A3C Validity Not Before: Oct 18 21:23:43 2025 GMT Not After : Oct 25 21:23:43 2025 GMT Subject: CN=68f4055f-8cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b1:61:fa:30:72:b2:7b:5f:10:2b:88:33:d1: 66:11:d6:47:3a:8f:1a:a5:5a:10:8a:44:1d:a1:ce: 17:18:2c:18:c0:b3:f0:3f:94:26:9e:a5:39:cf:40: 1e:21:6e:59:41:66:00:0f:7f:94:57:ba:bf:8f:b6: 8b:60:af:72:66:e7:4d:64:45:49:29:32:bc:d9:35: a9:b6:b3:15:2f:d1:83:55:83:37:b6:b2:d4:c7:de: b7:68:a3:83:f9:b8:5b:47:39:b3:2c:70:40:f3:83: bd:73:6c:88:4d:6a:d0:e9:33:17:9e:15:ae:ca:44: 69:ba:c3:ab:c9:96:b0:be:94:60:c0:a5:d3:8a:dd: e0:ee:42:9d:bc:b4:89:74:35:95:84:1c:d0:e1:e5: 73:46:08:f3:ff:01:57:fc:78:16:44:69:6f:8a:cf: a3:13:9d:ca:dd:cb:12:92:4e:d3:9a:2e:bc:55:3a: 96:27:fa:fe:4a:13:b5:85:28:6a:51:b9:20:d0:eb: 21:7a:b1:dc:6f:58:9a:fe:8b:c1:f1:18:be:79:12: 13:e1:51:b2:c6:26:fd:75:49:37:01:72:14:e7:36: c2:d4:eb:85:78:7e:46:42:d7:ad:09:a8:db:fe:e8: 62:86:1d:c9:6e:ba:d4:98:92:49:79:39:65:62:da: 10:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:44:6F:EE:64:08:07:41:1B:B7:03:C8:65:76:59:C8:E5:22:31:21 X509v3 Authority Key Identifier: keyid:5B:F6:24:39:90:A9:46:4C:85:B7:82:3D:B4:26:E2:AB:96:72:0A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:7a:6a:ca:4e:b0:1a:bc:11:8c:1e:42:fd:a9:74:97:03:1a: 7f:63:72:a1:cf:60:46:c7:1c:8f:2c:10:f3:b9:55:4e:c2:a5: 30:97:55:ce:e8:f2:d5:bb:cf:5a:e9:03:18:ba:4f:59:67:ae: e4:94:65:18:0f:7c:a5:e1:31:54:e7:4e:35:59:69:b8:66:cc: 2d:3c:6d:aa:95:b3:8a:8c:8e:95:31:d1:d2:8c:2f:9a:c8:e0: db:3c:b6:24:66:24:83:cb:4c:a5:39:d8:58:7e:f6:34:45:48: 4e:95:89:ac:4c:d5:99:0a:a6:46:f8:7a:58:bc:00:f6:75:b6: e4:a3:39:8c:0e:2a:56:38:2e:22:89:d4:42:76:b9:f3:81:21: 09:03:cc:7a:ec:7e:5f:d8:72:ca:f6:7b:0e:bc:7e:ba:28:8d: 04:f9:f9:78:78:83:29:d1:ac:74:41:40:8c:61:bb:b4:d7:57: 6d:f5:b0:98:82:d7:09:a5:48:d1:e7:08:82:a2:8c:7f:59:2b: 01:13:61:fa:28:81:bb:6a:fa:f4:16:4a:58:9a:1d:3f:1d:c4: 7d:87:42:2a:21:aa:59:29:81:6b:07:50:c7:60:61:18:4d:f2: f3:4c:9d:bc:7f:e6:6e:b3:1b:e9:14:f5:97:d4:93:36:a4:01: 7d:68:73:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFMjkxMTAvBgNVBAUTKDVCRjYyNDM5OTBBOTQ2NEM4NUI3ODIzREI0MjZFMkFC OTY3MjBBM0MwHhcNMjUxMDE4MjEyMzQzWhcNMjUxMDI1MjEyMzQzWjAYMRYwFAYD VQQDEw02OGY0MDU1Zi04Y2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3bFh+jBysntfECuIM9FmEdZHOo8apVoQikQdoc4XGCwYwLPwP5QmnqU5z0Ae IW5ZQWYAD3+UV7q/j7aLYK9yZudNZEVJKTK82TWptrMVL9GDVYM3trLUx963aKOD +bhbRzmzLHBA84O9c2yITWrQ6TMXnhWuykRpusOryZawvpRgwKXTit3g7kKdvLSJ dDWVhBzQ4eVzRgjz/wFX/HgWRGlvis+jE53K3csSkk7Tmi68VTqWJ/r+ShO1hShq Ubkg0OsherHcb1ia/ovB8Ri+eRIT4VGyxib9dUk3AXIU5zbC1OuFeH5GQtetCajb /uhihh3JbrrUmJJJeTllYtoQPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhEb+5k CAdBG7cDyGV2WcjlIjEhMB8GA1UdIwQYMBaAFFv2JDmQqUZMhbeCPbQm4quWcgo8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUUyOS9ERDEzRjhGMEIy OUYxMUVBOTM4MEMwNEJDNEY5QUUwMi9XX1lrT1pDcFJreUZ0NEk5dENiaXE1WnlD ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dfWWtPWkNwUmt5RnQ0STl0Q2JpcTVaeUNqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUUyOS9ERDEzRjhGMEIyOUYxMUVBOTM4MEMwNEJDNEY5QUUwMi9XX1lrT1pDcFJr eUZ0NEk5dENiaXE1WnlDancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2emrKTrAavBGMHkL9qXSXAxp/Y3Khz2BGxxyPLBDzuVVOwqUwl1XO 6PLVu89a6QMYuk9ZZ67klGUYD3yl4TFU5041WWm4ZswtPG2qlbOKjI6VMdHSjC+a yODbPLYkZiSDy0ylOdhYfvY0RUhOlYmsTNWZCqZG+HpYvAD2dbbkozmMDipWOC4i idRCdrnzgSEJA8x67H5f2HLK9nsOvH66KI0E+fl4eIMp0ax0QUCMYbu011dt9bCY gtcJpUjR5wiCoox/WSsBE2H6KIG7avr0FkpYmh0/HcR9h0IqIapZKYFrB1DHYGEY TfLzTJ28f+ZusxvpFPWX1JM2pAF9aHOi -----END CERTIFICATE-----Generated at Mon Oct 20 13:41:07 2025 by rpki-client