$ rpki-client -vvf rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft File: yhlef9JZjYWjbJnsSBs1dMBuOxc.mft (raw, json) Hash identifier: V+o6xTwSvbstc8Ai6HDOW6Dpyw0MfzoLbzbNcMh/1QU= Subject key identifier: 18:3B:B8:49:89:FA:36:6A:25:0A:13:17:29:14:4A:A3:3A:DE:8F:F0 Authority key identifier: CA:19:5E:7F:D2:59:8D:85:A3:6C:99:EC:48:1B:35:74:C0:6E:3B:17 Certificate issuer: /CN=A919DA63/serialNumber=CA195E7FD2598D85A36C99EC481B3574C06E3B17 Certificate serial: 0848 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft Manifest number: 0842 Signing time: Sat 18 Oct 2025 21:54:38 +0000 Manifest this update: Sat 18 Oct 2025 21:54:37 +0000 Manifest next update: Sat 25 Oct 2025 21:54:37 +0000 Files and hashes: 1: yhlef9JZjYWjbJnsSBs1dMBuOxc.crl (hash: GOlFrZDHTHPKtavJ0GwvYMexrNoEA5pg8oKK6mxaQ0c=) 2: B65C355AE1E411EAAD5D8545C4F9AE02.roa (hash: EHew2Al89yfLEVdXGaRbj1T8KtGh2w0PUC3MBSskoUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.crl rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:54:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2120 (0x848) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DA63, serialNumber=CA195E7FD2598D85A36C99EC481B3574C06E3B17 Validity Not Before: Oct 18 21:54:37 2025 GMT Not After : Oct 25 21:54:37 2025 GMT Subject: CN=68f40c9e-24eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c0:32:9b:95:b6:7b:3d:57:dd:61:ff:58:19: c9:87:aa:25:08:ed:7a:90:6f:7e:90:ba:d3:a9:8a: 92:1e:c2:a8:b8:2e:a4:29:26:11:05:b7:8f:2d:a9: 53:4d:a8:91:b4:4d:35:db:86:ac:d6:13:c4:f0:2e: c2:4f:09:6f:07:07:90:ae:16:03:ab:6b:78:ef:5b: bb:5a:72:5a:a0:f1:4a:11:d3:25:21:18:82:b8:87: ae:fc:ea:27:06:21:75:3f:a6:d4:b4:7b:45:1b:05: 1a:fd:e6:cf:36:93:4a:3d:6a:3b:ce:7d:f2:43:51: b6:33:11:26:4c:81:db:11:75:b5:7b:d1:36:c8:57: 6d:32:12:e0:d7:bc:65:b0:cd:43:3c:00:1a:31:95: 36:b1:82:96:cb:8a:89:33:60:4f:55:bb:c1:27:b4: 37:d8:cf:70:21:2d:00:0d:73:c0:b5:9b:4f:20:78: 7e:e8:59:44:46:ef:d3:b9:b9:6f:3c:47:d7:cc:06: 95:65:45:09:06:c1:8f:75:54:c8:90:ca:b7:73:f7: eb:3b:be:f0:4e:cb:6a:67:c0:c3:3d:c3:89:6a:3a: 32:09:be:82:c0:15:53:ad:42:af:ad:92:3a:db:bb: 51:d7:e6:f5:70:0d:c9:e1:f3:46:53:ad:54:f4:28: 4b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:3B:B8:49:89:FA:36:6A:25:0A:13:17:29:14:4A:A3:3A:DE:8F:F0 X509v3 Authority Key Identifier: keyid:CA:19:5E:7F:D2:59:8D:85:A3:6C:99:EC:48:1B:35:74:C0:6E:3B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:d1:67:54:3c:85:af:e7:c8:e9:fc:3b:b8:14:4a:5b:4c:f6: 