$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft File: YmEJu-zJi6UufzmbgJYtOv5astQ.mft (raw, json) Hash identifier: AwC/B7zw+aRK4NW676Maoxgm9vdVX/W8xzuKnQWH1wY= Subject key identifier: 71:75:C4:8B:93:2D:7E:82:A4:22:CB:B3:84:52:5A:BF:1A:5C:22:B9 Authority key identifier: 62:61:09:BB:EC:C9:8B:A5:2E:7F:39:9B:80:96:2D:3A:FE:5A:B2:D4 Certificate issuer: /CN=A91D50A2/serialNumber=626109BBECC98BA52E7F399B80962D3AFE5AB2D4 Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft Manifest number: 013A Signing time: Sun 19 Oct 2025 07:17:26 +0000 Manifest this update: Sun 19 Oct 2025 07:17:26 +0000 Manifest next update: Sun 26 Oct 2025 07:17:26 +0000 Files and hashes: 1: YmEJu-zJi6UufzmbgJYtOv5astQ.crl (hash: onEs+Fy35aPK0x8JEsvI89AMQcRwmDUQROU2SPO0kig=) 2: 7447BEF0928411EFB854A522C4F9AE02.roa (hash: 8r1ggxGUtscfFUhVNnn2tSXuD/VeviYdi6zXjlI+agM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.crl rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D50A2, serialNumber=626109BBECC98BA52E7F399B80962D3AFE5AB2D4 Validity Not Before: Oct 19 07:17:26 2025 GMT Not After : Oct 26 07:17:26 2025 GMT Subject: CN=68f49086-9fd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d3:e1:88:ed:58:4f:9a:13:ed:db:0c:d8:18: 6e:76:50:26:6c:a3:11:61:e1:64:de:7b:be:df:58: 8a:f6:b9:03:7f:34:a9:c5:b9:d2:bf:21:cb:cf:33: eb:9e:ba:d3:7c:f5:02:1e:fb:f7:df:19:75:04:26: b4:28:86:94:82:77:ab:99:e8:03:48:17:27:ba:65: e0:f2:35:e9:8a:8f:14:52:e9:74:24:c8:d5:d4:90: ee:95:42:30:1d:a9:76:be:b1:8a:d0:0c:8d:15:e3: 0f:f9:76:cc:98:8d:71:d1:5e:d6:61:bf:6b:d5:bd: 17:6b:1a:3c:9c:ea:e1:d5:55:31:c2:8b:76:c5:61: b9:b8:5c:40:11:f4:59:f0:11:55:61:18:58:ab:68: 2a:5d:c8:f3:a8:11:fb:78:20:5a:80:22:66:10:53: 04:06:d1:3f:f9:de:a0:86:6d:c8:b5:79:16:00:57: 72:5a:c2:84:4d:bc:92:d6:6f:e1:17:bf:84:8c:ac: b7:73:9e:de:8e:c2:48:85:db:24:56:f3:ef:74:53: c7:c6:8c:2e:2f:74:fb:8e:6c:4c:2f:48:8f:a1:25: fe:e0:48:c5:75:55:88:98:3b:dd:51:99:28:ec:07: f2:0b:2a:d8:17:2e:00:94:7c:90:85:19:9b:28:7e: 16:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:75:C4:8B:93:2D:7E:82:A4:22:CB:B3:84:52:5A:BF:1A:5C:22:B9 X509v3 Authority Key Identifier: keyid:62:61:09:BB:EC:C9:8B:A5:2E:7F:39:9B:80:96:2D:3A:FE:5A:B2:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:08:68:01:88:3d:8b:d0:99:c9:49:e5:20:f0:fb:89:38:5b: f6:4d:bf:5e:f2:05:84:0b:ac:db:52:a8:ae:dc:d1:24:a5:47: 