$ rpki-client -vvf rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft File: y3nZvhDc9wJG_GlGNFiuyiQly44.mft (raw, json) Hash identifier: kfItw6/pUwMVXzRxm/eQ1db7AIhEsQbVMsHtl3LIugo= Subject key identifier: 9E:74:48:63:B9:D4:B1:A9:70:55:7A:E5:76:F7:8E:E5:D2:8E:6A:D4 Authority key identifier: CB:79:D9:BE:10:DC:F7:02:46:FC:69:46:34:58:AE:CA:24:25:CB:8E Certificate issuer: /CN=A912756D/serialNumber=CB79D9BE10DCF70246FC69463458AECA2425CB8E Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft Manifest number: D2 Signing time: Sun 19 Oct 2025 08:43:14 +0000 Manifest this update: Sun 19 Oct 2025 08:43:13 +0000 Manifest next update: Sun 26 Oct 2025 08:43:13 +0000 Files and hashes: 1: y3nZvhDc9wJG_GlGNFiuyiQly44.crl (hash: nwGDIiXHay7aI7+gtzDULKt+NRfB06P8Fa+nFw6bSK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.crl rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:43:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912756D, serialNumber=CB79D9BE10DCF70246FC69463458AECA2425CB8E Validity Not Before: Oct 19 08:43:13 2025 GMT Not After : Oct 26 08:43:13 2025 GMT Subject: CN=68f4a4a2-6da4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6c:27:5f:0a:ba:89:64:45:0c:e3:c1:38:c0: ee:32:65:4d:c0:69:62:4f:ac:c5:93:0d:98:81:74: 7e:98:07:cf:d7:2c:82:a7:6c:62:af:c2:9f:76:9f: 60:62:23:2f:7c:03:3c:61:f8:a6:05:19:e1:76:fe: 47:14:d7:d1:c2:b6:6b:87:5e:7a:4b:87:8c:e9:eb: 4a:8d:fb:8f:e3:4c:61:e0:ac:49:9f:cf:dc:6b:17: 2f:37:85:15:45:80:0a:45:91:2a:43:74:79:d1:b6: ca:8a:fa:64:09:51:2a:06:18:6f:bf:88:7a:e4:57: 44:fd:2a:99:5b:f0:0f:00:2f:0f:37:d4:8e:c4:99: de:06:39:44:41:3c:b6:dd:8f:51:ed:1f:3f:27:fc: 68:a5:71:b0:77:78:bd:36:8b:65:9d:e1:7d:ec:59: c3:df:c7:0b:16:24:9d:5d:10:bd:78:4f:77:ca:c6: b8:9e:70:b3:7b:39:b3:62:9b:c0:16:5b:de:fc:36: b7:25:62:0e:6e:4c:98:e9:ad:c3:b6:d9:ca:c6:80: c3:19:98:a8:d6:fe:ed:99:aa:ab:20:81:e6:4c:fc: 51:c0:03:c7:c8:0e:1c:f5:8f:09:2c:45:82:10:e1: fc:49:62:66:f3:b8:b7:0d:b3:66:73:29:59:c9:7d: d9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:74:48:63:B9:D4:B1:A9:70:55:7A:E5:76:F7:8E:E5:D2:8E:6A:D4 X509v3 Authority Key Identifier: keyid:CB:79:D9:BE:10:DC:F7:02:46:FC:69:46:34:58:AE:CA:24:25:CB:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:3e:47:44:51:83:3b:fc:6e:6c:4c:36:38:70:79:7a:5c:46: 