$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft File: YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft (raw, json) Hash identifier: Erqhcry46Gg3xGct2nPeQ/MMSiAdRnjpfr5+4/74+ys= Subject key identifier: 8D:CB:C6:D9:74:A9:61:0E:93:4B:AF:16:C4:90:66:0B:97:94:A3:5C Authority key identifier: 60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04 Certificate issuer: /CN=A91BBED0/serialNumber=609FEC2594380FC7639694173C3CFE5F2B596204 Certificate serial: 0177 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft Manifest number: 0173 Signing time: Sun 19 Oct 2025 06:29:50 +0000 Manifest this update: Sun 19 Oct 2025 06:29:50 +0000 Manifest next update: Sun 26 Oct 2025 06:29:50 +0000 Files and hashes: 1: YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl (hash: kbBvr3VIs5jWnG4uBHQXFuwuH+E4CNXHDfEsLNoVxNA=) 2: 2BA240AC994111F096074C40C4F9AE02.roa (hash: CvYsjQVicPDfw8zTPs2JSrF1dRDIuUtpOHahshkCIi8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:29:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 375 (0x177) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBED0, serialNumber=609FEC2594380FC7639694173C3CFE5F2B596204 Validity Not Before: Oct 19 06:29:50 2025 GMT Not After : Oct 26 06:29:50 2025 GMT Subject: CN=68f4855e-8809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d1:61:da:bc:65:fc:3f:89:3e:80:af:c7:3b: 16:25:31:e9:0f:16:8f:de:9f:e0:ad:ec:b9:6c:c1: b6:5a:a4:1e:80:73:74:3c:b0:e5:21:e3:4b:35:c6: cf:5b:9c:5a:36:6f:68:75:04:c2:9c:ba:70:ea:eb: d5:e1:22:c1:85:d7:79:28:e8:ee:7c:5c:60:a1:89: 46:a1:ad:b0:95:0a:94:7f:19:6c:00:ae:83:9e:17: 31:6d:66:b1:e6:ac:00:8b:90:9b:99:e4:2a:03:90: b9:cb:43:7c:6e:b0:8f:e1:b0:f5:ec:f5:69:60:91: da:c9:c1:1d:95:a8:a7:a4:04:b2:a1:e9:d1:c3:e3: 2d:71:d4:c0:38:e4:93:f7:a2:7b:61:64:6e:f3:40: ed:50:9b:b3:b4:86:aa:c5:5d:9c:e5:13:08:46:0a: 3d:f4:16:b8:09:a2:f8:20:c5:ba:f8:62:d2:e8:41: 15:ff:7c:7a:7a:20:be:a6:0a:33:28:b6:10:0c:4e: 14:6e:de:1f:12:cb:99:20:82:fc:31:21:8c:41:3c: f1:35:dd:af:d1:bd:55:2b:ac:39:15:cd:35:58:22: 90:37:c6:29:9d:35:2f:1f:11:2a:80:c8:5a:db:7c: 30:84:eb:56:59:59:cb:ba:1b:12:83:56:61:ec:6f: f6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:CB:C6:D9:74:A9:61:0E:93:4B:AF:16:C4:90:66:0B:97:94:A3:5C X509v3 Authority Key Identifier: keyid:60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:84:ee:f7:53:c2:d8:ec:37:05:54:e9:f2:99:e8:0f:6e:ae: