$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft File: YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft (raw, json) Hash identifier: VoLNSWNUTeGJ4h5s+PKwhNkFGpUESftHaT/7H7f1mtA= Subject key identifier: 8D:66:3A:60:DC:21:CC:B0:51:30:5E:86:D1:D7:E3:5E:1D:11:28:E8 Authority key identifier: 60:35:5C:0D:99:72:6F:EE:9E:E4:7A:B6:FA:E6:DF:0E:9F:38:1F:12 Certificate issuer: /CN=A91ABC49/serialNumber=60355C0D99726FEE9EE47AB6FAE6DF0E9F381F12 Certificate serial: 07D0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft Manifest number: 07D0 Signing time: Sat 18 Oct 2025 22:27:08 +0000 Manifest this update: Sat 18 Oct 2025 22:27:08 +0000 Manifest next update: Sat 25 Oct 2025 22:27:08 +0000 Files and hashes: 1: YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl (hash: pGF58u+FSXLwOaPcjTbTt068iobO/S/isxZbFYV54XY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:27:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2000 (0x7d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABC49, serialNumber=60355C0D99726FEE9EE47AB6FAE6DF0E9F381F12 Validity Not Before: Oct 18 22:27:08 2025 GMT Not After : Oct 25 22:27:08 2025 GMT Subject: CN=68f4143c-7292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:69:67:57:20:a9:98:54:24:5d:d1:3b:be:09: a2:6e:d4:13:5c:15:3a:73:c2:8d:34:ed:0d:ad:ce: 77:d8:30:98:6a:c6:83:7b:ed:56:c2:78:d6:40:80: 9f:1c:f2:a7:9a:1a:87:d6:3a:7c:6d:04:59:fd:f5: 20:73:85:de:2d:58:34:dc:57:f5:67:06:ba:3a:2f: 48:c7:47:5d:9e:2f:ad:f5:58:39:6c:e6:d4:4b:6b: cc:be:f4:f7:e0:20:a4:cb:f6:65:eb:cc:55:89:a3: 04:6a:37:14:83:67:7a:84:e2:3b:cd:46:63:e7:a8: ca:c0:4c:37:76:c7:ad:ee:24:41:62:df:07:26:89: 4d:b3:ab:94:ac:93:99:9b:65:53:c2:78:b6:53:a7: 01:57:61:3b:bc:a1:8a:ee:13:18:ed:5c:fe:02:d1: b8:6a:28:fd:76:e1:03:16:f4:52:9b:8f:4b:fe:90: 97:ae:91:29:5b:8b:f9:c7:8b:19:5c:64:47:08:20: 77:1f:b7:93:67:1c:05:3c:21:b7:21:00:e4:e8:46: ec:3a:ed:fc:fe:46:29:b4:57:6b:79:92:31:b7:41: bc:63:81:02:c5:2b:30:6a:3e:0d:28:6b:ef:ac:af: c1:31:a9:e9:cd:3f:2d:bc:64:dc:e7:6f:c3:d3:78: 70:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:66:3A:60:DC:21:CC:B0:51:30:5E:86:D1:D7:E3:5E:1D:11:28:E8 X509v3 Authority Key Identifier: keyid:60:35:5C:0D:99:72:6F:EE:9E:E4:7A:B6:FA:E6:DF:0E:9F:38:1F:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:64:5d:38:22:4b:7e:71:0c:64:d7:70:4c:ca:55:71:91:20: 