$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft File: Yb6mqjOAZskOtcsyQAxq52BciKQ.mft (raw, json) Hash identifier: 8o4tWsQFEZW6dK0oZ+btV2vECPLs6DyYOHpniDj17Nk= Subject key identifier: F6:F6:A8:E2:F4:E5:89:95:49:11:A8:B2:A2:B8:91:D2:1F:A9:79:92 Authority key identifier: 61:BE:A6:AA:33:80:66:C9:0E:B5:CB:32:40:0C:6A:E7:60:5C:88:A4 Certificate issuer: /CN=A91FA52B/serialNumber=61BEA6AA338066C90EB5CB32400C6AE7605C88A4 Certificate serial: 0FE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft Manifest number: 0FE2 Signing time: Sat 18 Oct 2025 18:04:24 +0000 Manifest this update: Sat 18 Oct 2025 18:04:24 +0000 Manifest next update: Sat 25 Oct 2025 18:04:24 +0000 Files and hashes: 1: Yb6mqjOAZskOtcsyQAxq52BciKQ.crl (hash: wHqAVOMewcMdf9ghfqG8fO3hii6VdQzq1+iGVd2Yldo=) 2: ECB38BAA5C3211E9816E7981C4F9AE02.roa (hash: cCIRQV7ckuHtyIWMyZbPGhi3IsjwZT86WZjPdbGRO6M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.crl rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4073 (0xfe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA52B, serialNumber=61BEA6AA338066C90EB5CB32400C6AE7605C88A4 Validity Not Before: Oct 18 18:04:24 2025 GMT Not After : Oct 25 18:04:24 2025 GMT Subject: CN=68f3d6a8-66cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b5:6e:ec:02:60:31:3b:3f:39:3b:c1:cf:1a: 4a:f6:b9:08:a0:9d:84:fd:67:37:96:ba:fe:16:4c: c7:28:68:37:be:6d:20:c5:e6:9d:8f:c5:6a:bf:74: 2d:07:6b:55:ce:06:10:a4:6e:6b:e3:c0:2b:e3:9a: 07:31:9f:a1:7f:68:ff:4f:6f:da:99:a1:fc:81:24: 15:ff:dc:5e:42:d6:ce:97:99:3c:33:95:73:5a:c2: 34:d7:67:c5:49:a0:90:81:7b:90:6f:98:e8:85:80: 8b:2e:0d:a4:85:e4:d9:47:55:48:1b:ea:22:f3:46: bd:18:73:69:11:37:75:93:08:9e:bb:43:6f:b1:46: 15:85:87:e3:ed:8f:fb:5c:41:95:80:82:d2:61:34: 67:76:93:02:b1:52:41:9c:1d:26:1c:d5:48:a6:7b: 3e:90:24:4a:d3:4b:af:8e:66:0a:15:1f:cc:4d:5a: 71:2c:f5:98:f4:db:47:72:77:fa:5f:2a:78:13:69: e9:d3:f2:11:30:80:f5:3c:ed:67:15:e5:b4:85:d2: 2a:8a:ec:d7:83:5a:62:1b:5d:85:87:9a:2c:c7:e4: 7d:4c:b5:9d:a6:53:2e:54:61:3a:5f:84:85:82:e7: 13:c3:3a:02:54:b3:55:59:43:e2:01:86:ca:28:8d: fb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F6:A8:E2:F4:E5:89:95:49:11:A8:B2:A2:B8:91:D2:1F:A9:79:92 X509v3 Authority Key Identifier: keyid:61:BE:A6:AA:33:80:66:C9:0E:B5:CB:32:40:0C:6A:E7:60:5C:88:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:cb:f5:61:08:e6:35:c6:fe:da:55:80:56:ff:41:e8:0d:93: 