$ rpki-client -vvf rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft File: YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft (raw, json) Hash identifier: 6QwMeDdWmxUhPpy6BlDbMj+S8Hj8fL/a8lyDpa3NtKE= Subject key identifier: F4:C4:67:E6:28:30:B7:8E:8B:F2:29:53:4A:F6:74:1B:D1:45:DD:10 Authority key identifier: 60:02:50:F6:38:36:FB:4C:2F:23:F4:87:D7:14:BF:32:F7:59:A5:B5 Certificate issuer: /CN=A917799C/serialNumber=600250F63836FB4C2F23F487D714BF32F759A5B5 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft Manifest number: 3B Signing time: Sun 19 Oct 2025 10:57:35 +0000 Manifest this update: Sun 19 Oct 2025 10:57:34 +0000 Manifest next update: Sun 26 Oct 2025 10:57:34 +0000 Files and hashes: 1: YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl (hash: li0He7JL3s3/A5hyw6bJLHd2wmLVDtc7I4W2LaSu0F8=) 2: 05939A1C554611F09F737331C4F9AE02.roa (hash: wHvbvusPDO6yRWHfYUtmsZklb3g0w6TjKvsCHWFb4uE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:57:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917799C, serialNumber=600250F63836FB4C2F23F487D714BF32F759A5B5 Validity Not Before: Oct 19 10:57:34 2025 GMT Not After : Oct 26 10:57:34 2025 GMT Subject: CN=68f4c41e-7249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f6:85:b9:ee:ec:d9:a0:7e:ef:4e:d3:11:66: ad:ae:be:6e:f0:29:31:e0:e5:e5:c7:fa:61:fa:d6: c6:d4:ac:5f:29:2e:dc:37:f9:42:6b:fb:d6:ba:1c: a6:e2:1c:14:2d:70:79:e6:cb:43:55:14:22:38:bf: 00:f1:17:bf:25:be:74:07:e3:58:ac:f5:84:f9:c1: 5c:93:d1:ce:86:27:83:46:1a:78:74:fc:28:43:4b: 6b:e1:49:4b:9d:7d:02:ad:25:bb:bc:c6:22:ff:ad: 2e:7a:ff:eb:7f:95:a8:d1:10:f3:06:46:96:9b:e2: 2c:18:0c:18:a1:1a:bd:c8:0a:2f:01:c1:68:54:86: 51:99:c6:79:87:a0:bb:26:bd:c7:8d:65:50:e4:3a: 82:0e:99:9e:c1:4e:05:27:fb:fd:07:c8:35:6d:ff: c0:8f:aa:1e:3e:a7:44:39:0e:83:47:9f:62:33:40: 48:cd:58:d9:9e:25:d1:93:84:f1:d2:f8:a0:26:43: a4:6e:92:b2:ab:a1:4d:4d:5a:aa:62:fc:fb:8a:d6: 63:6a:5f:bd:20:ac:5b:03:d9:63:58:f4:b0:4a:1f: 14:d4:93:e7:93:09:9b:c9:de:ae:20:a6:79:07:e3: 4a:1d:b0:41:92:2c:3e:75:e2:98:e2:f3:9e:5c:f5: 87:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C4:67:E6:28:30:B7:8E:8B:F2:29:53:4A:F6:74:1B:D1:45:DD:10 X509v3 Authority Key Identifier: keyid:60:02:50:F6:38:36:FB:4C:2F:23:F4:87:D7:14:BF:32:F7:59:A5:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:73:45:5e:f9:af:db:94:52:3f:4a:e6:cd:83:79:7c:2b:b8: be:e1:31:e4:75:5c:91:71:34:d5:d3:dd:8f:c9:f6:c1:e1:30: a1:e7:31:05:6c:d2:21:05:20:56:6c:ec:fa:74:8d:f9:06:bf: 4e:b5:6e:86:85:e3:ba:ce:3d:a5:93:46:e3:83:83:cc:d0:57: 25:4e:b1:83:89:6b:e1:a9:a4:82:92:aa:0f:85:93:6c:37:9f: fb:c3:9d:70:43:d1:5f:23:d2:dc:10:35:fd:53:98:b6:77:35: 2b:0c:d6:86:b3:19:7e:34:e7:31:79:12:8f:a1:10:db:d4:e8: c0:e0:d0:e3:e8:32:53:a9:a6:f1:f4:68:1a:9f:43:91:52:0d: 99:95:e8:7a:29:d7:9d:6e:18:d0:14:78:87:cb:9d:9d:a0:71: e1:91:20:d2:e6:51:2b:24:ae:40:7b:54:d7:b4:21:25:cc:28: 45:f3:80:87:88:ac:7c:f8:b6:77:e7:b3:58:42:ff:41:85:da: a7:62:a2:54:15:57:92:5b:30:08:a3:a1:5f:32:7d:1e:04:e4: bd:ed:e2:2e:7e:f5:80:aa:90:0e:7a:88:0a:bc:2e:9a:d9:67: f8:36:86:9a:34:c9:c3:11:b7:f6:ae:80:dd:98:7e:d5:a2:a9: f3:aa:18:ab -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 Nzk5QzExMC8GA1UEBRMoNjAwMjUwRjYzODM2RkI0QzJGMjNGNDg3RDcxNEJGMzJG NzU5QTVCNTAeFw0yNTEwMTkxMDU3MzRaFw0yNTEwMjYxMDU3MzRaMBgxFjAUBgNV BAMTDTY4ZjRjNDFlLTcyNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDI9oW57uzZoH7vTtMRZq2uvm7wKTHg5eXH+mH61sbUrF8pLtw3+UJr+9a6HKbi HBQtcHnmy0NVFCI4vwDxF78lvnQH41is9YT5wVyT0c6GJ4NGGnh0/ChDS2vhSUud fQKtJbu8xiL/rS56/+t/lajREPMGRpab4iwYDBihGr3ICi8BwWhUhlGZxnmHoLsm vceNZVDkOoIOmZ7BTgUn+/0HyDVt/8CPqh4+p0Q5DoNHn2IzQEjNWNmeJdGThPHS +KAmQ6RukrKroU1NWqpi/PuK1mNqX70grFsD2WNY9LBKHxTUk+eTCZvJ3q4gpnkH 40odsEGSLD514pji855c9Ye5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9MRn5igw t46L8ilTSvZ0G9FF3RAwHwYDVR0jBBgwFoAUYAJQ9jg2+0wvI/SH1xS/MvdZpbUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3OTlDLzM1RUJEOEU4NTU0 NDExRjA5MzQyQUMwQ0M0RjlBRTAyL1lBSlE5amcyLTB3dklfU0gxeFNfTXZkWnBi VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWUFKUTlqZzItMHd2SV9TSDF4U19NdmRacGJVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3 OTlDLzM1RUJEOEU4NTU0NDExRjA5MzQyQUMwQ0M0RjlBRTAyL1lBSlE5amcyLTB3 dklfU0gxeFNfTXZkWnBiVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAExzRV75r9uUUj9K5s2DeXwruL7hMeR1XJFxNNXT3Y/J9sHhMKHnMQVs 0iEFIFZs7Pp0jfkGv061boaF47rOPaWTRuODg8zQVyVOsYOJa+GppIKSqg+Fk2w3 n/vDnXBD0V8j0twQNf1TmLZ3NSsM1oazGX405zF5Eo+hENvU6MDg0OPoMlOppvH0 aBqfQ5FSDZmV6Hop151uGNAUeIfLnZ2gceGRINLmUSskrkB7VNe0ISXMKEXzgIeI rHz4tnfns1hC/0GF2qdiolQVV5JbMAijoV8yfR4E5L3t4i5+9YCqkA56iAq8LprZ Z/g2hpo0ycMRt/augN2YftWiqfOqGKs= -----END CERTIFICATE-----Generated at Mon Oct 20 16:32:07 2025 by rpki-client