$ rpki-client -vvf rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft File: YfRdxU9H4lL6xlUt27OWWFTGyAE.mft (raw, json) Hash identifier: faV8Q6dWWxNTGghZmh6xpam2q7OlrdwE5M8Dk6krigw= Subject key identifier: 96:CC:BE:5A:CE:29:28:68:79:FC:01:06:DB:54:54:54:94:C7:10:6B Authority key identifier: 61:F4:5D:C5:4F:47:E2:52:FA:C6:55:2D:DB:B3:96:58:54:C6:C8:01 Certificate issuer: /CN=A9162CCE/serialNumber=61F45DC54F47E252FAC6552DDBB3965854C6C801 Certificate serial: 062A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft Manifest number: 0623 Signing time: Sun 19 Oct 2025 00:22:42 +0000 Manifest this update: Sun 19 Oct 2025 00:22:42 +0000 Manifest next update: Sun 26 Oct 2025 00:22:42 +0000 Files and hashes: 1: YfRdxU9H4lL6xlUt27OWWFTGyAE.crl (hash: KAWCEA8kn7/72NU/bgm+6i8kKYoWYdsFDDqNYlNt2Sk=) 2: 6D5F7C74B99611EBB5E9AE5EC4F9AE02.roa (hash: bUC1i6U8bBn9UfWkY4L4fN9q3qdDlIRzcJbNDpJZl6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.crl rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1578 (0x62a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162CCE, serialNumber=61F45DC54F47E252FAC6552DDBB3965854C6C801 Validity Not Before: Oct 19 00:22:42 2025 GMT Not After : Oct 26 00:22:42 2025 GMT Subject: CN=68f42f52-e53a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b8:6e:44:56:47:2e:65:b1:61:47:2f:f5:53: bb:ee:e0:90:ea:39:5e:55:1c:ac:63:0e:d2:08:7e: c4:e5:91:5d:6e:d4:76:cb:5b:72:49:23:5e:e1:bb: dc:ff:f3:88:81:d9:39:18:c9:51:de:fc:5b:65:2a: fc:bd:d7:f4:d0:0a:0e:cd:59:fd:6d:43:81:b3:2a: 91:22:61:7d:fc:8a:2b:09:c4:bd:c5:93:0d:14:3d: 2d:a9:62:34:e4:f1:5c:e6:67:20:09:10:02:c3:8a: c8:05:02:09:e7:f5:d7:a1:a2:db:10:2a:a0:f6:7e: da:84:82:2e:a3:ae:50:54:04:0a:0e:32:e3:21:f0: b3:6b:96:c5:11:22:4d:c3:a9:80:9f:56:63:d1:18: 5a:49:1e:4f:70:5d:96:3e:61:7a:50:ba:bf:d5:4a: 9e:cf:00:22:14:b5:2b:d2:07:d7:a4:b8:37:47:84: 3a:a3:0b:19:53:b3:59:59:c2:c6:ca:8e:a5:45:03: 34:40:24:bc:51:85:a9:be:f8:4d:91:89:ca:0c:b9: 47:58:0b:00:c0:ea:02:26:22:97:ce:2f:4d:a1:cb: 7d:82:0c:2a:20:eb:3a:bf:86:32:2a:25:9a:38:e5: 2e:65:50:da:d7:c3:fd:f9:5d:5a:c7:63:66:84:1a: a8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:CC:BE:5A:CE:29:28:68:79:FC:01:06:DB:54:54:54:94:C7:10:6B X509v3 Authority Key Identifier: keyid:61:F4:5D:C5:4F:47:E2:52:FA:C6:55:2D:DB:B3:96:58:54:C6:C8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:1b:bb:52:f7:53:12:39:43:09:0d:f7:77:02:90:a0:9a:ba: 