$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft File: Y19XnOBVlw4BocO3dQIcjj4ieIc.mft (raw, json) Hash identifier: HlDXCZfTQqDdltnGypGYLFzR/wCch85rkZFhzsqj5Jc= Subject key identifier: D3:2A:8C:74:62:07:CD:71:3C:92:24:78:B5:D5:AE:89:50:D1:05:36 Authority key identifier: 63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87 Certificate issuer: /CN=A91F4294/serialNumber=635F579CE055970E01A1C3B775021C8E3E227887 Certificate serial: 0E46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft Manifest number: 0E3E Signing time: Sat 18 Oct 2025 18:26:40 +0000 Manifest this update: Sat 18 Oct 2025 18:26:39 +0000 Manifest next update: Sat 25 Oct 2025 18:26:39 +0000 Files and hashes: 1: Y19XnOBVlw4BocO3dQIcjj4ieIc.crl (hash: WGi4JaSmUx7Ug3sjbuYa4WV4LfCoXxZVXf0zOUmw1vA=) 2: 1E018994AEBF11E993F33C65C4F9AE02.roa (hash: VAz7Q8OmwNVtqjw21t41eYyn3+glN8lqbyiXL2P+yek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:26:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3654 (0xe46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4294, serialNumber=635F579CE055970E01A1C3B775021C8E3E227887 Validity Not Before: Oct 18 18:26:39 2025 GMT Not After : Oct 25 18:26:39 2025 GMT Subject: CN=68f3dbdf-0fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2e:42:1d:3f:16:a0:2c:36:00:bb:82:e9:d7: ea:72:47:1e:4f:08:73:be:5c:33:f9:25:77:08:fb: 5a:90:26:43:d1:91:5e:1e:6f:b0:01:8a:51:36:cc: be:dd:84:33:8a:0f:b1:57:99:c8:e2:75:ea:cc:0d: c2:07:02:af:8a:76:48:64:25:f6:8b:c1:e9:a9:8a: 5a:85:fd:9f:c2:8b:9e:cb:b2:12:21:6a:a1:27:48: d3:a6:51:da:d3:cf:5f:6d:8f:99:a4:36:57:00:d4: 84:67:6a:f2:d3:8e:ee:79:f1:c8:d1:d9:fd:9c:12: 87:c1:87:fe:63:a2:10:94:17:90:e0:38:28:00:8c: 2d:c6:b4:dc:e8:66:5d:b2:13:18:b4:f9:31:c4:ba: c8:21:d7:3e:69:94:80:54:88:cc:fe:1b:ce:a8:2f: d7:18:89:e1:62:8a:d9:1f:fb:50:46:25:72:8a:f9: 48:6b:75:8e:5c:c2:c2:f6:21:ce:54:2d:94:65:8c: 3f:9a:b3:59:6c:47:b2:d1:cd:d5:e0:30:b7:12:99: 4f:ec:6c:ba:02:63:bd:db:45:f9:8f:a1:e0:ca:97: bc:b9:52:e8:60:ae:97:e3:73:a0:aa:92:d7:18:3e: 66:15:f6:14:b9:9d:bb:7d:8d:b0:76:e7:ec:4f:00: d0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:2A:8C:74:62:07:CD:71:3C:92:24:78:B5:D5:AE:89:50:D1:05:36 X509v3 Authority Key Identifier: keyid:63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:1d:1c:7e:05:3f:77:5f:20:53:0a:69:6f:f9:3f:a1:b3:50: 