$ rpki-client -vvf rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft File: YRQatT_Urx2yqGr-fsj-yX1eodU.mft (raw, json) Hash identifier: LVm/VcHW8Q+P0aaizFp8fuSy7ws4PmumLkGlHOm5VEg= Subject key identifier: EC:CF:89:23:53:37:AE:CA:CC:B4:B1:78:5C:65:E0:5F:8A:D6:17:47 Authority key identifier: 61:14:1A:B5:3F:D4:AF:1D:B2:A8:6A:FE:7E:C8:FE:C9:7D:5E:A1:D5 Certificate issuer: /CN=A918DEF0/serialNumber=61141AB53FD4AF1DB2A86AFE7EC8FEC97D5EA1D5 Certificate serial: 01C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft Manifest number: 01BB Signing time: Sun 19 Oct 2025 05:33:55 +0000 Manifest this update: Sun 19 Oct 2025 05:33:54 +0000 Manifest next update: Sun 26 Oct 2025 05:33:54 +0000 Files and hashes: 1: YRQatT_Urx2yqGr-fsj-yX1eodU.crl (hash: 4CWA16wJME9/pheGCraOof9vPwH4NFER+QuGlawQdWE=) 2: 7F4ED0A0B83011EFA5108619C4F9AE02.roa (hash: fc1mmSSRqzCuGE7h3o2YcW/Wc0vCR2x5Y/Ca8guGROk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.crl rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:33:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 449 (0x1c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DEF0, serialNumber=61141AB53FD4AF1DB2A86AFE7EC8FEC97D5EA1D5 Validity Not Before: Oct 19 05:33:54 2025 GMT Not After : Oct 26 05:33:54 2025 GMT Subject: CN=68f47842-d34c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c0:b0:0c:33:ec:55:50:f6:43:4b:b3:7f:cc: 0b:dc:89:5b:c3:aa:93:27:aa:90:34:62:20:72:64: 0f:59:9a:b7:21:8e:75:23:50:e5:a6:20:d0:e8:cd: 7d:47:0f:ce:74:53:a5:e7:6d:82:fc:91:1c:74:c9: b9:67:54:df:a2:50:c0:f6:80:94:fe:91:a3:3f:a1: 2e:fc:ec:b6:52:7f:ac:32:eb:b0:4b:86:2c:f1:a8: 7a:c0:ff:21:c7:bf:70:c0:d1:69:4d:3c:6e:07:33: f2:7b:46:81:f4:8a:83:78:e8:09:60:6b:24:8f:c6: c3:c5:cb:79:0e:a3:64:d0:bb:4a:9a:13:d7:7e:e8: a4:c3:6d:e3:89:6f:7d:0a:68:fe:fa:db:63:a6:3b: ed:e2:8b:71:d6:f1:6c:4d:e8:cf:39:f3:90:01:e2: 6c:00:e0:76:e9:8d:bb:10:b7:04:7a:5f:0a:e5:43: d7:f5:b4:4b:0d:f5:6b:82:ba:54:31:73:a8:39:31: 18:9e:2e:0b:b9:e8:55:a1:38:09:af:26:87:1f:60: c0:39:3e:36:ff:44:5b:00:1b:77:62:0e:dc:82:c0: 2a:79:e0:17:fc:dd:de:6d:c4:cd:e4:e2:3c:be:11: eb:fa:02:94:96:ab:bc:30:5a:75:76:0e:71:74:1d: b6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:CF:89:23:53:37:AE:CA:CC:B4:B1:78:5C:65:E0:5F:8A:D6:17:47 X509v3 Authority Key Identifier: keyid:61:14:1A:B5:3F:D4:AF:1D:B2:A8:6A:FE:7E:C8:FE:C9:7D:5E:A1:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:4d:75:f5:e1:d7:21:a1:1e:0b:d6:20:e7:2f:b1:fb:a0:18: 