$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft File: YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft (raw, json) Hash identifier: LscrswVitcn2buuA7ruTbP0qfpPRbfyPzG5fAlX6KoU= Subject key identifier: EA:CC:D0:D3:23:1D:5D:88:2F:B3:03:1B:8E:8A:B9:AD:AC:E3:92:0F Authority key identifier: 63:23:E5:6C:D9:92:AB:8F:CE:38:75:31:5A:E6:1A:C5:E4:71:AC:BD Certificate issuer: /CN=A9144C70/serialNumber=6323E56CD992AB8FCE3875315AE61AC5E471ACBD Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft Manifest number: 0491 Signing time: Sun 19 Oct 2025 02:40:19 +0000 Manifest this update: Sun 19 Oct 2025 02:40:19 +0000 Manifest next update: Sun 26 Oct 2025 02:40:19 +0000 Files and hashes: 1: YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl (hash: Pp670ds2TqQY8bOBv1UjqO4hilX05rT98A9Nulm/oHY=) 2: 2BE1E33A9C7D11F0BD6FFF71C4F9AE02.roa (hash: vft+eU4CpaMMVegJX2IoSc61ijnWeC2pmFFJGifleEc=) 3: B39CC5D0999C11F0B916112DC4F9AE02.roa (hash: 6q41hoRYSlGeQU/2jAswtSG8NBRB1otmd5Vb7tbOxSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:40:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144C70, serialNumber=6323E56CD992AB8FCE3875315AE61AC5E471ACBD Validity Not Before: Oct 19 02:40:19 2025 GMT Not After : Oct 26 02:40:19 2025 GMT Subject: CN=68f44f93-d724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:15:16:e5:8d:a4:78:b2:f4:27:a0:ec:3a:9b: bc:8f:51:56:56:91:cc:b2:66:60:f4:3d:74:01:c9: b0:e5:3e:96:13:4e:c5:38:1f:4e:57:35:4a:b9:e9: 94:bc:05:9a:8c:bc:5c:10:9d:8e:c0:2b:c8:42:6e: 78:90:48:2d:26:7c:e5:1d:a3:d7:8f:f3:e1:09:6f: 21:9f:31:d2:ad:dd:11:d8:dd:67:48:90:ad:97:3e: 38:9f:b8:5a:64:f0:9d:64:68:86:de:74:24:13:2f: a0:8a:d2:fc:ec:ae:c1:e9:00:f2:26:d5:a9:86:02: 49:44:ff:67:86:c5:a8:93:63:f8:c4:c6:92:3f:db: 53:5a:d2:90:bc:31:f1:7c:ff:a0:bf:78:2b:cc:da: ce:36:67:23:9f:0f:8a:f9:a7:45:44:9f:8e:20:c5: a9:cf:3f:e7:ae:b3:de:02:b0:04:20:94:f7:d8:77: e7:88:63:a4:64:63:bf:78:ee:27:e1:23:5b:85:f2: 7e:d3:2d:75:7d:7b:00:fe:a6:c0:73:d8:5c:71:24: 66:02:c2:a6:25:4f:f9:75:43:e9:83:78:3d:40:ba: 94:84:e5:0b:98:64:23:78:93:e6:c6:c4:04:a5:8e: 0f:39:e7:a8:28:85:7c:7f:51:78:5e:1c:c1:0f:bd: 71:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:CC:D0:D3:23:1D:5D:88:2F:B3:03:1B:8E:8A:B9:AD:AC:E3:92:0F X509v3 Authority Key Identifier: keyid:63:23:E5:6C:D9:92:AB:8F:CE:38:75:31:5A:E6:1A:C5:E4:71:AC:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:2a:7b:a5:cd:38:06:18:9d:58:05:a6:0e:9b:4f:c2:b2:ab: 