$ rpki-client -vvf rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft File: yT-PYPBn4kwb_PI7LPQivVhkvss.mft (raw, json) Hash identifier: 4gp2X9SZz5oEl/mbC1qWjSqGPYFiWzMJ28Lf6sJLGws= Subject key identifier: 01:69:A3:AE:27:19:5E:12:08:29:0F:B2:2B:8C:DC:F3:27:F4:9A:BC Authority key identifier: C9:3F:8F:60:F0:67:E2:4C:1B:FC:F2:3B:2C:F4:22:BD:58:64:BE:CB Certificate issuer: /CN=A915E4A4/serialNumber=C93F8F60F067E24C1BFCF23B2CF422BD5864BECB Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yT-PYPBn4kwb_PI7LPQivVhkvss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft Manifest number: 20 Signing time: Sun 19 Oct 2025 11:19:30 +0000 Manifest this update: Sun 19 Oct 2025 11:19:29 +0000 Manifest next update: Sun 26 Oct 2025 11:19:29 +0000 Files and hashes: 1: yT-PYPBn4kwb_PI7LPQivVhkvss.crl (hash: tDlHM3Tta5Z8iYtpPhalPDwaUx2btlEQBrLCxhNpG/Y=) 2: 7452F54C7D7D11F09C982A7CC4F9AE02.roa (hash: fSo3LQThSu3zM+wgt7BUnbtQ2wqM3uaigVctUk+6+W0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.crl rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yT-PYPBn4kwb_PI7LPQivVhkvss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:19:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E4A4, serialNumber=C93F8F60F067E24C1BFCF23B2CF422BD5864BECB Validity Not Before: Oct 19 11:19:29 2025 GMT Not After : Oct 26 11:19:29 2025 GMT Subject: CN=68f4c942-a698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d6:0c:d9:6d:c5:50:aa:42:7c:07:fd:6c:e0: 5d:4d:b8:1e:19:f5:ce:90:6a:13:0b:35:19:14:a9: ff:dd:a3:30:36:b5:f9:88:df:30:d6:bb:42:35:7b: 23:8c:39:b2:e0:94:26:51:b1:cb:6f:37:98:7a:7d: fe:18:aa:12:77:da:90:01:9d:68:f5:b5:5e:e5:a7: 9d:16:c4:72:28:14:3a:aa:32:8e:0a:f3:f5:44:3a: c6:eb:7e:70:1d:09:5d:a7:c5:4a:aa:46:19:f9:e5: 75:e2:cb:59:e2:8a:5b:77:27:66:a7:a3:96:51:8a: 30:a6:56:3f:7d:45:cf:51:b6:ea:52:d2:cf:de:e7: 2a:70:02:cf:46:39:fc:0d:91:e5:4c:69:73:78:1f: 27:01:8c:08:bf:1e:07:e7:12:ae:6c:df:02:9d:06: 99:7e:30:54:ec:11:29:af:58:fd:68:91:f1:59:e5: 19:9c:79:8e:18:ad:2f:70:77:d6:08:db:76:83:ee: 15:29:12:4b:78:8e:8b:83:f7:f3:13:34:a4:a9:bd: a5:d5:19:0d:1d:2c:c1:1c:a8:7d:82:98:1f:90:ac: 03:8f:d8:03:01:52:e0:ab:75:ec:70:94:cd:c7:a3: 23:ba:4b:cb:16:c8:98:dc:24:cf:d8:a5:ef:37:1c: e2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:69:A3:AE:27:19:5E:12:08:29:0F:B2:2B:8C:DC:F3:27:F4:9A:BC X509v3 Authority Key Identifier: