$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft File: yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft (raw, json) Hash identifier: iTQ62LajHSkkkxeXfYhWbOPWkeMP7uOIWI2hz22XT1Y= Subject key identifier: 13:7E:88:7F:05:BF:F4:CF:76:12:57:39:C0:21:83:3B:E5:74:4F:1D Authority key identifier: C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86 Certificate issuer: /CN=A919B06C/serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986 Certificate serial: 0E81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft Manifest number: 200E Signing time: Sat 18 Oct 2025 17:43:46 +0000 Manifest this update: Sat 18 Oct 2025 17:43:45 +0000 Manifest next update: Sat 25 Oct 2025 17:43:45 +0000 Files and hashes: 1: yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl (hash: PkN/0+ww5WUjhSxMDmIJ3N8WHPX9aLYqbG6jfi4tsI8=) 2: 3536466A2EFC11EE9618725BC4F9AE02.roa (hash: 2QTo+CsdRhAVYGY+SP4UeTuLXQh1z3BW1C7/XMRXisw=) 3: 70F15C5CC5CA11EEA9DD0141C4F9AE02.roa (hash: qTqcBFpr622OYkqG96eDnnoJ09wPpnvN7CHOU2zyZG0=) 4: BFD96CC4C5CA11EEBFA07341C4F9AE02.roa (hash: SV6dYe0/qbcbeBjCTRLSVOKAd3cmZlbo1prAD3jSVSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:43:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3713 (0xe81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B06C, serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986 Validity Not Before: Oct 18 17:43:45 2025 GMT Not After : Oct 25 17:43:45 2025 GMT Subject: CN=68f3d1d2-4655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:70:cb:c6:34:39:d6:b7:f2:58:3f:5b:bc:46: 05:41:da:1c:60:0a:78:e4:cf:94:d4:1a:e8:5f:be: ca:ce:16:fc:e8:a1:fc:3d:6f:a0:59:9a:74:f1:8d: 19:d1:06:67:18:9d:62:fd:78:ca:4f:76:19:29:2f: 94:d9:60:02:56:8a:1e:dd:75:ce:c6:3a:61:37:d1: 3f:6e:42:93:14:3b:d0:2b:bc:48:16:de:41:c4:2e: 2e:d3:8c:3a:8c:ba:bb:cd:c0:2f:79:3c:18:7a:16: f4:5d:cc:d2:5b:e2:26:e8:11:66:75:81:e3:7f:20: 9c:5f:fe:86:7f:b6:dc:d1:6e:20:e5:9b:c5:0c:c1: 28:fb:13:b8:d9:88:fe:bb:85:f1:4f:3a:07:b0:b7: 34:54:1b:5d:cb:18:77:27:0f:02:09:f8:b0:5b:9f: a2:63:20:ea:c3:d5:12:c4:f1:8f:00:20:19:97:7b: 71:3a:9f:92:26:93:a4:e8:2c:ff:98:51:bc:38:9d: c4:87:33:50:23:68:64:c2:32:a6:a1:ee:71:90:73: b1:65:59:8e:8f:31:f5:da:be:74:db:bc:f0:d9:d3: 74:98:27:16:d5:78:55:15:4b:c3:6f:e8:aa:39:eb: ab:fb:31:9e:df:6e:2e:ea:04:ca:fc:06:c3:03:5f: 0a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:7E:88:7F:05:BF:F4:CF:76:12:57:39:C0:21:83:3B:E5:74:4F:1D X509v3 Authority