$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft File: yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft (raw, json) Hash identifier: 0NLC/Wf60+u8bz/6MUv2F4nfJq3qi1OvlabvQYRsKCk= Subject key identifier: 4E:CF:DB:9B:89:2F:34:CB:BE:04:60:7A:B6:28:A9:A3:12:56:37:9B Authority key identifier: C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A Certificate issuer: /CN=A91B3558/serialNumber=C8909254F69666D585E310ACD8DFF2B1FB9A5F2A Certificate serial: 10BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft Manifest number: 10A5 Signing time: Sat 18 Oct 2025 17:54:14 +0000 Manifest this update: Sat 18 Oct 2025 17:54:13 +0000 Manifest next update: Sat 25 Oct 2025 17:54:13 +0000 Files and hashes: 1: yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl (hash: UaTqEk+v3iG94k9xRTUEbRIeZQe/PB+7Y9Ie48od/BY=) 2: 9305EF46716511EFAA44E47BC4F9AE02.roa (hash: fEVsLbsqwk43zT4i9cB0QOn6Yu/KoGDrIvPTQDfkam8=) 3: BAE1D7A8716711EFBF91272AC4F9AE02.roa (hash: y8nzjZGMQib7WT4yCqeNAgHbrhJTL2UqXsshegz4sgE=) 4: B9E0D3EA716711EFBF91272AC4F9AE02.roa (hash: D2fBQ+WzSpKBrrM3Q6Z8cohOSpLekw4Ya8dTg5S7nEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4282 (0x10ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3558, serialNumber=C8909254F69666D585E310ACD8DFF2B1FB9A5F2A Validity Not Before: Oct 18 17:54:13 2025 GMT Not After : Oct 25 17:54:13 2025 GMT Subject: CN=68f3d446-0bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:56:c3:8e:4e:c0:22:75:17:c1:ec:ac:37:92: 16:fb:7a:31:f7:b0:72:6e:ee:ff:9b:cc:2d:c5:d1: e5:8d:cb:ef:70:8b:0b:93:59:7f:06:d9:32:a6:b3: d7:3b:da:6b:c1:81:df:df:2e:7e:3d:bd:fe:62:95: 04:5b:65:58:fd:b0:88:ff:6a:dc:f6:13:01:5f:9c: 29:34:ab:d4:22:e3:96:8a:ba:03:4d:48:17:1c:30: e3:4a:4f:fa:80:4e:de:72:79:26:3b:b4:c3:4b:75: e0:83:d5:d1:0d:b2:9d:1e:91:6e:73:e1:aa:f8:e4: 17:80:a8:b1:b5:51:37:43:6e:88:7a:df:79:47:51: 6e:3e:aa:1c:dd:a6:90:d4:b1:21:9f:88:96:38:ec: 5f:6b:bb:c7:0f:09:2a:14:4b:e9:9f:b0:b7:fd:07: c8:bf:bb:84:56:d7:47:c4:88:b4:67:33:27:c2:80: c9:cc:6b:c4:79:a2:26:9a:2a:6a:cd:7e:96:68:d6: 6c:c2:67:cb:bd:ee:9a:ad:21:f3:7d:5d:5d:bd:6d: 77:b2:8a:fa:89:31:be:50:40:75:65:44:18:94:e4: 8e:17:61:d7:b2:9a:ac:0d:6a:e8:68:08:98:33:70: bc:64:b7:04:73:22:82:be:6d:35:b7:96:f3:6f:d7: 33:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:CF:DB:9B:89:2F:34:CB:BE:04:60:7A:B6:28:A9:A3:12:56:37:9B X509v3 Authority Key Identifier: keyid:C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:41:25:b5:b1:77:0f:18:52:c7:58:94:e2:87:06:a8:fa:6e: 12:12:b7:6d:de:88:0e:6c:92:e5:e5:c2:67:f6:95:52:28:e8: e9:21:7c:76:18:5c:d4:29:9d:6f:74:3f:2a:aa:c9:47:85:b1: 1b:ca:2a:5a:6d:e1:e9:02:b1:59:4a:99:27:09:c1:64:02:df: da:c9:3e:ec:c2:b9:bf:06:e1:ce:45:a2:c9:76:58:d9:e4:c7: a6:55:5c:b6:21:30:f1:9e:b8:12:f0:da:76:91:d5:56:94:ec: 46:5d:28:1e:71:d0:95:36:a0:44:6d:eb:8f:79:a3:03:d0:58: 81:4f:f0:80:33:ba:21:b5:8a:b4:d4:ee:26:cb:07:7e:ef:11: 60:c2:f4:64:16:e2:e2:ce:34:81:62:fa:ee:fc:56:6b:6c:0b: 76:e7:a7:71:2f:8e:25:8b:65:f8:aa:f7:80:ee:99:e9:10:d1: c1:2c:10:23:fe:6f:5e:59:75:d1:2d:52:7d:68:4a:6d:02:1b: 94:94:4d:bc:25:82:49:16:1d:5e:e0:e7:30:c6:aa:99:8c:7c: b3:7e:02:32:54:52:6f:d6:60:a6:c9:31:c2:c0:2d:ae:04:7e: cf:3c:65:0f:ab:97:90:1a:5c:24:7a:c9:78:ab:e8:b9:dd:98: 34:60:af:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICELowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM1NTgxMTAvBgNVBAUTKEM4OTA5MjU0RjY5NjY2RDU4NUUzMTBBQ0Q4REZGMkIx RkI5QTVGMkEwHhcNMjUxMDE4MTc1NDEzWhcNMjUxMDI1MTc1NDEzWjAYMRYwFAYD VQQDEw02OGYzZDQ0Ni0wYmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlbDjk7AInUXweysN5IW+3ox97Bybu7/m8wtxdHljcvvcIsLk1l/BtkyprPX O9prwYHf3y5+Pb3+YpUEW2VY/bCI/2rc9hMBX5wpNKvUIuOWiroDTUgXHDDjSk/6 gE7ecnkmO7TDS3Xgg9XRDbKdHpFuc+Gq+OQXgKixtVE3Q26Iet95R1FuPqoc3aaQ 1LEhn4iWOOxfa7vHDwkqFEvpn7C3/QfIv7uEVtdHxIi0ZzMnwoDJzGvEeaImmipq zX6WaNZswmfLve6arSHzfV1dvW13sor6iTG+UEB1ZUQYlOSOF2HXspqsDWroaAiY M3C8ZLcEcyKCvm01t5bzb9czIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7P25uJ LzTLvgRgerYoqaMSVjebMB8GA1UdIwQYMBaAFMiQklT2lmbVheMQrNjf8rH7ml8q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzU1OC8wRjIxMjE0RTM5 MDUxMUU5OUEzMzAyMzNDNEY5QUUwMi95SkNTVlBhV1p0V0Y0eENzMk5feXNmdWFY eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lKQ1NWUGFXWnRXRjR4Q3MyTl95c2Z1YVh5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzU1OC8wRjIxMjE0RTM5MDUxMUU5OUEzMzAyMzNDNEY5QUUwMi95SkNTVlBhV1p0 V0Y0eENzMk5feXNmdWFYeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGQSW1sXcPGFLHWJTihwao+m4SErdt3ogObJLl5cJn9pVSKOjpIXx2 GFzUKZ1vdD8qqslHhbEbyipabeHpArFZSpknCcFkAt/ayT7swrm/BuHORaLJdljZ 5MemVVy2ITDxnrgS8Np2kdVWlOxGXSgecdCVNqBEbeuPeaMD0FiBT/CAM7ohtYq0 1O4mywd+7xFgwvRkFuLizjSBYvru/FZrbAt256dxL44li2X4qveA7pnpENHBLBAj /m9eWXXRLVJ9aEptAhuUlE28JYJJFh1e4OcwxqqZjHyzfgIyVFJv1mCmyTHCwC2u BH7PPGUPq5eQGlwkesl4q+i53Zg0YK/8 -----END CERTIFICATE-----Generated at Mon Oct 20 10:45:48 2025 by rpki-client