$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft File: Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft (raw, json) Hash identifier: 47CI8fVLHzgtUEkLnG+pke2dslE8bjkLUryHPlbrCVE= Subject key identifier: 3F:9D:2E:99:14:27:12:8E:A6:3B:1A:C4:8C:B4:8F:70:B6:51:0D:C6 Authority key identifier: 62:2E:E7:54:36:D6:F2:F3:9F:B2:3D:2C:EB:22:33:71:84:57:3D:FE Certificate issuer: /CN=A91EB46B/serialNumber=622EE75436D6F2F39FB23D2CEB22337184573DFE Certificate serial: 0CBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft Manifest number: 0CAF Signing time: Sat 18 Oct 2025 18:58:10 +0000 Manifest this update: Sat 18 Oct 2025 18:58:09 +0000 Manifest next update: Sat 25 Oct 2025 18:58:09 +0000 Files and hashes: 1: Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl (hash: DBcpQQ6EnLzZiumNDOvzwD5D+q8O4ueT2BvagbFdJy0=) 2: BE8369D6053711EA9A24E761C4F9AE02.roa (hash: g/Wu5qsnOXz/tO3fGn1wnKRg6cUfPAvWhJqnHgDxhLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:58:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3262 (0xcbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB46B, serialNumber=622EE75436D6F2F39FB23D2CEB22337184573DFE Validity Not Before: Oct 18 18:58:09 2025 GMT Not After : Oct 25 18:58:09 2025 GMT Subject: CN=68f3e341-20d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ff:9a:58:cb:64:0d:94:35:9c:44:d0:00:de: ef:27:5a:22:c3:2d:da:8e:df:e5:17:94:11:0b:88: 5d:d6:b8:76:be:35:99:18:6d:3c:89:52:9b:62:db: c2:cc:53:05:31:65:91:76:71:fd:af:cf:dc:1b:8a: 68:34:c3:86:4d:4c:83:ba:59:9f:5d:d3:30:0f:bf: 81:fb:ca:03:ad:0b:21:c8:8b:f7:c3:1a:a6:70:68: a2:b9:f9:3f:bb:63:59:f2:1c:9b:12:3e:39:86:cd: aa:a1:5d:fd:d3:a4:93:c9:04:fc:81:a1:ee:41:fe: 91:78:7c:8d:17:bf:1c:04:f7:e2:b9:5c:71:81:d2: a8:9b:06:fa:0e:d0:ee:98:8f:74:58:28:d2:12:3a: c3:16:9d:d4:65:d4:c9:51:8f:2d:6b:22:03:6e:32: 3f:7b:aa:07:36:ac:1d:24:33:fa:71:34:03:ec:4a: 04:67:2f:4b:89:dc:7e:d5:ac:e1:07:64:54:ab:16: f9:a5:37:b4:ab:fd:c7:eb:e3:cd:b0:4f:a5:ce:2e: a7:a8:57:26:c0:8a:1f:64:3e:ee:67:ce:5f:bc:1b: e6:11:26:ad:7d:ce:8f:bc:da:a9:51:c9:88:0e:70: b3:b9:63:1b:b7:d2:6a:24:ee:02:3a:b2:f6:44:d8: a9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:9D:2E:99:14:27:12:8E:A6:3B:1A:C4:8C:B4:8F:70:B6:51:0D:C6 X509v3 Authority Key Identifier: keyid:62:2E:E7:54:36:D6:F2:F3:9F:B2:3D:2C:EB:22:33:71:84:57:3D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:43:bd:5e:d2:4b:96:b7:13:e6:5e:82:15:aa:d2:85:8f:b2: 