$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft File: Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft (raw, json) Hash identifier: UJhDQXHJeQSD+jwsUmre0uoWKDQceiU8VCaYS4o1Mt0= Subject key identifier: CF:C2:18:1C:7B:ED:00:81:50:10:4C:04:AC:3D:5C:E8:A1:D7:89:47 Authority key identifier: 63:FA:F4:D2:3E:68:3E:93:F6:07:63:0D:DF:FD:4B:1A:F6:33:3F:00 Certificate issuer: /CN=A91AB238/serialNumber=63FAF4D23E683E93F607630DDFFD4B1AF6333F00 Certificate serial: 0809 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft Manifest number: 0800 Signing time: Sat 18 Oct 2025 22:13:28 +0000 Manifest this update: Sat 18 Oct 2025 22:13:27 +0000 Manifest next update: Sat 25 Oct 2025 22:13:27 +0000 Files and hashes: 1: Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl (hash: Jcvs5bewiEcLrSD5NDEbUQJaRco/+53/QCFw9lJNIfI=) 2: 7634D328351411EBBF864670C4F9AE02.roa (hash: gJ6rfZA4kdz2sP4zhVk5qWSiiFvdYYEjJ3d1LC4TVQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2057 (0x809) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB238, serialNumber=63FAF4D23E683E93F607630DDFFD4B1AF6333F00 Validity Not Before: Oct 18 22:13:27 2025 GMT Not After : Oct 25 22:13:27 2025 GMT Subject: CN=68f41107-1870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:16:49:1c:3a:98:97:39:76:9d:09:0f:b7:17: c6:ce:5a:e8:c5:19:50:30:3a:a8:42:b7:74:a3:95: 3a:5a:89:57:a4:74:39:35:c8:df:e0:b9:68:c1:30: 7e:d5:bb:7e:db:b1:54:80:93:e4:ac:b0:97:52:b1: 18:6b:fe:a6:5b:c0:7e:05:c7:d0:c8:ab:4d:14:9d: eb:6a:66:2d:6b:a8:14:b1:2d:51:ae:d7:5a:0f:1d: 2b:df:e6:36:03:0f:22:eb:6b:72:9c:c6:65:14:a5: 29:8e:69:87:06:26:31:93:2a:85:6e:e1:dd:43:ba: 52:35:52:c2:ae:e3:56:4e:bd:81:fb:1b:f6:72:b1: 35:c9:16:ef:cf:69:af:45:01:33:33:aa:3b:cb:13: 80:c0:d0:96:f4:96:6c:93:2d:74:a3:8b:1c:4a:81: f1:35:73:bc:25:94:d2:2b:33:0d:6e:eb:0e:1d:32: aa:f8:22:65:15:f5:07:d5:7b:b9:c9:95:6b:5b:e6: 52:33:64:d6:4a:86:68:0a:57:a1:83:e4:7b:92:6d: 25:4e:56:f2:46:d6:c8:14:a5:4c:c4:32:27:e2:15: eb:69:55:27:8d:e1:83:50:81:6f:6d:c2:98:0a:f7: 2d:6e:0c:e5:76:45:2b:42:fd:1a:8c:39:94:98:10: 02:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C2:18:1C:7B:ED:00:81:50:10:4C:04:AC:3D:5C:E8:A1:D7:89:47 X509v3 Authority Key Identifier: keyid:63:FA:F4:D2:3E:68:3E:93:F6:07:63:0D:DF:FD:4B:1A:F6:33:3F:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_r00j5oPpP2B2MN3_1LGvYzPwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB238/8C7A3368FDFA11EA93AAFF0AC4F9AE02/Y_r00j5oPpP2B2MN3_1LGvYzPwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:fa:87:f5:47:24:2d:0e:3f:b1:91:79:47:5b:75:e8:ef:56: 