$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft File: yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft (raw, json) Hash identifier: Ejut8KeaR/UMxGsodP6THQLdDkAdez7iWQARhE2e48o= Subject key identifier: 42:55:1A:0A:3B:C7:C9:1E:2A:83:E4:F6:AA:D8:0B:91:B6:4B:D8:12 Authority key identifier: CA:A9:69:FF:37:74:BC:D9:ED:60:27:73:D2:9D:87:8B:C4:E2:65:6B Certificate issuer: /CN=A916B4B7/serialNumber=CAA969FF3774BCD9ED602773D29D878BC4E2656B Certificate serial: 0943 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft Manifest number: 093D Signing time: Mon 20 Oct 2025 21:02:31 +0000 Manifest this update: Mon 20 Oct 2025 21:02:30 +0000 Manifest next update: Mon 27 Oct 2025 21:02:30 +0000 Files and hashes: 1: yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl (hash: alIbvHAQYXg9M7INO7hXsL0ePA6Dcr82ydWT5Zz50w0=) 2: 90798692AA0A11EA89D5161EC4F9AE02.roa (hash: SjfL0z+V8r1mG2yvSd88vw9Fy41PjMV8KGz6ODEkn2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 21:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2371 (0x943) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B4B7, serialNumber=CAA969FF3774BCD9ED602773D29D878BC4E2656B Validity Not Before: Oct 20 21:02:30 2025 GMT Not After : Oct 27 21:02:30 2025 GMT Subject: CN=68f6a366-9632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4b:39:3a:5d:20:47:2f:6f:47:53:b2:7a:0a: 8d:7a:37:4a:25:65:55:48:b6:06:48:fd:a4:57:72: 09:c2:e4:69:8d:ac:ef:02:35:9e:3c:2c:28:f5:eb: c5:4d:10:3e:86:bb:72:e9:88:b0:8f:d3:b9:1e:b2: ad:47:0e:51:28:48:09:c0:ce:ab:e6:06:35:db:e2: 70:92:9f:f7:52:73:a1:ce:6c:be:65:00:61:9a:94: 4f:30:3c:58:d2:4b:33:48:2b:be:45:25:7a:55:08: 98:21:7c:0f:19:29:e6:b0:e3:7c:1f:cb:57:8a:71: 5f:7d:d7:c3:9b:fd:88:4a:e6:4e:1e:5b:50:bc:da: a3:94:d5:c7:61:84:18:97:0d:94:8e:99:93:e2:92: 30:a2:9f:2a:d0:e9:c3:1e:f1:ab:36:8b:e7:12:7d: b3:b4:d7:b9:71:e8:37:f6:1b:a7:07:8f:a1:24:05: aa:99:96:14:9f:52:b2:94:f7:4e:75:2a:d8:dd:b5: 06:82:55:9b:4a:7f:c2:ec:b5:44:e6:37:f0:de:55: 80:32:e8:4f:7f:ed:56:5d:b0:a9:f3:e4:51:58:c7: a6:7f:f6:a5:be:68:e3:03:31:a3:27:3c:e5:ae:bf: 9d:89:cc:9c:04:73:7f:90:fe:d1:19:d0:a8:ab:d5: df:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:55:1A:0A:3B:C7:C9:1E:2A:83:E4:F6:AA:D8:0B:91:B6:4B:D8:12 X509v3 Authority Key Identifier: keyid:CA:A9:69:FF:37:74:BC:D9:ED:60:27:73:D2:9D:87:8B:C4:E2:65:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:9a:32:8e:52:a8:6b:8a:6d:d3:10:35:59:1b:b8:b2:ac:3c: a0:53:5f:fe:4f:68:ab:4d:26:ad:9b:a3:de:a6:70:50:b9:e5: e3:cc:7e:be:3c:56:c5:cf:fa:62:93:b8:08:63:3d:70:10:e9: db:dd:77:15:07:84:78:26:df:a1:2a:b0:6d:16:05:06:b5:f6: 92:74:92:4d:b7:9b:87:66:fb:61:d9:81:83:89:a5:01:b4:81: cc:11:7d:3f:0c:64:fb:60:1d:ec:95:6a:79:41:95:bc:42:d7: b9:76:09:08:59:06:42:fc:1b:a7:e6:f1:ad:fb:e3:e5:fd:f9: fe:f9:3d:f5:77:60:3e:c7:4f:da:8c:03:3c:cc:e7:b4:ea:73: b7:3e:b3:54:23:dd:c7:70:f9:21:1f:d8:52:30:1d:1b:8a:21: d2:2a:65:96:72:d9:ed:ed:ce:25:3d:af:a9:b5:7b:71:3b:81: 21:d5:5b:41:dd:be:f4:2c:2c:59:3b:39:65:0a:52:75:fb:f2: 4f:79:cd:05:6d:9f:61:89:cf:1d:ee:ed:6a:39:4a:b7:f4:6c: 40:6a:d4:a5:5f:34:6f:10:29:44:09:97:66:93:c4:f1:4b:90: e2:84:30:7f:6d:f0:71:76:82:cc:2f:1d:52:fa:55:c8:81:d6: 9d:50:4d:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI0QjcxMTAvBgNVBAUTKENBQTk2OUZGMzc3NEJDRDlFRDYwMjc3M0QyOUQ4NzhC QzRFMjY1NkIwHhcNMjUxMDIwMjEwMjMwWhcNMjUxMDI3MjEwMjMwWjAYMRYwFAYD VQQDEw02OGY2YTM2Ni05NjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwks5Ol0gRy9vR1OyegqNejdKJWVVSLYGSP2kV3IJwuRpjazvAjWePCwo9evF TRA+hrty6Yiwj9O5HrKtRw5RKEgJwM6r5gY12+Jwkp/3UnOhzmy+ZQBhmpRPMDxY 0kszSCu+RSV6VQiYIXwPGSnmsON8H8tXinFffdfDm/2ISuZOHltQvNqjlNXHYYQY lw2UjpmT4pIwop8q0OnDHvGrNovnEn2ztNe5ceg39hunB4+hJAWqmZYUn1KylPdO dSrY3bUGglWbSn/C7LVE5jfw3lWAMuhPf+1WXbCp8+RRWMemf/alvmjjAzGjJzzl rr+dicycBHN/kP7RGdCoq9XfaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJVGgo7 x8keKoPk9qrYC5G2S9gSMB8GA1UdIwQYMBaAFMqpaf83dLzZ7WAnc9Kdh4vE4mVr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjRCNy8wOTcyQzc0MEFB MDkxMUVBOEZFM0I2MUJDNEY5QUUwMi95cWxwX3pkMHZObnRZQ2R6MHAySGk4VGla V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lxbHBfemQwdk5udFlDZHowcDJIaThUaVpXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjRCNy8wOTcyQzc0MEFBMDkxMUVBOEZFM0I2MUJDNEY5QUUwMi95cWxwX3pkMHZO bnRZQ2R6MHAySGk4VGlaV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKmjKOUqhrim3TEDVZG7iyrDygU1/+T2irTSatm6PepnBQueXjzH6+ PFbFz/pik7gIYz1wEOnb3XcVB4R4Jt+hKrBtFgUGtfaSdJJNt5uHZvth2YGDiaUB tIHMEX0/DGT7YB3slWp5QZW8Qte5dgkIWQZC/Bun5vGt++Pl/fn++T31d2A+x0/a jAM8zOe06nO3PrNUI93HcPkhH9hSMB0biiHSKmWWctnt7c4lPa+ptXtxO4Eh1VtB 3b70LCxZOzllClJ1+/JPec0FbZ9hic8d7u1qOUq39GxAatSlXzRvEClECZdmk8Tx S5DihDB/bfBxdoLMLx1S+lXIgdadUE3h -----END CERTIFICATE-----Generated at Tue Oct 21 07:17:26 2025 by rpki-client