$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft File: 3YoriGVMM2b_5_z2VWqXhgAqpls.mft (raw, json) Hash identifier: cnaMlPgDWzs1EpT6NjHQyfKmu/BSUvqjxM2z0hFaKgI= Subject key identifier: 1D:52:66:C3:06:A3:19:0C:1F:A9:45:69:C5:59:3F:FF:E1:D4:90:FB Authority key identifier: DD:8A:2B:88:65:4C:33:66:FF:E7:FC:F6:55:6A:97:86:00:2A:A6:5B Certificate issuer: /CN=A91CFAB9/serialNumber=DD8A2B88654C3366FFE7FCF6556A9786002AA65B Certificate serial: 03E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YoriGVMM2b_5_z2VWqXhgAqpls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft Manifest number: 03E1 Signing time: Sun 19 Oct 2025 02:33:06 +0000 Manifest this update: Sun 19 Oct 2025 02:33:05 +0000 Manifest next update: Sun 26 Oct 2025 02:33:05 +0000 Files and hashes: 1: 3YoriGVMM2b_5_z2VWqXhgAqpls.crl (hash: R+7xkZ975QS4isZN8dEXljB5oEOuyUt+z5bfud9dzak=) 2: 596CCC4E9F1911EC8FDFEA7DC4F9AE02.roa (hash: ctAElc1BM1zI8owbq6eyFwFyuzNUp7IAey45t5f8jpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.crl rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YoriGVMM2b_5_z2VWqXhgAqpls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1001 (0x3e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFAB9, serialNumber=DD8A2B88654C3366FFE7FCF6556A9786002AA65B Validity Not Before: Oct 19 02:33:05 2025 GMT Not After : Oct 26 02:33:05 2025 GMT Subject: CN=68f44de1-dbf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e7:f5:ea:c9:53:0b:82:98:c9:fe:40:72:2c: b4:98:cb:9d:06:95:14:37:6b:bf:96:71:92:6c:79: f7:6e:0e:10:63:a3:5c:6d:79:cd:79:74:4a:92:7e: 98:ed:26:07:93:d4:b6:6d:9b:6d:f4:99:04:d6:2b: 66:80:61:75:90:62:38:c3:33:81:a5:d2:54:ea:24: 99:74:dd:ac:39:43:38:a6:02:08:0d:e5:3a:e0:06: 49:76:24:0b:32:24:fd:70:06:c6:08:48:64:66:6e: 55:ba:8e:ff:99:6b:83:18:c7:4b:ef:51:49:0b:5d: a8:b9:2f:c9:0f:b2:1c:9e:fc:af:ba:37:21:20:21: 11:ec:62:44:cd:f3:4d:43:5f:74:38:4f:87:4d:85: fb:11:30:1e:c4:e2:e9:81:6f:b0:82:7d:93:94:ef: 41:66:fc:b0:39:7d:5e:bd:d5:2b:e0:82:94:eb:9f: 9b:ac:09:55:88:be:ff:22:c8:b0:74:3d:97:15:b1: 2d:6e:3e:0e:bd:f2:b8:3f:84:bf:6c:7b:07:4d:c5: a2:49:92:46:14:fe:1f:83:43:50:8e:d7:74:81:e2: 5a:cf:64:f6:8c:24:60:b1:77:ab:d4:f5:c5:ce:cd: bc:80:6b:a9:ad:6b:f3:e5:92:6b:b8:d9:19:c3:de: a7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:52:66:C3:06:A3:19:0C:1F:A9:45:69:C5:59:3F:FF:E1:D4:90:FB X509v3 Authority Key Identifier: