$ rpki-client -vvf rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft File: YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft (raw, json) Hash identifier: HBCS42O0qWJ9AcWyQpb3SXBw8sznKzWmDu+GvxDvLAo= Subject key identifier: 62:C1:1D:D3:80:DD:FD:62:3D:15:B0:DD:1A:AB:B1:6C:96:57:93:DA Authority key identifier: 62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4 Certificate issuer: /CN=A9120FD4/serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4 Certificate serial: 0CF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft Manifest number: 0CE7 Signing time: Sat 18 Oct 2025 18:50:09 +0000 Manifest this update: Sat 18 Oct 2025 18:50:08 +0000 Manifest next update: Sat 25 Oct 2025 18:50:08 +0000 Files and hashes: 1: YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl (hash: j3/XuqDhHp42VrVc+kE36rBMmiThvMwyhHerPXT8hUU=) 2: 4154E51AC91311EBA6226F45C4F9AE02.roa (hash: X3uR7nkHEkJDs/4UDZXjCbVpYlI7ETxizWrqRmPT3Rg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:50:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3317 (0xcf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120FD4, serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4 Validity Not Before: Oct 18 18:50:08 2025 GMT Not After : Oct 25 18:50:08 2025 GMT Subject: CN=68f3e161-3114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5e:20:b6:ac:ac:f8:db:50:6a:cb:66:22:4d: 56:c3:4f:b0:5a:9f:64:16:96:67:10:6f:14:0e:4c: c5:ed:7a:27:da:ae:32:99:c0:93:9c:07:c7:05:d6: 9d:93:83:7d:32:3f:65:cf:8a:8f:66:2c:93:78:9e: bd:56:24:15:4b:7c:88:c3:1f:a9:00:99:c5:12:ee: 5d:41:af:89:0f:1e:14:fd:b1:df:ab:04:72:58:a6: 73:94:6f:1a:bf:50:14:04:82:d2:58:6d:81:49:d7: 39:e4:ff:75:ef:aa:cf:7a:5d:f9:c5:c6:1a:fa:6b: af:da:2f:0a:23:a6:87:16:db:d0:d1:3f:a1:9b:ef: 56:bf:f9:2b:75:65:00:64:8d:5e:be:47:11:60:aa: 4b:90:05:94:d1:66:1b:87:9d:b3:47:1b:ac:8e:fa: 91:ec:7b:7b:19:2d:8c:08:be:b1:42:cc:7a:39:06: 1c:0b:79:58:6c:ce:90:aa:7c:43:ad:9f:96:66:ef: c0:07:a9:6c:19:98:b0:eb:8f:c8:7e:49:9d:92:39: 97:b9:cb:b3:92:33:f8:e4:5e:da:54:8b:aa:14:a9: 69:ab:e6:07:4d:d2:bb:d6:d5:45:a7:86:9e:ec:d8: 7b:2c:34:a4:2f:d7:0a:f3:89:67:b3:20:2f:9f:7c: 6d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:C1:1D:D3:80:DD:FD:62:3D:15:B0:DD:1A:AB:B1:6C:96:57:93:DA X509v3 Authority Key Identifier: keyid:62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:12:26:d0:28:38:28:b2:dc:f3:23:72:ed:7a:a3:a6:83:79: dd:56:c6:28:c8:4a:2b:05:f8:d6:d4:5f:84:f0:d6:40:4f:7e: 87:35:82:56:66:98:85:60:38:0a:6e:0a:04:10:51:37:6a:02: b7:51:e5:5e:09:90:cc:04:d5:55:38:56:16:82:2f:f9:95:b4: 7f:71:ac:53:bb:a6:24:d0:42:f4:80:ea:f6:32:29:35:46:7a: eb:bc:16:df:ba:f2:45:53:a4:cc:20:36:55:f9:5e:61:2e:a0: 4f:d6:75:c4:29:2c:b9:3e:4e:00:34:68:60:f6:19:0f:cb:40: 24:47:a9:36:c7:c6:3d:62:3a:c6:13:95:95:e0:54:a3:a3:98: de:7a:1b:67:49:bb:b6:10:1c:59:53:f1:a3:21:18:73:21:3b: 53:af:c2:37:1c:fc:66:bf:bc:9f:30:19:e8:2f:0c:8f:be:1c: 83:7f:9f:fd:0b:85:98:37:96:15:76:1f:e1:3b:19:34:6a:8f: 63:f8:d0:9f:0d:db:53:18:dd:13:d7:b6:fd:3a:36:01:3f:20: cd:46:17:ed:e5:74:03:1d:1b:66:9f:c2:73:ee:7d:44:92:de: 37:10:3b:4e:3a:22:eb:be:a9:5d:c2:b2:62:20:ca:26:30:73: ae:80:7c:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBGRDQxMTAvBgNVBAUTKDYyQzZCMUEwQjJDM0E2MTRGM0NCNDNGQUJCMzFCRjgx NjE2QjU0QjQwHhcNMjUxMDE4MTg1MDA4WhcNMjUxMDI1MTg1MDA4WjAYMRYwFAYD VQQDEw02OGYzZTE2MS0zMTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3l4gtqys+NtQastmIk1Ww0+wWp9kFpZnEG8UDkzF7Xon2q4ymcCTnAfHBdad k4N9Mj9lz4qPZiyTeJ69ViQVS3yIwx+pAJnFEu5dQa+JDx4U/bHfqwRyWKZzlG8a v1AUBILSWG2BSdc55P9176rPel35xcYa+muv2i8KI6aHFtvQ0T+hm+9Wv/krdWUA ZI1evkcRYKpLkAWU0WYbh52zRxusjvqR7Ht7GS2MCL6xQsx6OQYcC3lYbM6QqnxD rZ+WZu/AB6lsGZiw64/IfkmdkjmXucuzkjP45F7aVIuqFKlpq+YHTdK71tVFp4ae 7Nh7LDSkL9cK84lnsyAvn3xt5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGLBHdOA 3f1iPRWw3RqrsWyWV5PaMB8GA1UdIwQYMBaAFGLGsaCyw6YU88tD+rsxv4Fha1S0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEZENC84MDlDMjREMkY1 NTExMUU5OUQ1QjdEM0RDNEY5QUUwMi9Zc2F4b0xMRHBoVHp5MFA2dXpHX2dXRnJW TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzYXhvTExEcGhUenkwUDZ1ekdfZ1dGclZMUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEZENC84MDlDMjREMkY1NTExMUU5OUQ1QjdEM0RDNEY5QUUwMi9Zc2F4b0xMRHBo VHp5MFA2dXpHX2dXRnJWTFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrEibQKDgostzzI3LteqOmg3ndVsYoyEorBfjW1F+E8NZAT36HNYJW ZpiFYDgKbgoEEFE3agK3UeVeCZDMBNVVOFYWgi/5lbR/caxTu6Yk0EL0gOr2Mik1 RnrrvBbfuvJFU6TMIDZV+V5hLqBP1nXEKSy5Pk4ANGhg9hkPy0AkR6k2x8Y9YjrG E5WV4FSjo5jeehtnSbu2EBxZU/GjIRhzITtTr8I3HPxmv7yfMBnoLwyPvhyDf5/9 C4WYN5YVdh/hOxk0ao9j+NCfDdtTGN0T17b9OjYBPyDNRhft5XQDHRtmn8Jz7n1E kt43EDtOOiLrvqldwrJiIMomMHOugHyx -----END CERTIFICATE-----Generated at Mon Oct 20 14:35:15 2025 by rpki-client