keyid:C9:3F:8F:60:F0:67:E2:4C:1B:FC:F2:3B:2C:F4:22:BD:58:64:BE:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yT-PYPBn4kwb_PI7LPQivVhkvss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:85:8c:93:8f:19:f8:64:45:1a:ac:d6:52:d5:e1:05:36:78: 0e:ff:92:17:26:07:88:46:2b:f2:40:19:bb:4b:fc:2f:43:c6: 84:09:9e:50:45:5e:30:7d:da:a3:ed:e2:8b:d8:78:4e:28:d1: e8:5b:67:cc:82:81:6a:7a:ba:25:6a:7a:fb:7c:21:05:0b:7e: b8:b1:91:63:c1:cc:64:40:56:09:4b:40:f3:f7:3d:de:9f:07: 1b:b7:fe:b9:96:20:08:9b:ae:ec:cc:96:09:f8:2a:39:6f:bb: 70:d9:c8:bf:ba:ec:79:be:5b:98:06:72:17:62:b5:b7:d1:4f: f6:38:d8:63:a6:c4:e0:41:6d:15:26:7a:ac:1a:90:e5:4b:0c: 67:6f:2d:91:84:56:86:39:22:ed:aa:52:2e:65:c9:01:dc:30: bf:a5:94:33:0e:3c:6f:a7:c8:61:40:10:f3:b1:4b:13:32:03: f0:01:18:ea:00:ab:36:13:17:5d:e6:91:42:16:5d:f4:22:54: 42:fd:12:c4:70:9c:d0:e6:08:d5:85:7d:6d:f3:ab:66:48:09: 5b:8a:b8:b2:be:7f:9a:75:7a:0f:56:31:62:8d:dc:f8:22:9b: 1a:36:85:ba:88:5b:c9:17:a1:ef:d4:0c:fa:2b:24:b7:3e:16: 26:df:f6:9c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RTRBNDExMC8GA1UEBRMoQzkzRjhGNjBGMDY3RTI0QzFCRkNGMjNCMkNGNDIyQkQ1 ODY0QkVDQjAeFw0yNTEwMTkxMTE5MjlaFw0yNTEwMjYxMTE5MjlaMBgxFjAUBgNV BAMTDTY4ZjRjOTQyLWE2OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCm1gzZbcVQqkJ8B/1s4F1NuB4Z9c6QahMLNRkUqf/dozA2tfmI3zDWu0I1eyOM ObLglCZRsctvN5h6ff4YqhJ32pABnWj1tV7lp50WxHIoFDqqMo4K8/VEOsbrfnAd CV2nxUqqRhn55XXiy1niilt3J2ano5ZRijCmVj99Rc9RtupS0s/e5ypwAs9GOfwN keVMaXN4HycBjAi/HgfnEq5s3wKdBpl+MFTsESmvWP1okfFZ5RmceY4YrS9wd9YI 23aD7hUpEkt4jouD9/MTNKSpvaXVGQ0dLMEcqH2CmB+QrAOP2AMBUuCrdexwlM3H oyO6S8sWyJjcJM/Ype83HOKlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAWmjricZ XhIIKQ+yK4zc8yf0mrwwHwYDVR0jBBgwFoAUyT+PYPBn4kwb/PI7LPQivVhkvssw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFNEE0L0VBQjE3QkY2N0Q3 QzExRjA5NkU1OTU3OUM0RjlBRTAyL3lULVBZUEJuNGt3Yl9QSTdMUFFpdlZoa3Zz cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveVQtUFlQQm40a3diX1BJN0xQUWl2VmhrdnNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF NEE0L0VBQjE3QkY2N0Q3QzExRjA5NkU1OTU3OUM0RjlBRTAyL3lULVBZUEJuNGt3 Yl9QSTdMUFFpdlZoa3Zzcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFyFjJOPGfhkRRqs1lLV4QU2eA7/khcmB4hGK/JAGbtL/C9DxoQJnlBF XjB92qPt4ovYeE4o0ehbZ8yCgWp6uiVqevt8IQULfrixkWPBzGRAVglLQPP3Pd6f Bxu3/rmWIAibruzMlgn4Kjlvu3DZyL+67Hm+W5gGchditbfRT/Y42GOmxOBBbRUm eqwakOVLDGdvLZGEVoY5Iu2qUi5lyQHcML+llDMOPG+nyGFAEPOxSxMyA/ABGOoA qzYTF13mkUIWXfQiVEL9EsRwnNDmCNWFfW3zq2ZICVuKuLK+f5p1eg9WMWKN3Pgi mxo2hbqIW8kXoe/UDPorJLc+Fibf9pw= -----END CERTIFICATE-----Generated at Tue Oct 21 02:10:47 2025 by rpki-client