$ rpki-client -vvf rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft File: _YASv-mRKe-ci7ekYDIUQvbSZWI.mft (raw, json) Hash identifier: wthbSXvYFnfnRhnNfewlh5CgNSa1KlMWNpYBD8p8mac= Subject key identifier: B6:78:E3:F6:3C:01:71:C4:C0:1B:CA:AA:D2:45:32:EE:36:47:30:AD Authority key identifier: FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62 Certificate issuer: /CN=A91807BB/serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562 Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft Manifest number: C7 Signing time: Sun 19 Oct 2025 08:53:49 +0000 Manifest this update: Sun 19 Oct 2025 08:53:48 +0000 Manifest next update: Sun 26 Oct 2025 08:53:48 +0000 Files and hashes: 1: _YASv-mRKe-ci7ekYDIUQvbSZWI.crl (hash: 8A/sv1e9riTt2keVIn/pY0dba7He+tU4SJY+IaJI9s0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.crl rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:53:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91807BB, serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562 Validity Not Before: Oct 19 08:53:48 2025 GMT Not After : Oct 26 08:53:48 2025 GMT Subject: CN=68f4a71c-4227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2e:e4:07:95:70:d3:58:17:98:90:c8:87:3c: e6:e1:c9:12:02:2c:e3:13:aa:51:b1:09:25:7e:70: b6:ae:0e:75:9b:c0:a8:4a:70:3c:b4:4b:13:d3:50: 62:35:b1:09:37:02:6a:e6:85:66:89:7c:0a:a6:e5: 31:a9:58:6c:13:a0:c6:22:13:f7:60:8d:29:0e:0e: 1c:de:33:86:a0:b8:f9:20:47:da:29:d1:e6:bc:16: cc:ab:d9:64:0c:8c:04:9a:10:56:76:2c:8b:8b:bd: 64:0c:83:f2:d4:b8:c6:ec:dd:34:4e:ac:bc:f0:33: 3f:e1:0c:ef:fd:6e:ca:0f:b9:ab:f7:32:52:fa:0c: bf:54:a9:1c:8b:2b:4c:fb:59:0f:66:74:3d:7f:90: 4f:d3:b2:58:1f:38:c4:cd:4e:69:f7:11:35:42:8e: 8a:51:1a:41:78:d0:fb:cd:f5:58:16:30:be:47:fa: 03:25:bd:dd:47:c4:85:b2:0d:ca:e8:46:15:95:db: a4:36:08:fc:81:5e:c2:6a:6f:1c:06:63:ec:7b:9c: 6c:45:d8:44:cc:8e:14:a9:ee:5b:44:d8:ef:e7:20: 63:88:25:af:96:16:4c:af:86:7d:a4:62:12:d5:85: 9a:00:8a:d7:78:80:ee:e6:15:28:2e:af:1a:09:51: 07:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:78:E3:F6:3C:01:71:C4:C0:1B:CA:AA:D2:45:32:EE:36:47:30:AD X509v3 Authority Key Identifier: keyid:FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:72:c1:5a:4e:d1:a0:a8:ab:02:38:13:45:13:07:cd:74:64: 26:41:f6:02:e6:1d:47:56:4a:05:7a:3f:2b:07:fc:fa:bf:4d: cc:5e:8b:f1:5c:82:80:15:b7:22:ed:61:a1:bb:8c:5e:45:31: 58:d6:fb:db:0e:88:4b:af:b0:24:03:2f:f6:70:de:90:05:04: 4c:56:64:48:c0:48:64:1a:12:14:cc:b3:1c:f2:bd:63:16:4c: 2d:01:d7:38:c1:a2:16:b9:00:1f:70:7c:8d:9b:9a:b6:ac:df: 8a:4f:a5:51:f3:17:3a:6d:ec:b5:aa:cf:65:8d:4d:5a:f8:6c: 76:83:ea:21:3e:69:69:82:cb:05:04:76:28:6e:3f:fb:e2:9a: 27:c1:7c:00:12:a1:e9:41:5c:f8:47:c3:53:cd:77:2e:34:63: c4:df:e7:78:d7:b9:54:bf:a7:9a:4f:f1:ef:a9:7f:0d:13:48: bc:70:49:4f:08:bc:7a:97:18:5f:5d:80:ea:22:7e:3d:fb:f4: 9d:ae:b6:2d:30:51:5b:7c:ba:17:92:65:f8:87:51:30:1f:b2: 64:04:35:fd:be:9e:f6:e3:44:e0:60:03:34:57:02:7f:4b:d3: c8:3a:03:c4:a7:ca:4a:f4:0d:9e:bf:01:34:f6:e5:c8:13:4a: 32:92:66:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA3QkIxMTAvBgNVBAUTKEZEODAxMkJGRTk5MTI5RUY5QzhCQjdBNDYwMzIxNDQy RjZEMjY1NjIwHhcNMjUxMDE5MDg1MzQ4WhcNMjUxMDI2MDg1MzQ4WjAYMRYwFAYD VQQDEw02OGY0YTcxYy00MjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxS7kB5Vw01gXmJDIhzzm4ckSAizjE6pRsQklfnC2rg51m8CoSnA8tEsT01Bi NbEJNwJq5oVmiXwKpuUxqVhsE6DGIhP3YI0pDg4c3jOGoLj5IEfaKdHmvBbMq9lk DIwEmhBWdiyLi71kDIPy1LjG7N00Tqy88DM/4Qzv/W7KD7mr9zJS+gy/VKkciytM +1kPZnQ9f5BP07JYHzjEzU5p9xE1Qo6KURpBeND7zfVYFjC+R/oDJb3dR8SFsg3K 6EYVldukNgj8gV7Cam8cBmPse5xsRdhEzI4Uqe5bRNjv5yBjiCWvlhZMr4Z9pGIS 1YWaAIrXeIDu5hUoLq8aCVEHJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZ44/Y8 AXHEwBvKqtJFMu42RzCtMB8GA1UdIwQYMBaAFP2AEr/pkSnvnIu3pGAyFEL20mVi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDdCQi8wMUQyMzlBNDdD QjMxMUVGOTZDOUYyNTBDNEY5QUUwMi9fWUFTdi1tUktlLWNpN2VrWURJVVF2YlNa V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19ZQVN2LW1SS2UtY2k3ZWtZRElVUXZiU1pXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDdCQi8wMUQyMzlBNDdDQjMxMUVGOTZDOUYyNTBDNEY5QUUwMi9fWUFTdi1tUktl LWNpN2VrWURJVVF2YlNaV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7csFaTtGgqKsCOBNFEwfNdGQmQfYC5h1HVkoFej8rB/z6v03MXovx XIKAFbci7WGhu4xeRTFY1vvbDohLr7AkAy/2cN6QBQRMVmRIwEhkGhIUzLMc8r1j FkwtAdc4waIWuQAfcHyNm5q2rN+KT6VR8xc6bey1qs9ljU1a+Gx2g+ohPmlpgssF BHYobj/74ponwXwAEqHpQVz4R8NTzXcuNGPE3+d417lUv6eaT/HvqX8NE0i8cElP CLx6lxhfXYDqIn49+/SdrrYtMFFbfLoXkmX4h1EwH7JkBDX9vp7240TgYAM0VwJ/ S9PIOgPEp8pK9A2evwE09uXIE0oykma9 -----END CERTIFICATE-----Generated at Mon Oct 20 20:43:16 2025 by rpki-client