92:83:98:c7:a9:00:7c:e2:ef:d9:ec:79:32:fc:6d:29:89:cd: 0c:d2:ec:97:c2:80:8c:bd:69:30:7c:c1:c7:c3:7e:9f:39:04: 65:ff:2f:0d:64:5e:72:c0:03:77:7d:7a:20:7a:13:b9:8f:d4: 80:41:36:0c:2c:c1:d0:6f:0b:73:42:c1:b9:ce:5b:0c:94:88: 99:32:a2:d1:8f:ba:c7:fb:32:fb:d4:47:88:f5:84:77:92:84: 98:24:02:2d:27:23:65:c3:b0:9e:28:9e:ad:e9:54:3d:31:54: 9a:70:a8:e7:dd:9f:fb:fb:02:86:2f:a8:64:a3:93:1d:13:02: db:a3:a9:66:76:2a:a4:4c:8a:18:ec:90:ef:f5:9d:94:c7:bb: a5:9e:e9:ca:7f:85:31:92:15:13:24:54:eb:f1:5c:20:87:8f: 6d:44:45:4b:0f:80:67:48:d3:f4:a6:57:e1:7e:d3:42:83:32: 66:0a:77:93:03:ba:a9:3a:c5:56:22:e9:35:e4:8f:8a:a2:16: ac:04:97:df:c6:1b:a0:02:41:16:54:72:48:5d:0c:c3:fb:f8: 54:c2:9c:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUwQTIxMTAvBgNVBAUTKDYyNjEwOUJCRUNDOThCQTUyRTdGMzk5QjgwOTYyRDNB RkU1QUIyRDQwHhcNMjUxMDE5MDcxNzI2WhcNMjUxMDI2MDcxNzI2WjAYMRYwFAYD VQQDEw02OGY0OTA4Ni05ZmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoNPhiO1YT5oT7dsM2BhudlAmbKMRYeFk3nu+31iK9rkDfzSpxbnSvyHLzzPr nrrTfPUCHvv33xl1BCa0KIaUgnermegDSBcnumXg8jXpio8UUul0JMjV1JDulUIw Hal2vrGK0AyNFeMP+XbMmI1x0V7WYb9r1b0Xaxo8nOrh1VUxwot2xWG5uFxAEfRZ 8BFVYRhYq2gqXcjzqBH7eCBagCJmEFMEBtE/+d6ghm3ItXkWAFdyWsKETbyS1m/h F7+EjKy3c57ejsJIhdskVvPvdFPHxowuL3T7jmxML0iPoSX+4EjFdVWImDvdUZko 7AfyCyrYFy4AlHyQhRmbKH4W6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHF1xIuT LX6CpCLLs4RSWr8aXCK5MB8GA1UdIwQYMBaAFGJhCbvsyYulLn85m4CWLTr+WrLU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTBBMi9FRTMxRDg3NEQw MjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9ZbUVKdS16Smk2VXVmem1iZ0pZdE92NWFz dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ltRUp1LXpKaTZVdWZ6bWJnSll0T3Y1YXN0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTBBMi9FRTMxRDg3NEQwMjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9ZbUVKdS16Smk2 VXVmem1iZ0pZdE92NWFzdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCICGgBiD2L0JnJSeUg8PuJOFv2Tb9e8gWEC6zbUqiu3NEkpUeSg5jH qQB84u/Z7Hky/G0pic0M0uyXwoCMvWkwfMHHw36fOQRl/y8NZF5ywAN3fXogehO5 j9SAQTYMLMHQbwtzQsG5zlsMlIiZMqLRj7rH+zL71EeI9YR3koSYJAItJyNlw7Ce KJ6t6VQ9MVSacKjn3Z/7+wKGL6hko5MdEwLbo6lmdiqkTIoY7JDv9Z2Ux7ulnunK f4UxkhUTJFTr8Vwgh49tREVLD4BnSNP0plfhftNCgzJmCneTA7qpOsVWIuk15I+K ohasBJffxhugAkEWVHJIXQzD+/hUwpyn -----END CERTIFICATE-----Generated at Mon Oct 20 05:39:38 2025 by rpki-client