$ rpki-client -vvf rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft File: YfcrXpPnk13XngQ1yBj4-acQ9ok.mft (raw, json) Hash identifier: ApILYElvudV4AwZQTqWueSSbqZCo/JFwKopGu9lLlyI= Subject key identifier: C1:91:B2:67:E7:D7:F7:19:EA:A5:73:8A:4B:AE:7B:86:B0:B7:07:8D Authority key identifier: 61:F7:2B:5E:93:E7:93:5D:D7:9E:04:35:C8:18:F8:F9:A7:10:F6:89 Certificate issuer: /CN=A913FE55/serialNumber=61F72B5E93E7935DD79E0435C818F8F9A710F689 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfcrXpPnk13XngQ1yBj4-acQ9ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft Manifest number: 44 Signing time: Sun 19 Oct 2025 10:51:52 +0000 Manifest this update: Sun 19 Oct 2025 10:51:51 +0000 Manifest next update: Sun 26 Oct 2025 10:51:51 +0000 Files and hashes: 1: YfcrXpPnk13XngQ1yBj4-acQ9ok.crl (hash: O3j2rC+oRKFT2Yyg0Y2Q8TiMY0ugYNQVrtkzTQCJUXo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.crl rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfcrXpPnk13XngQ1yBj4-acQ9ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:51:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FE55, serialNumber=61F72B5E93E7935DD79E0435C818F8F9A710F689 Validity Not Before: Oct 19 10:51:51 2025 GMT Not After : Oct 26 10:51:51 2025 GMT Subject: CN=68f4c2c8-7b5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:22:17:4f:28:ef:50:0b:17:07:bc:03:dd:69: 8a:08:d1:9e:58:59:31:42:df:c6:c4:36:ca:0c:c8: 09:03:c8:00:7f:52:55:37:73:66:d2:29:4e:b1:bd: 37:da:7c:fa:42:b4:c1:60:32:f9:09:60:db:be:4a: 37:56:6e:92:e0:85:67:ff:22:b0:b7:ef:4f:a2:6d: 7c:51:0a:b4:e2:d0:cb:2a:ae:76:7d:b0:13:28:d5: 3a:1c:02:7f:7c:4d:fe:cf:64:5c:36:82:7e:73:69: 9a:d0:e5:78:6b:88:26:60:4c:a2:9e:86:96:20:e6: c2:63:43:c0:95:df:2b:72:7e:77:0f:91:9f:68:ee: 01:7c:ce:07:99:07:8b:cd:48:67:d3:ec:e6:9d:0b: e1:cd:c5:bb:f9:ac:27:22:8a:f7:a4:23:40:ae:7e: 8b:4d:75:f6:e4:82:f1:10:23:66:f5:72:8f:2f:6f: 21:61:fc:d6:50:8a:77:86:1f:35:c2:8e:b0:bb:ac: c5:23:80:a7:85:1c:93:b2:c2:c5:9f:79:41:b8:99: 78:36:d0:b7:29:9a:0a:07:5a:cf:f3:10:fb:9a:49: 27:a6:e7:4a:cb:c5:af:54:80:3e:03:23:23:8c:bc: b9:1c:02:c7:4c:bc:d7:10:93:bf:b0:2e:72:24:63: 57:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:91:B2:67:E7:D7:F7:19:EA:A5:73:8A:4B:AE:7B:86:B0:B7:07:8D X509v3 Authority Key Identifier: keyid:61:F7:2B:5E:93:E7:93:5D:D7:9E:04:35:C8:18:F8:F9:A7:10:F6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfcrXpPnk13XngQ1yBj4-acQ9ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:3e:5f:82:18:d3:33:fa:19:a4:9f:b3:41:89:46:8f:0f:d1: f8:c3:29:4b:18:1c:38:8f:d3:8d:e3:b4:7f:47:c4:1c:34:d7: f4:d1:16:28:ff:15:22:74:76:e8:d4:b0:f0:cc:d1:32:fd:89: ca:f4:6a:48:b8:4e:74:72:1c:8f:06:4e:31:21:d0:35:e0:84: d3:96:96:9c:ee:37:4e:8b:bc:3b:bb:2d:f4:a2:15:58:a0:97: f0:85:3f:c7:de:63:c3:d3:a8:17:75:a9:2d:7f:eb:e6:7f:49: 88:b1:bf:56:cb:c0:d7:0b:ac:42:10:ea:1c:5d:ea:88:32:0d: 5b:8d:88:fc:05:aa:24:d1:9c:ca:f2:2c:3b:96:6e:4f:5a:8a: ec:5f:4c:92:0f:70:6b:b5:8a:a7:16:72:93:25:47:9d:ed:f7: 67:3d:ed:f8:e7:b1:22:5d:ec:f9:ac:51:db:ac:c4:17:b7:03: 87:ae:8b:1b:a1:45:82:62:eb:df:af:6e:ab:f9:a5:88:93:b7: dd:d6:8a:e9:6d:10:fa:77:97:85:6f:29:94:a3:14:30:a0:26: c4:17:90:6a:d9:ee:cb:65:a4:af:02:33:26:0d:15:48:d0:a1: 19:e9:32:d1:92:bc:13:54:76:57:21:f4:d0:b0:af:f6:70:4c: fe:13:e2:47 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RkU1NTExMC8GA1UEBRMoNjFGNzJCNUU5M0U3OTM1REQ3OUUwNDM1QzgxOEY4RjlB NzEwRjY4OTAeFw0yNTEwMTkxMDUxNTFaFw0yNTEwMjYxMDUxNTFaMBgxFjAUBgNV BAMTDTY4ZjRjMmM4LTdiNWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEIhdPKO9QCxcHvAPdaYoI0Z5YWTFC38bENsoMyAkDyAB/UlU3c2bSKU6xvTfa fPpCtMFgMvkJYNu+SjdWbpLghWf/IrC370+ibXxRCrTi0MsqrnZ9sBMo1TocAn98 Tf7PZFw2gn5zaZrQ5XhriCZgTKKehpYg5sJjQ8CV3ytyfncPkZ9o7gF8zgeZB4vN SGfT7OadC+HNxbv5rCciivekI0CufotNdfbkgvEQI2b1co8vbyFh/NZQineGHzXC jrC7rMUjgKeFHJOywsWfeUG4mXg20LcpmgoHWs/zEPuaSSem50rLxa9UgD4DIyOM vLkcAsdMvNcQk7+wLnIkY1dzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwZGyZ+fX 9xnqpXOKS657hrC3B40wHwYDVR0jBBgwFoAUYfcrXpPnk13XngQ1yBj4+acQ9okw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGRTU1LzJENDU3ODAwNDcz QjExRjA4MzM2Rjc1Q0M0RjlBRTAyL1lmY3JYcFBuazEzWG5nUTF5Qmo0LWFjUTlv ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWWZjclhwUG5rMTNYbmdRMXlCajQtYWNROW9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNG RTU1LzJENDU3ODAwNDczQjExRjA4MzM2Rjc1Q0M0RjlBRTAyL1lmY3JYcFBuazEz WG5nUTF5Qmo0LWFjUTlvay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACs+X4IY0zP6GaSfs0GJRo8P0fjDKUsYHDiP043jtH9HxBw01/TRFij/ FSJ0dujUsPDM0TL9icr0aki4TnRyHI8GTjEh0DXghNOWlpzuN06LvDu7LfSiFVig l/CFP8feY8PTqBd1qS1/6+Z/SYixv1bLwNcLrEIQ6hxd6ogyDVuNiPwFqiTRnMry LDuWbk9aiuxfTJIPcGu1iqcWcpMlR53t92c97fjnsSJd7PmsUdusxBe3A4euixuh RYJi69+vbqv5pYiTt93WiultEPp3l4VvKZSjFDCgJsQXkGrZ7stlpK8CMyYNFUjQ oRnpMtGSvBNUdlch9NCwr/ZwTP4T4kc= -----END CERTIFICATE-----Generated at Mon Oct 20 14:35:10 2025 by rpki-client