$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft File: yOujNL19pukuZ8QIvQN4e66uDK0.mft (raw, json) Hash identifier: NXr7oCkXkvEBQ6RIApUewciU3efswMR0bD81Kn6vE+c= Subject key identifier: 25:0E:8B:6D:BE:B5:1E:5D:D5:C9:21:10:07:C4:EB:00:FC:49:07:A3 Authority key identifier: C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD Certificate issuer: /CN=A91CFE07/serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD Certificate serial: 0DAD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft Manifest number: 0D98 Signing time: Sat 18 Oct 2025 18:36:11 +0000 Manifest this update: Sat 18 Oct 2025 18:36:10 +0000 Manifest next update: Sat 25 Oct 2025 18:36:10 +0000 Files and hashes: 1: yOujNL19pukuZ8QIvQN4e66uDK0.crl (hash: fEI8EPBbzBGy7oCa0a/v8kLtzBoGLqFEu1MuHKyPp/c=) 2: A95EC0B2C9FA11EBB7F2E749C4F9AE02.roa (hash: h9Ek+uVHJkd43jpvXLhIeId4TZWOhn+0W2MAspUZuOw=) 3: 226B7BC2AAC611EE9F22785DC4F9AE02.roa (hash: sy4Su4ASjc+OqwWE5jPxA/U7NJeDsxDapY34Q7SzDAE=) 4: A82C70A4C9FA11EBB7F2E749C4F9AE02.roa (hash: +QLq15+GCrbTMv3T/U18UwN/WHFJnfWgXMxuf5yq0ts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:36:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3501 (0xdad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFE07, serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD Validity Not Before: Oct 18 18:36:10 2025 GMT Not After : Oct 25 18:36:10 2025 GMT Subject: CN=68f3de1b-214b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cc:04:bf:a4:97:25:86:c3:5d:4c:df:09:17: df:ec:88:c1:91:33:3b:9d:f1:1c:7a:c2:7a:2d:2c: 4d:37:bb:34:b1:dd:4b:5d:a3:49:fe:fe:10:43:e4: 66:0e:af:42:0b:2b:c7:54:84:50:f0:95:87:fc:4f: eb:b6:7c:5d:65:57:b6:33:76:25:8c:37:08:ae:f4: 18:bc:0e:c9:eb:90:ba:db:8c:ae:35:5b:6b:6e:76: 6d:d2:f7:b4:e7:db:84:ba:fb:7a:dc:c6:bf:17:6b: 6b:a8:a4:be:1f:e6:19:d0:f6:4a:42:9e:92:d9:09: a5:3a:86:36:f7:46:70:fb:88:6f:d5:2a:e7:b1:b1: 4b:8f:1e:5f:c1:07:7a:be:bd:12:6d:32:3e:20:aa: e2:5a:78:94:d2:2b:4d:21:bd:3d:87:b5:87:10:e8: 16:56:54:0d:02:49:c5:b6:99:14:59:a5:83:5e:64: d3:5b:04:03:12:b7:fd:04:19:8f:e4:46:d7:5f:59: 17:0d:db:c9:52:97:51:1b:39:a0:22:8b:ed:83:76: 26:75:6e:61:dd:a9:d9:30:69:b6:51:95:64:c4:85: 9e:08:9c:c9:55:05:3a:9c:71:56:88:e7:24:1d:5a: f1:e4:e4:37:87:75:e2:d5:0a:e5:20:f7:f3:64:d4: d1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:0E:8B:6D:BE:B5:1E:5D:D5:C9:21:10:07:C4:EB:00:FC:49:07:A3 X509v3 Authority Key Identifier: keyid:C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:7c:11:76:ef:c1:f9:34:66:91:8f:87:cf:4b:54:d6:50:09: 34:25:83:6f:a1:b6:b7:a9:3a:e7:5b:3b:5d:34:1c:47:e7:e0: 6c:79:1b:70:28:87:b6:72:72:98:ac:29:ac:ad:0b:64:0d:c3: 46:51:ab:3b:4d:58:f5:74:7f:18:f0:54:53:07:38:82:0d:7f: 8e:b4:34:50:67:6d:8b:e9:0c:cb:0e:e8:63:8f:8f:55:7a:ff: f5:d1:fa:4a:72:d6:9e:fa:c6:e6:40:f1:5e:75:7d:c6:27:e0: 73:7c:b1:a5:cf:47:26:38:84:50:37:5f:2a:54:a3:e2:54:c7: 7e:f5:c1:63:39:4b:e0:5c:ac:6f:2c:e0:d5:19:8f:c6:e5:48: 0f:16:ae:22:1b:97:7d:13:e2:b0:16:2d:d9:2a:6f:09:c4:78: 58:ba:84:1c:bd:4a:54:76:30:6c:65:a5:1d:89:c9:52:e5:d1: 4e:b6:a4:ce:52:43:25:f2:87:f0:e0:fb:e5:4e:61:bc:34:00: 08:78:6d:00:8c:e2:91:fd:04:06:ab:80:09:c4:93:cb:8d:67: e8:7a:10:06:f7:1e:af:66:80:51:80:a4:bd:98:e3:34:17:0a: 04:31:ba:46:2e:91:ad:c9:cd:86:2a:25:27:c5:1c:60:e3:e9: a0:de:a6:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZFMDcxMTAvBgNVBAUTKEM4RUJBMzM0QkQ3REE2RTkyRTY3QzQwOEJEMDM3ODdC QUVBRTBDQUQwHhcNMjUxMDE4MTgzNjEwWhcNMjUxMDI1MTgzNjEwWjAYMRYwFAYD VQQDEw02OGYzZGUxYi0yMTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8wEv6SXJYbDXUzfCRff7IjBkTM7nfEcesJ6LSxNN7s0sd1LXaNJ/v4QQ+Rm Dq9CCyvHVIRQ8JWH/E/rtnxdZVe2M3YljDcIrvQYvA7J65C624yuNVtrbnZt0ve0 59uEuvt63Ma/F2trqKS+H+YZ0PZKQp6S2QmlOoY290Zw+4hv1SrnsbFLjx5fwQd6 vr0SbTI+IKriWniU0itNIb09h7WHEOgWVlQNAknFtpkUWaWDXmTTWwQDErf9BBmP 5EbXX1kXDdvJUpdRGzmgIovtg3YmdW5h3anZMGm2UZVkxIWeCJzJVQU6nHFWiOck HVrx5OQ3h3Xi1QrlIPfzZNTRPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCUOi22+ tR5d1ckhEAfE6wD8SQejMB8GA1UdIwQYMBaAFMjrozS9fabpLmfECL0DeHuurgyt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkUwNy85NjJDNEI3RUQy QkYxMUU5QTg0RDY2MjJDNEY5QUUwMi95T3VqTkwxOXB1a3VaOFFJdlFONGU2NnVE SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lPdWpOTDE5cHVrdVo4UUl2UU40ZTY2dURLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkUwNy85NjJDNEI3RUQyQkYxMUU5QTg0RDY2MjJDNEY5QUUwMi95T3VqTkwxOXB1 a3VaOFFJdlFONGU2NnVESzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+fBF278H5NGaRj4fPS1TWUAk0JYNvoba3qTrnWztdNBxH5+BseRtw KIe2cnKYrCmsrQtkDcNGUas7TVj1dH8Y8FRTBziCDX+OtDRQZ22L6QzLDuhjj49V ev/10fpKctae+sbmQPFedX3GJ+BzfLGlz0cmOIRQN18qVKPiVMd+9cFjOUvgXKxv LODVGY/G5UgPFq4iG5d9E+KwFi3ZKm8JxHhYuoQcvUpUdjBsZaUdiclS5dFOtqTO UkMl8ofw4PvlTmG8NAAIeG0AjOKR/QQGq4AJxJPLjWfoehAG9x6vZoBRgKS9mOM0 FwoEMbpGLpGtyc2GKiUnxRxg4+mg3qZE -----END CERTIFICATE-----Generated at Mon Oct 20 12:42:05 2025 by rpki-client