$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft File: YU0eyLaT57tfMs-lJ7UCgyad_is.mft (raw, json) Hash identifier: T97ZQLHTO0+G3ZrCoGyQMuEdzeAQVT+KtGx82Fhai5Y= Subject key identifier: AD:F2:12:22:79:C9:C8:BB:DE:8A:AE:D7:0B:79:61:49:3E:09:9E:DF Authority key identifier: 61:4D:1E:C8:B6:93:E7:BB:5F:32:CF:A5:27:B5:02:83:26:9D:FE:2B Certificate issuer: /CN=A91FBD7B/serialNumber=614D1EC8B693E7BB5F32CFA527B50283269DFE2B Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft Manifest number: 8D Signing time: Sun 19 Oct 2025 09:50:24 +0000 Manifest this update: Sun 19 Oct 2025 09:50:24 +0000 Manifest next update: Sun 26 Oct 2025 09:50:24 +0000 Files and hashes: 1: YU0eyLaT57tfMs-lJ7UCgyad_is.crl (hash: QmjmWsIDYebysMOdsqq71qGl7By+3Zgn1jgYDcM7vy0=) 2: EE380826D87211EFBAE0FC19C4F9AE02.roa (hash: Z/MKQEZHBao6uUjy3KntQF19ACE4AX6KONtzOcMde7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.crl rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:50:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD7B, serialNumber=614D1EC8B693E7BB5F32CFA527B50283269DFE2B Validity Not Before: Oct 19 09:50:24 2025 GMT Not After : Oct 26 09:50:24 2025 GMT Subject: CN=68f4b460-c038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ce:71:1a:e4:98:27:c4:a5:1f:d1:70:ca:5b: f0:7a:8b:11:5f:56:f8:5d:98:a8:ed:5c:f7:18:43: 61:99:3f:9f:9b:e0:e4:67:9c:70:b5:60:90:2f:86: 41:42:fa:38:1e:ca:17:e5:51:d3:a7:e0:be:b8:e8: f7:37:a0:b7:19:bb:d6:f8:e0:79:06:ca:90:25:c2: 16:4f:91:37:f5:b4:83:b4:92:c5:6f:25:bd:e7:7d: 4b:ba:4b:ec:80:81:e2:f8:3c:34:2d:42:1f:22:b0: 0c:f0:14:bb:04:ea:89:6e:4e:52:4d:98:66:eb:5f: 63:20:f2:e9:5a:a6:07:86:e1:8f:5d:61:f8:fe:cf: ef:1c:e2:f6:17:82:f7:a4:40:99:39:09:e4:06:21: 5d:ab:85:42:bd:38:57:bc:43:77:c4:e2:09:0e:73: 2f:8a:74:5f:bc:e2:d7:45:59:84:99:7d:88:6d:8b: 5f:27:29:bb:b9:46:a3:b1:01:9a:78:ab:fd:33:02: 86:6c:76:93:7d:a0:5a:07:a8:54:62:60:41:a2:88: 41:25:59:71:a0:3e:32:f1:ef:20:a5:bf:53:53:27: ed:c0:1c:df:98:91:d5:f5:e0:a1:3b:c6:78:a1:dd: ac:44:2c:73:08:b4:4e:88:69:56:6c:a0:ee:82:ce: 63:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F2:12:22:79:C9:C8:BB:DE:8A:AE:D7:0B:79:61:49:3E:09:9E:DF X509v3 Authority Key Identifier: keyid:61:4D:1E:C8:B6:93:E7:BB:5F:32:CF:A5:27:B5:02:83:26:9D:FE:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:2b:2b:3b:2b:99:67:57:50:6e:70:79:da:78:0c:99:38:cb: 