$ rpki-client -vvf rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft File: yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft (raw, json) Hash identifier: h1Ryjzi38rS8GYdFKSAlyPWyVOpMP7HHhptwBafcoFs= Subject key identifier: CF:2B:AC:05:B8:9B:79:AD:45:9F:FA:8A:DF:91:F6:F5:B9:DF:A3:52 Authority key identifier: CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4 Certificate issuer: /CN=A91D86BA/serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4 Certificate serial: 02F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft Manifest number: 02EC Signing time: Sun 19 Oct 2025 03:22:07 +0000 Manifest this update: Sun 19 Oct 2025 03:22:07 +0000 Manifest next update: Sun 26 Oct 2025 03:22:06 +0000 Files and hashes: 1: yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl (hash: z1gdk5eW1dyiLHNwoJO2dvGbsBrO2mc3J5PuFeYzKIk=) 2: 008702ECFD2511EC813E430BC4F9AE02.roa (hash: 9MRdrfgCzJPWi60WfDAHGFIjA+2Au5PPZv6A0PmrENc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 752 (0x2f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D86BA, serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4 Validity Not Before: Oct 19 03:22:07 2025 GMT Not After : Oct 26 03:22:06 2025 GMT Subject: CN=68f4595f-00a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:36:5e:0b:45:84:97:8f:09:45:a1:91:ef:34: 57:97:32:9e:a8:4b:0a:57:e6:7b:38:e1:3a:2c:d6: a5:e0:f2:82:8c:31:89:78:4b:65:8d:36:4b:1e:e2: c0:b9:fa:5f:68:6b:10:71:55:5f:a2:b6:77:46:a2: 95:d0:f3:d2:f2:77:5e:a6:d3:8f:8a:60:c1:10:a6: 2f:c9:d5:3b:10:5f:e9:cb:00:c2:69:2e:f4:65:31: d8:d3:53:d9:38:be:a3:75:e3:66:41:c8:0d:41:b2: 28:15:97:a8:e9:f9:ba:f6:cb:0a:c4:62:99:88:17: 89:09:e4:fc:64:c9:61:5f:d5:3a:cd:a9:6b:e5:d3: bf:2b:65:fe:56:59:83:df:0e:6d:38:39:d3:32:4a: ea:f7:9f:c9:e3:31:2c:ad:82:ce:2b:1e:ec:1f:52: 68:3b:8a:3b:70:dc:ea:3b:66:1e:35:ca:1f:61:47: 69:7d:83:a3:c2:7b:f3:c5:21:1d:87:a3:a3:f6:d1: 73:ed:fe:ac:fa:c0:06:68:db:f2:56:c1:e1:85:12: ea:aa:17:07:a9:96:64:76:7d:ef:bb:4c:a2:a3:6e: 9d:35:3d:60:54:00:fb:f2:77:44:b9:de:41:90:dd: d6:eb:76:6e:a1:73:46:08:67:f1:fc:87:e2:6f:95: 47:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:2B:AC:05:B8:9B:79:AD:45:9F:FA:8A:DF:91:F6:F5:B9:DF:A3:52 X509v3 Authority Key Identifier: keyid:CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:04:de:c3:b8:87:57:47:5a:b1:c7:96:74:6c:c3:da:c1:86: cd:b5:91:60:5f:95:32:11:13:f9:db:43:8e:96:a3:db:e8:98: 36:1e:fc:71:98:ac:a8:9c:d7:c4:18:df:5d:ea:b5:a1:f6:e3: 90:ec:a2:da:b4:32:d9:6c:c3:42:6c:da:e1:3b:6c:c7:11:07: f3:3b:0e:57:5a:88:07:7a:74:f4:a6:f5:60:6a:4a:05:5f:34: 43:22:07:ad:a6:8c:8b:e7:65:f5:2c:50:7f:a0:3d:a8:d1:23: 7e:ee:b8:84:fd:cc:25:fe:fb:eb:4d:a8:fd:8b:2c:05:29:38: 07:67:94:ec:63:e6:d3:be:09:b5:c8:79:8a:6e:7a:21:28:67: e1:d6:a7:ae:95:7f:8c:2d:b4:6c:77:bf:b3:68:1a:fb:a7:81: d8:9a:36:12:61:c9:8e:de:63:0e:ed:96:2c:76:61:af:43:d9: bc:ed:e6:5b:f5:d6:0c:c8:35:d1:98:1a:6f:04:45:13:f3:65: ae:8d:3d:a7:28:07:a3:aa:b4:aa:0e:e5:89:31:ff:21:da:2a: 49:4d:a9:89:8c:f2:ae:26:a0:19:fb:b0:54:84:0b:6f:4e:ae: 91:6e:41:68:f2:fd:a8:c3:73:3e:7a:d9:dc:be:49:a0:8b:5d: 37:40:23:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg2QkExMTAvBgNVBAUTKENCMjEwNzMyMEVEQjM5MkMzQjRENkIwNjZENzk5NjZF NzM1NTNERTQwHhcNMjUxMDE5MDMyMjA3WhcNMjUxMDI2MDMyMjA2WjAYMRYwFAYD VQQDEw02OGY0NTk1Zi0wMGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArDZeC0WEl48JRaGR7zRXlzKeqEsKV+Z7OOE6LNal4PKCjDGJeEtljTZLHuLA ufpfaGsQcVVforZ3RqKV0PPS8ndeptOPimDBEKYvydU7EF/pywDCaS70ZTHY01PZ OL6jdeNmQcgNQbIoFZeo6fm69ssKxGKZiBeJCeT8ZMlhX9U6zalr5dO/K2X+VlmD 3w5tODnTMkrq95/J4zEsrYLOKx7sH1JoO4o7cNzqO2YeNcofYUdpfYOjwnvzxSEd h6Oj9tFz7f6s+sAGaNvyVsHhhRLqqhcHqZZkdn3vu0yio26dNT1gVAD78ndEud5B kN3W63ZuoXNGCGfx/Ifib5VHOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8rrAW4 m3mtRZ/6it+R9vW536NSMB8GA1UdIwQYMBaAFMshBzIO2zksO01rBm15lm5zVT3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODZCQS9BNTc2MDRDOEZE MjExMUVDQTJDNTYyODNDNEY5QUUwMi95eUVITWc3Yk9TdzdUV3NHYlhtV2JuTlZQ ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l5RUhNZzdiT1N3N1RXc0diWG1XYm5OVlBlUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODZCQS9BNTc2MDRDOEZEMjExMUVDQTJDNTYyODNDNEY5QUUwMi95eUVITWc3Yk9T dzdUV3NHYlhtV2JuTlZQZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgBN7DuIdXR1qxx5Z0bMPawYbNtZFgX5UyERP520OOlqPb6Jg2Hvxx mKyonNfEGN9d6rWh9uOQ7KLatDLZbMNCbNrhO2zHEQfzOw5XWogHenT0pvVgakoF XzRDIgetpoyL52X1LFB/oD2o0SN+7riE/cwl/vvrTaj9iywFKTgHZ5TsY+bTvgm1 yHmKbnohKGfh1qeulX+MLbRsd7+zaBr7p4HYmjYSYcmO3mMO7ZYsdmGvQ9m87eZb 9dYMyDXRmBpvBEUT82WujT2nKAejqrSqDuWJMf8h2ipJTamJjPKuJqAZ+7BUhAtv Tq6RbkFo8v2ow3M+etncvkmgi103QCN2 -----END CERTIFICATE-----Generated at Mon Oct 20 01:49:12 2025 by rpki-client