$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft File: 1Ycen8b73n3HG36JXIoEw9ACHYU.mft (raw, json) Hash identifier: WQrMq2zWAcvsvQ4oQlUdiSNXM6ZWFDd+7peasMqXjvw= Subject key identifier: EF:36:E7:0F:08:69:0A:49:F0:2B:0A:A5:93:E6:9A:10:3A:6A:E3:FA Authority key identifier: D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85 Certificate issuer: /CN=A91F8A49/serialNumber=D5871E9FC6FBDE7DC71B7E895C8A04C3D0021D85 Certificate serial: 0197 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft Manifest number: 0193 Signing time: Sun 19 Oct 2025 06:02:57 +0000 Manifest this update: Sun 19 Oct 2025 06:02:56 +0000 Manifest next update: Sun 26 Oct 2025 06:02:56 +0000 Files and hashes: 1: 1Ycen8b73n3HG36JXIoEw9ACHYU.crl (hash: 37Os9aovE91k0RqzliDlZ/lYdS2aP/TUKDEMeT4GrWg=) 2: B78CCA4E4C5711EE9FE2EA35C4F9AE02.roa (hash: yOezlN4+53IwwnSsCKNCBTmWXo8aQEvNaQEYhS9yato=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8A49, serialNumber=D5871E9FC6FBDE7DC71B7E895C8A04C3D0021D85 Validity Not Before: Oct 19 06:02:56 2025 GMT Not After : Oct 26 06:02:56 2025 GMT Subject: CN=68f47f10-7b97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0b:b8:59:57:ea:7b:cb:5b:86:3b:03:a3:b5: 95:ad:c4:ca:53:44:1c:b0:62:c7:be:38:36:34:f6: 30:9c:44:78:cc:7b:00:53:28:4c:46:f5:ef:bd:c0: b8:3d:31:2b:f7:6b:e3:52:c1:0c:80:73:a1:97:87: 05:e7:8e:0f:91:e3:51:c1:b7:58:a5:bf:cc:4e:61: 5e:e1:7e:cf:77:a9:03:d1:b8:66:6d:06:42:7c:69: a2:d5:2e:79:d2:a8:5d:3f:86:77:93:49:c0:e3:92: 9d:91:e9:8b:2b:b0:10:ce:2c:9f:02:14:3c:48:60: 57:f9:1d:98:c9:7a:40:00:30:f5:66:25:68:d8:6b: a0:fd:9c:20:c6:a0:b3:48:5b:5d:d5:2e:47:f7:bf: 44:ca:b7:2d:5a:f0:1c:74:87:33:4a:c6:2d:cf:74: cb:2e:40:eb:9c:e5:3c:21:ce:66:37:8e:d9:b2:cd: 8d:d4:29:4a:0e:12:82:5d:56:eb:54:ba:3b:e6:f0: 09:77:25:1b:93:27:00:e8:d2:ec:99:56:1b:fe:27: 7b:a2:30:7e:0a:77:f8:ab:2a:cc:c4:ff:70:5e:3c: 81:9e:71:a2:03:b1:64:c1:4b:61:c9:5b:b5:6b:5c: d7:01:9c:4e:12:50:30:f7:46:c2:b5:e4:96:29:60: ac:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:36:E7:0F:08:69:0A:49:F0:2B:0A:A5:93:E6:9A:10:3A:6A:E3:FA X509v3 Authority Key Identifier: keyid:D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:7e:89:dc:48:92:92:81:cc:38:31:f2:d8:62:59:1b:d1:d9: 4b:f8:56:af:de:43:15:dd:52:84:7a:b9:d3:39:e0:81:02:0f: 