$ rpki-client -vvf rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.mft File: yPWXElLMBM4--LZy7nTid7LM1hU.mft (raw, json) Hash identifier: bjNx0M37pdmI1ko06R1XhXQrsiF1TyyJbJ4nae3vPXQ= Subject key identifier: 3E:88:D6:DB:C9:5C:EF:76:8D:A1:B2:0A:23:BF:B4:55:A7:2A:41:FB Authority key identifier: C8:F5:97:12:52:CC:04:CE:3E:F8:B6:72:EE:74:E2:77:B2:CC:D6:15 Certificate issuer: /CN=A91F72E2/serialNumber=C8F5971252CC04CE3EF8B672EE74E277B2CCD615 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPWXElLMBM4--LZy7nTid7LM1hU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.mft Manifest number: 16 Signing time: Sun 19 Oct 2025 11:26:17 +0000 Manifest this update: Sun 19 Oct 2025 11:26:16 +0000 Manifest next update: Sun 26 Oct 2025 11:26:16 +0000 Files and hashes: 1: yPWXElLMBM4--LZy7nTid7LM1hU.crl (hash: yYwGqPAgLZYyqaSwqPkEoDzyCf3JGegP5FJVaf4f7e0=) 2: 13542BE28C9311F099562747C4F9AE02.roa (hash: 74FroNCdegFOPZiDBlEbhFtWJ9Myu+nQaF/Cyco73vs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.crl rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPWXElLMBM4--LZy7nTid7LM1hU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:26:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F72E2, serialNumber=C8F5971252CC04CE3EF8B672EE74E277B2CCD615 Validity Not Before: Oct 19 11:26:16 2025 GMT Not After : Oct 26 11:26:16 2025 GMT Subject: CN=68f4cad8-1f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5f:97:41:0a:64:91:bd:17:ae:7b:d2:e3:b9: 5b:7f:cf:c9:98:0d:76:42:e1:2b:48:c1:9c:84:7b: 0f:62:26:82:b8:41:ec:49:44:d2:4a:62:6f:15:6c: 59:50:6a:3e:ac:75:84:b4:76:ab:f3:28:30:47:b4: 30:eb:21:f3:c4:7b:c8:01:44:8f:71:40:d2:08:66: 53:1e:1b:21:48:d8:08:1f:94:fd:5a:7f:61:e9:95: b5:ad:c1:c5:8a:cc:45:5e:3c:0c:f6:f4:35:e5:2a: 1c:16:2e:f9:12:bd:4e:fc:95:8f:5a:cf:cd:b9:48: 81:13:e0:ec:a4:cd:6f:fe:ba:13:fb:d6:fe:20:d6: 82:15:e4:d1:58:e6:7d:f0:c3:90:a8:75:45:d0:85: 0d:1b:f9:f8:c6:7e:92:01:d9:3f:9c:70:70:a7:0c: 55:b1:ef:98:f7:ce:23:41:29:cb:30:b1:74:d5:63: 82:41:bb:34:6b:1f:d5:7f:12:18:cb:95:94:cd:82: b3:fa:bf:92:cb:25:da:ce:2f:01:46:9e:e7:86:02: 68:ba:6f:b8:f4:0e:6a:ec:bf:eb:09:9f:6e:9a:f0: e3:d6:12:d7:b9:3e:f1:27:e2:1f:8e:87:f1:42:ea: 2f:d2:50:f7:cc:62:1e:80:6b:48:f8:ee:86:8f:8a: ee:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:88:D6:DB:C9:5C:EF:76:8D:A1:B2:0A:23:BF:B4:55:A7:2A:41:FB X509v3 Authority Key Identifier: keyid:C8:F5:97:12:52:CC:04:CE:3E:F8:B6:72:EE:74:E2:77:B2:CC:D6:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPWXElLMBM4--LZy7nTid7LM1hU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:64:ba:f6:c3:2a:1d:8e:83:67:39:09:b0:56:df:f8:99:56: 3e:6c:cd:7c:79:05:29:1a:a8:63:8f:bf:a2:c7:4a:7a:18:92: 8d:f6:28:6e:e3:99:33:e4:9b:a2:d8:f2:d8:c0:cb:d0:42:42: a4:5a:2a:17:24:8f:2c:b7:ae:4e:24:d1:b1:9a:19:48:23:95: 95:10:f3:9a:dd:2d:64:ac:69:02:4b:ef:65:36:35:ad:ac:f6: e6:cf:07:16:af:3f:9a:ba:e9:da:5f:b7:2e:c8:a1:cc:9e:0b: bb:9e:ce:5e:03:39:e8:8e:42:e6:64:51:b5:b0:1d:47:25:25: d0:aa:87:8f:ea:34:a1:a3:c5:8d:90:11:8f:a4:2e:29:28:da: 8f:8f:f2:a8:9b:77:5c:0e:2a:cd:f6:8a:5a:59:18:97:11:fe: de:46:c1:ef:be:8a:0a:e3:de:96:1d:b4:b1:78:98:06:f1:3e: b7:ed:30:5b:3e:22:29:fa:1f:23:7a:55:34:76:91:f7:34:12: 78:13:0c:c1:33:ec:1d:b0:e0:85:50:f0:75:5a:01:52:87:02: 92:d4:46:1c:1b:d1:b4:4c:67:70:e1:b6:f6:08:01:c6:d7:3c: ed:46:f1:75:00:9d:30:52:29:e7:f5:b4:a7:47:b3:ef:ab:4d: 21:a6:2b:88 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NzJFMjExMC8GA1UEBRMoQzhGNTk3MTI1MkNDMDRDRTNFRjhCNjcyRUU3NEUyNzdC MkNDRDYxNTAeFw0yNTEwMTkxMTI2MTZaFw0yNTEwMjYxMTI2MTZaMBgxFjAUBgNV BAMTDTY4ZjRjYWQ4LTFmMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmX5dBCmSRvReue9LjuVt/z8mYDXZC4StIwZyEew9iJoK4QexJRNJKYm8VbFlQ aj6sdYS0dqvzKDBHtDDrIfPEe8gBRI9xQNIIZlMeGyFI2AgflP1af2HplbWtwcWK zEVePAz29DXlKhwWLvkSvU78lY9az825SIET4OykzW/+uhP71v4g1oIV5NFY5n3w w5CodUXQhQ0b+fjGfpIB2T+ccHCnDFWx75j3ziNBKcswsXTVY4JBuzRrH9V/EhjL lZTNgrP6v5LLJdrOLwFGnueGAmi6b7j0Dmrsv+sJn26a8OPWEte5PvEn4h+Oh/FC 6i/SUPfMYh6Aa0j47oaPiu7HAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPojW28lc 73aNobIKI7+0VacqQfswHwYDVR0jBBgwFoAUyPWXElLMBM4++LZy7nTid7LM1hUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3MkUyL0M2QTFGMjBBOEM4 RjExRjA5NDIzRjExOUM0RjlBRTAyL3lQV1hFbExNQk00LS1MWnk3blRpZDdMTTFo VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveVBXWEVsTE1CTTQtLUxaeTduVGlkN0xNMWhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3 MkUyL0M2QTFGMjBBOEM4RjExRjA5NDIzRjExOUM0RjlBRTAyL3lQV1hFbExNQk00 LS1MWnk3blRpZDdMTTFoVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAhkuvbDKh2Og2c5CbBW3/iZVj5szXx5BSkaqGOPv6LHSnoYko32KG7j mTPkm6LY8tjAy9BCQqRaKhckjyy3rk4k0bGaGUgjlZUQ85rdLWSsaQJL72U2Na2s 9ubPBxavP5q66dpfty7IocyeC7uezl4DOeiOQuZkUbWwHUclJdCqh4/qNKGjxY2Q EY+kLiko2o+P8qibd1wOKs32ilpZGJcR/t5Gwe++igrj3pYdtLF4mAbxPrftMFs+ Iin6HyN6VTR2kfc0EngTDMEz7B2w4IVQ8HVaAVKHApLURhwb0bRMZ3DhtvYIAcbX PO1G8XUAnTBSKef1tKdHs++rTSGmK4g= -----END CERTIFICATE-----Generated at Mon Oct 20 09:48:45 2025 by rpki-client