09:b0:b0:97:fb:54:37:6c:3d:ec:6e:cd:db:72:2b:db:58:cc: 6e:04:9d:c1:df:34:39:c7:6a:03:30:0b:a7:9f:a2:2c:5d:18: a4:ec:ee:59:27:c4:71:58:65:03:7d:7a:42:04:89:b2:ed:b6: 81:f8:51:cb:05:6b:62:06:12:b6:aa:79:45:06:32:60:80:22: f6:f3:88:71:b9:3c:57:61:c1:bf:52:2e:f2:e6:e1:18:13:88: c8:46:93:4d:91:ba:0b:e4:47:e8:ac:25:8e:d3:47:39:1d:8f: b3:61:15:ec:0f:c9:44:af:88:7c:a7:90:57:3a:7a:8e:16:c7: df:b6:4a:32:cf:d3:4a:65:4f:9b:b8:44:80:21:50:10:24:62: bf:5d:35:3d:e2:fc:97:ea:41:cf:20:ba:f0:a4:a8:9a:1d:d8: ee:cc:95:44:ed:88:79:61:2a:6e:15:21:71:70:ef:17:47:b6: 53:0c:0c:e4:c1:ef:cb:f4:da:97:ea:18:26:a6:db:9f:38:18: 77:a4:88:f5:08:e2:e8:2a:92:1a:95:25:07:7f:b5:31:6c:15: c6:0b:eb:d3:9f:d3:d4:1b:25:2f:e4:fb:c5:b8:0d:6b:e7:36: 6c:33:83:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEN0IxMTAvBgNVBAUTKDYxNEQxRUM4QjY5M0U3QkI1RjMyQ0ZBNTI3QjUwMjgz MjY5REZFMkIwHhcNMjUxMDE5MDk1MDI0WhcNMjUxMDI2MDk1MDI0WjAYMRYwFAYD VQQDEw02OGY0YjQ2MC1jMDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv85xGuSYJ8SlH9FwylvweosRX1b4XZio7Vz3GENhmT+fm+DkZ5xwtWCQL4ZB Qvo4HsoX5VHTp+C+uOj3N6C3GbvW+OB5BsqQJcIWT5E39bSDtJLFbyW9531Lukvs gIHi+Dw0LUIfIrAM8BS7BOqJbk5STZhm619jIPLpWqYHhuGPXWH4/s/vHOL2F4L3 pECZOQnkBiFdq4VCvThXvEN3xOIJDnMvinRfvOLXRVmEmX2IbYtfJym7uUajsQGa eKv9MwKGbHaTfaBaB6hUYmBBoohBJVlxoD4y8e8gpb9TUyftwBzfmJHV9eChO8Z4 od2sRCxzCLROiGlWbKDugs5j8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3yEiJ5 yci73oqu1wt5YUk+CZ7fMB8GA1UdIwQYMBaAFGFNHsi2k+e7XzLPpSe1AoMmnf4r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQ3Qi9BNzRGNUVEQ0Q4 NzIxMUVGQTMxRjg0MTlDNEY5QUUwMi9ZVTBleUxhVDU3dGZNcy1sSjdVQ2d5YWRf aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lVMGV5TGFUNTd0Zk1zLWxKN1VDZ3lhZF9pcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQ3Qi9BNzRGNUVEQ0Q4NzIxMUVGQTMxRjg0MTlDNEY5QUUwMi9ZVTBleUxhVDU3 dGZNcy1sSjdVQ2d5YWRfaXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOKys7K5lnV1BucHnaeAyZOMsJsLCX+1Q3bD3sbs3bcivbWMxuBJ3B 3zQ5x2oDMAunn6IsXRik7O5ZJ8RxWGUDfXpCBImy7baB+FHLBWtiBhK2qnlFBjJg gCL284hxuTxXYcG/Ui7y5uEYE4jIRpNNkboL5EforCWO00c5HY+zYRXsD8lEr4h8 p5BXOnqOFsfftkoyz9NKZU+buESAIVAQJGK/XTU94vyX6kHPILrwpKiaHdjuzJVE 7Yh5YSpuFSFxcO8XR7ZTDAzkwe/L9NqX6hgmptufOBh3pIj1COLoKpIalSUHf7Ux bBXGC+vTn9PUGyUv5PvFuA1r5zZsM4N2 -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:23 2025 by rpki-client