$ rpki-client -vvf rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft File: YCjnBlIGqeRf_UskpX7owzQMVzY.mft (raw, json) Hash identifier: MYmLGjcb8aGa0XgoX9q4dqXg/G3qLOgVsUoG5kTpixY= Subject key identifier: DF:50:A3:8E:10:9D:48:6F:AC:BE:BE:57:8E:89:72:70:48:DB:B8:1D Authority key identifier: 60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36 Certificate issuer: /CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736 Certificate serial: 0506 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft Manifest number: 04F3 Signing time: Sun 19 Oct 2025 01:32:58 +0000 Manifest this update: Sun 19 Oct 2025 01:32:57 +0000 Manifest next update: Sun 26 Oct 2025 01:32:57 +0000 Files and hashes: 1: YCjnBlIGqeRf_UskpX7owzQMVzY.crl (hash: ypHwSKAI2Xl7WVHplV7ZzrNBY+faixE6q0oZ+nValwI=) 2: 22B4A5FE9F3111EE83D9FA58C4F9AE02.roa (hash: xNVbMWOJTNr+TWQdJDNkDpjKnJa72sxLxfgu1hE4Y3w=) 3: 274A12F696FD11EF88F06237C4F9AE02.roa (hash: yMa9anpM1Fx5awM2ELLejmDtWuOQ4e92GvLkjwBL1Wg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:32:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1286 (0x506) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149FAB, serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736 Validity Not Before: Oct 19 01:32:57 2025 GMT Not After : Oct 26 01:32:57 2025 GMT Subject: CN=68f43fc9-9339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4b:21:f1:99:1b:81:57:e7:f3:0b:c9:e5:5c: c3:74:85:3a:15:35:dd:18:ea:65:da:99:76:e3:cf: 8d:3f:c5:f9:17:e3:30:66:fd:5c:d5:b8:36:02:82: 28:55:bc:51:52:42:c8:37:e5:c2:e0:c7:6d:45:75: 77:c1:6f:e4:07:67:37:f9:69:22:85:fd:89:f5:1c: fe:f4:2c:09:d4:fc:af:fd:1f:71:6e:87:bd:c3:2e: c0:d6:ab:64:d1:d6:10:85:f8:94:b3:54:4e:91:31: b8:5a:3e:f1:ff:cd:82:2d:82:f5:b0:87:21:ad:cb: 8b:98:8f:ae:87:24:0c:0f:57:3d:49:c7:65:ca:d5: 31:f9:e7:64:c4:15:e7:6a:11:65:a4:32:78:2e:73: b0:da:c8:06:29:24:3f:18:d9:aa:8c:ed:5d:c0:9e: 71:c3:c7:6b:10:6d:c2:6b:5b:66:b4:ce:dc:2c:29: 77:08:d6:4b:3d:6c:b6:54:9d:f8:2f:c4:4e:13:03: 48:e8:7e:86:7b:99:89:31:24:0e:59:5a:1e:77:7d: 83:a9:4e:cb:e8:dc:93:5c:79:08:bc:8b:34:62:8a: b4:b4:85:99:87:9b:cb:86:53:a2:30:08:a1:e1:c8: ce:89:d4:60:17:a6:b0:0b:94:df:63:7e:81:7f:44: 2c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:50:A3:8E:10:9D:48:6F:AC:BE:BE:57:8E:89:72:70:48:DB:B8:1D X509v3 Authority Key Identifier: