$ rpki-client -vvf rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft File: YT7L4D69dbDJ5elhFPZXzliVsfc.mft (raw, json) Hash identifier: vNGsKBhh4CN1yiBcHmbFSrEmdLpcDhTex+Ao+d07ZnY= Subject key identifier: B4:DF:FA:5D:60:09:F1:D0:D2:F3:BE:64:F0:9B:2A:53:77:76:E9:59 Authority key identifier: 61:3E:CB:E0:3E:BD:75:B0:C9:E5:E9:61:14:F6:57:CE:58:95:B1:F7 Certificate issuer: /CN=A9182794/serialNumber=613ECBE03EBD75B0C9E5E96114F657CE5895B1F7 Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YT7L4D69dbDJ5elhFPZXzliVsfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft Manifest number: BA Signing time: Sun 19 Oct 2025 09:10:13 +0000 Manifest this update: Sun 19 Oct 2025 09:10:12 +0000 Manifest next update: Sun 26 Oct 2025 09:10:12 +0000 Files and hashes: 1: YT7L4D69dbDJ5elhFPZXzliVsfc.crl (hash: lDWl62qXxsnk6cMvCCXjijDqM3vo9vtLHA+MalJLviE=) 2: C296778C95CB11EFA3BE9873C4F9AE02.roa (hash: YFnVZs2sNdDdcoL6mfOS9gOjX930yi4DDrGYTFUTspw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.crl rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YT7L4D69dbDJ5elhFPZXzliVsfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182794, serialNumber=613ECBE03EBD75B0C9E5E96114F657CE5895B1F7 Validity Not Before: Oct 19 09:10:12 2025 GMT Not After : Oct 26 09:10:12 2025 GMT Subject: CN=68f4aaf4-eaa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ff:d0:f5:4d:05:bd:bd:32:81:8d:ca:96:e3: c7:9d:73:72:ce:03:0d:bc:ab:b9:20:7b:ee:83:d7: b4:e3:69:60:cf:22:c0:93:4b:e4:e2:9b:e4:22:2b: 5e:85:fc:c7:e7:89:07:26:fa:c9:42:0d:95:c9:d8: c2:b7:a5:7b:54:cb:e1:5c:7a:93:50:53:88:9a:f6: b8:17:2a:95:4c:fe:c1:94:ce:97:48:3c:41:7f:7b: 42:64:99:87:73:45:4a:83:ec:29:0e:ca:15:17:48: f6:3a:b8:fd:3d:c1:28:3b:e1:b0:e3:6d:1d:85:20: 2c:57:39:86:61:8e:4e:1c:bd:d5:64:4a:73:df:da: 46:ed:35:66:cc:5a:c7:57:cd:ab:7f:17:df:75:ee: 9b:1b:89:6e:49:ad:eb:bf:13:f6:2e:e9:bd:85:62: e3:e6:72:df:35:a5:53:a8:36:01:4c:7f:dc:87:6e: 86:b4:4b:36:43:88:94:3e:ca:a7:74:01:8f:d1:ea: 6c:72:48:ad:b2:8f:66:bb:f7:9c:2a:be:f7:b3:6c: 60:cc:9b:36:07:d2:ca:ec:30:1a:a9:1f:f6:c5:fe: c3:24:7a:9b:64:09:02:5a:e7:e3:79:2b:be:8a:f0: 61:f1:a9:34:0c:db:e0:01:c8:e7:08:dd:56:94:c7: e2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:DF:FA:5D:60:09:F1:D0:D2:F3:BE:64:F0:9B:2A:53:77:76:E9:59 X509v3 Authority Key Identifier: keyid:61:3E:CB:E0:3E:BD:75:B0:C9:E5:E9:61:14:F6:57:CE:58:95:B1:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YT7L4D69dbDJ5elhFPZXzliVsfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:25:73:54:86:20:b5:ce:d8:22:cc:ff:f0:c0:99:dc:43:3c: 