$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft File: YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft (raw, json) Hash identifier: htuLkY/ZTylO4r+c05W6r7uK75Jg3V5vXVJtL/cUoCg= Subject key identifier: E5:1C:36:FA:A6:1D:65:C6:8F:34:94:EC:A5:B8:9E:D2:14:38:FA:E5 Authority key identifier: 61:35:49:A8:D5:96:37:3D:86:5A:22:0E:2E:B1:A8:60:4B:D7:51:8A Certificate issuer: /CN=A9171D16/serialNumber=613549A8D596373D865A220E2EB1A8604BD7518A Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft Manifest number: 014B Signing time: Sun 19 Oct 2025 06:56:52 +0000 Manifest this update: Sun 19 Oct 2025 06:56:52 +0000 Manifest next update: Sun 26 Oct 2025 06:56:52 +0000 Files and hashes: 1: YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl (hash: fcha+F79q7XZUQFUv6a4hPJGbVck5TR9q/C54QIDOLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:56:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D16, serialNumber=613549A8D596373D865A220E2EB1A8604BD7518A Validity Not Before: Oct 19 06:56:52 2025 GMT Not After : Oct 26 06:56:52 2025 GMT Subject: CN=68f48bb4-6a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:84:6f:23:50:a0:75:4f:13:55:ce:30:de:db: c7:2f:f6:dd:01:39:8b:c4:86:5d:33:12:ff:67:f8: 40:ef:6e:db:d5:c5:5a:e5:d9:b9:e7:85:1f:b7:4b: fd:c9:aa:01:54:08:2b:ec:2f:d6:30:55:c5:ab:42: 1f:75:f5:dd:7c:c6:3e:41:9f:e1:17:b9:f6:e8:b2: a2:0c:11:9d:99:71:8a:4b:5b:1c:68:d3:be:56:4a: 2d:cc:1c:49:36:d2:73:37:f8:ad:d6:fd:08:6b:5f: a6:ea:62:32:99:1b:d0:ed:3f:96:22:17:79:b9:b9: 11:55:25:9a:13:36:df:f9:a2:da:45:32:55:76:dd: 76:e1:29:80:ec:e9:d8:01:5e:3a:f1:d8:82:13:18: 8b:aa:a8:a0:a9:47:83:5a:1f:76:cd:7a:c9:4b:61: 0c:16:d4:98:4a:e3:b2:e8:33:92:1f:89:67:ca:35: b6:91:e8:21:2d:e4:b6:95:da:1a:0a:ff:c1:82:38: 13:8b:f0:80:65:3a:c3:f5:e9:a1:db:1d:14:f1:86: 75:b8:5e:1f:a0:b5:8c:a1:af:7e:c2:15:ea:c2:af: bc:f1:6c:be:d5:6f:61:a0:6b:bc:aa:ca:1a:fb:32: c2:76:fc:24:f0:17:21:ef:b2:c7:cf:7b:59:b8:e8: 40:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:1C:36:FA:A6:1D:65:C6:8F:34:94:EC:A5:B8:9E:D2:14:38:FA:E5 X509v3 Authority Key Identifier: keyid:61:35:49:A8:D5:96:37:3D:86:5A:22:0E:2E:B1:A8:60:4B:D7:51:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:51:a2:7b:b1:87:2c:05:04:76:76:e0:28:cb:8f:ea:e1:9b: b5:07:f6:66:bd:55:26:5d:87:b2:82:ff:f2:a7:ec:36:06:f8: a5:30:7f:fa:c3:b4:3f:da:35:91:76:e2:71:a7:f1:86:17:a8: e9:ed:5c:24:5d:c5:7f:ad:0a:f0:57:23:c5:47:f9:95:fc:ad: b3:70:f3:cf:67:9a:da:1b:bc:19:a6:63:0c:b3:3d:fb:8d:25: 40:26:44:73:95:ef:7e:94:89:42:43:80:fd:a9:8e:5a:dc:51: 9d:39:44:da:bf:93:90:db:9d:db:1d:ec:b3:3e:d5:cb:1a:36: 97:ac:28:2b:0c:ed:24:7e:4b:9c:ca:31:72:d1:4d:89:3f:b7: 35:58:c7:8b:74:21:3c:c3:80:1b:9d:8b:51:ce:6f:4f:52:05: 29:ee:ea:fc:15:ce:ca:1c:5a:a1:28:cd:25:2e:41:07:7e:bd: 04:09:74:6a:e6:d3:7d:4c:83:39:eb:92:01:97:26:b7:3e:4b: 9a:3c:27:b3:40:90:86:ef:6b:a2:d1:0a:54:61:60:c6:51:2c: d7:bd:2f:39:e0:d4:86:97:a1:e8:2a:91:26:b9:8c:ad:32:d3: c8:e1:90:6b:06:34:1f:53:7a:9f:e4:b4:93:1b:63:8d:a3:7f: 2d:e2:87:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEMTYxMTAvBgNVBAUTKDYxMzU0OUE4RDU5NjM3M0Q4NjVBMjIwRTJFQjFBODYw NEJENzUxOEEwHhcNMjUxMDE5MDY1NjUyWhcNMjUxMDI2MDY1NjUyWjAYMRYwFAYD VQQDEw02OGY0OGJiNC02YTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYRvI1CgdU8TVc4w3tvHL/bdATmLxIZdMxL/Z/hA727b1cVa5dm554Uft0v9 yaoBVAgr7C/WMFXFq0IfdfXdfMY+QZ/hF7n26LKiDBGdmXGKS1scaNO+VkotzBxJ NtJzN/it1v0Ia1+m6mIymRvQ7T+WIhd5ubkRVSWaEzbf+aLaRTJVdt124SmA7OnY AV468diCExiLqqigqUeDWh92zXrJS2EMFtSYSuOy6DOSH4lnyjW2keghLeS2ldoa Cv/BgjgTi/CAZTrD9emh2x0U8YZ1uF4foLWMoa9+whXqwq+88Wy+1W9hoGu8qsoa +zLCdvwk8Bch77LHz3tZuOhAlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOUcNvqm HWXGjzSU7KW4ntIUOPrlMB8GA1UdIwQYMBaAFGE1SajVljc9hloiDi6xqGBL11GK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQxNi82RUEzMEIwMkFF OUMxMUVFOTExQUZCNjNDNEY5QUUwMi9ZVFZKcU5XV056MkdXaUlPTHJHb1lFdlhV WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lUVkpxTldXTnoyR1dpSU9MckdvWUV2WFVZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUQxNi82RUEzMEIwMkFFOUMxMUVFOTExQUZCNjNDNEY5QUUwMi9ZVFZKcU5XV056 MkdXaUlPTHJHb1lFdlhVWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVUaJ7sYcsBQR2duAoy4/q4Zu1B/ZmvVUmXYeygv/yp+w2BvilMH/6 w7Q/2jWRduJxp/GGF6jp7VwkXcV/rQrwVyPFR/mV/K2zcPPPZ5raG7wZpmMMsz37 jSVAJkRzle9+lIlCQ4D9qY5a3FGdOUTav5OQ253bHeyzPtXLGjaXrCgrDO0kfkuc yjFy0U2JP7c1WMeLdCE8w4AbnYtRzm9PUgUp7ur8Fc7KHFqhKM0lLkEHfr0ECXRq 5tN9TIM565IBlya3PkuaPCezQJCG72ui0QpUYWDGUSzXvS854NSGl6HoKpEmuYyt MtPI4ZBrBjQfU3qf5LSTG2ONo38t4oe2 -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:24 2025 by rpki-client