$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft File: YDHQYB1cLYetZiNh5jv_2R4EBzM.mft (raw, json) Hash identifier: Ghwj9NGPYZNPtXiXtuUMTgD4Pr5GTbfeIMqRgwSrSDQ= Subject key identifier: A2:1F:DD:97:B9:9E:79:AE:53:F9:7F:16:9E:38:F2:0D:18:CB:A0:D0 Authority key identifier: 60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33 Certificate issuer: /CN=A91E8103/serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733 Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft Manifest number: 8E Signing time: Sun 19 Oct 2025 09:52:27 +0000 Manifest this update: Sun 19 Oct 2025 09:52:26 +0000 Manifest next update: Sun 26 Oct 2025 09:52:26 +0000 Files and hashes: 1: YDHQYB1cLYetZiNh5jv_2R4EBzM.crl (hash: Dc1qT5oVztU67X21fcFgDrE+Lo9kg8hulPXMbeBq8sY=) 2: 9A616002DE0411EFA80D3B34C4F9AE02.roa (hash: SyODw+cJwyZ2yJekBzL0vGtZJRWwofo8zfujkPhkBig=) 3: 6FFDB6E4A30C11F0ABE46042C4F9AE02.roa (hash: d6uVF1i6ZT73+dk+Mk43in2noeNbthxeD9nGk9TeUo8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8103, serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733 Validity Not Before: Oct 19 09:52:26 2025 GMT Not After : Oct 26 09:52:26 2025 GMT Subject: CN=68f4b4da-70fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:32:ee:0b:23:a8:aa:5e:e0:1a:27:9c:78:ba: d9:20:bb:75:a1:71:49:22:ef:af:6c:3d:57:12:3f: 86:f6:36:7e:d8:82:39:69:33:bd:54:f9:d5:7d:f5: 84:78:92:53:97:00:6c:66:37:50:2c:41:0c:2a:9b: f9:c9:46:a4:31:04:3c:a7:99:a5:b3:e9:58:ca:9a: d2:8d:a8:58:4c:75:de:f3:e8:47:85:df:8d:47:7e: 19:5e:28:c1:76:35:7d:95:68:ae:d5:e0:db:56:50: 19:32:ab:00:3e:d9:a6:06:ca:9b:11:58:23:90:da: 59:93:86:4a:d3:03:90:e3:a0:3e:bf:39:f8:ee:9a: 1d:cc:b8:a8:5f:c8:21:08:00:6d:a2:5e:f4:63:9d: 18:85:96:7d:fe:92:1d:49:72:69:df:3e:fc:5c:c1: a6:65:39:bb:6f:10:bf:45:8a:56:e9:cf:6d:cf:a5: 13:98:97:91:9a:74:53:b8:31:4c:98:5e:0b:f5:14: 9b:fb:07:3f:8f:cc:96:df:e7:5d:fc:66:6b:c6:ab: c8:b3:3f:a0:25:a7:52:d5:53:b1:8e:2f:02:8a:2b: 04:9a:d0:f7:f3:08:cc:0f:ed:67:3e:65:4f:8d:9a: d3:f2:cc:a4:4e:e3:b6:81:6b:4e:4b:4c:0b:3d:cc: c9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:1F:DD:97:B9:9E:79:AE:53:F9:7F:16:9E:38:F2:0D:18:CB:A0:D0 X509v3 Authority Key Identifier: keyid:60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f5:76:8e:86:f1:c2:61:e1:9f:3f:48:e6:03:6a:d3:1f:5f:3a: 