89:1d:99:c5:9e:35:90:a1:76:e7:f1:f7:f3:bd:93:47:67:fc: 05:0b:fb:b4:f2:47:58:8b:a0:4f:13:ef:03:7c:94:36:bb:68: e9:a6:7c:f8:26:4c:6b:e0:02:03:a6:9c:51:a3:7d:69:3e:df: 23:c0:0f:a4:13:26:c4:fe:de:89:e0:8a:36:0d:2d:cb:9d:2c: 4d:7a:1a:73:d1:a9:bf:01:cd:02:f7:d6:02:09:34:7d:31:7c: df:e3:d9:1c:67:58:ae:cc:cc:b6:53:b9:f7:0c:7b:01:fb:4d: ac:1f:08:57:56:5c:69:fc:b9:ae:42:01:60:e2:62:2c:30:60: c1:2f:20:c4:79:33:f1:bf:65:e5:71:41:99:1f:98:7c:1b:41: 3b:a0:d5:8e:58:b5:b5:78:fd:1e:44:5d:d9:f2:84:05:c1:0b: 8c:dc:53:67:d4:f0:bb:a9:45:73:6f:be:7d:37:d8:07:b5:2d: 51:59:b3:6d:46:10:19:21:96:6b:72:20:dd:a3:a2:a6:6f:7c: 5a:ed:68:88:79:31:82:57:e3:98:75:52:33:e7:4f:aa:af:67: 27:31:4f:02:a0:ba:b4:cc:3c:76:41:3a:be:31:cb:e5:85:bb: 0c:7b:47:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJDNDkxMTAvBgNVBAUTKDYwMzU1QzBEOTk3MjZGRUU5RUU0N0FCNkZBRTZERjBF OUYzODFGMTIwHhcNMjUxMDE4MjIyNzA4WhcNMjUxMDI1MjIyNzA4WjAYMRYwFAYD VQQDEw02OGY0MTQzYy03MjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3WlnVyCpmFQkXdE7vgmibtQTXBU6c8KNNO0Nrc532DCYasaDe+1WwnjWQICf HPKnmhqH1jp8bQRZ/fUgc4XeLVg03Ff1Zwa6Oi9Ix0ddni+t9Vg5bObUS2vMvvT3 4CCky/Zl68xViaMEajcUg2d6hOI7zUZj56jKwEw3dset7iRBYt8HJolNs6uUrJOZ m2VTwni2U6cBV2E7vKGK7hMY7Vz+AtG4aij9duEDFvRSm49L/pCXrpEpW4v5x4sZ XGRHCCB3H7eTZxwFPCG3IQDk6EbsOu38/kYptFdreZIxt0G8Y4ECxSswaj4NKGvv rK/BManpzT8tvGTc52/D03hwVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1mOmDc IcywUTBehtHX414dESjoMB8GA1UdIwQYMBaAFGA1XA2Zcm/unuR6tvrm3w6fOB8S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkM0OS9FNTUyMzdFQzBE NzcxMUVCQjUzQUVBNDBDNEY5QUUwMi9ZRFZjRFpseWItNmU1SHEyLXViZkRwODRI eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lEVmNEWmx5Yi02ZTVIcTItdWJmRHA4NEh4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkM0OS9FNTUyMzdFQzBENzcxMUVCQjUzQUVBNDBDNEY5QUUwMi9ZRFZjRFpseWIt NmU1SHEyLXViZkRwODRIeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/ZF04Ikt+cQxk13BMylVxkSCJHZnFnjWQoXbn8ffzvZNHZ/wFC/u0 8kdYi6BPE+8DfJQ2u2jppnz4Jkxr4AIDppxRo31pPt8jwA+kEybE/t6J4Io2DS3L nSxNehpz0am/Ac0C99YCCTR9MXzf49kcZ1iuzMy2U7n3DHsB+02sHwhXVlxp/Lmu QgFg4mIsMGDBLyDEeTPxv2XlcUGZH5h8G0E7oNWOWLW1eP0eRF3Z8oQFwQuM3FNn 1PC7qUVzb759N9gHtS1RWbNtRhAZIZZrciDdo6Kmb3xa7WiIeTGCV+OYdVIz50+q r2cnMU8CoLq0zDx2QTq+McvlhbsMe0fL -----END CERTIFICATE-----Generated at Tue Oct 21 06:58:29 2025 by rpki-client