keyid:DD:8A:2B:88:65:4C:33:66:FF:E7:FC:F6:55:6A:97:86:00:2A:A6:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YoriGVMM2b_5_z2VWqXhgAqpls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:b7:b1:99:5a:4e:c1:f7:09:b7:d5:02:c8:62:07:ee:23:93: d2:0a:16:23:30:57:70:7f:fd:87:c6:43:21:63:f6:3e:46:3d: 29:c7:72:b2:5d:84:0d:fc:39:51:68:7e:82:4d:c4:68:12:27: 07:0a:29:8a:52:7b:8b:8b:b1:18:80:f2:6b:b9:d4:9f:83:f4: 37:c8:69:2b:ad:91:ae:7f:42:4e:ad:30:c5:2f:7e:ca:b3:b9: 17:f0:b2:ea:d7:d0:0b:04:33:5d:24:99:49:6b:31:e8:81:c5: 6e:fb:31:30:98:69:0b:bd:cf:24:20:4d:a5:05:a8:24:02:6e: 57:a9:43:fd:a4:47:79:fa:cd:f4:9d:86:43:fc:7e:fd:5a:42: 09:d0:79:03:28:7b:14:28:70:aa:7d:3d:9f:e9:d7:91:f5:c9: b4:44:9e:d9:9b:0c:15:1f:2e:83:dd:ae:db:ca:f3:80:2d:55: da:7e:af:a7:76:8f:06:bb:d7:f5:0a:6c:c5:db:1b:d3:d2:3b: bf:06:7a:f8:db:86:11:69:3b:24:09:ab:33:fd:bd:ec:26:66: f9:b5:b4:2f:3d:46:e9:53:41:0d:e7:49:4e:2d:86:a9:2f:26: b3:e1:fd:1f:b5:42:6b:4a:d1:27:f1:93:34:49:a6:72:c0:3a: f6:8a:46:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBQjkxMTAvBgNVBAUTKEREOEEyQjg4NjU0QzMzNjZGRkU3RkNGNjU1NkE5Nzg2 MDAyQUE2NUIwHhcNMjUxMDE5MDIzMzA1WhcNMjUxMDI2MDIzMzA1WjAYMRYwFAYD VQQDEw02OGY0NGRlMS1kYmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+f16slTC4KYyf5Aciy0mMudBpUUN2u/lnGSbHn3bg4QY6NcbXnNeXRKkn6Y 7SYHk9S2bZtt9JkE1itmgGF1kGI4wzOBpdJU6iSZdN2sOUM4pgIIDeU64AZJdiQL MiT9cAbGCEhkZm5Vuo7/mWuDGMdL71FJC12ouS/JD7IcnvyvujchICER7GJEzfNN Q190OE+HTYX7ETAexOLpgW+wgn2TlO9BZvywOX1evdUr4IKU65+brAlViL7/Isiw dD2XFbEtbj4OvfK4P4S/bHsHTcWiSZJGFP4fg0NQjtd0geJaz2T2jCRgsXer1PXF zs28gGuprWvz5ZJruNkZw96n6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1SZsMG oxkMH6lFacVZP//h1JD7MB8GA1UdIwQYMBaAFN2KK4hlTDNm/+f89lVql4YAKqZb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkFCOS9FODUzMzgyQzlG MTMxMUVDOUU0NUQ1NzJDNEY5QUUwMi8zWW9yaUdWTU0yYl81X3oyVldxWGhnQXFw bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZb3JpR1ZNTTJiXzVfejJWV3FYaGdBcXBscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkFCOS9FODUzMzgyQzlGMTMxMUVDOUU0NUQ1NzJDNEY5QUUwMi8zWW9yaUdWTU0y Yl81X3oyVldxWGhnQXFwbHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUt7GZWk7B9wm31QLIYgfuI5PSChYjMFdwf/2HxkMhY/Y+Rj0px3Ky XYQN/DlRaH6CTcRoEicHCimKUnuLi7EYgPJrudSfg/Q3yGkrrZGuf0JOrTDFL37K s7kX8LLq19ALBDNdJJlJazHogcVu+zEwmGkLvc8kIE2lBagkAm5XqUP9pEd5+s30 nYZD/H79WkIJ0HkDKHsUKHCqfT2f6deR9cm0RJ7ZmwwVHy6D3a7byvOALVXafq+n do8Gu9f1CmzF2xvT0ju/Bnr424YRaTskCasz/b3sJmb5tbQvPUbpU0EN50lOLYap Lyaz4f0ftUJrStEn8ZM0SaZywDr2ikaQ -----END CERTIFICATE-----Generated at Mon Oct 20 09:38:36 2025 by rpki-client