Key Identifier: keyid:C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:05:05:08:95:34:a5:9d:40:da:c4:3a:37:c9:81:31:fd:ad: dc:94:6e:31:6f:1f:47:98:dd:a0:09:98:78:43:ed:8e:57:b8: 24:6b:e9:84:58:fe:c3:02:c5:76:c7:93:b0:04:9c:83:87:97: ec:c1:03:5e:a2:7a:8e:7a:23:cd:09:0f:58:71:aa:34:3d:19: e4:d2:7a:d2:87:12:9e:00:0a:7a:8c:15:37:b4:5e:84:05:85: 21:ff:52:82:b5:15:72:99:7c:70:3b:9d:0a:ce:cb:d7:54:02: 45:c4:96:d6:ff:59:c0:9a:34:64:47:d5:41:61:69:c0:aa:bf: 44:6c:b0:8d:a9:bb:8f:a8:15:75:43:aa:f6:a0:80:57:ec:ae: ca:e3:ea:44:75:da:12:13:18:0e:d2:45:cc:96:39:e0:fb:eb: fd:4c:2c:a1:e4:9e:15:3f:18:dc:59:6b:6a:f5:03:21:c1:48: 12:c4:71:16:e9:78:dc:3f:e0:51:68:40:c7:51:c5:a3:4f:4e: eb:ba:a8:69:23:90:38:0d:aa:dc:8b:0a:96:e6:57:aa:b6:3e: bf:a9:13:d5:3b:e6:6c:a1:be:ad:94:f8:27:61:89:47:0c:8c: 83:10:d1:8d:12:b7:3c:b0:21:91:1b:cb:41:4d:ba:d5:3e:79: 9d:0c:bf:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIwNkMxMTAvBgNVBAUTKEM4MzQ5M0MwMjk3Q0NCNThEMjgzNzk0NkQ2MDYzRjE0 QTdERUU5ODYwHhcNMjUxMDE4MTc0MzQ1WhcNMjUxMDI1MTc0MzQ1WjAYMRYwFAYD VQQDEw02OGYzZDFkMi00NjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHDLxjQ51rfyWD9bvEYFQdocYAp45M+U1BroX77Kzhb86KH8PW+gWZp08Y0Z 0QZnGJ1i/XjKT3YZKS+U2WACVooe3XXOxjphN9E/bkKTFDvQK7xIFt5BxC4u04w6 jLq7zcAveTwYehb0XczSW+Im6BFmdYHjfyCcX/6Gf7bc0W4g5ZvFDMEo+xO42Yj+ u4XxTzoHsLc0VBtdyxh3Jw8CCfiwW5+iYyDqw9USxPGPACAZl3txOp+SJpOk6Cz/ mFG8OJ3EhzNQI2hkwjKmoe5xkHOxZVmOjzH12r5027zw2dN0mCcW1XhVFUvDb+iq Oeur+zGe324u6gTK/AbDA18K/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBN+iH8F v/TPdhJXOcAhgzvldE8dMB8GA1UdIwQYMBaAFMg0k8ApfMtY0oN5RtYGPxSn3umG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjA2Qy9FOUQ2MkU3NEZF QUUxMUU4OTEwRDRENjZDNEY5QUUwMi95RFNUd0NsOHkxalNnM2xHMWdZX0ZLZmU2 WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lEU1R3Q2w4eTFqU2czbEcxZ1lfRktmZTZZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjA2Qy9FOUQ2MkU3NEZFQUUxMUU4OTEwRDRENjZDNEY5QUUwMi95RFNUd0NsOHkx alNnM2xHMWdZX0ZLZmU2WVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClBQUIlTSlnUDaxDo3yYEx/a3clG4xbx9HmN2gCZh4Q+2OV7gka+mE WP7DAsV2x5OwBJyDh5fswQNeonqOeiPNCQ9Ycao0PRnk0nrShxKeAAp6jBU3tF6E BYUh/1KCtRVymXxwO50KzsvXVAJFxJbW/1nAmjRkR9VBYWnAqr9EbLCNqbuPqBV1 Q6r2oIBX7K7K4+pEddoSExgO0kXMljng++v9TCyh5J4VPxjcWWtq9QMhwUgSxHEW 6XjcP+BRaEDHUcWjT07ruqhpI5A4DarciwqW5leqtj6/qRPVO+Zsob6tlPgnYYlH DIyDENGNErc8sCGRG8tBTbrVPnmdDL+R -----END CERTIFICATE-----Generated at Mon Oct 20 04:03:22 2025 by rpki-client