88:26:03:c5:0c:d6:6c:c7:11:0a:84:b0:5d:fc:6e:d8:2a:17: a3:d0:18:33:5f:e5:37:06:30:a1:25:27:ca:68:10:9c:e4:a1: 17:6e:64:b9:83:5e:38:44:a2:5b:45:a1:15:28:66:9a:4d:5d: 61:d8:b5:96:78:65:6a:ae:f8:49:18:83:a5:cf:17:95:64:c2: 2f:6b:75:94:94:63:b2:c9:a4:d7:39:a6:99:1e:65:09:6a:a8: c7:99:ba:e4:03:9e:14:95:ec:a5:e4:43:83:9c:a3:b3:69:e7: 97:42:b9:c3:db:29:94:08:05:56:ac:db:3d:1c:a3:70:c4:67: 5e:34:e7:f7:8a:8b:f8:18:5b:aa:a8:77:4c:05:47:13:22:b6: 9a:90:e2:fa:7b:61:b4:09:53:81:2d:21:51:75:74:d4:7c:92: 83:57:cc:ee:56:da:87:c2:bf:d8:6b:b9:1d:d5:dc:b9:b2:1f: 78:a8:eb:d7:bc:27:0c:9b:f2:19:4c:15:5d:15:6d:17:a6:be: 51:f5:70:ea:32:c2:4f:00:ad:81:25:b4:14:9d:75:da:72:05: 27:66:e0:93:e7:de:54:c4:d5:cd:54:23:19:7f:5e:f6:35:06: 43:98:4d:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURBNjMxMTAvBgNVBAUTKENBMTk1RTdGRDI1OThEODVBMzZDOTlFQzQ4MUIzNTc0 QzA2RTNCMTcwHhcNMjUxMDE4MjE1NDM3WhcNMjUxMDI1MjE1NDM3WjAYMRYwFAYD VQQDEw02OGY0MGM5ZS0yNGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8Aym5W2ez1X3WH/WBnJh6olCO16kG9+kLrTqYqSHsKouC6kKSYRBbePLalT TaiRtE0124as1hPE8C7CTwlvBweQrhYDq2t471u7WnJaoPFKEdMlIRiCuIeu/Oon BiF1P6bUtHtFGwUa/ebPNpNKPWo7zn3yQ1G2MxEmTIHbEXW1e9E2yFdtMhLg17xl sM1DPAAaMZU2sYKWy4qJM2BPVbvBJ7Q32M9wIS0ADXPAtZtPIHh+6FlERu/Tublv PEfXzAaVZUUJBsGPdVTIkMq3c/frO77wTstqZ8DDPcOJajoyCb6CwBVTrUKvrZI6 27tR1+b1cA3J4fNGU61U9ChLQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBg7uEmJ +jZqJQoTFykUSqM63o/wMB8GA1UdIwQYMBaAFMoZXn/SWY2Fo2yZ7EgbNXTAbjsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REE2My8wMUJGN0JFRUUx RTMxMUVBQjQ5N0REMjhDNEY5QUUwMi95aGxlZjlKWmpZV2piSm5zU0JzMWRNQnVP eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lobGVmOUpaallXamJKbnNTQnMxZE1CdU94Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REE2My8wMUJGN0JFRUUxRTMxMUVBQjQ5N0REMjhDNEY5QUUwMi95aGxlZjlKWmpZ V2piSm5zU0JzMWRNQnVPeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK0WdUPIWv58jp/Du4FEpbTPaIJgPFDNZsxxEKhLBd/G7YKhej0Bgz X+U3BjChJSfKaBCc5KEXbmS5g144RKJbRaEVKGaaTV1h2LWWeGVqrvhJGIOlzxeV ZMIva3WUlGOyyaTXOaaZHmUJaqjHmbrkA54Uleyl5EODnKOzaeeXQrnD2ymUCAVW rNs9HKNwxGdeNOf3iov4GFuqqHdMBUcTIraakOL6e2G0CVOBLSFRdXTUfJKDV8zu VtqHwr/Ya7kd1dy5sh94qOvXvCcMm/IZTBVdFW0Xpr5R9XDqMsJPAK2BJbQUnXXa cgUnZuCT595UxNXNVCMZf172NQZDmE0G -----END CERTIFICATE-----Generated at Mon Oct 20 11:07:52 2025 by rpki-client