$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft File: Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft (raw, json) Hash identifier: FQfLN/GsbvL0K+F3stIMZbV61zWG6uI8UFM86t3kkE4= Subject key identifier: 2E:86:8C:6B:4E:15:08:88:D8:FC:A2:FD:F7:0C:16:17:A7:C2:96:65 Authority key identifier: 63:EB:A4:85:02:51:13:40:B8:25:26:1D:5E:C2:0A:91:27:AF:29:5E Certificate issuer: /CN=A91F7315/serialNumber=63EBA48502511340B825261D5EC20A9127AF295E Certificate serial: 0BA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft Manifest number: 1443 Signing time: Sat 18 Oct 2025 19:50:11 +0000 Manifest this update: Sat 18 Oct 2025 19:50:10 +0000 Manifest next update: Sat 25 Oct 2025 19:50:10 +0000 Files and hashes: 1: Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl (hash: t2LC68ZukC2W+DC2j3LowH8zzamtXVmnr2vyYv84EOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2978 (0xba2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7315, serialNumber=63EBA48502511340B825261D5EC20A9127AF295E Validity Not Before: Oct 18 19:50:10 2025 GMT Not After : Oct 25 19:50:10 2025 GMT Subject: CN=68f3ef73-5b5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:11:62:1e:2c:57:1b:a2:4a:98:3b:58:06:65: cc:7b:13:ff:9c:3c:8b:fa:d1:49:4d:d8:71:60:20: 52:08:93:9e:2a:fd:50:0d:40:78:f4:11:35:1d:32: dc:d1:8f:85:1e:5e:65:ab:01:16:31:b4:14:ce:22: f2:25:19:82:59:a1:91:95:42:be:8c:00:7d:3a:a9: 57:2d:f7:1c:04:af:89:0a:9b:6b:24:2c:92:ff:a2: d3:bd:12:6d:3f:d3:ec:b7:11:2c:6e:74:d5:33:28: 5f:a1:c0:af:bc:26:b4:9f:8f:bd:0e:65:35:a1:60: 2b:f8:8a:80:25:32:a8:3a:c2:c0:65:05:c2:63:3f: 00:f0:4a:2d:cb:66:62:9f:37:ea:d6:aa:56:29:f0: d3:6b:64:ad:36:59:d3:10:67:33:da:eb:d9:8d:97: 78:7d:64:01:34:2f:bb:d8:f0:31:e6:8e:82:37:0d: 74:9f:8a:41:8d:49:cc:ba:ae:97:8c:63:24:07:cb: 1f:cd:f0:ff:34:72:d2:f5:4c:4a:1b:01:20:1e:d2: 29:26:d6:56:c6:15:e6:ff:7e:e7:eb:91:12:78:2a: ff:b6:21:67:6a:88:c9:8c:ee:fe:3e:7c:18:39:bd: 48:1a:83:28:79:db:1c:07:79:79:6f:53:1e:cb:44: be:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:86:8C:6B:4E:15:08:88:D8:FC:A2:FD:F7:0C:16:17:A7:C2:96:65 X509v3 Authority Key Identifier: keyid:63:EB:A4:85:02:51:13:40:B8:25:26:1D:5E:C2:0A:91:27:AF:29:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:66:2f:e9:1a:aa:17:6d:f7:02:1b:8f:5e:ba:b2:d8:61:d7: 28:5c:ab:91:c9:4e:d1:3a:2e:7b:9e:45:7d:f1:a9:90:c7:0a: ce:bc:06:4e:16:bb:a5:f1:5f:96:52:4a:86:ad:b2:12:fd:f3: aa:59:cc:e5:c1:05:7d:00:bb:c2:07:28:2f:8c:94:5d:ba:23: f4:ad:3f:65:16:48:37:83:fe:8f:08:5e:c8:5d:49:2d:fb:88: 89:04:29:bc:cd:c6:ec:6c:0e:ec:7a:50:ff:b1:f7:d1:8c:6c: ac:aa:b7:a4:32:88:26:9d:bb:cc:0a:8f:93:19:02:a2:21:68: 59:02:ba:a8:9c:49:45:4e:16:09:8f:f3:7f:27:35:45:e5:ba: d8:a3:27:46:3e:53:39:b0:1b:53:22:b4:d3:74:aa:26:8a:a2: a0:54:d8:33:e5:f5:63:48:03:f6:56:f2:fe:74:e6:52:30:d9: a8:09:2a:fd:5c:bf:d1:e8:be:6b:b2:23:68:70:8f:18:92:5e: e9:ee:18:44:1a:53:d6:f2:14:6a:73:36:67:0a:5f:0d:62:34: 73:ad:35:1f:97:16:53:1a:ee:eb:7c:30:8c:69:cb:11:c9:30: 43:bd:1c:0b:35:13:e2:df:e9:4d:b1:1d:85:d6:b1:9c:f1:c5: ef:01:c6:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMTUxMTAvBgNVBAUTKDYzRUJBNDg1MDI1MTEzNDBCODI1MjYxRDVFQzIwQTkx MjdBRjI5NUUwHhcNMjUxMDE4MTk1MDEwWhcNMjUxMDI1MTk1MDEwWjAYMRYwFAYD VQQDEw02OGYzZWY3My01YjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2BFiHixXG6JKmDtYBmXMexP/nDyL+tFJTdhxYCBSCJOeKv1QDUB49BE1HTLc 0Y+FHl5lqwEWMbQUziLyJRmCWaGRlUK+jAB9OqlXLfccBK+JCptrJCyS/6LTvRJt P9PstxEsbnTVMyhfocCvvCa0n4+9DmU1oWAr+IqAJTKoOsLAZQXCYz8A8Eoty2Zi nzfq1qpWKfDTa2StNlnTEGcz2uvZjZd4fWQBNC+72PAx5o6CNw10n4pBjUnMuq6X jGMkB8sfzfD/NHLS9UxKGwEgHtIpJtZWxhXm/37n65ESeCr/tiFnaojJjO7+PnwY Ob1IGoMoedscB3l5b1Mey0S+PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6GjGtO FQiI2Pyi/fcMFhenwpZlMB8GA1UdIwQYMBaAFGPrpIUCURNAuCUmHV7CCpEnryle MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxNS84MjA2RjgzMjMy RTIxMUVBOTlBNDNFNjRDNEY5QUUwMi9ZLXVraFFKUkUwQzRKU1lkWHNJS2tTZXZL VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ktdWtoUUpSRTBDNEpTWWRYc0lLa1NldktWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMxNS84MjA2RjgzMjMyRTIxMUVBOTlBNDNFNjRDNEY5QUUwMi9ZLXVraFFKUkUw QzRKU1lkWHNJS2tTZXZLVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2Zi/pGqoXbfcCG49eurLYYdcoXKuRyU7ROi57nkV98amQxwrOvAZO Frul8V+WUkqGrbIS/fOqWczlwQV9ALvCBygvjJRduiP0rT9lFkg3g/6PCF7IXUkt +4iJBCm8zcbsbA7selD/sffRjGysqrekMogmnbvMCo+TGQKiIWhZArqonElFThYJ j/N/JzVF5brYoydGPlM5sBtTIrTTdKomiqKgVNgz5fVjSAP2VvL+dOZSMNmoCSr9 XL/R6L5rsiNocI8Ykl7p7hhEGlPW8hRqczZnCl8NYjRzrTUflxZTGu7rfDCMacsR yTBDvRwLNRPi3+lNsR2F1rGc8cXvAcYn -----END CERTIFICATE-----Generated at Mon Oct 20 13:50:51 2025 by rpki-client