1f:f7:44:10:32:ef:46:52:b3:12:ab:61:39:f0:79:f5:9a:4a: a8:af:a3:09:f6:c3:8e:58:aa:a6:fe:48:b1:25:c5:f9:e0:b9: 99:b9:eb:3b:7d:3f:8c:60:ed:c4:71:14:c4:01:27:a0:35:36: c8:7b:27:06:c9:6c:06:b1:2a:eb:7e:9b:8f:d5:aa:44:16:8b: 38:63:24:18:72:e4:22:58:95:10:57:db:37:5e:27:e8:06:2d: 80:dc:ca:01:b9:c7:3b:ad:d1:18:5c:ec:26:18:f9:c9:9f:60: cd:b0:0c:05:b8:5b:74:ce:e7:d8:32:a3:dc:65:44:a6:67:de: e1:fb:b3:be:3e:07:42:86:f5:10:46:7b:cd:0a:20:60:df:56: 08:ff:96:01:10:a5:c8:f5:c8:f2:71:d3:09:4a:d8:1d:90:1c: 13:0b:1e:83:37:39:00:57:fb:33:d2:1f:f4:2a:da:27:10:a6: d0:23:4c:eb:d4:ae:fd:ce:77:3b:57:9e:78:e2:02:e9:b8:6e: cb:83:a9:b6:dd:96:12:24:15:5a:03:eb:71:60:9e:de:cd:41: 90:d4:da:fc:68:4d:e0:98:6e:98:b4:68:09:5a:6f:13:a2:7a: c2:eb:16:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1MkIxMTAvBgNVBAUTKDYxQkVBNkFBMzM4MDY2QzkwRUI1Q0IzMjQwMEM2QUU3 NjA1Qzg4QTQwHhcNMjUxMDE4MTgwNDI0WhcNMjUxMDI1MTgwNDI0WjAYMRYwFAYD VQQDEw02OGYzZDZhOC02NmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7Vu7AJgMTs/OTvBzxpK9rkIoJ2E/Wc3lrr+FkzHKGg3vm0gxeadj8Vqv3Qt B2tVzgYQpG5r48Ar45oHMZ+hf2j/T2/amaH8gSQV/9xeQtbOl5k8M5VzWsI012fF SaCQgXuQb5johYCLLg2kheTZR1VIG+oi80a9GHNpETd1kwieu0NvsUYVhYfj7Y/7 XEGVgILSYTRndpMCsVJBnB0mHNVIpns+kCRK00uvjmYKFR/MTVpxLPWY9NtHcnf6 Xyp4E2np0/IRMID1PO1nFeW0hdIqiuzXg1piG12Fh5osx+R9TLWdplMuVGE6X4SF gucTwzoCVLNVWUPiAYbKKI37FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPb2qOL0 5YmVSRGosqK4kdIfqXmSMB8GA1UdIwQYMBaAFGG+pqozgGbJDrXLMkAMaudgXIik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTUyQi8yOENCRkIxNDVD MzIxMUU5QUI2MjQ1ODBDNEY5QUUwMi9ZYjZtcWpPQVpza090Y3N5UUF4cTUyQmNp S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liNm1xak9BWnNrT3Rjc3lRQXhxNTJCY2lLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTUyQi8yOENCRkIxNDVDMzIxMUU5QUI2MjQ1ODBDNEY5QUUwMi9ZYjZtcWpPQVpz a090Y3N5UUF4cTUyQmNpS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPy/VhCOY1xv7aVYBW/0HoDZMf90QQMu9GUrMSq2E58Hn1mkqor6MJ 9sOOWKqm/kixJcX54LmZues7fT+MYO3EcRTEASegNTbIeycGyWwGsSrrfpuP1apE Fos4YyQYcuQiWJUQV9s3XifoBi2A3MoBucc7rdEYXOwmGPnJn2DNsAwFuFt0zufY MqPcZUSmZ97h+7O+PgdChvUQRnvNCiBg31YI/5YBEKXI9cjycdMJStgdkBwTCx6D NzkAV/sz0h/0KtonEKbQI0zr1K79znc7V5544gLpuG7Lg6m23ZYSJBVaA+txYJ7e zUGQ1Nr8aE3gmG6YtGgJWm8TonrC6xYT -----END CERTIFICATE-----Generated at Mon Oct 20 19:30:56 2025 by rpki-client