keyid:60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:e2:9b:5b:0b:58:da:78:3c:73:89:fc:61:56:ec:2e:c2:d1: 95:ba:de:e1:f0:e3:04:a0:33:83:63:88:c9:ab:f0:59:80:e8: 15:a5:6c:bc:71:18:1c:7f:ec:11:0a:f3:69:a0:1c:95:80:f9: d5:c6:72:8c:6c:ec:9a:48:7d:af:a1:11:d3:40:39:83:24:cf: 14:5a:57:93:ea:b3:04:0d:2c:a6:3c:b6:67:26:99:0c:e1:97: ae:40:b2:1d:f2:5a:3f:e3:89:b0:c8:3a:ef:13:b2:6a:4c:8d: b2:b7:14:57:83:1a:c3:86:03:c7:76:75:92:4f:35:57:1f:b5: 93:84:69:72:83:c5:46:84:b3:a4:bc:fe:a0:1b:e1:86:91:9b: 21:e2:81:51:79:e7:1f:51:9e:d4:c1:d5:72:7e:fa:05:e6:23: aa:be:72:96:2e:df:64:57:db:c9:d7:90:c1:58:b8:7f:ed:25: 77:24:86:c0:e1:7e:f8:06:b0:32:c0:a1:04:75:60:07:04:34: 9d:5a:10:c7:47:7d:83:a7:3a:80:2b:86:bd:05:de:73:a0:0a: f4:c0:d9:c6:99:f6:dc:5c:7d:b4:23:af:98:4e:d9:6d:cd:1b: 6e:26:d1:fa:e0:e5:1f:91:f7:b6:48:fd:2d:f0:5b:96:bf:ac: 4b:0c:1c:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGQUIxMTAvBgNVBAUTKDYwMjhFNzA2NTIwNkE5RTQ1RkZENEIyNEE1N0VFOEMz MzQwQzU3MzYwHhcNMjUxMDE5MDEzMjU3WhcNMjUxMDI2MDEzMjU3WjAYMRYwFAYD VQQDEw02OGY0M2ZjOS05MzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0sh8ZkbgVfn8wvJ5VzDdIU6FTXdGOpl2pl248+NP8X5F+MwZv1c1bg2AoIo VbxRUkLIN+XC4MdtRXV3wW/kB2c3+Wkihf2J9Rz+9CwJ1Pyv/R9xboe9wy7A1qtk 0dYQhfiUs1ROkTG4Wj7x/82CLYL1sIchrcuLmI+uhyQMD1c9ScdlytUx+edkxBXn ahFlpDJ4LnOw2sgGKSQ/GNmqjO1dwJ5xw8drEG3Ca1tmtM7cLCl3CNZLPWy2VJ34 L8ROEwNI6H6Ge5mJMSQOWVoed32DqU7L6NyTXHkIvIs0Yoq0tIWZh5vLhlOiMAih 4cjOidRgF6awC5TfY36Bf0QsLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN9Qo44Q nUhvrL6+V46JcnBI27gdMB8GA1UdIwQYMBaAFGAo5wZSBqnkX/1LJKV+6MM0DFc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUZBQi85Q0QxODRCMjM3 MzAxMUVDOTNCNTlCMUJDNEY5QUUwMi9ZQ2puQmxJR3FlUmZfVXNrcFg3b3d6UU1W elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lDam5CbElHcWVSZl9Vc2twWDdvd3pRTVZ6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUZBQi85Q0QxODRCMjM3MzAxMUVDOTNCNTlCMUJDNEY5QUUwMi9ZQ2puQmxJR3Fl UmZfVXNrcFg3b3d6UU1WelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD4ptbC1jaeDxzifxhVuwuwtGVut7h8OMEoDODY4jJq/BZgOgVpWy8 cRgcf+wRCvNpoByVgPnVxnKMbOyaSH2voRHTQDmDJM8UWleT6rMEDSymPLZnJpkM 4ZeuQLId8lo/44mwyDrvE7JqTI2ytxRXgxrDhgPHdnWSTzVXH7WThGlyg8VGhLOk vP6gG+GGkZsh4oFReecfUZ7UwdVyfvoF5iOqvnKWLt9kV9vJ15DBWLh/7SV3JIbA 4X74BrAywKEEdWAHBDSdWhDHR32DpzqAK4a9Bd5zoAr0wNnGmfbcXH20I6+YTtlt zRtuJtH64OUfkfe2SP0t8FuWv6xLDBzM -----END CERTIFICATE-----Generated at Mon Oct 20 13:41:38 2025 by rpki-client