$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft File: yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft (raw, json) Hash identifier: 8MjZwNrrxzFyur98MqjDt+pLXGv1pnKp0kdLly7njLA= Subject key identifier: 7B:C2:A0:BF:1C:4D:14:80:C0:CF:4D:93:A5:44:DB:F5:B1:85:A0:09 Authority key identifier: CA:A6:EB:99:B3:FE:0E:FB:65:D3:8F:15:B2:AA:E4:DC:39:DA:B3:1D Certificate issuer: /CN=A91DE352/serialNumber=CAA6EB99B3FE0EFB65D38F15B2AAE4DC39DAB31D Certificate serial: 056E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft Manifest number: 0568 Signing time: Sun 19 Oct 2025 01:04:07 +0000 Manifest this update: Sun 19 Oct 2025 01:04:06 +0000 Manifest next update: Sun 26 Oct 2025 01:04:06 +0000 Files and hashes: 1: yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl (hash: ZBbuZoXj0FpV1YZdO11gdnvpLfALDuzDmoZM4/zr8Mk=) 2: F1C77A3C73E711ECA415F87FC4F9AE02.roa (hash: azq2/w0vOg+2swjHdLzDRr5hvzTCb3H9CNSdtAvO6hc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:04:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1390 (0x56e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE352, serialNumber=CAA6EB99B3FE0EFB65D38F15B2AAE4DC39DAB31D Validity Not Before: Oct 19 01:04:06 2025 GMT Not After : Oct 26 01:04:06 2025 GMT Subject: CN=68f43906-fc2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f2:60:f9:37:9b:b0:5a:3c:33:00:2e:5b:0e: d3:41:ee:51:0c:cd:4a:e0:ae:ca:f0:77:c1:30:94: 3b:25:19:ae:c6:f4:a6:f1:68:b2:e6:89:e5:96:46: 34:da:4d:a0:34:68:42:43:ce:f5:3d:64:74:65:5f: 5a:de:a7:00:ab:f3:67:48:a0:0c:7c:90:c1:2f:5f: 90:a5:cc:62:3a:68:80:54:13:27:cc:7b:de:fd:d9: a1:40:13:96:17:0c:08:17:e8:1b:17:fc:8f:ce:ce: 7e:77:43:33:38:d7:15:64:88:c9:b8:5c:fc:34:8a: b7:6c:59:2f:48:1d:fc:a6:ea:36:e3:aa:7f:31:9d: e2:8f:69:db:a7:5e:9e:bd:96:df:a8:c1:56:cc:7c: db:53:d3:a3:1f:de:a3:0b:ed:ab:8e:8f:64:bc:c4: c0:fa:76:7f:96:80:59:4f:85:8d:85:58:05:d8:2f: ce:36:6a:42:17:6a:77:66:86:b8:0f:44:81:18:2f: 8f:93:8a:31:ca:eb:62:3a:9f:40:17:1d:13:41:ce: af:ed:c2:ab:1c:ca:5f:37:9f:cc:4d:e4:3c:97:02: 06:bd:5e:1a:1b:da:73:78:2a:b8:7b:68:0d:ad:8a: 4b:6a:32:43:e8:9e:d5:35:2a:18:fe:a8:ba:0c:cc: a4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C2:A0:BF:1C:4D:14:80:C0:CF:4D:93:A5:44:DB:F5:B1:85:A0:09 X509v3 Authority Key Identifier: keyid:CA:A6:EB:99:B3:FE:0E:FB:65:D3:8F:15:B2:AA:E4:DC:39:DA:B3:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:69:b5:e7:74:78:3c:8a:9f:e2:a4:80:c1:57:fa:80:d3:fa: 