$ rpki-client -vvf rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft File: -YvpQtnreFakMNG8KUc7xN1nf-o.mft (raw, json) Hash identifier: cr8r4LjQinOGKrYmcxQz2q2XchXUJO0DbHUyhohzgRs= Subject key identifier: 51:3F:9D:1C:05:16:A4:DD:97:CE:EF:5B:2F:C9:DA:C0:46:06:D2:C4 Authority key identifier: F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA Certificate issuer: /CN=A91949C1/serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft Manifest number: FA Signing time: Sun 19 Oct 2025 08:04:03 +0000 Manifest this update: Sun 19 Oct 2025 08:04:02 +0000 Manifest next update: Sun 26 Oct 2025 08:04:02 +0000 Files and hashes: 1: -YvpQtnreFakMNG8KUc7xN1nf-o.crl (hash: 0U/VzRgXbQzX2HpV0bcKPm8qWVqIBTp+pzQkhBWS1Gs=) 2: 5E1227E22DD511EF9AFE395EC4F9AE02.roa (hash: //CtK2APwvuKqYfNGso7I/JYlqJyjoNEWh980lWprcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:04:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91949C1, serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA Validity Not Before: Oct 19 08:04:02 2025 GMT Not After : Oct 26 08:04:02 2025 GMT Subject: CN=68f49b72-f6ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c7:32:e8:af:ca:e0:28:80:13:1b:69:88:61: 57:7b:0f:5d:1f:79:1d:79:b5:d7:a0:1d:25:8c:1c: 64:c3:a0:a1:d7:a4:58:28:c1:45:b1:6f:20:ad:c6: 59:2f:d0:32:cd:e1:8f:25:48:8e:a0:a6:3b:31:88: 06:d1:bc:e4:d2:7c:6a:d4:82:21:38:a5:d8:16:b0: 6e:ae:6d:78:b6:0d:7c:6d:59:d1:7b:7f:c7:0b:5c: 44:14:bf:80:3f:fa:26:5c:c4:94:4e:42:fd:66:89: a6:d8:be:fb:db:62:1f:0e:4b:8c:76:ac:02:d6:8d: cb:24:b4:60:e7:ea:b2:15:30:e3:c6:ac:9b:2b:9e: 9f:40:7d:80:56:78:ce:f7:79:e4:13:19:20:a3:4b: 9c:cf:6d:e8:16:06:f4:99:2a:3f:37:76:39:5e:31: 8d:f5:25:98:c8:30:1d:94:56:16:62:d0:72:10:e9: 49:59:ad:79:c9:31:09:fc:09:f7:8f:3d:6c:71:25: 27:bd:70:3c:e3:50:05:ef:db:d9:9c:58:fc:d2:d3: ad:88:cd:49:59:3d:ca:a2:ba:5d:d0:33:3c:56:33: 0c:55:31:41:d7:6e:47:7c:7b:9c:90:af:ce:24:c3: 78:73:d5:a0:3f:f4:d9:60:d3:7f:78:d2:4c:49:ba: cc:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:3F:9D:1C:05:16:A4:DD:97:CE:EF:5B:2F:C9:DA:C0:46:06:D2:C4 X509v3 Authority Key Identifier: keyid:F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:e6:7d:49:d9:e4:1e:15:5e:28:73:f1:33:ad:b6:aa:db:bf: ae:e7:bf:aa:62:08:5a:4c:5b:e1:1d:1b:0c:a1:f0:a0:60:a8: b9:8b:ed:56:e0:f0:57:aa:cf:e5:36:85:85:5c:40:ca:d5:e7: 82:af:fe:8d:f7:fb:43:18:54:21:e6:80:fc:c2:02:7e:4d:d9: b4:44:ca:4f:6f:13:e8:b8:ef:a1:21:58:7a:07:9f:a2:a6:a8: 78:7c:17:6e:23:37:9e:38:14:5e:5e:14:12:9d:72:55:5c:2c: 95:ff:bb:40:ce:22:f2:b7:5f:f3:37:72:62:9a:2b:db:ab:12: 90:49:17:c2:b7:b6:38:be:1b:51:e8:cb:0a:22:1d:2b:3a:82: 02:9e:8e:81:8a:32:51:68:0c:e9:66:f6:c2:a8:92:a0:04:6b: b5:7b:02:b8:01:4e:a8:70:90:ab:5b:a3:53:19:47:18:8e:26: c3:f5:36:5b:81:f5:3f:20:c4:08:8e:28:d0:a7:b6:f2:7e:ac: 52:ac:ef:09:f4:39:f7:8f:3b:19:a9:dc:80:6d:4b:41:27:7c: 57:9e:70:ea:1d:35:e3:11:75:80:72:f3:12:a7:6f:e2:04:25: c0:3c:1f:d3:5e:07:96:8d:9d:34:de:ac:6d:3c:05:f6:a6:2f: 1a:3d:8f:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ5QzExMTAvBgNVBAUTKEY5OEJFOTQyRDlFQjc4NTZBNDMwRDFCQzI5NDczQkM0 REQ2NzdGRUEwHhcNMjUxMDE5MDgwNDAyWhcNMjUxMDI2MDgwNDAyWjAYMRYwFAYD VQQDEw02OGY0OWI3Mi1mNmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqscy6K/K4CiAExtpiGFXew9dH3kdebXXoB0ljBxkw6Ch16RYKMFFsW8grcZZ L9AyzeGPJUiOoKY7MYgG0bzk0nxq1IIhOKXYFrBurm14tg18bVnRe3/HC1xEFL+A P/omXMSUTkL9Zomm2L7722IfDkuMdqwC1o3LJLRg5+qyFTDjxqybK56fQH2AVnjO 93nkExkgo0ucz23oFgb0mSo/N3Y5XjGN9SWYyDAdlFYWYtByEOlJWa15yTEJ/An3 jz1scSUnvXA841AF79vZnFj80tOtiM1JWT3Korpd0DM8VjMMVTFB125HfHuckK/O JMN4c9WgP/TZYNN/eNJMSbrMvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFE/nRwF FqTdl87vWy/J2sBGBtLEMB8GA1UdIwQYMBaAFPmL6ULZ63hWpDDRvClHO8TdZ3/q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDlDMS8wOUY1MkIxNDJE RDUxMUVGOUU1MDVFNURDNEY5QUUwMi8tWXZwUXRucmVGYWtNTkc4S1VjN3hOMW5m LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1ZdnBRdG5yZUZha01ORzhLVWM3eE4xbmYtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDlDMS8wOUY1MkIxNDJERDUxMUVGOUU1MDVFNURDNEY5QUUwMi8tWXZwUXRucmVG YWtNTkc4S1VjN3hOMW5mLW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCp5n1J2eQeFV4oc/Ezrbaq27+u57+qYghaTFvhHRsMofCgYKi5i+1W 4PBXqs/lNoWFXEDK1eeCr/6N9/tDGFQh5oD8wgJ+Tdm0RMpPbxPouO+hIVh6B5+i pqh4fBduIzeeOBReXhQSnXJVXCyV/7tAziLyt1/zN3JimivbqxKQSRfCt7Y4vhtR 6MsKIh0rOoICno6BijJRaAzpZvbCqJKgBGu1ewK4AU6ocJCrW6NTGUcYjibD9TZb gfU/IMQIjijQp7byfqxSrO8J9Dn3jzsZqdyAbUtBJ3xXnnDqHTXjEXWAcvMSp2/i BCXAPB/TXgeWjZ003qxtPAX2pi8aPY8s -----END CERTIFICATE-----Generated at Tue Oct 21 02:26:06 2025 by rpki-client