$ rpki-client -vvf rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft File: yuLPsaeXStawJFrjTksNztggmGc.mft (raw, json) Hash identifier: DYJjugb5pTlNafQM8B0p6QHcohmAm2FQDcnymM0iWfI= Subject key identifier: 11:E1:61:52:9C:36:9A:87:75:51:4A:7E:8C:92:33:54:07:E7:D3:2A Authority key identifier: CA:E2:CF:B1:A7:97:4A:D6:B0:24:5A:E3:4E:4B:0D:CE:D8:20:98:67 Certificate issuer: /CN=A9120968/serialNumber=CAE2CFB1A7974AD6B0245AE34E4B0DCED8209867 Certificate serial: 34CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft Manifest number: 34CE Signing time: Sat 18 Oct 2025 15:03:25 +0000 Manifest this update: Sat 18 Oct 2025 15:03:25 +0000 Manifest next update: Sat 25 Oct 2025 15:03:25 +0000 Files and hashes: 1: yuLPsaeXStawJFrjTksNztggmGc.crl (hash: yXeyH4lz0GZOWHO5/WsJauPgcMr6hVqrEcP9u8YY3PM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.crl rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:03:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13518 (0x34ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120968, serialNumber=CAE2CFB1A7974AD6B0245AE34E4B0DCED8209867 Validity Not Before: Oct 18 15:03:25 2025 GMT Not After : Oct 25 15:03:25 2025 GMT Subject: CN=68f3ac3d-c46e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5c:59:1d:2e:d7:21:9d:03:c5:c1:ad:b2:04: 92:a3:53:11:36:bb:4e:c8:6f:84:5f:27:8d:cb:f9: fb:d1:61:5c:15:71:32:23:98:50:52:39:76:83:77: 10:da:f7:42:88:c1:8c:01:47:98:44:44:42:13:97: aa:ad:cc:81:3c:20:b8:8f:8d:de:b7:d2:86:cd:f0: 86:f1:12:5f:c6:ea:55:0b:4f:5e:49:02:9a:ba:99: be:54:05:8a:b0:ef:8a:8d:05:7b:51:24:0e:fa:59: aa:00:35:cf:17:e4:01:88:d2:29:10:0d:5b:57:58: 59:9d:c9:8a:ab:a0:13:0b:20:b5:13:10:31:ea:44: 70:3c:2d:c5:51:52:3b:4c:a1:20:25:87:d2:34:fb: 2b:86:3d:5e:28:44:42:a7:ef:fe:8d:da:ef:01:ba: 62:7b:72:b4:a8:f0:0c:f8:82:8c:fb:38:dc:f8:4b: da:55:65:3b:3a:2b:f1:17:79:dc:56:3d:e7:50:7a: 58:a3:70:51:d4:7c:5a:94:5a:a8:c6:9f:2a:7e:54: a5:2f:88:3d:75:a8:b9:35:83:a8:d1:59:f3:51:e7: d7:e7:0d:6c:b3:72:9d:7d:02:5d:af:8a:76:48:1e: 6d:61:e7:45:37:f3:79:7d:e7:e0:91:5b:13:fa:1a: 28:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E1:61:52:9C:36:9A:87:75:51:4A:7E:8C:92:33:54:07:E7:D3:2A X509v3 Authority Key Identifier: keyid:CA:E2:CF:B1:A7:97:4A:D6:B0:24:5A:E3:4E:4B:0D:CE:D8:20:98:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:61:fb:e4:d2:55:61:74:57:96:af:d0:8e:fb:99:17:1a:16: 