$ rpki-client -vvf rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.mft File: ycf7MVXuXrRUGnY3mYlwgGpG878.mft (raw, json) Hash identifier: hoRnZEcZYqhXnOmcHZexgBxMOybkbOuWHeiSNXGD78s= Subject key identifier: 12:C7:E3:51:57:07:EB:6F:7A:43:FD:7D:21:A5:DC:FE:AC:29:FF:F5 Authority key identifier: C9:C7:FB:31:55:EE:5E:B4:54:1A:76:37:99:89:70:80:6A:46:F3:BF Certificate issuer: /CN=A919AB96/serialNumber=C9C7FB3155EE5EB4541A7637998970806A46F3BF Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycf7MVXuXrRUGnY3mYlwgGpG878.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.mft Manifest number: 22 Signing time: Mon 20 Oct 2025 07:24:29 +0000 Manifest this update: Mon 20 Oct 2025 07:24:28 +0000 Manifest next update: Mon 27 Oct 2025 07:24:28 +0000 Files and hashes: 1: ycf7MVXuXrRUGnY3mYlwgGpG878.crl (hash: pPeEd7IriokHzm8uoFCDT97MFYkLj1HryEbmghxZtgE=) 2: CDD6FA7CAD8511F08C759F59C4F9AE02.roa (hash: yXrHOs4+nJaaVCnnX4/LliEWbcY6OxUiaroiLnewb70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.crl rsync://rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycf7MVXuXrRUGnY3mYlwgGpG878.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 07:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919AB96, serialNumber=C9C7FB3155EE5EB4541A7637998970806A46F3BF Validity Not Before: Oct 20 07:24:28 2025 GMT Not After : Oct 27 07:24:28 2025 GMT Subject: CN=68f5e3ac-94bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b1:ac:54:2f:5a:b9:db:44:e3:fa:3b:41:38: 19:03:b8:67:09:cd:1f:d2:29:cb:95:bc:45:66:d1: 9b:84:0a:53:d8:78:08:48:36:cb:00:4d:19:17:cf: 9c:b2:07:c6:5c:24:0f:ad:ae:f1:cc:5a:c1:b7:b0: 93:03:a3:88:16:ff:cb:f7:0f:b7:35:e5:59:6c:82: 06:38:ed:6a:31:7e:ef:bb:34:af:eb:e2:72:08:fd: bc:83:25:5f:57:1e:40:20:08:df:72:5d:fe:56:59: 16:bb:ba:c4:56:01:50:26:c5:15:28:40:a1:0f:22: f3:c4:0c:42:74:ff:ff:95:08:08:a3:81:e7:43:e3: 58:55:5d:ba:91:75:31:40:56:6e:a8:8b:44:98:a1: 72:05:fe:83:49:5d:71:5b:3c:7f:6b:57:ff:70:56: c1:0b:df:46:ec:6d:2d:63:47:5b:fe:f7:e0:79:38: f8:77:09:c2:f7:40:b8:23:d7:9f:bd:b4:ba:3d:f8: e0:ed:7e:8c:f9:65:04:fa:87:14:c4:f9:f7:30:a0: 24:e4:70:a7:82:f3:b7:89:6f:63:ba:4f:6c:18:26: ed:d2:c5:05:e6:b7:4e:8a:1b:5e:bd:a8:89:0a:a1: 8d:06:d8:0a:ca:0a:e6:97:b3:dc:c4:5d:f3:30:9b: b2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C7:E3:51:57:07:EB:6F:7A:43:FD:7D:21:A5:DC:FE:AC:29:FF:F5 X509v3 Authority Key Identifier: keyid:C9:C7:FB:31:55:EE:5E:B4:54:1A:76:37:99:89:70:80:6A:46:F3:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycf7MVXuXrRUGnY3mYlwgGpG878.