$ rpki-client -vvf rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft File: Yv18a2FzzDKVZktYaAWS-ybSuHo.mft (raw, json) Hash identifier: CTGCxb4oQ0M6vZKSVA3tQqY0o6EkGnQWSaENlwz4RfA= Subject key identifier: 7A:4C:01:F6:A5:FD:FA:1A:D7:38:A9:D2:F6:DB:7D:63:FD:4F:59:E9 Authority key identifier: 62:FD:7C:6B:61:73:CC:32:95:66:4B:58:68:05:92:FB:26:D2:B8:7A Certificate issuer: /CN=A91B488A/serialNumber=62FD7C6B6173CC3295664B58680592FB26D2B87A Certificate serial: 07A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yv18a2FzzDKVZktYaAWS-ybSuHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft Manifest number: 07A0 Signing time: Sat 18 Oct 2025 22:45:24 +0000 Manifest this update: Sat 18 Oct 2025 22:45:24 +0000 Manifest next update: Sat 25 Oct 2025 22:45:24 +0000 Files and hashes: 1: Yv18a2FzzDKVZktYaAWS-ybSuHo.crl (hash: ZguemoOtpJP+deTY+IWhyUgoansfNBpk86AM3KQsEFE=) 2: FACB1DC6595911ECBE6ACC6BC4F9AE02.roa (hash: sxCFtdRPysjFCbROcFadfDzJw+hZeGG75SF5L5NcahQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.crl rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yv18a2FzzDKVZktYaAWS-ybSuHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1961 (0x7a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B488A, serialNumber=62FD7C6B6173CC3295664B58680592FB26D2B87A Validity Not Before: Oct 18 22:45:24 2025 GMT Not After : Oct 25 22:45:24 2025 GMT Subject: CN=68f41884-b678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c4:f6:bd:c2:a8:c8:ba:76:7a:15:6e:bb:6f: 8c:9c:41:96:d1:86:cc:10:e7:f9:53:1c:41:80:50: 8d:5c:bb:cd:07:5e:1f:f8:62:e7:78:20:14:51:41: 5e:60:44:3d:5c:11:54:ea:cf:61:d8:68:5a:1c:4b: 96:4a:5f:84:59:96:2a:8f:ba:4f:92:5a:e6:50:68: 02:13:d2:9b:b9:b7:54:8a:de:5a:96:a5:d5:ef:38: 0d:5d:bb:d0:d2:bc:0d:65:ca:6d:90:09:10:50:05: 67:58:29:e2:39:56:d0:80:56:47:a5:2c:08:5c:68: 40:4b:54:51:0d:83:24:33:02:52:8d:96:60:96:f8: 2e:90:bd:13:10:db:3f:a9:bb:9f:e9:2f:0b:82:38: df:1a:28:2d:29:2e:1d:d1:b5:1b:79:57:cd:6c:ad: db:2b:48:e5:4f:ce:c1:f5:4d:03:d2:4d:b4:d0:f7: 4a:0b:7e:54:39:bd:3c:9f:8c:f2:ff:c9:77:ef:7d: 6a:e5:fc:c3:db:c0:e7:f5:b7:3f:f4:85:e4:d8:70: d1:d7:12:19:1f:d4:4e:ed:38:b3:c0:52:27:59:f7: db:f7:54:20:33:2d:e2:b5:3d:e9:1f:e1:f6:3b:cf: 7b:9b:69:de:23:22:75:b1:58:b3:58:fc:f5:9f:6b: 72:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:4C:01:F6:A5:FD:FA:1A:D7:38:A9:D2:F6:DB:7D:63:FD:4F:59:E9 X509v3 Authority Key Identifier: keyid:62:FD:7C:6B:61:73:CC:32:95:66:4B:58:68:05:92:FB:26:D2:B8:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yv18a2FzzDKVZktYaAWS-ybSuHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:19:96:99:71:f4:8e:cb:f5:c4:5c:b7:ee:dd:b5:45:ee:15: 5f:20:84:91:79:d7:6e:29:c8:4b:13:2d:18:a8:b7:64:14:df: 78:b8:fa:0f:92:9e:51:d5:b5:ce:3b:8e:a5:3c:9b:7e:a4:2c: 90:de:9c:95:cd:b1:29:36:ea:f9:93:e6:ca:a7:d5:a4:83:bc: d6:6b:d8:64:90:8c:c3:6a:a2:2e:2b:85:e8:a9:bb:b6:40:8f: 18:2a:29:d7:ea:90:a0:9e:9d:2a:bd:6d:a8:39:3f:68:65:ec: 52:09:d4:7d:2a:50:3f:7f:f2:3e:ef:fc:01:2b:6b:6e:db:de: 4b:37:79:19:f0:54:ef:66:23:35:4d:be:3f:17:a7:17:19:82: 48:5a:54:db:ec:8a:82:e7:73:c1:b4:45:62:58:36:bd:31:d9: 07:9b:94:43:e5:a1:8d:8a:85:58:3a:69:fc:88:2d:00:2b:b8: 29:56:89:eb:8b:20:77:0b:8c:22:ee:4a:d6:e0:3c:1c:f9:8a: 77:c0:1e:4b:19:ff:4a:53:e6:b3:aa:57:cc:f9:4b:b3:6d:4b: 1a:96:69:90:4b:2e:1f:f2:47:c1:df:b8:8e:03:ce:a3:f2:97: 5b:c0:9a:d8:5c:36:b1:8d:51:04:7d:0b:f5:ed:63:e1:46:81: 07:d1:88:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ4OEExMTAvBgNVBAUTKDYyRkQ3QzZCNjE3M0NDMzI5NTY2NEI1ODY4MDU5MkZC MjZEMkI4N0EwHhcNMjUxMDE4MjI0NTI0WhcNMjUxMDI1MjI0NTI0WjAYMRYwFAYD VQQDEw02OGY0MTg4NC1iNjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApcT2vcKoyLp2ehVuu2+MnEGW0YbMEOf5UxxBgFCNXLvNB14f+GLneCAUUUFe YEQ9XBFU6s9h2GhaHEuWSl+EWZYqj7pPklrmUGgCE9KbubdUit5alqXV7zgNXbvQ 0rwNZcptkAkQUAVnWCniOVbQgFZHpSwIXGhAS1RRDYMkMwJSjZZglvgukL0TENs/ qbuf6S8LgjjfGigtKS4d0bUbeVfNbK3bK0jlT87B9U0D0k200PdKC35UOb08n4zy /8l3731q5fzD28Dn9bc/9IXk2HDR1xIZH9RO7TizwFInWffb91QgMy3itT3pH+H2 O897m2neIyJ1sVizWPz1n2tyhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpMAfal /foa1zip0vbbfWP9T1npMB8GA1UdIwQYMBaAFGL9fGthc8wylWZLWGgFkvsm0rh6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDg4QS85QUVGMjNEQzI0 NjkxMUVCOENBRTMzODBDNEY5QUUwMi9ZdjE4YTJGenpES1Zaa3RZYUFXUy15YlN1 SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1l2MThhMkZ6ekRLVlprdFlhQVdTLXliU3VIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDg4QS85QUVGMjNEQzI0NjkxMUVCOENBRTMzODBDNEY5QUUwMi9ZdjE4YTJGenpE S1Zaa3RZYUFXUy15YlN1SG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjGZaZcfSOy/XEXLfu3bVF7hVfIISRedduKchLEy0YqLdkFN94uPoP kp5R1bXOO46lPJt+pCyQ3pyVzbEpNur5k+bKp9Wkg7zWa9hkkIzDaqIuK4Xoqbu2 QI8YKinX6pCgnp0qvW2oOT9oZexSCdR9KlA/f/I+7/wBK2tu295LN3kZ8FTvZiM1 Tb4/F6cXGYJIWlTb7IqC53PBtEViWDa9MdkHm5RD5aGNioVYOmn8iC0AK7gpVonr iyB3C4wi7krW4Dwc+Yp3wB5LGf9KU+azqlfM+UuzbUsalmmQSy4f8kfB37iOA86j 8pdbwJrYXDaxjVEEfQv17WPhRoEH0Yir -----END CERTIFICATE-----Generated at Mon Oct 20 17:43:41 2025 by rpki-client