5e:8c:bd:97:11:9f:7d:5d:55:10:d4:44:6b:02:79:f7:04:07: 9d:73:20:b2:26:d7:b7:fa:71:18:4c:d4:ad:86:f5:99:38:39: 57:01:86:e5:4a:e9:3e:4c:37:ba:6e:6e:70:ac:44:66:bf:81: bc:9b:b9:68:df:5f:43:4f:81:70:b6:ae:ec:63:bd:e8:f0:6d: 71:18:f4:60:9e:ad:0a:da:9a:ff:1e:ca:8d:8b:c7:15:b9:50: 6d:c8:ff:55:9c:19:d4:cd:13:9b:ae:a5:3e:24:df:25:8a:9b: a6:7a:2c:fa:51:16:60:ed:3d:91:f4:ef:65:ca:1c:71:51:ea: 6d:ef:4f:e5:aa:6b:2f:2b:e3:d7:40:54:c9:1b:a2:d7:58:9a: 54:c7:95:2e:25:a3:09:81:19:29:45:f8:6e:a6:71:57:55:b4: c9:7f:ab:59:f0:4d:97:c3:21:a0:a3:58:fa:7b:40:2d:b3:ad: 60:de:d8:6b:de:45:94:65:66:5d:ac:ee:6a:9b:3d:22:52:63: 5c:af:a6:77:87:80:6e:a9:d9:1a:77:08:4d:4f:fa:a6:22:c5: 78:48:14:15:8b:6e:c3:07:15:aa:b4:cc:d8:56:d9:78:c6:0e: c7:e3:4f:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJDQ0UxMTAvBgNVBAUTKDYxRjQ1REM1NEY0N0UyNTJGQUM2NTUyRERCQjM5NjU4 NTRDNkM4MDEwHhcNMjUxMDE5MDAyMjQyWhcNMjUxMDI2MDAyMjQyWjAYMRYwFAYD VQQDEw02OGY0MmY1Mi1lNTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbhuRFZHLmWxYUcv9VO77uCQ6jleVRysYw7SCH7E5ZFdbtR2y1tySSNe4bvc //OIgdk5GMlR3vxbZSr8vdf00AoOzVn9bUOBsyqRImF9/IorCcS9xZMNFD0tqWI0 5PFc5mcgCRACw4rIBQIJ5/XXoaLbECqg9n7ahIIuo65QVAQKDjLjIfCza5bFESJN w6mAn1Zj0RhaSR5PcF2WPmF6ULq/1UqezwAiFLUr0gfXpLg3R4Q6owsZU7NZWcLG yo6lRQM0QCS8UYWpvvhNkYnKDLlHWAsAwOoCJiKXzi9Noct9ggwqIOs6v4YyKiWa OOUuZVDa18P9+V1ax2NmhBqoCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbMvlrO KShoefwBBttUVFSUxxBrMB8GA1UdIwQYMBaAFGH0XcVPR+JS+sZVLduzllhUxsgB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkNDRS9CNzU1REEyOEI5 OTQxMUVCOTNGODI2NURDNEY5QUUwMi9ZZlJkeFU5SDRsTDZ4bFV0MjdPV1dGVEd5 QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lmUmR4VTlINGxMNnhsVXQyN09XV0ZUR3lBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkNDRS9CNzU1REEyOEI5OTQxMUVCOTNGODI2NURDNEY5QUUwMi9ZZlJkeFU5SDRs TDZ4bFV0MjdPV1dGVEd5QUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4G7tS91MSOUMJDfd3ApCgmrpejL2XEZ99XVUQ1ERrAnn3BAedcyCy Jte3+nEYTNSthvWZODlXAYblSuk+TDe6bm5wrERmv4G8m7lo319DT4Fwtq7sY73o 8G1xGPRgnq0K2pr/HsqNi8cVuVBtyP9VnBnUzRObrqU+JN8lipumeiz6URZg7T2R 9O9lyhxxUept70/lqmsvK+PXQFTJG6LXWJpUx5UuJaMJgRkpRfhupnFXVbTJf6tZ 8E2XwyGgo1j6e0Ats61g3thr3kWUZWZdrO5qmz0iUmNcr6Z3h4BuqdkadwhNT/qm IsV4SBQVi27DBxWqtMzYVtl4xg7H40+T -----END CERTIFICATE-----Generated at Mon Oct 20 04:06:00 2025 by rpki-client