41:b0:5d:b6:e9:b9:d9:6e:50:26:a7:34:bd:cc:f3:1c:b6:34: bf:00:68:a2:07:ae:eb:6a:ec:b6:54:3b:49:b3:43:c7:d8:10: 6c:0e:f0:dd:cb:af:27:f8:69:ff:b9:57:55:33:ec:81:0b:e3: ff:62:ea:f1:07:78:db:cd:2e:98:6a:61:59:85:2d:ba:5a:e3: f1:6e:f3:18:27:58:bf:9e:ca:49:1a:ee:9f:07:85:76:3d:2d: 3e:bd:c1:0c:54:99:a4:e2:36:91:d6:ed:51:80:ec:28:1c:6b: bc:70:51:03:eb:ec:17:12:14:ca:28:61:77:72:00:c0:80:09: bb:f4:a6:a1:01:b3:a8:ff:a9:b1:2c:22:18:0a:9c:c6:56:fc: 4a:63:20:f7:41:93:3e:da:09:5e:1a:5e:70:16:50:2e:74:0f: 11:0a:ac:ae:c6:d9:77:3e:39:2d:67:9d:6b:24:e2:24:ae:e9: 39:e0:ee:3c:2f:31:c2:2e:93:87:99:71:ef:7e:9e:19:14:2e: fd:2c:6c:0c:29:ea:2a:1c:d2:a1:44:88:42:36:1d:39:15:81: b5:43:cc:a5:52:1c:80:e0:93:21:c3:a4:57:6a:d6:6b:ab:85: 08:07:98:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOTQxMTAvBgNVBAUTKDYzNUY1NzlDRTA1NTk3MEUwMUExQzNCNzc1MDIxQzhF M0UyMjc4ODcwHhcNMjUxMDE4MTgyNjM5WhcNMjUxMDI1MTgyNjM5WjAYMRYwFAYD VQQDEw02OGYzZGJkZi0wZmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsS5CHT8WoCw2ALuC6dfqckceTwhzvlwz+SV3CPtakCZD0ZFeHm+wAYpRNsy+ 3YQzig+xV5nI4nXqzA3CBwKvinZIZCX2i8HpqYpahf2fwouey7ISIWqhJ0jTplHa 089fbY+ZpDZXANSEZ2ry047uefHI0dn9nBKHwYf+Y6IQlBeQ4DgoAIwtxrTc6GZd shMYtPkxxLrIIdc+aZSAVIjM/hvOqC/XGInhYorZH/tQRiVyivlIa3WOXMLC9iHO VC2UZYw/mrNZbEey0c3V4DC3EplP7Gy6AmO920X5j6Hgype8uVLoYK6X43OgqpLX GD5mFfYUuZ27fY2wdufsTwDQ3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMqjHRi B81xPJIkeLXVrolQ0QU2MB8GA1UdIwQYMBaAFGNfV5zgVZcOAaHDt3UCHI4+IniH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI5NC8wQ0I1RUFGQUFF QkUxMUU5ODBGQjRFNjNDNEY5QUUwMi9ZMTlYbk9CVmx3NEJvY08zZFFJY2pqNGll SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kxOVhuT0JWbHc0Qm9jTzNkUUljamo0aWVJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI5NC8wQ0I1RUFGQUFFQkUxMUU5ODBGQjRFNjNDNEY5QUUwMi9ZMTlYbk9CVmx3 NEJvY08zZFFJY2pqNGllSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbHRx+BT93XyBTCmlv+T+hs1BBsF226bnZblAmpzS9zPMctjS/AGii B67rauy2VDtJs0PH2BBsDvDdy68n+Gn/uVdVM+yBC+P/YurxB3jbzS6YamFZhS26 WuPxbvMYJ1i/nspJGu6fB4V2PS0+vcEMVJmk4jaR1u1RgOwoHGu8cFED6+wXEhTK KGF3cgDAgAm79KahAbOo/6mxLCIYCpzGVvxKYyD3QZM+2gleGl5wFlAudA8RCqyu xtl3PjktZ51rJOIkruk54O48LzHCLpOHmXHvfp4ZFC79LGwMKeoqHNKhRIhCNh05 FYG1Q8ylUhyA4JMhw6RXatZrq4UIB5h5 -----END CERTIFICATE-----Generated at Mon Oct 20 03:50:45 2025 by rpki-client