59:e1:1c:49:c4:88:2e:7a:64:32:94:34:45:69:e0:5e:af:17: d4:74:23:60:98:0a:7c:16:5c:14:32:88:32:4e:5a:db:6b:4d: 56:24:f7:f5:a7:4a:2f:c9:84:1c:99:38:e4:5a:f1:52:27:34: 82:d0:48:62:36:da:42:bb:19:8a:84:7e:41:4b:b6:11:9f:7d: a3:9b:2c:0e:4d:0a:fb:9a:7a:49:ad:7b:e7:eb:e5:74:37:40: a4:97:cb:75:f2:1a:dc:d9:30:52:55:c2:92:53:9c:6c:00:78: dc:2e:0b:60:1a:60:dc:b9:b5:17:72:4a:79:59:f3:85:3c:5f: d3:86:86:2a:4b:73:4e:a4:b6:65:a9:51:50:22:d5:7d:2d:31: c3:77:7d:51:6d:02:62:06:76:aa:62:30:ff:82:70:fd:bf:f9: 52:64:33:15:15:a4:77:bd:3a:82:bc:34:e7:9f:85:86:00:8a: b1:ae:17:1f:91:1d:76:be:e8:aa:d6:3a:ea:74:9b:a2:6b:e3: 45:82:fa:8d:b6:73:7f:42:11:cb:c6:99:9f:d5:ff:0c:6f:33: c5:61:83:e3:64:ea:b7:43:af:d1:45:a8:7f:7f:16:f7:c6:6d: ad:c3:90:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIyMzgxMTAvBgNVBAUTKDYzRkFGNEQyM0U2ODNFOTNGNjA3NjMwRERGRkQ0QjFB RjYzMzNGMDAwHhcNMjUxMDE4MjIxMzI3WhcNMjUxMDI1MjIxMzI3WjAYMRYwFAYD VQQDEw02OGY0MTEwNy0xODcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxZJHDqYlzl2nQkPtxfGzlroxRlQMDqoQrd0o5U6WolXpHQ5Ncjf4LlowTB+ 1bt+27FUgJPkrLCXUrEYa/6mW8B+BcfQyKtNFJ3ramYta6gUsS1RrtdaDx0r3+Y2 Aw8i62tynMZlFKUpjmmHBiYxkyqFbuHdQ7pSNVLCruNWTr2B+xv2crE1yRbvz2mv RQEzM6o7yxOAwNCW9JZsky10o4scSoHxNXO8JZTSKzMNbusOHTKq+CJlFfUH1Xu5 yZVrW+ZSM2TWSoZoClehg+R7km0lTlbyRtbIFKVMxDIn4hXraVUnjeGDUIFvbcKY CvctbgzldkUrQv0ajDmUmBAChQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/CGBx7 7QCBUBBMBKw9XOih14lHMB8GA1UdIwQYMBaAFGP69NI+aD6T9gdjDd/9Sxr2Mz8A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjIzOC84QzdBMzM2OEZE RkExMUVBOTNBQUZGMEFDNEY5QUUwMi9ZX3IwMGo1b1BwUDJCMk1OM18xTEd2WXpQ d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lfcjAwajVvUHBQMkIyTU4zXzFMR3ZZelB3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjIzOC84QzdBMzM2OEZERkExMUVBOTNBQUZGMEFDNEY5QUUwMi9ZX3IwMGo1b1Bw UDJCMk1OM18xTEd2WXpQd0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI+of1RyQtDj+xkXlHW3Xo71ZZ4RxJxIguemQylDRFaeBerxfUdCNg mAp8FlwUMogyTlrba01WJPf1p0ovyYQcmTjkWvFSJzSC0EhiNtpCuxmKhH5BS7YR n32jmywOTQr7mnpJrXvn6+V0N0Ckl8t18hrc2TBSVcKSU5xsAHjcLgtgGmDcubUX ckp5WfOFPF/ThoYqS3NOpLZlqVFQItV9LTHDd31RbQJiBnaqYjD/gnD9v/lSZDMV FaR3vTqCvDTnn4WGAIqxrhcfkR12vuiq1jrqdJuia+NFgvqNtnN/QhHLxpmf1f8M bzPFYYPjZOq3Q6/RRah/fxb3xm2tw5DF -----END CERTIFICATE-----Generated at Mon Oct 20 12:39:38 2025 by rpki-client