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:15:52:92:31:fb:dc:b9:63:33:dd:ad:2c:e3:de:c3:b1:b7: ad:2c:ab:e1:90:47:97:c4:53:7c:7e:d1:55:5a:f8:d3:ca:dd: 83:ca:1c:b4:ed:f5:f3:8b:d4:a4:e8:8e:f1:24:df:87:1e:bb: c8:35:07:03:48:35:5b:a3:16:c4:b4:16:5d:a7:cb:ec:da:8a: ac:b5:d4:62:25:97:87:8c:29:be:4c:1d:f8:75:24:17:3c:33: 4e:f7:2c:34:69:3d:e7:98:81:55:80:8f:99:e5:4d:5e:3c:ce: e4:4f:9b:41:cd:86:a3:c5:bc:57:05:b4:9e:9c:a5:31:47:50: a8:c2:02:df:ca:26:b0:a5:f7:21:bd:e6:33:3b:4c:62:4d:e8: c1:cd:83:11:06:0f:9f:71:ee:82:2b:6e:16:c4:6a:ed:08:2a: ef:39:e9:af:d8:6f:a8:0b:76:c3:6b:81:23:05:12:6b:2b:c2: 79:df:08:1e:19:5c:62:5a:82:4a:45:c6:02:1e:b6:6c:b8:5d: 27:4c:fc:d5:79:2b:09:a1:22:a5:b6:0a:72:57:62:ef:94:38: 41:87:58:1f:1e:25:e2:a6:70:53:f1:aa:d3:b0:c3:20:70:b8: bb:4f:34:7d:24:95:1e:d4:ad:11:82:e2:5c:af:37:1d:99:56: 5f:b1:a2:1e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QUI5NjExMC8GA1UEBRMoQzlDN0ZCMzE1NUVFNUVCNDU0MUE3NjM3OTk4OTcwODA2 QTQ2RjNCRjAeFw0yNTEwMjAwNzI0MjhaFw0yNTEwMjcwNzI0MjhaMBgxFjAUBgNV BAMTDTY4ZjVlM2FjLTk0YmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUsaxUL1q520Tj+jtBOBkDuGcJzR/SKcuVvEVm0ZuEClPYeAhINssATRkXz5yy B8ZcJA+trvHMWsG3sJMDo4gW/8v3D7c15VlsggY47Woxfu+7NK/r4nII/byDJV9X HkAgCN9yXf5WWRa7usRWAVAmxRUoQKEPIvPEDEJ0//+VCAijgedD41hVXbqRdTFA Vm6oi0SYoXIF/oNJXXFbPH9rV/9wVsEL30bsbS1jR1v+9+B5OPh3CcL3QLgj15+9 tLo9+ODtfoz5ZQT6hxTE+fcwoCTkcKeC87eJb2O6T2wYJu3SxQXmt06KG169qIkK oY0G2ArKCuaXs9zEXfMwm7L3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEsfjUVcH 6296Q/19IaXc/qwp//UwHwYDVR0jBBgwFoAUycf7MVXuXrRUGnY3mYlwgGpG878w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlBQjk2LzExNjU2MTMyN0Y3 RjExRjA4NDE3NTkzRkM0RjlBRTAyL3ljZjdNVlh1WHJSVUduWTNtWWx3Z0dwRzg3 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveWNmN01WWHVYclJVR25ZM21ZbHdnR3BHODc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlB Qjk2LzExNjU2MTMyN0Y3RjExRjA4NDE3NTkzRkM0RjlBRTAyL3ljZjdNVlh1WHJS VUduWTNtWWx3Z0dwRzg3OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJQVUpIx+9y5YzPdrSzj3sOxt60sq+GQR5fEU3x+0VVa+NPK3YPKHLTt 9fOL1KTojvEk34ceu8g1BwNINVujFsS0Fl2ny+zaiqy11GIll4eMKb5MHfh1JBc8 M073LDRpPeeYgVWAj5nlTV48zuRPm0HNhqPFvFcFtJ6cpTFHUKjCAt/KJrCl9yG9 5jM7TGJN6MHNgxEGD59x7oIrbhbEau0IKu856a/Yb6gLdsNrgSMFEmsrwnnfCB4Z XGJagkpFxgIetmy4XSdM/NV5KwmhIqW2CnJXYu+UOEGHWB8eJeKmcFPxqtOwwyBw uLtPNH0klR7UrRGC4lyvNx2ZVl+xoh4= -----END CERTIFICATE-----Generated at Tue Oct 21 02:33:57 2025 by rpki-client