$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft File: yZBd5SSGuexO-HmgJkRccLD9lQU.mft (raw, json) Hash identifier: jmajzAICsLWgQxvZBN5082uUwK/vzhFAmDvWSs/c++k= Subject key identifier: E3:F9:D3:71:12:AF:0D:52:8D:19:7D:E6:7A:61:6F:60:16:66:D9:DB Authority key identifier: C9:90:5D:E5:24:86:B9:EC:4E:F8:79:A0:26:44:5C:70:B0:FD:95:05 Certificate issuer: /CN=A91E0C5F/serialNumber=C9905DE52486B9EC4EF879A026445C70B0FD9505 Certificate serial: 0709 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft Manifest number: 16AF Signing time: Sat 18 Oct 2025 18:06:33 +0000 Manifest this update: Sat 18 Oct 2025 18:06:32 +0000 Manifest next update: Sat 25 Oct 2025 18:06:32 +0000 Files and hashes: 1: yZBd5SSGuexO-HmgJkRccLD9lQU.crl (hash: lnE8lRLShoPzWv1YV/4GV3RBOmYFjVjJBPXOsVm4cQo=) 2: 039F32B465C411EBA408403CC4F9AE02.roa (hash: xyf+NgV/qzZzzx4oyqEQT3Z/16fLP6Y40HqsQl4nZiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.crl rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1801 (0x709) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0C5F, serialNumber=C9905DE52486B9EC4EF879A026445C70B0FD9505 Validity Not Before: Oct 18 18:06:32 2025 GMT Not After : Oct 25 18:06:32 2025 GMT Subject: CN=68f3d728-5b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:fe:e9:b1:08:1b:b3:9c:ef:2f:7b:e9:21:c2: ff:ad:8f:a1:7c:7d:f2:60:1b:39:8b:7c:4d:c2:15: af:da:24:28:ca:43:eb:65:e2:ce:23:ec:42:94:06: 3d:ea:2b:37:2c:5a:42:04:ef:0d:01:d3:f2:b4:6d: 50:80:02:d0:55:d4:b1:55:6e:f7:e1:0a:b2:d1:18: 40:1a:85:e9:a5:10:ba:23:0e:d3:5b:98:c9:27:46: 2d:72:80:d9:7a:6f:ba:0a:1c:7c:65:4b:a7:3b:10: 1c:8a:de:9a:2c:b0:aa:69:49:62:2b:c1:de:70:f6: ba:aa:2d:fa:d9:0b:d8:28:f5:95:80:14:39:2c:26: 78:dc:34:1b:66:27:0e:c4:aa:c0:8d:fa:ff:ce:ff: 26:e0:06:0a:b2:99:2f:45:2b:ba:03:51:ba:bf:00: 17:e3:b1:5b:06:e7:06:1a:66:52:ca:c3:3f:03:5b: bb:a7:5a:00:7e:c1:2d:c3:50:e4:3c:07:73:57:f2: 15:1b:14:84:22:02:86:c4:4e:56:d3:77:0f:09:d9: bd:13:38:2a:90:d0:c3:78:74:57:55:0a:4c:60:90: 7e:d9:47:ba:34:47:db:40:94:f9:d2:36:a4:49:83: 8d:d6:68:a5:93:01:7a:9e:3a:46:9f:77:0e:bc:68: 64:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F9:D3:71:12:AF:0D:52:8D:19:7D:E6:7A:61:6F:60:16:66:D9:DB X509v3 Authority Key Identifier: keyid:C9:90:5D:E5:24:86:B9:EC:4E:F8:79:A0:26:44:5C:70:B0:FD:95:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b4:e2:4b:37:69:b0:8d:c2:16:a9:65:b3:7a:f1:9d:af:55: 