$ rpki-client -vvf rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft File: YBqj_Udwv8aa8kBvLoDtCOfca0M.mft (raw, json) Hash identifier: OReKfMXLDEKhhznPiQUJtOyNrwJc/BBGIWf0PrijypA= Subject key identifier: B3:5A:F8:F7:52:CD:1E:56:C4:FC:07:2D:A7:28:89:9B:A0:A3:93:EC Authority key identifier: 60:1A:A3:FD:47:70:BF:C6:9A:F2:40:6F:2E:80:ED:08:E7:DC:6B:43 Certificate issuer: /CN=A91954E2/serialNumber=601AA3FD4770BFC69AF2406F2E80ED08E7DC6B43 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBqj_Udwv8aa8kBvLoDtCOfca0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft Manifest number: F6 Signing time: Sun 19 Oct 2025 08:09:21 +0000 Manifest this update: Sun 19 Oct 2025 08:09:20 +0000 Manifest next update: Sun 26 Oct 2025 08:09:20 +0000 Files and hashes: 1: YBqj_Udwv8aa8kBvLoDtCOfca0M.crl (hash: Ihr7tTfdiTf+zCVX+8TOhVyz5j1eQY/bwE7d+0AC1s4=) 2: CC8E710C347011EF9F04CE66C4F9AE02.roa (hash: zqqFgR8hZJd3tGWwh69g86T2JXS+0860K/pt4Nn27L8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.crl rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBqj_Udwv8aa8kBvLoDtCOfca0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:09:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91954E2, serialNumber=601AA3FD4770BFC69AF2406F2E80ED08E7DC6B43 Validity Not Before: Oct 19 08:09:20 2025 GMT Not After : Oct 26 08:09:20 2025 GMT Subject: CN=68f49cb0-e1d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a0:0f:f4:b4:d6:e5:9f:90:9e:36:ed:6b:e7: fd:75:a2:aa:91:7d:b8:39:66:bc:96:b3:28:52:07: fa:ed:67:58:50:88:30:f4:44:0d:47:29:8b:d6:2e: e2:d0:18:53:4b:c3:65:1e:ef:11:ae:17:cb:b4:05: 10:54:05:4d:38:85:68:cf:50:1f:83:56:21:30:29: cb:3d:e9:53:19:63:1b:ac:61:4e:50:eb:5d:f1:2b: 6a:b6:fc:56:a8:e3:f3:13:c5:2d:6c:fd:d0:34:02: 7b:2f:98:e9:81:ae:8b:31:e2:9a:88:07:67:b1:c9: e4:fb:e3:eb:9c:e8:61:dc:93:d6:78:ca:63:28:7c: d2:8e:38:4d:c4:07:c7:5b:93:91:a4:91:a5:32:26: f9:af:4f:77:bf:16:c8:45:dd:85:09:6c:11:e2:1c: 71:54:8c:7c:18:a3:6d:0a:26:4c:91:4b:33:8d:03: 1d:84:fd:02:38:71:d5:60:9e:45:5d:f0:43:d7:30: ca:3d:4f:4b:6b:57:6b:f9:91:80:7e:c4:37:78:55: 32:8b:df:cd:67:95:82:29:c7:66:70:5d:98:a0:9b: f7:0f:99:1a:db:12:c5:aa:25:96:e1:b2:9e:1e:3a: 1b:c5:b5:71:b9:c0:61:47:1b:30:d7:bd:fa:32:09: b5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:5A:F8:F7:52:CD:1E:56:C4:FC:07:2D:A7:28:89:9B:A0:A3:93:EC X509v3 Authority Key Identifier: keyid:60:1A:A3:FD:47:70:BF:C6:9A:F2:40:6F:2E:80:ED:08:E7:DC:6B:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBqj_Udwv8aa8kBvLoDtCOfca0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:b7:f7:ee:3f:8d:bf:ce:ce:bd:ba:45:c4:11:a9:04:3f:35: 28:6d:0b:c7:df:40:c9:29:43:ea:a8:2b:c8:ff:63:d8:c0:20: 12:6b:4e:1a:f4:fe:23:f6:01:28:31:95:ee:3c:e6:aa:53:d2: a7:23:85:27:b6:04:c9:db:b0:34:1e:7d:fe:2d:ce:b3:39:ca: 36:8d:fc:bc:9e:fd:59:79:ef:5d:8a:dc:9a:23:a9:e8:8f:8f: 6c:84:66:d6:07:15:2a:3e:68:aa:ee:79:d8:95:55:ce:0c:a6: 9e:72:70:93:5c:48:de:df:07:e8:af:63:01:ef:5b:76:1c:35: 29:62:a0:a1:5e:aa:62:51:fe:14:a3:c4:bf:87:6d:96:d0:e8: fd:d4:55:c3:08:a6:f5:76:32:be:6c:a9:98:41:09:1f:04:b1: b8:26:80:1c:c5:ee:f6:7d:a7:16:73:98:44:52:8a:19:ce:d9: b5:f8:b9:d2:58:46:2a:cd:c9:ec:55:cc:42:51:49:a9:c3:4b: 4b:29:a4:cd:c1:fa:02:1c:f2:a5:7d:0a:cb:51:57:dd:0b:a0: 41:ae:e2:21:6f:55:88:b9:55:6e:d2:ca:7f:ee:be:f9:f5:c9: ff:a1:91:73:85:26:f6:b8:8d:54:b4:7c:f5:63:df:51:fb:02: 17:4d:c5:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU0RTIxMTAvBgNVBAUTKDYwMUFBM0ZENDc3MEJGQzY5QUYyNDA2RjJFODBFRDA4 RTdEQzZCNDMwHhcNMjUxMDE5MDgwOTIwWhcNMjUxMDI2MDgwOTIwWjAYMRYwFAYD VQQDEw02OGY0OWNiMC1lMWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqAP9LTW5Z+Qnjbta+f9daKqkX24OWa8lrMoUgf67WdYUIgw9EQNRymL1i7i 0BhTS8NlHu8RrhfLtAUQVAVNOIVoz1Afg1YhMCnLPelTGWMbrGFOUOtd8StqtvxW qOPzE8UtbP3QNAJ7L5jpga6LMeKaiAdnscnk++PrnOhh3JPWeMpjKHzSjjhNxAfH W5ORpJGlMib5r093vxbIRd2FCWwR4hxxVIx8GKNtCiZMkUszjQMdhP0COHHVYJ5F XfBD1zDKPU9La1dr+ZGAfsQ3eFUyi9/NZ5WCKcdmcF2YoJv3D5ka2xLFqiWW4bKe HjobxbVxucBhRxsw1736Mgm1BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLNa+PdS zR5WxPwHLacoiZugo5PsMB8GA1UdIwQYMBaAFGAao/1HcL/GmvJAby6A7Qjn3GtD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTRFMi83M0VCRTZBMjM0 NkYxMUVGOTdDQTc1NDZDNEY5QUUwMi9ZQnFqX1Vkd3Y4YWE4a0J2TG9EdENPZmNh ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lCcWpfVWR3djhhYThrQnZMb0R0Q09mY2EwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTRFMi83M0VCRTZBMjM0NkYxMUVGOTdDQTc1NDZDNEY5QUUwMi9ZQnFqX1Vkd3Y4 YWE4a0J2TG9EdENPZmNhME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrt/fuP42/zs69ukXEEakEPzUobQvH30DJKUPqqCvI/2PYwCASa04a 9P4j9gEoMZXuPOaqU9KnI4UntgTJ27A0Hn3+Lc6zOco2jfy8nv1Zee9dityaI6no j49shGbWBxUqPmiq7nnYlVXODKaecnCTXEje3wfor2MB71t2HDUpYqChXqpiUf4U o8S/h22W0Oj91FXDCKb1djK+bKmYQQkfBLG4JoAcxe72facWc5hEUooZztm1+LnS WEYqzcnsVcxCUUmpw0tLKaTNwfoCHPKlfQrLUVfdC6BBruIhb1WIuVVu0sp/7r75 9cn/oZFzhSb2uI1UtHz1Y99R+wIXTcV/ -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:38 2025 by rpki-client