5a:69:1e:1e:63:da:e0:e4:e2:5d:f5:74:5e:5a:23:2a:43:45: ea:3e:5e:d1:8b:8f:f9:0c:59:8f:c5:64:91:f3:f5:b6:7b:90: d2:28:5e:3e:76:0a:9c:23:d6:c2:94:17:28:72:08:f7:0e:3d: a5:68:85:a3:6d:ab:aa:ba:5d:07:ab:92:49:34:c7:c3:c7:99: a8:e0:a2:2a:36:9c:8e:5f:6f:e5:b6:27:87:12:80:b7:52:18: 8b:99:a0:d2:39:a1:29:f3:d0:92:77:d8:49:27:d8:9d:f0:f7: 70:fb:74:72:01:3c:d4:d7:99:3d:5b:2f:b5:77:41:15:8e:66: b7:c6:94:60:27:c4:3e:a5:fe:30:86:f6:4d:84:85:a8:66:f8: b1:3b:c7:05:7a:85:90:ac:33:df:be:a3:e5:c0:0b:e5:3c:d5: 9a:a7:05:ba:37:a5:81:9b:83:50:6f:1c:7c:3f:14:81:80:c5: a8:f9:97:0d:7e:04:18:d9:38:79:25:a5:2a:e9:a4:d5:05:6b: f5:8f:e1:95:b5:58:d9:02:56:c0:19:4c:0a:a3:d6:77:99:57: 05:57:08:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBNDkxMTAvBgNVBAUTKEQ1ODcxRTlGQzZGQkRFN0RDNzFCN0U4OTVDOEEwNEMz RDAwMjFEODUwHhcNMjUxMDE5MDYwMjU2WhcNMjUxMDI2MDYwMjU2WjAYMRYwFAYD VQQDEw02OGY0N2YxMC03Yjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwu4WVfqe8tbhjsDo7WVrcTKU0QcsGLHvjg2NPYwnER4zHsAUyhMRvXvvcC4 PTEr92vjUsEMgHOhl4cF544PkeNRwbdYpb/MTmFe4X7Pd6kD0bhmbQZCfGmi1S55 0qhdP4Z3k0nA45KdkemLK7AQziyfAhQ8SGBX+R2YyXpAADD1ZiVo2Gug/ZwgxqCz SFtd1S5H979EyrctWvAcdIczSsYtz3TLLkDrnOU8Ic5mN47Zss2N1ClKDhKCXVbr VLo75vAJdyUbkycA6NLsmVYb/id7ojB+Cnf4qyrMxP9wXjyBnnGiA7FkwUthyVu1 a1zXAZxOElAw90bCteSWKWCsKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO825w8I aQpJ8CsKpZPmmhA6auP6MB8GA1UdIwQYMBaAFNWHHp/G+959xxt+iVyKBMPQAh2F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0OS80N0QwNDQ2NDQ3 QjcxMUVFOEEwQTlDNDNDNEY5QUUwMi8xWWNlbjhiNzNuM0hHMzZKWElvRXc5QUNI WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFZY2VuOGI3M24zSEczNkpYSW9FdzlBQ0hZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEE0OS80N0QwNDQ2NDQ3QjcxMUVFOEEwQTlDNDNDNEY5QUUwMi8xWWNlbjhiNzNu M0hHMzZKWElvRXc5QUNIWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUfoncSJKSgcw4MfLYYlkb0dlL+Fav3kMV3VKEernTOeCBAg9aaR4e Y9rg5OJd9XReWiMqQ0XqPl7Ri4/5DFmPxWSR8/W2e5DSKF4+dgqcI9bClBcocgj3 Dj2laIWjbauqul0Hq5JJNMfDx5mo4KIqNpyOX2/ltieHEoC3UhiLmaDSOaEp89CS d9hJJ9id8Pdw+3RyATzU15k9Wy+1d0EVjma3xpRgJ8Q+pf4whvZNhIWoZvixO8cF eoWQrDPfvqPlwAvlPNWapwW6N6WBm4NQbxx8PxSBgMWo+ZcNfgQY2Th5JaUq6aTV BWv1j+GVtVjZAlbAGUwKo9Z3mVcFVwhc -----END CERTIFICATE-----Generated at Mon Oct 20 13:49:01 2025 by rpki-client