41:90:95:82:cc:e5:06:56:05:18:0f:04:41:c8:e2:39:e1:6a: f9:62:25:7b:b4:df:83:05:d3:97:06:06:a0:23:9a:bf:30:af: 5d:14:0f:f7:ca:61:34:e2:66:e3:25:35:17:57:8c:9d:57:33: 53:16:18:50:0b:b7:8c:f6:0c:9e:80:3b:75:8e:94:af:9f:43: 87:9c:db:d8:c8:48:32:98:f3:ac:46:89:07:29:cc:99:97:4d: d8:a0:4b:20:0a:85:ce:2e:bf:c7:68:1d:4f:6b:c5:cb:cb:d0: c6:34:83:ae:66:9d:37:2b:dc:a2:42:d8:88:b1:38:ea:b9:7b: 80:c9:fd:6e:d2:5a:6b:a9:20:28:bd:8b:f5:a6:a1:9e:f6:ec: 3a:09:0f:92:4d:2f:69:6c:df:28:1e:ed:36:7f:aa:55:b9:db: 8f:0a:9c:40:83:52:b2:7f:d2:8c:80:17:97:69:fd:c4:a3:c2: c8:88:7c:5d:a2:2b:3b:a4:8a:c5:6c:c8:8a:bf:d8:f9:82:43: f4:3b:2a:88:07:b6:8f:cc:2a:0e:56:c2:8e:72:25:ea:17:01: e0:a1:84:0d:f6:16:bd:0c:f2:e0:1a:d5:f4:e0:60:cc:67:2b: f7:98:a0:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDNUYxMTAvBgNVBAUTKEM5OTA1REU1MjQ4NkI5RUM0RUY4NzlBMDI2NDQ1Qzcw QjBGRDk1MDUwHhcNMjUxMDE4MTgwNjMyWhcNMjUxMDI1MTgwNjMyWjAYMRYwFAYD VQQDEw02OGYzZDcyOC01Yjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8P7psQgbs5zvL3vpIcL/rY+hfH3yYBs5i3xNwhWv2iQoykPrZeLOI+xClAY9 6is3LFpCBO8NAdPytG1QgALQVdSxVW734Qqy0RhAGoXppRC6Iw7TW5jJJ0YtcoDZ em+6Chx8ZUunOxAcit6aLLCqaUliK8HecPa6qi362QvYKPWVgBQ5LCZ43DQbZicO xKrAjfr/zv8m4AYKspkvRSu6A1G6vwAX47FbBucGGmZSysM/A1u7p1oAfsEtw1Dk PAdzV/IVGxSEIgKGxE5W03cPCdm9EzgqkNDDeHRXVQpMYJB+2Ue6NEfbQJT50jak SYON1milkwF6njpGn3cOvGhkswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOP503ES rw1SjRl95nphb2AWZtnbMB8GA1UdIwQYMBaAFMmQXeUkhrnsTvh5oCZEXHCw/ZUF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEM1Ri84QjU0N0E3MjY2 NjQxMUU5ODJEMDU5NzRDNEY5QUUwMi95WkJkNVNTR3VleE8tSG1nSmtSY2NMRDls UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laQmQ1U1NHdWV4Ty1IbWdKa1JjY0xEOWxRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEM1Ri84QjU0N0E3MjY2NjQxMUU5ODJEMDU5NzRDNEY5QUUwMi95WkJkNVNTR3Vl eE8tSG1nSmtSY2NMRDlsUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNtOJLN2mwjcIWqWWzevGdr1VBkJWCzOUGVgUYDwRByOI54Wr5YiV7 tN+DBdOXBgagI5q/MK9dFA/3ymE04mbjJTUXV4ydVzNTFhhQC7eM9gyegDt1jpSv n0OHnNvYyEgymPOsRokHKcyZl03YoEsgCoXOLr/HaB1Pa8XLy9DGNIOuZp03K9yi QtiIsTjquXuAyf1u0lprqSAovYv1pqGe9uw6CQ+STS9pbN8oHu02f6pVuduPCpxA g1Kyf9KMgBeXaf3Eo8LIiHxdois7pIrFbMiKv9j5gkP0OyqIB7aPzCoOVsKOciXq FwHgoYQN9ha9DPLgGtX04GDMZyv3mKB5 -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:21 2025 by rpki-client