$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft File: YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft (raw, json) Hash identifier: R+K8M6TZpHw0s9IUR523Lb8mZzCiQA6ZFAcQVFBu7Sg= Subject key identifier: 7B:2C:3B:6A:DE:33:E7:2A:C3:40:84:0E:A7:DD:29:5E:FB:9A:CD:27 Authority key identifier: 60:1D:C5:4B:1F:52:05:08:0E:FD:9A:A6:CF:A5:A5:1C:4A:79:DD:2B Certificate issuer: /CN=A91E5998/serialNumber=601DC54B1F5205080EFD9AA6CFA5A51C4A79DD2B Certificate serial: 0672 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft Manifest number: 0667 Signing time: Sun 19 Oct 2025 00:08:58 +0000 Manifest this update: Sun 19 Oct 2025 00:08:58 +0000 Manifest next update: Sun 26 Oct 2025 00:08:58 +0000 Files and hashes: 1: YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl (hash: 2cVHil9W23z6ZbmIrOhdOtvwnDzQqAHWKR6YHCSWw/w=) 2: 7438DDF0FD4A11EF85D3AC1AC4F9AE02.roa (hash: ZFyON0cFfqWSYmJESFiDKpaoMViJEmJBEJHpK/VixB8=) 3: 24365CBCF51411EFB44F001BC4F9AE02.roa (hash: WNqUPBF8HNjFohXgQh/4EEtiPRYZ8HZnCTlz6HaVU7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:08:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1650 (0x672) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5998, serialNumber=601DC54B1F5205080EFD9AA6CFA5A51C4A79DD2B Validity Not Before: Oct 19 00:08:58 2025 GMT Not After : Oct 26 00:08:58 2025 GMT Subject: CN=68f42c1a-1bee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6c:47:50:b3:7e:f5:3f:6a:75:33:bc:77:15: 48:b6:48:0c:77:12:6f:5c:bf:68:c9:1f:8e:cd:18: 0c:ff:6f:39:33:ef:c2:d4:f2:d6:62:d3:84:53:9b: 28:c8:28:07:73:da:60:da:09:81:8c:d1:f4:5c:e8: ec:8c:df:be:d5:87:77:90:05:f0:f5:3b:57:60:4d: 12:99:08:fd:c9:25:5d:f8:28:15:bd:a9:c6:66:fc: 6b:0e:db:9d:5f:4f:ce:ac:dc:4b:e0:65:2b:ff:18: 58:9b:50:67:55:49:10:24:a9:fb:e5:6e:eb:0e:9a: 1d:f5:bd:42:ed:fe:30:f6:b4:e4:e0:fb:8e:b1:ac: 90:1a:de:05:6f:e1:5b:00:08:5b:eb:fe:0d:a4:0f: 7c:70:c1:d7:39:65:98:00:9d:9b:0c:ee:34:9e:e9: 11:bd:bc:df:6f:1d:27:f8:87:d8:9c:bb:cc:5b:c1: 43:0e:34:59:72:03:59:fa:ea:cb:98:8a:7d:7e:da: 97:93:d7:0a:7e:01:95:f8:d1:9f:b3:79:73:ed:db: 9d:a5:af:07:9a:08:c7:89:e6:fe:3e:a1:78:aa:fd: d5:46:1c:9f:0d:6d:50:f0:dc:50:3b:21:6c:f1:cb: 3f:ae:d9:63:ed:6c:ce:e9:ed:fd:82:c1:93:2e:ea: e1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:2C:3B:6A:DE:33:E7:2A:C3:40:84:0E:A7:DD:29:5E:FB:9A:CD:27 X509v3 Authority Key Identifier: keyid:60:1D:C5:4B:1F:52:05:08:0E:FD:9A:A6:CF:A5:A5:1C:4A:79:DD:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:51:ec:da:74:eb:22:a2:d9:ac:08:65:3e:31:9d:f1:b0:3b: cf:74:36:71:c9:86:d3:04:39:63:a0:e7:12:95:25:4f:63:b6: 8f:0d:55:f4:84:1b:4e:60:04:4d:91:f0:e9:29:a4:e1:56:e3: fe:0b:24:68:aa:da:7a:48:32:5f:3c:1b:77:45:7b:5e:71:88: 94:02:e0:20:7a:0f:60:7b:9e:6f:3d:86:05:50:72:ef:08:14: 56:68:45:0f:3c:88:fd:57:66:f7:63:bb:12:08:86:8c:a1:b6: c5:79:54:3f:0a:15:3e:f6:dc:79:d0:d3:bc:e5:d1:49:de:e9: 97:c3:e0:bd:3b:e1:73:4d:27:e4:c5:63:5d:35:2a:44:36:ff: a2:d2:77:2e:f1:65:56:b3:4e:9b:08:48:3e:46:26:1d:0a:2f: f1:7e:b9:b0:86:fd:e5:87:a9:13:50:44:dc:4a:4b:c4:3c:3d: 2d:21:1e:b5:a0:78:79:d7:19:e9:69:5b:45:11:e1:e2:63:49: fe:fc:b0:cd:4f:60:1c:19:b9:a9:eb:f8:e5:5b:ee:57:7a:d9: 9f:df:66:8a:3e:99:20:60:99:9c:8d:e4:d8:e6:58:7b:a4:a6: 36:dd:f6:c6:f3:d5:bd:9f:ed:e2:b6:c2:a3:95:57:f8:30:64: e9:e0:24:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU5OTgxMTAvBgNVBAUTKDYwMURDNTRCMUY1MjA1MDgwRUZEOUFBNkNGQTVBNTFD NEE3OUREMkIwHhcNMjUxMDE5MDAwODU4WhcNMjUxMDI2MDAwODU4WjAYMRYwFAYD VQQDEw02OGY0MmMxYS0xYmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmxHULN+9T9qdTO8dxVItkgMdxJvXL9oyR+OzRgM/285M+/C1PLWYtOEU5so yCgHc9pg2gmBjNH0XOjsjN++1Yd3kAXw9TtXYE0SmQj9ySVd+CgVvanGZvxrDtud X0/OrNxL4GUr/xhYm1BnVUkQJKn75W7rDpod9b1C7f4w9rTk4PuOsayQGt4Fb+Fb AAhb6/4NpA98cMHXOWWYAJ2bDO40nukRvbzfbx0n+IfYnLvMW8FDDjRZcgNZ+urL mIp9ftqXk9cKfgGV+NGfs3lz7dudpa8HmgjHieb+PqF4qv3VRhyfDW1Q8NxQOyFs 8cs/rtlj7WzO6e39gsGTLurh9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHssO2re M+cqw0CEDqfdKV77ms0nMB8GA1UdIwQYMBaAFGAdxUsfUgUIDv2aps+lpRxKed0r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTk5OC8yQzU5MkUyODlG MUYxMUVCQjMwRDU3NDNDNEY5QUUwMi9ZQjNGU3g5U0JRZ09fWnFtejZXbEhFcDUz U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lCM0ZTeDlTQlFnT19acW16NldsSEVwNTNTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTk5OC8yQzU5MkUyODlGMUYxMUVCQjMwRDU3NDNDNEY5QUUwMi9ZQjNGU3g5U0JR Z09fWnFtejZXbEhFcDUzU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTUezadOsiotmsCGU+MZ3xsDvPdDZxyYbTBDljoOcSlSVPY7aPDVX0 hBtOYARNkfDpKaThVuP+CyRoqtp6SDJfPBt3RXtecYiUAuAgeg9ge55vPYYFUHLv CBRWaEUPPIj9V2b3Y7sSCIaMobbFeVQ/ChU+9tx50NO85dFJ3umXw+C9O+FzTSfk xWNdNSpENv+i0ncu8WVWs06bCEg+RiYdCi/xfrmwhv3lh6kTUETcSkvEPD0tIR61 oHh51xnpaVtFEeHiY0n+/LDNT2AcGbmp6/jlW+5Xetmf32aKPpkgYJmcjeTY5lh7 pKY23fbG89W9n+3itsKjlVf4MGTp4CSx -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:33 2025 by rpki-client