0a:c5:29:07:c1:80:7d:aa:c9:04:80:a4:f0:e7:29:ba:ae:fb: 48:1e:33:a2:49:96:4b:4d:5d:e2:4f:45:2c:f1:93:8a:35:23: d6:5c:c3:8f:47:69:cc:a7:a6:46:6c:1b:a4:a3:1f:a7:25:55: c4:3b:de:71:cf:72:d4:f8:6d:96:cb:ff:3e:0e:4b:5b:35:f0: ca:d4:84:6d:4b:42:34:14:d6:fb:93:de:1d:b8:16:b7:d6:22: 3f:fc:57:90:35:ad:23:e5:76:d5:39:60:9e:b8:3d:71:7e:29: b1:ef:bb:86:04:e0:94:fa:ec:5e:c0:79:63:09:68:7f:da:b4: a9:d6:87:c1:24:12:cf:e7:18:28:99:6d:14:f6:fe:d7:b0:7f: d4:f3:be:d7:eb:8a:07:63:1a:50:5d:b7:09:26:c1:79:69:68: 93:6a:ad:cb:70:c4:e6:f4:4d:91:dc:c9:2e:31:c1:21:67:91: ea:01:17:ee:d2:d7:63:db:c5:33:e8:e6:0b:61:de:20:c4:5a: 67:b7:9b:62:f0:b9:19:6f:d8:cd:c5:a9:93:23:5d:7f:f8:e8: 78:8b:de:ea:ca:c2:03:92:72:fd:73:13:5d:50:67:bf:93:5d: 61:15:a5:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgxMDMxMTAvBgNVBAUTKDYwMzFEMDYwMUQ1QzJEODdBRDY2MjM2MUU2M0JGRkQ5 MUUwNDA3MzMwHhcNMjUxMDE5MDk1MjI2WhcNMjUxMDI2MDk1MjI2WjAYMRYwFAYD VQQDEw02OGY0YjRkYS03MGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyzLuCyOoql7gGieceLrZILt1oXFJIu+vbD1XEj+G9jZ+2II5aTO9VPnVffWE eJJTlwBsZjdQLEEMKpv5yUakMQQ8p5mls+lYyprSjahYTHXe8+hHhd+NR34ZXijB djV9lWiu1eDbVlAZMqsAPtmmBsqbEVgjkNpZk4ZK0wOQ46A+vzn47podzLioX8gh CABtol70Y50YhZZ9/pIdSXJp3z78XMGmZTm7bxC/RYpW6c9tz6UTmJeRmnRTuDFM mF4L9RSb+wc/j8yW3+dd/GZrxqvIsz+gJadS1VOxji8CiisEmtD38wjMD+1nPmVP jZrT8sykTuO2gWtOS0wLPczJxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKIf3Ze5 nnmuU/l/Fp448g0Yy6DQMB8GA1UdIwQYMBaAFGAx0GAdXC2HrWYjYeY7/9keBAcz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODEwMy85M0RDNzU0RURF MDExMUVGOTMzMzVGMEJDNEY5QUUwMi9ZREhRWUIxY0xZZXRaaU5oNWp2XzJSNEVC ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lESFFZQjFjTFlldFppTmg1anZfMlI0RUJ6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODEwMy85M0RDNzU0RURFMDExMUVGOTMzMzVGMEJDNEY5QUUwMi9ZREhRWUIxY0xZ ZXRaaU5oNWp2XzJSNEVCek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQD1do6G8cJh4Z8/SOYDatMfXzoKxSkHwYB9qskEgKTw5ym6rvtIHjOi SZZLTV3iT0Us8ZOKNSPWXMOPR2nMp6ZGbBukox+nJVXEO95xz3LU+G2Wy/8+Dktb NfDK1IRtS0I0FNb7k94duBa31iI//FeQNa0j5XbVOWCeuD1xfimx77uGBOCU+uxe wHljCWh/2rSp1ofBJBLP5xgomW0U9v7XsH/U877X64oHYxpQXbcJJsF5aWiTaq3L cMTm9E2R3MkuMcEhZ5HqARfu0tdj28Uz6OYLYd4gxFpnt5ti8LkZb9jNxamTI11/ +Oh4i97qysIDknL9cxNdUGe/k11hFaVa -----END CERTIFICATE-----Generated at Mon Oct 20 10:15:46 2025 by rpki-client