b8:d8:9a:ea:fd:59:18:44:a3:b0:d2:ea:e3:31:6f:27:f2:25: aa:76:ca:23:a0:c6:a7:0a:b9:cf:79:66:17:d7:50:9c:ce:68: b1:37:87:0f:6e:d4:fb:1d:a7:ed:17:a5:35:d4:9f:2e:d2:5f: 96:38:69:83:82:42:7f:55:ac:7f:e0:bd:6b:e2:53:92:f3:f8: d6:f3:18:f4:b2:58:b4:53:91:c2:12:6a:79:29:c7:c8:67:70: 63:97:7e:b0:19:7c:e6:4f:ef:e3:12:95:c0:3e:37:d0:42:42: 3e:fa:39:3b:8f:86:82:04:51:26:61:65:d4:c0:3a:35:8b:4c: 14:a1:73:32:2c:1b:24:7f:cf:a0:34:77:92:8d:4c:94:84:a3: e6:e1:00:21:ac:0e:05:c4:34:0c:83:37:8a:01:56:f3:f4:81: 83:0d:fb:f9:5d:0b:d4:d3:de:cd:cd:94:c2:fc:ba:bf:94:c9: d5:dd:ef:0f:c9:7f:96:6b:ee:a4:b7:a1:4a:88:02:43:b6:ce: 7f:1e:ba:0c:e3:5c:05:4b:f7:4c:95:17:be:60:72:53:f4:2a: 8b:5b:c6:2e:f7:5b:5d:ad:82:7b:f3:d8:50:03:ab:8c:dc:79: 7f:9a:24:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJFRDAxMTAvBgNVBAUTKDYwOUZFQzI1OTQzODBGQzc2Mzk2OTQxNzNDM0NGRTVG MkI1OTYyMDQwHhcNMjUxMDE5MDYyOTUwWhcNMjUxMDI2MDYyOTUwWjAYMRYwFAYD VQQDEw02OGY0ODU1ZS04ODA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttFh2rxl/D+JPoCvxzsWJTHpDxaP3p/grey5bMG2WqQegHN0PLDlIeNLNcbP W5xaNm9odQTCnLpw6uvV4SLBhdd5KOjufFxgoYlGoa2wlQqUfxlsAK6DnhcxbWax 5qwAi5CbmeQqA5C5y0N8brCP4bD17PVpYJHaycEdlainpASyoenRw+MtcdTAOOST 96J7YWRu80DtUJuztIaqxV2c5RMIRgo99Ba4CaL4IMW6+GLS6EEV/3x6eiC+pgoz KLYQDE4Ubt4fEsuZIIL8MSGMQTzxNd2v0b1VK6w5Fc01WCKQN8YpnTUvHxEqgMha 23wwhOtWWVnLuhsSg1Zh7G/2VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3Lxtl0 qWEOk0uvFsSQZguXlKNcMB8GA1UdIwQYMBaAFGCf7CWUOA/HY5aUFzw8/l8rWWIE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkVEMC80QzE3QTA0RTc3 RTExMUVFQUI0QUVGNTNDNEY5QUUwMi9ZSl9zSlpRNEQ4ZGpscFFYUER6LVh5dFpZ Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lKX3NKWlE0RDhkamxwUVhQRHotWHl0WllnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkVEMC80QzE3QTA0RTc3RTExMUVFQUI0QUVGNTNDNEY5QUUwMi9ZSl9zSlpRNEQ4 ZGpscFFYUER6LVh5dFpZZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEhO73U8LY7DcFVOnymegPbq642Jrq/VkYRKOw0urjMW8n8iWqdsoj oManCrnPeWYX11CczmixN4cPbtT7HaftF6U11J8u0l+WOGmDgkJ/Vax/4L1r4lOS 8/jW8xj0sli0U5HCEmp5KcfIZ3Bjl36wGXzmT+/jEpXAPjfQQkI++jk7j4aCBFEm YWXUwDo1i0wUoXMyLBskf8+gNHeSjUyUhKPm4QAhrA4FxDQMgzeKAVbz9IGDDfv5 XQvU097NzZTC/Lq/lMnV3e8PyX+Wa+6kt6FKiAJDts5/HroM41wFS/dMlRe+YHJT 9CqLW8Yu91tdrYJ789hQA6uM3Hl/miQZ -----END CERTIFICATE-----Generated at Mon Oct 20 13:41:44 2025 by rpki-client