02:41:9c:6d:74:cc:01:50:7d:6b:e8:ba:36:74:0a:57:99:7b: 50:4e:f1:17:f4:af:87:76:01:eb:85:83:47:d5:9e:a2:11:9b: c7:35:36:23:89:d9:3e:95:09:c7:ee:2b:e4:01:b2:a3:93:39: c9:f3:b6:bc:b0:2b:ad:c1:7d:28:63:4c:d9:7d:25:e1:15:40: dd:1a:c5:ff:f3:7a:b0:f7:46:b3:68:ae:4a:47:46:2a:dd:f4: 22:c3:51:93:3f:a1:2d:fb:87:1d:70:eb:67:22:67:53:83:87: ac:ae:11:6e:04:1b:c0:a3:db:e9:5a:45:43:42:14:7e:a7:49: 2f:54:ea:32:c6:a9:fc:b7:1b:e3:0f:2d:4d:16:48:da:de:3b: ba:96:51:cc:f0:b8:3b:c1:35:33:f0:fa:23:46:1f:99:fe:4d: e9:b5:35:77:3d:9e:cb:84:0e:17:01:d4:38:19:7b:16:75:b0: c7:b0:39:a9:f5:de:31:79:5c:44:7c:c1:41:7d:81:e4:38:b6: a1:71:f0:57:e2:a5:89:99:f0:86:5d:d8:fa:37:55:22:77:23: a1:13:4f:a9:5d:47:b1:bc:24:ea:08:55:fe:a4:c6:20:66:0e: 49:e4:2b:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OERFRjAxMTAvBgNVBAUTKDYxMTQxQUI1M0ZENEFGMURCMkE4NkFGRTdFQzhGRUM5 N0Q1RUExRDUwHhcNMjUxMDE5MDUzMzU0WhcNMjUxMDI2MDUzMzU0WjAYMRYwFAYD VQQDEw02OGY0Nzg0Mi1kMzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0sCwDDPsVVD2Q0uzf8wL3Ilbw6qTJ6qQNGIgcmQPWZq3IY51I1DlpiDQ6M19 Rw/OdFOl522C/JEcdMm5Z1TfolDA9oCU/pGjP6Eu/Oy2Un+sMuuwS4Ys8ah6wP8h x79wwNFpTTxuBzPye0aB9IqDeOgJYGskj8bDxct5DqNk0LtKmhPXfuikw23jiW99 Cmj++ttjpjvt4otx1vFsTejPOfOQAeJsAOB26Y27ELcEel8K5UPX9bRLDfVrgrpU MXOoOTEYni4LuehVoTgJryaHH2DAOT42/0RbABt3Yg7cgsAqeeAX/N3ebcTN5OI8 vhHr+gKUlqu8MFp1dg5xdB22qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzPiSNT N67KzLSxeFxl4F+K1hdHMB8GA1UdIwQYMBaAFGEUGrU/1K8dsqhq/n7I/sl9XqHV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REVGMC84MjAzMDlDMjBB NUYxMUVFQjRGRUQyNjVDNEY5QUUwMi9ZUlFhdFRfVXJ4MnlxR3ItZnNqLXlYMWVv ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lSUWF0VF9VcngyeXFHci1mc2oteVgxZW9kVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 REVGMC84MjAzMDlDMjBBNUYxMUVFQjRGRUQyNjVDNEY5QUUwMi9ZUlFhdFRfVXJ4 MnlxR3ItZnNqLXlYMWVvZFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjTXX14dchoR4L1iDnL7H7oBgCQZxtdMwBUH1r6Lo2dApXmXtQTvEX 9K+HdgHrhYNH1Z6iEZvHNTYjidk+lQnH7ivkAbKjkznJ87a8sCutwX0oY0zZfSXh FUDdGsX/83qw90azaK5KR0Yq3fQiw1GTP6Et+4cdcOtnImdTg4esrhFuBBvAo9vp WkVDQhR+p0kvVOoyxqn8txvjDy1NFkja3ju6llHM8Lg7wTUz8PojRh+Z/k3ptTV3 PZ7LhA4XAdQ4GXsWdbDHsDmp9d4xeVxEfMFBfYHkOLahcfBX4qWJmfCGXdj6N1Ui dyOhE0+pXUexvCTqCFX+pMYgZg5J5Cs9 -----END CERTIFICATE-----Generated at Mon Oct 20 10:51:27 2025 by rpki-client