65:57:8e:80:c4:72:e1:3f:bf:f1:1c:21:7a:02:7c:b6:86:4a: c7:e4:87:59:fe:fa:04:25:23:64:08:43:48:71:7c:69:d3:9c: f6:39:9a:4f:f9:a7:25:3b:d7:41:0f:38:18:88:bf:4f:d8:79: 23:2f:c1:02:de:59:33:33:b9:7d:31:8c:93:d7:c7:47:a9:c7: c3:3a:de:8a:24:38:02:2e:7a:12:dc:f3:bf:fc:48:9c:2f:74: bb:45:e6:dd:d2:57:e3:b4:6b:f8:8c:0a:af:3c:6c:75:7a:a0: 62:9e:6d:f6:95:6d:42:11:87:ff:af:eb:ee:fe:b6:4b:4e:bf: be:74:e3:95:34:b0:ac:3f:4a:72:9b:7c:b3:15:e0:cf:91:77: cf:f3:78:66:14:c7:ab:53:9a:63:e4:36:16:3d:85:9f:65:d9: 47:9d:71:9f:f1:ca:51:ed:49:76:c0:de:4d:2c:66:a3:17:f7: 16:46:ab:a5:b6:e0:91:8b:b4:e9:5d:35:b5:5e:ce:ef:76:b0: ed:00:05:2c:4b:b4:b8:d4:60:71:e6:7e:7d:52:83:e7:95:e7: 83:81:be:a5:5d:7e:dc:f8:9c:98:ed:08:b2:5e:7d:bd:e1:af: b9:a0:02:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI3OTQxMTAvBgNVBAUTKDYxM0VDQkUwM0VCRDc1QjBDOUU1RTk2MTE0RjY1N0NF NTg5NUIxRjcwHhcNMjUxMDE5MDkxMDEyWhcNMjUxMDI2MDkxMDEyWjAYMRYwFAYD VQQDEw02OGY0YWFmNC1lYWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr//Q9U0Fvb0ygY3KluPHnXNyzgMNvKu5IHvug9e042lgzyLAk0vk4pvkIite hfzH54kHJvrJQg2VydjCt6V7VMvhXHqTUFOImva4FyqVTP7BlM6XSDxBf3tCZJmH c0VKg+wpDsoVF0j2Orj9PcEoO+Gw420dhSAsVzmGYY5OHL3VZEpz39pG7TVmzFrH V82rfxffde6bG4luSa3rvxP2Lum9hWLj5nLfNaVTqDYBTH/ch26GtEs2Q4iUPsqn dAGP0epsckitso9mu/ecKr73s2xgzJs2B9LK7DAaqR/2xf7DJHqbZAkCWufjeSu+ ivBh8ak0DNvgAcjnCN1WlMfiowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLTf+l1g CfHQ0vO+ZPCbKlN3dulZMB8GA1UdIwQYMBaAFGE+y+A+vXWwyeXpYRT2V85YlbH3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mjc5NC83M0RCNzdEMDk1 QkUxMUVGODRBODIzODFDNEY5QUUwMi9ZVDdMNEQ2OWRiREo1ZWxoRlBaWHpsaVZz ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lUN0w0RDY5ZGJESjVlbGhGUFpYemxpVnNmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mjc5NC83M0RCNzdEMDk1QkUxMUVGODRBODIzODFDNEY5QUUwMi9ZVDdMNEQ2OWRi REo1ZWxoRlBaWHpsaVZzZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiJXNUhiC1ztgizP/wwJncQzxlV46AxHLhP7/xHCF6Any2hkrH5IdZ /voEJSNkCENIcXxp05z2OZpP+aclO9dBDzgYiL9P2HkjL8EC3lkzM7l9MYyT18dH qcfDOt6KJDgCLnoS3PO//EicL3S7Rebd0lfjtGv4jAqvPGx1eqBinm32lW1CEYf/ r+vu/rZLTr++dOOVNLCsP0pym3yzFeDPkXfP83hmFMerU5pj5DYWPYWfZdlHnXGf 8cpR7Ul2wN5NLGajF/cWRqultuCRi7TpXTW1Xs7vdrDtAAUsS7S41GBx5n59UoPn leeDgb6lXX7c+JyY7QiyXn294a+5oAJ0 -----END CERTIFICATE-----Generated at Mon Oct 20 10:01:54 2025 by rpki-client