9b:f8:0b:f2:fe:72:2c:6c:79:a7:15:fb:21:24:54:8f:73:6c: 05:d3:ab:19:df:bd:d1:43:be:83:91:2f:25:f9:d0:69:99:62: 25:10:54:4a:1d:2d:66:57:1e:78:18:37:83:05:4b:a7:a4:b5: 29:04:80:13:8e:50:a7:12:b1:cd:7a:90:ad:92:2b:94:bb:ae: 13:2b:ef:44:d8:15:fd:39:3f:77:b3:ef:a3:6f:df:20:ae:dc: 59:bf:6b:48:49:83:d5:81:b7:ba:7f:50:aa:52:d3:cd:d5:83: 8c:a1:10:71:37:11:55:17:68:15:97:ef:d3:0d:40:b7:c0:8a: f2:0f:a3:4d:b3:b0:a3:64:5f:0a:7c:4b:22:cb:79:8a:6e:06: 27:03:ca:eb:07:d2:29:50:5a:42:dd:d9:3d:20:3d:9e:45:06: 3a:7d:b1:2c:88:ab:69:0f:7d:b7:b9:63:84:7c:c4:c5:79:56: 1f:5a:32:6f:fa:0b:33:33:1c:b5:a2:4d:d5:d7:c7:a2:41:3b: ca:ee:35:d0:54:4e:13:a8:e2:76:cb:5e:16:e9:d2:2f:5a:89: d2:a3:ce:2a:73:4a:3b:2c:73:db:ba:a2:7d:93:f1:e0:23:50: cd:e5:14:1f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NEM3MDExMC8GA1UEBRMoNjMyM0U1NkNEOTkyQUI4RkNFMzg3NTMxNUFFNjFBQzVF NDcxQUNCRDAeFw0yNTEwMTkwMjQwMTlaFw0yNTEwMjYwMjQwMTlaMBgxFjAUBgNV BAMTDTY4ZjQ0ZjkzLWQ3MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDuFRbljaR4svQnoOw6m7yPUVZWkcyyZmD0PXQBybDlPpYTTsU4H05XNUq56ZS8 BZqMvFwQnY7AK8hCbniQSC0mfOUdo9eP8+EJbyGfMdKt3RHY3WdIkK2XPjifuFpk 8J1kaIbedCQTL6CK0vzsrsHpAPIm1amGAklE/2eGxaiTY/jExpI/21Na0pC8MfF8 /6C/eCvM2s42ZyOfD4r5p0VEn44gxanPP+eus94CsAQglPfYd+eIY6RkY7947ifh I1uF8n7TLXV9ewD+psBz2FxxJGYCwqYlT/l1Q+mDeD1AupSE5QuYZCN4k+bGxASl jg8556gohXx/UXheHMEPvXE/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6szQ0yMd XYgvswMbjoq5razjkg8wHwYDVR0jBBgwFoAUYyPlbNmSq4/OOHUxWuYaxeRxrL0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0QzcwLzgyQkM4NEVFQUM2 NzExRUNCNzVDREEyNEM0RjlBRTAyL1l5UGxiTm1TcTRfT09IVXhXdVlheGVSeHJM MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWXlQbGJObVNxNF9PT0hVeFd1WWF4ZVJ4ckwwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 QzcwLzgyQkM4NEVFQUM2NzExRUNCNzVDREEyNEM0RjlBRTAyL1l5UGxiTm1TcTRf T09IVXhXdVlheGVSeHJMMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFAqe6XNOAYYnVgFpg6bT8Kyq5v4C/L+cixseacV+yEkVI9zbAXTqxnf vdFDvoORLyX50GmZYiUQVEodLWZXHngYN4MFS6ektSkEgBOOUKcSsc16kK2SK5S7 rhMr70TYFf05P3ez76Nv3yCu3Fm/a0hJg9WBt7p/UKpS083Vg4yhEHE3EVUXaBWX 79MNQLfAivIPo02zsKNkXwp8SyLLeYpuBicDyusH0ilQWkLd2T0gPZ5FBjp9sSyI q2kPfbe5Y4R8xMV5Vh9aMm/6CzMzHLWiTdXXx6JBO8ruNdBUThOo4nbLXhbp0i9a idKjzipzSjssc9u6on2T8eAjUM3lFB8= -----END CERTIFICATE-----Generated at Sun Oct 19 22:58:03 2025 by rpki-client