5f:d4:5d:29:ec:e1:8b:14:3d:79:03:9e:4d:1c:da:86:7f:14: f4:b5:46:c8:0e:8f:5c:4f:0e:7e:f6:09:bc:da:20:60:2c:97: f6:1c:d9:60:e9:50:17:95:4f:bd:ea:81:53:02:37:05:d9:5f: 4c:98:28:c4:97:52:2a:bd:d1:9d:7b:29:de:6a:0f:74:d2:ee: 71:5e:e5:f0:9b:5b:53:2c:60:37:8f:a3:00:6f:44:34:35:ab: ac:19:21:e9:de:84:43:be:36:c9:2e:69:aa:1f:d0:45:30:3f: 5c:d3:f4:01:11:71:05:4f:16:8f:8f:ff:4d:c6:27:ad:63:2c: 6a:2b:76:6f:cc:5e:99:aa:c5:6c:6c:62:4d:ff:72:57:03:62: 66:41:d8:ea:3e:58:73:3b:29:14:59:06:eb:56:ac:15:08:74: d4:c6:36:e9:bc:70:27:50:1f:4a:a2:6f:7a:0e:5e:7c:1c:e2: ac:2c:5c:36:4c:31:e2:13:c7:73:18:4c:85:f6:cd:07:eb:e8: f8:fe:da:60:9a:10:48:84:52:4a:fd:50:f6:1b:cd:2d:07:9e: 59:04:21:ba:09:ea:94:d8:b7:9b:29:2e:aa:2b:57:6d:f2:bc: 9e:2e:25:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUzNTIxMTAvBgNVBAUTKENBQTZFQjk5QjNGRTBFRkI2NUQzOEYxNUIyQUFFNERD MzlEQUIzMUQwHhcNMjUxMDE5MDEwNDA2WhcNMjUxMDI2MDEwNDA2WjAYMRYwFAYD VQQDEw02OGY0MzkwNi1mYzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPJg+TebsFo8MwAuWw7TQe5RDM1K4K7K8HfBMJQ7JRmuxvSm8Wiy5onllkY0 2k2gNGhCQ871PWR0ZV9a3qcAq/NnSKAMfJDBL1+QpcxiOmiAVBMnzHve/dmhQBOW FwwIF+gbF/yPzs5+d0MzONcVZIjJuFz8NIq3bFkvSB38puo246p/MZ3ij2nbp16e vZbfqMFWzHzbU9OjH96jC+2rjo9kvMTA+nZ/loBZT4WNhVgF2C/ONmpCF2p3Zoa4 D0SBGC+Pk4oxyutiOp9AFx0TQc6v7cKrHMpfN5/MTeQ8lwIGvV4aG9pzeCq4e2gN rYpLajJD6J7VNSoY/qi6DMykfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHvCoL8c TRSAwM9Nk6VE2/WxhaAJMB8GA1UdIwQYMBaAFMqm65mz/g77ZdOPFbKq5Nw52rMd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTM1Mi9DOEUyMkU4QTAx MTYxMUVDOUNDREU3MjJDNEY5QUUwMi95cWJybWJQLUR2dGwwNDhWc3FyazNEbmFz eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lxYnJtYlAtRHZ0bDA0OFZzcXJrM0RuYXN4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTM1Mi9DOEUyMkU4QTAxMTYxMUVDOUNDREU3MjJDNEY5QUUwMi95cWJybWJQLUR2 dGwwNDhWc3FyazNEbmFzeDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNabXndHg8ip/ipIDBV/qA0/pf1F0p7OGLFD15A55NHNqGfxT0tUbI Do9cTw5+9gm82iBgLJf2HNlg6VAXlU+96oFTAjcF2V9MmCjEl1IqvdGdeyneag90 0u5xXuXwm1tTLGA3j6MAb0Q0NausGSHp3oRDvjbJLmmqH9BFMD9c0/QBEXEFTxaP j/9NxietYyxqK3ZvzF6ZqsVsbGJN/3JXA2JmQdjqPlhzOykUWQbrVqwVCHTUxjbp vHAnUB9Kom96Dl58HOKsLFw2TDHiE8dzGEyF9s0H6+j4/tpgmhBIhFJK/VD2G80t B55ZBCG6CeqU2LebKS6qK1dt8ryeLiXA -----END CERTIFICATE-----Generated at Mon Oct 20 19:25:51 2025 by rpki-client