0b:92:d0:38:5a:a7:10:4d:58:05:30:df:ad:ba:ab:1b:51:c6: aa:7c:de:d4:94:ec:ce:cf:7f:f0:55:d7:95:ca:05:9b:97:97: 4e:15:3d:f0:87:e3:43:7a:cf:a7:cf:3c:04:9d:0a:3c:97:14: fb:ce:ad:04:63:ec:85:0b:41:be:67:60:0a:0c:23:3a:71:c4: 22:56:07:6b:97:41:6a:98:b8:3d:e9:3e:41:e0:02:9a:99:7b: 73:2b:f8:55:87:d9:db:88:6b:b5:59:22:77:e3:f7:6d:e6:5e: 27:fb:5f:0a:26:0d:30:37:0a:b0:43:f8:d2:a8:9c:03:ed:b0: d0:13:fa:e8:8a:e2:2f:ac:05:77:da:5b:08:10:e1:5c:d6:b8: 03:54:56:53:e4:20:04:5d:58:e1:5b:56:8e:5d:56:67:98:32: 2a:e8:5e:c3:b3:a2:3e:bf:c8:52:45:dc:18:18:46:b4:c4:2b: 90:08:75:e4:a0:2b:13:47:0c:71:8c:90:6c:88:85:da:78:a0: 8c:e4:74:b6:0d:f1:1c:3f:fa:94:a9:a2:20:33:78:85:83:13: 94:f4:2c:fe:35:a8:7e:b9:f3:69:2a:7b:17:93:59:c6:cb:a8: 37:61:68:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1NkQxMTAvBgNVBAUTKENCNzlEOUJFMTBEQ0Y3MDI0NkZDNjk0NjM0NThBRUNB MjQyNUNCOEUwHhcNMjUxMDE5MDg0MzEzWhcNMjUxMDI2MDg0MzEzWjAYMRYwFAYD VQQDEw02OGY0YTRhMi02ZGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3WwnXwq6iWRFDOPBOMDuMmVNwGliT6zFkw2YgXR+mAfP1yyCp2xir8Kfdp9g YiMvfAM8YfimBRnhdv5HFNfRwrZrh156S4eM6etKjfuP40xh4KxJn8/caxcvN4UV RYAKRZEqQ3R50bbKivpkCVEqBhhvv4h65FdE/SqZW/APAC8PN9SOxJneBjlEQTy2 3Y9R7R8/J/xopXGwd3i9NotlneF97FnD38cLFiSdXRC9eE93ysa4nnCzezmzYpvA Flve/Da3JWIObkyY6a3DttnKxoDDGZio1v7tmaqrIIHmTPxRwAPHyA4c9Y8JLEWC EOH8SWJm87i3DbNmcylZyX3Z5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ50SGO5 1LGpcFV65Xb3juXSjmrUMB8GA1UdIwQYMBaAFMt52b4Q3PcCRvxpRjRYrsokJcuO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzU2RC84RENBMzJDRTZC NTQxMUVGQjhBOEE2MUFDNEY5QUUwMi95M25admhEYzl3SkdfR2xHTkZpdXlpUWx5 NDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kzblp2aERjOXdKR19HbEdORml1eWlRbHk0NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzU2RC84RENBMzJDRTZCNTQxMUVGQjhBOEE2MUFDNEY5QUUwMi95M25admhEYzl3 SkdfR2xHTkZpdXlpUWx5NDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOPkdEUYM7/G5sTDY4cHl6XEYLktA4WqcQTVgFMN+tuqsbUcaqfN7U lOzOz3/wVdeVygWbl5dOFT3wh+NDes+nzzwEnQo8lxT7zq0EY+yFC0G+Z2AKDCM6 ccQiVgdrl0FqmLg96T5B4AKamXtzK/hVh9nbiGu1WSJ34/dt5l4n+18KJg0wNwqw Q/jSqJwD7bDQE/roiuIvrAV32lsIEOFc1rgDVFZT5CAEXVjhW1aOXVZnmDIq6F7D s6I+v8hSRdwYGEa0xCuQCHXkoCsTRwxxjJBsiIXaeKCM5HS2DfEcP/qUqaIgM3iF gxOU9Cz+Nah+ufNpKnsXk1nGy6g3YWg5 -----END CERTIFICATE-----Generated at Mon Oct 20 19:10:59 2025 by rpki-client