$ rpki-client -vvf rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft File: yUSBytAO-x3qepOcvimo9F8l4gs.mft (raw, json) Hash identifier: 6hubnktUDN+iTtHDA1y3uHZ9c3yD45Wob0YuRp7yGjk= Subject key identifier: 63:B3:AC:F1:9F:BF:A3:61:22:BD:E6:AD:A8:CE:51:B0:A0:31:BF:38 Authority key identifier: C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B Certificate issuer: /CN=A9113F63/serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B Certificate serial: 023E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft Manifest number: 023B Signing time: Sun 19 Oct 2025 04:02:10 +0000 Manifest this update: Sun 19 Oct 2025 04:02:09 +0000 Manifest next update: Sun 26 Oct 2025 04:02:09 +0000 Files and hashes: 1: yUSBytAO-x3qepOcvimo9F8l4gs.crl (hash: /YE41AtXAc5sAYwo9/XTLjZM51Iol1WgUIGcuizGKyk=) 2: 03D8DC4A40F011EDAD789E3AC4F9AE02.roa (hash: t7XCEjkxXsWQ/Dxk256ftxVIrolRXrZfUAZmnQPH6Io=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.crl rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 574 (0x23e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113F63, serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B Validity Not Before: Oct 19 04:02:09 2025 GMT Not After : Oct 26 04:02:09 2025 GMT Subject: CN=68f462c1-8900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:29:f7:4d:95:89:9b:6c:2b:3a:64:9d:82:2f: 58:32:6b:d4:12:04:d0:dc:d0:d7:30:ad:ee:bf:b3: 76:c5:21:40:8b:64:45:4b:c8:59:a5:82:f4:b8:e9: 9a:f8:2b:e0:33:d2:da:63:9a:ac:24:39:61:28:5e: 44:07:c5:e5:cf:8b:e7:ae:71:d0:51:34:5e:fd:56: 49:41:e1:75:ee:a4:24:01:fe:18:d7:4a:ec:a8:84: c6:43:70:ee:8d:5f:49:d4:9c:8c:1c:e5:df:97:97: 8f:55:e9:23:dd:95:1b:a0:74:09:34:5f:ee:59:4e: 34:af:0f:4d:43:66:49:9b:db:6d:d2:57:9b:d0:28: 38:45:77:f5:42:af:3d:50:a6:74:6d:c2:7d:40:7d: f5:b8:31:82:25:48:32:17:16:3f:01:fd:3c:f6:5d: 4b:07:a0:b2:53:36:34:26:15:22:98:a5:56:f1:0c: b8:d5:c8:b5:2f:d9:1a:cb:b4:50:90:f9:fc:7b:8a: 01:6f:66:32:a1:6f:e4:3a:75:2a:64:2f:83:25:12: 23:3c:4f:77:21:8c:1e:66:82:af:08:13:de:6b:a9: a2:b2:09:e1:f5:85:21:c3:eb:21:a3:73:f5:5d:b6: 61:1b:4c:ba:99:47:9e:95:86:30:03:9e:88:76:d6: 75:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B3:AC:F1:9F:BF:A3:61:22:BD:E6:AD:A8:CE:51:B0:A0:31:BF:38 X509v3 Authority Key Identifier: keyid:C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:ae:54:0c:3b:49:fe:29:19:d5:5c:e3:8e:b3:28:a6:a9:1e: 62:ac:31:bd:1a:63:5d:fe:0e:1d:00:1f:32:d7:95:e3:b2:35: 8e:53:c3:f1:65:3e:8b:e4:6e:87:81:dc:f5:5c:33:37:e1:95: dd:97:44:82:a5:8e:89:ce:cc:00:27:65:cc:1e:6d:f6:22:4f: f8:00:94:34:14:37:cf:71:59:b2:dd:d9:1b:44:00:41:e5:2a: 12:7e:63:fc:68:a9:2f:1a:21:24:f2:2d:5e:cb:dd:b7:87:68: f4:c9:c2:7d:89:2e:39:a2:8b:7d:bb:27:09:ac:2e:4c:a1:a3: 9e:54:ad:d3:f4:f8:3c:07:a5:c6:1f:75:af:69:b4:6f:ba:63: c4:47:27:d8:f2:6f:2b:bf:34:d9:60:c8:af:30:6a:10:a3:d4: 8b:c9:03:c6:18:71:a8:df:87:cc:0f:60:4b:65:2f:35:50:1e: 4a:ad:cf:cb:f8:4a:d6:93:f9:d5:3f:46:87:61:a1:f0:a9:d4: f2:a0:68:b9:76:48:93:b7:09:2e:13:bb:03:50:cc:46:cf:ea: 44:af:66:f8:41:10:f3:ff:94:23:ce:f5:2a:50:91:b6:04:ae: 28:e2:77:6c:8b:dc:e2:14:87:3c:1a:72:c0:2a:12:a3:ae:55: 0b:51:10:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNGNjMxMTAvBgNVBAUTKEM5NDQ4MUNBRDAwRUZCMURFQTdBOTM5Q0JFMjlBOEY0 NUYyNUUyMEIwHhcNMjUxMDE5MDQwMjA5WhcNMjUxMDI2MDQwMjA5WjAYMRYwFAYD VQQDEw02OGY0NjJjMS04OTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2yn3TZWJm2wrOmSdgi9YMmvUEgTQ3NDXMK3uv7N2xSFAi2RFS8hZpYL0uOma +CvgM9LaY5qsJDlhKF5EB8Xlz4vnrnHQUTRe/VZJQeF17qQkAf4Y10rsqITGQ3Du jV9J1JyMHOXfl5ePVekj3ZUboHQJNF/uWU40rw9NQ2ZJm9tt0leb0Cg4RXf1Qq89 UKZ0bcJ9QH31uDGCJUgyFxY/Af089l1LB6CyUzY0JhUimKVW8Qy41ci1L9kay7RQ kPn8e4oBb2YyoW/kOnUqZC+DJRIjPE93IYweZoKvCBPea6misgnh9YUhw+sho3P1 XbZhG0y6mUeelYYwA56IdtZ1rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGOzrPGf v6NhIr3mrajOUbCgMb84MB8GA1UdIwQYMBaAFMlEgcrQDvsd6nqTnL4pqPRfJeIL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0Y2My81MTlCNjRBNjQw RUMxMUVEQTg4RUI1MzNDNEY5QUUwMi95VVNCeXRBTy14M3FlcE9jdmltbzlGOGw0 Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lVU0J5dEFPLXgzcWVwT2N2aW1vOUY4bDRncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0Y2My81MTlCNjRBNjQwRUMxMUVEQTg4RUI1MzNDNEY5QUUwMi95VVNCeXRBTy14 M3FlcE9jdmltbzlGOGw0Z3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUrlQMO0n+KRnVXOOOsyimqR5irDG9GmNd/g4dAB8y15XjsjWOU8Px ZT6L5G6Hgdz1XDM34ZXdl0SCpY6JzswAJ2XMHm32Ik/4AJQ0FDfPcVmy3dkbRABB 5SoSfmP8aKkvGiEk8i1ey923h2j0ycJ9iS45oot9uycJrC5MoaOeVK3T9Pg8B6XG H3WvabRvumPERyfY8m8rvzTZYMivMGoQo9SLyQPGGHGo34fMD2BLZS81UB5Krc/L +ErWk/nVP0aHYaHwqdTyoGi5dkiTtwkuE7sDUMxGz+pEr2b4QRDz/5QjzvUqUJG2 BK4o4ndsi9ziFIc8GnLAKhKjrlULURD8 -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:08 2025 by rpki-client