7d:24:33:97:2f:94:93:03:88:46:1b:69:23:5f:e1:b6:db:92: ed:bf:a4:3d:b9:f4:0c:9b:3d:eb:e0:87:40:5e:e6:3e:4f:f3: 68:91:d8:85:be:04:47:ab:57:a4:00:3f:ac:66:e1:cd:b8:5e: ba:70:ab:41:18:90:2d:cb:47:19:08:7d:3f:94:1e:96:78:a8: d3:49:a1:cf:15:08:70:93:f2:11:60:b8:a3:2b:3d:e5:c6:70: 5f:cd:05:8a:31:f9:85:93:db:e1:15:a4:72:cd:bb:5d:a0:97: 8b:2b:7a:f8:5e:f8:2b:c6:90:5b:2b:81:e5:3e:12:c9:b9:85: dd:69:6d:9a:c7:c8:32:c8:ca:eb:ed:11:da:c3:a2:63:88:d9: 36:1d:1e:4b:2d:f8:b6:09:02:1f:c1:e4:6b:5d:87:ed:9c:a6: ef:c5:95:c9:26:1a:5b:3d:a2:cc:fd:be:4c:1a:7f:a2:b0:34: 58:cc:4d:70:f7:a3:3f:15:5e:ad:d3:11:1a:d8:f9:fc:16:11: aa:1d:a0:4b:8d:84:08:ca:00:cf:4d:06:95:a9:05:c0:5e:ba: c8:3f:0e:ee:03:ad:2b:02:ae:be:81:da:12:66:d4:32:fc:2e: 16:6f:70:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NjgxMTAvBgNVBAUTKENBRTJDRkIxQTc5NzRBRDZCMDI0NUFFMzRFNEIwRENF RDgyMDk4NjcwHhcNMjUxMDE4MTUwMzI1WhcNMjUxMDI1MTUwMzI1WjAYMRYwFAYD VQQDEw02OGYzYWMzZC1jNDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVxZHS7XIZ0DxcGtsgSSo1MRNrtOyG+EXyeNy/n70WFcFXEyI5hQUjl2g3cQ 2vdCiMGMAUeYRERCE5eqrcyBPCC4j43et9KGzfCG8RJfxupVC09eSQKaupm+VAWK sO+KjQV7USQO+lmqADXPF+QBiNIpEA1bV1hZncmKq6ATCyC1ExAx6kRwPC3FUVI7 TKEgJYfSNPsrhj1eKERCp+/+jdrvAbpie3K0qPAM+IKM+zjc+EvaVWU7OivxF3nc Vj3nUHpYo3BR1HxalFqoxp8qflSlL4g9dai5NYOo0VnzUefX5w1ss3KdfQJdr4p2 SB5tYedFN/N5fefgkVsT+hoobQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHhYVKc NpqHdVFKfoySM1QH59MqMB8GA1UdIwQYMBaAFMriz7Gnl0rWsCRa405LDc7YIJhn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk2OC8wOEVDRUU0ODFE OUIxMUUyQUY5NkE4ODgwOEIwMkNEMi95dUxQc2FlWFN0YXdKRnJqVGtzTnp0Z2dt R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l1TFBzYWVYU3Rhd0pGcmpUa3NOenRnZ21HYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk2OC8wOEVDRUU0ODFEOUIxMUUyQUY5NkE4ODgwOEIwMkNEMi95dUxQc2FlWFN0 YXdKRnJqVGtzTnp0Z2dtR2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdYfvk0lVhdFeWr9CO+5kXGhZ9JDOXL5STA4hGG2kjX+G225Ltv6Q9 ufQMmz3r4IdAXuY+T/NokdiFvgRHq1ekAD+sZuHNuF66cKtBGJAty0cZCH0/lB6W eKjTSaHPFQhwk/IRYLijKz3lxnBfzQWKMfmFk9vhFaRyzbtdoJeLK3r4XvgrxpBb K4HlPhLJuYXdaW2ax8gyyMrr7RHaw6JjiNk2HR5LLfi2CQIfweRrXYftnKbvxZXJ JhpbPaLM/b5MGn+isDRYzE1w96M/FV6t0xEa2Pn8FhGqHaBLjYQIygDPTQaVqQXA XrrIPw7uA60rAq6+gdoSZtQy/C4Wb3BF -----END CERTIFICATE-----Generated at Mon Oct 20 14:45:25 2025 by rpki-client