$ rpki-client -vvf rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft File: yq12WnMFvBUlSxWyW1vTm2Oow68.mft (raw, json) Hash identifier: 2sPypRDQyb1HfdK09OUepeeoxFtO2aI51q0Nau6oH+Q= Subject key identifier: 00:D2:35:80:93:DA:B9:8E:D2:DE:4D:5E:AA:3A:90:DF:15:8B:70:B3 Authority key identifier: CA:AD:76:5A:73:05:BC:15:25:4B:15:B2:5B:5B:D3:9B:63:A8:C3:AF Certificate issuer: /CN=A911082E/serialNumber=CAAD765A7305BC15254B15B25B5BD39B63A8C3AF Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yq12WnMFvBUlSxWyW1vTm2Oow68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft Manifest number: 30 Signing time: Sun 19 Oct 2025 11:10:32 +0000 Manifest this update: Sun 19 Oct 2025 11:10:32 +0000 Manifest next update: Sun 26 Oct 2025 11:10:32 +0000 Files and hashes: 1: yq12WnMFvBUlSxWyW1vTm2Oow68.crl (hash: CMgjdHB9m2xKT37W5LDstWll2uHKx+ZA4Pu90Uh2aKg=) 2: 2CD74E4E66E311F08F05EC49C4F9AE02.roa (hash: 8+dSzRSc1+OXhRbW6N90YyrDk4oOdvcvAyZdFxbaVw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.crl rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yq12WnMFvBUlSxWyW1vTm2Oow68.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:10:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911082E, serialNumber=CAAD765A7305BC15254B15B25B5BD39B63A8C3AF Validity Not Before: Oct 19 11:10:32 2025 GMT Not After : Oct 26 11:10:32 2025 GMT Subject: CN=68f4c728-ffb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5c:c3:cb:59:7c:05:52:39:3d:31:00:83:d6: 61:bd:4e:68:9d:4d:e5:3c:cf:ae:49:76:76:25:ef: 97:0f:0d:44:ab:eb:48:00:02:d9:76:a9:d9:63:eb: bd:b1:91:75:fa:0a:09:5f:2d:f2:80:76:9c:3c:bb: 0e:5d:6d:1e:37:a8:19:e7:7e:7b:f6:7c:cd:6c:5a: 9d:86:75:64:3b:8e:7f:27:62:24:9f:e6:62:25:3f: 16:e0:39:35:7f:5b:db:6a:61:3a:20:84:86:be:b5: 1b:fb:f2:41:23:fb:83:df:c8:75:f1:cf:73:0b:e8: 71:80:d7:35:78:ac:a2:c4:65:92:26:b9:7c:15:bf: 3b:3e:d3:ad:ea:71:a9:b0:ca:29:8d:9f:fd:89:c6: cf:d3:f4:0b:21:e6:22:c3:73:7a:b4:00:8c:02:0f: b1:7f:0b:1c:ac:4e:ff:72:c6:08:da:4d:48:fe:5b: de:99:e4:2c:ea:00:f4:b5:0d:d3:6e:1f:e9:8c:55: d1:1c:a7:f5:ba:8a:63:c9:25:a4:e4:19:85:c6:0b: 98:9f:ef:8a:78:4b:fc:5a:7a:ed:62:e9:15:f3:21: 62:0a:4f:c4:ec:e6:94:c8:54:1f:07:f2:9b:86:1d: 3e:63:77:f7:6e:f5:6c:d6:44:9e:a8:1a:c5:da:90: d5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D2:35:80:93:DA:B9:8E:D2:DE:4D:5E:AA:3A:90:DF:15:8B:70:B3 X509v3 Authority Key Identifier: keyid:CA:AD:76:5A:73:05:BC:15:25:4B:15:B2:5B:5B:D3:9B:63:A8:C3:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yq12WnMFvBUlSxWyW1vTm2Oow68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:9e:1f:15:09:7a:9b:64:e6:9c:e2:59:3f:8a:0b:a5:5a:18: c4:90:f0:63:05:03:18:81:9b:b5:49:a0:93:18:af:d5:b4:0e: 50:79:7d:0d:15:df:8d:23:32:2e:d1:0d:d0:f0:d8:22:7d:6a: 0b:03:32:82:54:bf:99:9e:e2:99:19:4e:6e:19:dc:19:f2:a6: c8:2c:42:8f:70:2f:5e:c4:a6:bb:11:28:3a:5c:8f:12:17:12: 92:15:0d:45:ba:3d:1d:07:60:20:8a:1e:f0:d2:7e:2f:30:c8: 47:8e:5e:35:c6:c8:25:ea:a8:62:bb:af:df:2f:d5:cd:e5:ac: 46:e7:89:bc:3d:74:37:e4:cd:f8:30:6b:11:62:a9:94:ea:1a: 94:94:a2:89:79:92:4f:ae:c9:6e:a9:e3:18:35:39:38:a3:28: 75:be:75:2b:b6:9c:df:55:a8:18:59:f1:bc:3b:77:bb:a3:ea: 2a:dd:6f:5b:69:ba:de:0a:54:20:dd:f3:8d:f0:32:b7:cb:d4: b6:44:b3:ce:e7:58:13:ee:65:66:60:b0:e5:b2:2d:0d:f6:a0: 49:9b:41:6e:f4:ad:44:4f:f4:2d:ce:a6:38:21:44:e5:27:09: d9:ff:54:60:46:94:06:76:1a:71:bd:0e:a4:5b:06:bd:0e:34: c0:07:8d:5c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MDgyRTExMC8GA1UEBRMoQ0FBRDc2NUE3MzA1QkMxNTI1NEIxNUIyNUI1QkQzOUI2 M0E4QzNBRjAeFw0yNTEwMTkxMTEwMzJaFw0yNTEwMjYxMTEwMzJaMBgxFjAUBgNV BAMTDTY4ZjRjNzI4LWZmYjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5XMPLWXwFUjk9MQCD1mG9TmidTeU8z65JdnYl75cPDUSr60gAAtl2qdlj672x kXX6CglfLfKAdpw8uw5dbR43qBnnfnv2fM1sWp2GdWQ7jn8nYiSf5mIlPxbgOTV/ W9tqYToghIa+tRv78kEj+4PfyHXxz3ML6HGA1zV4rKLEZZImuXwVvzs+063qcamw yimNn/2Jxs/T9Ash5iLDc3q0AIwCD7F/CxysTv9yxgjaTUj+W96Z5CzqAPS1DdNu H+mMVdEcp/W6imPJJaTkGYXGC5if74p4S/xaeu1i6RXzIWIKT8Ts5pTIVB8H8puG HT5jd/du9WzWRJ6oGsXakNXTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUANI1gJPa uY7S3k1eqjqQ3xWLcLMwHwYDVR0jBBgwFoAUyq12WnMFvBUlSxWyW1vTm2Oow68w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwODJFLzg1M0ZEOTU4NjZF MjExRjBCRUFCRTkzRUM0RjlBRTAyL3lxMTJXbk1GdkJVbFN4V3lXMXZUbTJPb3c2 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveXExMlduTUZ2QlVsU3hXeVcxdlRtMk9vdzY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEw ODJFLzg1M0ZEOTU4NjZFMjExRjBCRUFCRTkzRUM0RjlBRTAyL3lxMTJXbk1GdkJV bFN4V3lXMXZUbTJPb3c2OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABueHxUJeptk5pziWT+KC6VaGMSQ8GMFAxiBm7VJoJMYr9W0DlB5fQ0V 340jMi7RDdDw2CJ9agsDMoJUv5me4pkZTm4Z3BnypsgsQo9wL17EprsRKDpcjxIX EpIVDUW6PR0HYCCKHvDSfi8wyEeOXjXGyCXqqGK7r98v1c3lrEbnibw9dDfkzfgw axFiqZTqGpSUool5kk+uyW6p4xg1OTijKHW+dSu2nN9VqBhZ8bw7d7uj6irdb1tp ut4KVCDd843wMrfL1LZEs87nWBPuZWZgsOWyLQ32oEmbQW70rURP9C3OpjghROUn Cdn/VGBGlAZ2GnG9DqRbBr0ONMAHjVw= -----END CERTIFICATE-----Generated at Tue Oct 21 04:49:03 2025 by rpki-client