$ rpki-client -vvf rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft File: Yja2yVcFRCapTOamlDI45v5tH1Y.mft (raw, json) Hash identifier: E0xJBJR28BsHIFWBaoT1ViOmZ5wSavS/MJtdHazsRkY= Subject key identifier: 4C:50:23:70:C8:C1:CC:AC:E6:D8:29:C4:EF:11:C6:08:5F:58:CD:E5 Authority key identifier: 62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56 Certificate issuer: /CN=A915D655/serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56 Certificate serial: 041B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft Manifest number: 0416 Signing time: Sun 19 Oct 2025 02:18:31 +0000 Manifest this update: Sun 19 Oct 2025 02:18:30 +0000 Manifest next update: Sun 26 Oct 2025 02:18:30 +0000 Files and hashes: 1: Yja2yVcFRCapTOamlDI45v5tH1Y.crl (hash: NqmZppX4xmT7TWQzFVgKFXvMrups0O9ZawOMBynpW7E=) 2: 8B626F5487C911EC908CE327C4F9AE02.roa (hash: 4ePFqqTPP+4ZfS7bacR18941px2N5kQ0emROx+NaWmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1051 (0x41b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D655, serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56 Validity Not Before: Oct 19 02:18:30 2025 GMT Not After : Oct 26 02:18:30 2025 GMT Subject: CN=68f44a76-bf01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3b:c8:66:33:e6:f6:cf:22:08:81:3a:0f:93: 46:b6:31:b8:2f:e0:9a:61:3c:0a:1a:5e:d4:2e:4e: 21:2b:f0:07:01:37:d0:44:2b:d6:13:dd:98:67:6e: ba:a0:a7:94:2c:1e:17:5b:ec:6c:95:6e:a9:a9:c9: 9e:c0:ff:28:cf:8f:79:49:33:dc:5c:f4:88:0d:cd: 4a:94:a1:68:e8:42:d0:d4:dc:66:d2:70:79:dd:a2: 9f:69:8a:82:da:dc:f0:9f:5e:60:48:4a:b8:bb:21: 2f:06:46:79:ce:cb:19:7b:ae:25:2a:f4:8c:90:d1: 2f:d0:8a:94:c5:ce:74:ba:c2:fa:fd:55:70:09:40: ee:de:14:8d:5a:4d:b0:71:8e:2c:25:54:ab:7f:f6: 19:70:bd:36:9c:2f:10:03:75:16:82:9c:00:2b:a9: dc:ef:50:84:1a:7f:40:8e:9c:2a:0d:f7:e0:0c:b6: ac:fd:d7:7d:66:51:e7:ed:12:26:b0:3a:df:d4:00: 41:5d:cd:4e:11:32:6a:7f:56:0f:09:d4:4a:e4:ff: d2:b9:18:78:03:4f:8b:17:f7:39:35:63:df:80:bb: 9d:36:82:91:2d:3c:47:46:3e:63:7c:94:ee:ac:fe: 26:12:98:31:57:ad:3a:8f:3f:44:cc:47:7f:8a:67: 18:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:50:23:70:C8:C1:CC:AC:E6:D8:29:C4:EF:11:C6:08:5F:58:CD:E5 X509v3 Authority Key Identifier: keyid:62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:ce:77:ac:88:f5:5f:64:f4:02:b6:48:dd:28:0e:dc:6c:16: b2:27:4f:95:9e:e0:d9:1e:0d:8b:43:10:d1:77:a3:cd:69:3d: dc:95:b2:f6:fb:74:66:1d:77:a0:ab:fb:9d:e2:06:36:ac:7a: 04:e1:a8:37:8f:13:75:e5:d0:58:4b:d1:87:1b:0f:22:30:62: 5d:f3:f4:7a:7a:19:0b:a3:c7:b0:40:52:a6:ff:8d:3b:25:57: 24:7c:f1:18:df:44:85:ab:a0:0c:67:49:60:05:05:04:b6:c1: cb:4d:02:5c:87:1e:81:65:34:b4:0d:90:00:77:9b:13:c6:08: ab:ac:d6:e9:90:da:a7:3c:6b:37:65:7c:c9:1b:60:c9:5e:09: 60:11:15:c1:ee:11:f1:11:de:68:72:23:cd:3c:c3:22:68:e1: 90:9b:a6:39:b6:27:f4:a2:b5:81:ba:04:47:b1:80:61:11:40: 11:b6:99:f5:fb:f9:70:c9:4f:d4:90:6c:c0:80:d3:8c:f7:1e: f8:9c:fb:e5:ae:ef:4c:9f:f5:0c:7b:0e:35:41:cf:b8:61:43: be:b6:47:af:53:61:b7:91:f0:2b:9f:e0:d0:5f:14:ef:ec:8d: ae:ea:a9:43:be:29:76:80:2f:31:f7:55:3e:23:aa:52:49:6e: 32:b0:b7:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2NTUxMTAvBgNVBAUTKDYyMzZCNkM5NTcwNTQ0MjZBOTRDRTZBNjk0MzIzOEU2 RkU2RDFGNTYwHhcNMjUxMDE5MDIxODMwWhcNMjUxMDI2MDIxODMwWjAYMRYwFAYD VQQDEw02OGY0NGE3Ni1iZjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTvIZjPm9s8iCIE6D5NGtjG4L+CaYTwKGl7ULk4hK/AHATfQRCvWE92YZ266 oKeULB4XW+xslW6pqcmewP8oz495STPcXPSIDc1KlKFo6ELQ1Nxm0nB53aKfaYqC 2tzwn15gSEq4uyEvBkZ5zssZe64lKvSMkNEv0IqUxc50usL6/VVwCUDu3hSNWk2w cY4sJVSrf/YZcL02nC8QA3UWgpwAK6nc71CEGn9AjpwqDffgDLas/dd9ZlHn7RIm sDrf1ABBXc1OETJqf1YPCdRK5P/SuRh4A0+LF/c5NWPfgLudNoKRLTxHRj5jfJTu rP4mEpgxV606jz9EzEd/imcYtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExQI3DI wcys5tgpxO8RxghfWM3lMB8GA1UdIwQYMBaAFGI2tslXBUQmqUzmppQyOOb+bR9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDY1NS9FN0JBQTBCRTg3 QzQxMUVDOTY5MjgxMUNDNEY5QUUwMi9ZamEyeVZjRlJDYXBUT2FtbERJNDV2NXRI MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lqYTJ5VmNGUkNhcFRPYW1sREk0NXY1dEgxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDY1NS9FN0JBQTBCRTg3QzQxMUVDOTY5MjgxMUNDNEY5QUUwMi9ZamEyeVZjRlJD YXBUT2FtbERJNDV2NXRIMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDznesiPVfZPQCtkjdKA7cbBayJ0+VnuDZHg2LQxDRd6PNaT3clbL2 +3RmHXegq/ud4gY2rHoE4ag3jxN15dBYS9GHGw8iMGJd8/R6ehkLo8ewQFKm/407 JVckfPEY30SFq6AMZ0lgBQUEtsHLTQJchx6BZTS0DZAAd5sTxgirrNbpkNqnPGs3 ZXzJG2DJXglgERXB7hHxEd5ociPNPMMiaOGQm6Y5tif0orWBugRHsYBhEUARtpn1 +/lwyU/UkGzAgNOM9x74nPvlru9Mn/UMew41Qc+4YUO+tkevU2G3kfArn+DQXxTv 7I2u6qlDvil2gC8x91U+I6pSSW4ysLem -----END CERTIFICATE-----Generated at Mon Oct 20 04:04:20 2025 by rpki-client