75:73:31:73:af:92:91:9f:b6:db:8f:ad:e8:43:b1:ae:dd:af: e1:a6:30:0b:47:e6:88:37:69:71:26:24:09:f8:a9:ab:5b:2a: c0:d2:19:d2:b0:89:44:4a:e2:e2:2d:24:12:06:f3:74:1c:87: 5f:1b:90:e8:c5:eb:64:63:89:ea:7f:94:e0:92:bb:5a:8d:e0: 6e:b0:e4:7a:18:5c:b9:e6:4f:00:54:4a:83:5f:78:e4:b8:10: 0e:11:3a:71:7a:b8:bd:56:61:db:9a:6f:a5:36:d5:6b:00:6f: 07:e9:55:fe:c1:57:5a:31:49:15:d9:2f:fd:82:7a:0b:f3:8d: f1:ef:71:80:85:74:6e:37:2d:e1:cf:c5:a5:0e:d5:36:5a:e9: 25:38:61:b1:a0:c7:55:10:bf:71:2d:0f:e6:4f:5a:42:ef:51: b6:ba:b5:2a:0a:18:e7:e6:80:8f:d9:48:ef:a4:8e:11:6c:50: b5:1d:9d:55:94:c8:1a:0c:4e:1f:bd:95:ad:93:97:ea:be:74: ad:e7:f5:e5:e2:77:72:ec:98:06:14:4b:94:03:a4:2a:97:34: 25:36:5f:b1:de:04:1a:a8:60:52:b6:43:e6:61:33:03:65:e5: 0e:ee:85:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI0NkIxMTAvBgNVBAUTKDYyMkVFNzU0MzZENkYyRjM5RkIyM0QyQ0VCMjIzMzcx ODQ1NzNERkUwHhcNMjUxMDE4MTg1ODA5WhcNMjUxMDI1MTg1ODA5WjAYMRYwFAYD VQQDEw02OGYzZTM0MS0yMGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApv+aWMtkDZQ1nETQAN7vJ1oiwy3ajt/lF5QRC4hd1rh2vjWZGG08iVKbYtvC zFMFMWWRdnH9r8/cG4poNMOGTUyDulmfXdMwD7+B+8oDrQshyIv3wxqmcGiiufk/ u2NZ8hybEj45hs2qoV3906STyQT8gaHuQf6ReHyNF78cBPfiuVxxgdKomwb6DtDu mI90WCjSEjrDFp3UZdTJUY8tayIDbjI/e6oHNqwdJDP6cTQD7EoEZy9Lidx+1azh B2RUqxb5pTe0q/3H6+PNsE+lzi6nqFcmwIofZD7uZ85fvBvmESatfc6PvNqpUcmI DnCzuWMbt9JqJO4COrL2RNip/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD+dLpkU JxKOpjsaxIy0j3C2UQ3GMB8GA1UdIwQYMBaAFGIu51Q21vLzn7I9LOsiM3GEVz3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjQ2Qi80OTMxRUU0NjAw N0QxMUVBQjQ4OTEzMUJDNEY5QUUwMi9ZaTduVkRiVzh2T2ZzajBzNnlJemNZUlhQ ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lpN25WRGJXOHZPZnNqMHM2eUl6Y1lSWFBmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjQ2Qi80OTMxRUU0NjAwN0QxMUVBQjQ4OTEzMUJDNEY5QUUwMi9ZaTduVkRiVzh2 T2ZzajBzNnlJemNZUlhQZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoQ71e0kuWtxPmXoIVqtKFj7J1czFzr5KRn7bbj63oQ7Gu3a/hpjAL R+aIN2lxJiQJ+KmrWyrA0hnSsIlESuLiLSQSBvN0HIdfG5DoxetkY4nqf5Tgkrta jeBusOR6GFy55k8AVEqDX3jkuBAOETpxeri9VmHbmm+lNtVrAG8H6VX+wVdaMUkV 2S/9gnoL843x73GAhXRuNy3hz8WlDtU2WuklOGGxoMdVEL9xLQ/mT1pC71G2urUq Chjn5oCP2UjvpI4RbFC1HZ1VlMgaDE4fvZWtk5fqvnSt5/Xl4ndy7JgGFEuUA6Qq lzQlNl+x3gQaqGBStkPmYTMDZeUO7oWL -----END CERTIFICATE-----Generated at Mon Oct 20 06:25:43 2025 by rpki-client