$ rpki-client -vvf rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.mft File: YlWvHFTHD2B02LCsoatcuHg4dic.mft (raw, json) Hash identifier: QOk3Wp5hGq08Iica0Yu+zEY2HiAnbrOO7fD4mQKzxIY= Subject key identifier: FB:23:A7:E3:8C:6B:DE:87:F4:E9:05:78:12:C3:96:8C:7C:90:C2:73 Authority key identifier: 62:55:AF:1C:54:C7:0F:60:74:D8:B0:AC:A1:AB:5C:B8:78:38:76:27 Certificate issuer: /CN=A9148CCE/serialNumber=6255AF1C54C70F6074D8B0ACA1AB5CB878387627 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YlWvHFTHD2B02LCsoatcuHg4dic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.mft Manifest number: 3E Signing time: Sun 19 Oct 2025 10:55:12 +0000 Manifest this update: Sun 19 Oct 2025 10:55:12 +0000 Manifest next update: Sun 26 Oct 2025 10:55:12 +0000 Files and hashes: 1: YlWvHFTHD2B02LCsoatcuHg4dic.crl (hash: 8z+3RERtlcwg6A+buAGTtv6J3UIuEwyON71vgYiEi8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.crl rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YlWvHFTHD2B02LCsoatcuHg4dic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:55:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148CCE, serialNumber=6255AF1C54C70F6074D8B0ACA1AB5CB878387627 Validity Not Before: Oct 19 10:55:12 2025 GMT Not After : Oct 26 10:55:12 2025 GMT Subject: CN=68f4c390-36c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:7f:f4:69:1a:ca:6d:68:c1:0b:6e:a1:90:e8: 53:f7:b3:6d:27:7f:91:59:69:69:71:d5:eb:1c:cd: 6b:d4:df:0a:7b:31:9b:d7:22:af:be:45:f5:3f:d4: fb:7c:83:a4:fb:a5:2f:cf:30:d8:9b:d1:ed:44:6a: 71:7d:58:20:7e:e8:40:f9:34:9e:13:69:24:59:9f: 0c:2d:ed:ed:e0:5f:6a:f4:d5:fc:19:d2:d0:ae:e5: 4a:e1:5a:6d:d7:26:01:d8:7a:06:bc:58:24:de:c4: 6d:97:69:32:ea:7b:28:ed:1d:47:28:e4:cb:c4:c2: df:05:11:8b:d0:c5:94:c2:34:54:f2:47:03:1c:52: 41:3e:92:ff:85:42:52:b1:ab:e1:b7:2a:f6:85:b9: 9d:02:80:e0:c1:87:cc:69:37:a5:64:93:28:34:39: 68:44:67:df:de:c0:ed:c8:ca:83:a7:d3:93:e2:e4: ff:b6:e1:16:f1:cb:60:75:06:47:07:0a:36:19:ff: 0f:f0:45:55:af:65:3d:82:a7:6e:45:22:25:79:7d: 67:fb:75:54:a9:de:51:30:6c:75:c6:06:fb:27:07: a5:76:92:00:b1:61:e1:ab:8b:98:f4:fa:c1:9e:b0: f1:89:d6:e1:f4:3d:80:6c:43:a9:64:a5:2c:a9:44: e2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:23:A7:E3:8C:6B:DE:87:F4:E9:05:78:12:C3:96:8C:7C:90:C2:73 X509v3 Authority Key Identifier: keyid:62:55:AF:1C:54:C7:0F:60:74:D8:B0:AC:A1:AB:5C:B8:78:38:76:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YlWvHFTHD2B02LCsoatcuHg4dic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:63:dd:4b:44:73:99:d9:a5:f1:bc:5b:ef:cb:cd:cd:ec:18: d1:ea:8f:75:7d:4b:90:20:f8:b8:25:72:17:50:bb:17:ae:7f: 5c:84:54:8c:25:29:1e:5c:e2:79:28:08:54:15:5d:3a:82:77: af:ef:9f:72:9d:9c:5c:68:d9:b8:d5:01:ad:37:bf:98:3b:b1: e3:1c:bb:9b:72:26:fa:f1:c5:3e:0f:08:c3:03:11:3e:6e:ab: 43:34:df:67:28:55:18:af:c6:17:89:87:94:bf:1e:aa:96:94: da:96:ed:ce:1f:21:7a:1d:b1:e8:1e:2c:2d:4e:8c:bd:a0:e4: fc:89:72:93:7f:a7:e6:8f:fe:47:63:bb:11:ca:c0:36:a8:0a: e3:17:af:e9:9c:3a:4d:a2:ba:61:ab:bd:0a:33:b7:60:7b:71: 1e:d9:61:f3:d1:da:3d:a5:18:7f:83:0f:c9:02:3b:18:d7:71: 35:84:19:a7:8f:a9:5e:ff:84:8a:0e:04:f5:2e:1d:8e:40:22: df:eb:9a:fe:ad:b2:a5:9d:43:ce:94:da:f1:72:6f:ba:22:3c: 38:93:5c:55:4c:5e:a9:60:64:14:9d:ff:f1:85:27:33:86:50: 44:65:a4:97:78:ca:09:55:10:2e:79:17:f3:e9:3d:ce:41:94: ed:cc:47:77 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OENDRTExMC8GA1UEBRMoNjI1NUFGMUM1NEM3MEY2MDc0RDhCMEFDQTFBQjVDQjg3 ODM4NzYyNzAeFw0yNTEwMTkxMDU1MTJaFw0yNTEwMjYxMDU1MTJaMBgxFjAUBgNV BAMTDTY4ZjRjMzkwLTM2YzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDxf/RpGsptaMELbqGQ6FP3s20nf5FZaWlx1esczWvU3wp7MZvXIq++RfU/1Pt8 g6T7pS/PMNib0e1EanF9WCB+6ED5NJ4TaSRZnwwt7e3gX2r01fwZ0tCu5UrhWm3X JgHYega8WCTexG2XaTLqeyjtHUco5MvEwt8FEYvQxZTCNFTyRwMcUkE+kv+FQlKx q+G3KvaFuZ0CgODBh8xpN6Vkkyg0OWhEZ9/ewO3IyoOn05Pi5P+24Rbxy2B1BkcH CjYZ/w/wRVWvZT2Cp25FIiV5fWf7dVSp3lEwbHXGBvsnB6V2kgCxYeGri5j0+sGe sPGJ1uH0PYBsQ6lkpSypROJ9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+yOn44xr 3of06QV4EsOWjHyQwnMwHwYDVR0jBBgwFoAUYlWvHFTHD2B02LCsoatcuHg4dicw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4Q0NFLzkzRUZFMkI0NEZF RTExRjA4MDM3OTQ4MkM0RjlBRTAyL1lsV3ZIRlRIRDJCMDJMQ3NvYXRjdUhnNGRp Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWWxXdkhGVEhEMkIwMkxDc29hdGN1SGc0ZGljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4 Q0NFLzkzRUZFMkI0NEZFRTExRjA4MDM3OTQ4MkM0RjlBRTAyL1lsV3ZIRlRIRDJC MDJMQ3NvYXRjdUhnNGRpYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHJj3UtEc5nZpfG8W+/Lzc3sGNHqj3V9S5Ag+LglchdQuxeuf1yEVIwl KR5c4nkoCFQVXTqCd6/vn3KdnFxo2bjVAa03v5g7seMcu5tyJvrxxT4PCMMDET5u q0M032coVRivxheJh5S/HqqWlNqW7c4fIXodsegeLC1OjL2g5PyJcpN/p+aP/kdj uxHKwDaoCuMXr+mcOk2iumGrvQozt2B7cR7ZYfPR2j2lGH+DD8kCOxjXcTWEGaeP qV7/hIoOBPUuHY5AIt/rmv6tsqWdQ86U2vFyb7oiPDiTXFVMXqlgZBSd//GFJzOG UERlpJd4yglVEC55F/PpPc5BlO3MR3c= -----END CERTIFICATE-----Generated at Mon Oct 20 01:46:26 2025 by rpki-client