$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft File: ySRgFCV-7__-gM0-q_7WeomNb1c.mft (raw, json) Hash identifier: ofe40XQ9fM0M/vAxZosmkCfWtRi7OVo783GFJJwJqb0= Subject key identifier: E8:41:96:7A:A9:6D:02:79:4F:0A:E6:7E:16:E6:08:D3:6B:51:EA:E2 Authority key identifier: C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57 Certificate issuer: /CN=A91F9766/serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57 Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft Manifest number: 82 Signing time: Sun 19 Oct 2025 09:59:25 +0000 Manifest this update: Sun 19 Oct 2025 09:59:25 +0000 Manifest next update: Sun 26 Oct 2025 09:59:25 +0000 Files and hashes: 1: ySRgFCV-7__-gM0-q_7WeomNb1c.crl (hash: h4Y86qfuW7Uu1KlERc/RnA07+DjAgrgLyz/c0N+UUbc=) 2: 28CED806EA5811EF90C1D323C4F9AE02.roa (hash: b2BcNMesZ27DQqzlZd7MPdoju4HvYEGHIF6wjO+48TQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.crl rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:59:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9766, serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57 Validity Not Before: Oct 19 09:59:25 2025 GMT Not After : Oct 26 09:59:25 2025 GMT Subject: CN=68f4b67d-8e54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:56:d8:7c:eb:c8:1d:2e:77:5b:df:e2:b8:5d: e8:81:c0:f9:dd:10:09:a3:2f:d2:2a:a2:c7:53:2c: 92:39:36:60:5d:fa:97:f6:1f:33:a9:93:b0:3a:7a: 91:db:cf:f7:0d:f7:da:59:18:17:03:49:4a:9f:e4: ce:2e:c2:e4:d6:a9:67:3e:70:26:78:77:c2:04:ae: d2:4f:9d:05:6a:2b:06:fa:2d:a9:29:9d:11:e8:51: 30:0e:c4:c2:7f:c2:de:69:28:33:5b:0b:15:77:0f: 60:e3:1a:18:6d:9c:db:31:55:45:d4:d2:17:2e:a5: c2:32:3b:ea:65:2f:d2:c6:e2:49:ff:b3:4b:65:39: 40:b6:07:15:00:2c:9c:d0:3a:60:93:04:5d:22:44: 5a:2e:37:cc:d3:ad:64:27:b6:f4:57:98:78:f5:4e: 0e:a6:fd:78:24:28:df:5b:46:41:c4:3c:2f:e1:56: 6f:b8:82:d5:fd:7a:28:06:de:8f:cf:50:58:6f:02: b1:b3:b3:78:0f:d3:18:68:96:e1:0a:bb:4f:4a:6d: fd:af:eb:9c:d7:15:71:81:c2:b9:24:95:fc:1b:11: 41:d5:38:bb:77:37:7d:55:68:7e:6f:ff:aa:2c:01: 1d:f4:6d:45:4a:91:19:dd:06:ea:25:1e:59:2e:88: 50:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:41:96:7A:A9:6D:02:79:4F:0A:E6:7E:16:E6:08:D3:6B:51:EA:E2 X509v3 Authority Key Identifier: keyid:C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:da:c1:92:a2:03:5a:11:5b:77:4d:cf:1c:b4:ba:98:10:d9: ad:c2:16:14:ce:89:48:04:16:b3:3a:a4:33:ab:aa:7f:69:dd: 42:da:cb:5b:2c:9a:8f:51:27:6b:6b:6d:7c:68:01:12:0d:6f: 4e:95:43:fd:a7:c2:1b:3e:af:0a:ca:2f:08:06:0a:9d:38:d0: 10:aa:c1:80:a8:83:48:dd:67:a9:a7:e4:07:45:db:60:32:30: c1:0d:20:08:41:1a:a0:23:1d:42:ac:cd:e1:10:c0:45:f6:e6: 98:e2:62:f3:a8:04:03:f6:5d:23:9d:ab:88:4d:b0:d9:e4:4e: 35:43:66:21:a8:f4:32:19:8e:08:d1:89:a6:d2:cf:b8:9d:1d: 6f:2a:4d:43:c1:03:39:50:cc:3e:0a:e5:8c:ab:e4:e2:bb:6e: 53:44:8c:54:ff:16:35:6b:b8:ec:93:dd:b9:f4:d9:2f:c6:6a: bb:52:d9:85:ac:cb:b5:d2:b8:f1:29:77:c1:c3:c6:95:e9:c1: 44:05:32:85:52:bb:84:a3:b3:d2:c4:d4:94:89:86:66:92:ba: 2a:de:fe:e4:d2:f9:86:12:30:71:48:6b:0a:4e:a2:91:72:d3: 6b:f8:74:f7:71:31:a8:ff:90:a2:68:8a:9d:02:54:d7:06:8b: e4:30:21:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk3NjYxMTAvBgNVBAUTKEM5MjQ2MDE0MjU3RUVGRkZGRTgwQ0QzRUFCRkVENjdB ODk4RDZGNTcwHhcNMjUxMDE5MDk1OTI1WhcNMjUxMDI2MDk1OTI1WjAYMRYwFAYD VQQDEw02OGY0YjY3ZC04ZTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnlbYfOvIHS53W9/iuF3ogcD53RAJoy/SKqLHUyySOTZgXfqX9h8zqZOwOnqR 28/3DffaWRgXA0lKn+TOLsLk1qlnPnAmeHfCBK7ST50FaisG+i2pKZ0R6FEwDsTC f8LeaSgzWwsVdw9g4xoYbZzbMVVF1NIXLqXCMjvqZS/SxuJJ/7NLZTlAtgcVACyc 0DpgkwRdIkRaLjfM061kJ7b0V5h49U4Opv14JCjfW0ZBxDwv4VZvuILV/XooBt6P z1BYbwKxs7N4D9MYaJbhCrtPSm39r+uc1xVxgcK5JJX8GxFB1Ti7dzd9VWh+b/+q LAEd9G1FSpEZ3QbqJR5ZLohQHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOhBlnqp bQJ5TwrmfhbmCNNrUeriMB8GA1UdIwQYMBaAFMkkYBQlfu///oDNPqv+1nqJjW9X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTc2Ni84MEY1OUU5NEVB NTcxMUVGQjQyQ0IyODVDNEY5QUUwMi95U1JnRkNWLTdfXy1nTTAtcV83V2VvbU5i MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lTUmdGQ1YtN19fLWdNMC1xXzdXZW9tTmIxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTc2Ni84MEY1OUU5NEVBNTcxMUVGQjQyQ0IyODVDNEY5QUUwMi95U1JnRkNWLTdf Xy1nTTAtcV83V2VvbU5iMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/2sGSogNaEVt3Tc8ctLqYENmtwhYUzolIBBazOqQzq6p/ad1C2stb LJqPUSdra218aAESDW9OlUP9p8IbPq8Kyi8IBgqdONAQqsGAqINI3Wepp+QHRdtg MjDBDSAIQRqgIx1CrM3hEMBF9uaY4mLzqAQD9l0jnauITbDZ5E41Q2YhqPQyGY4I 0Ymm0s+4nR1vKk1DwQM5UMw+CuWMq+Tiu25TRIxU/xY1a7jsk9259Nkvxmq7UtmF rMu10rjxKXfBw8aV6cFEBTKFUruEo7PSxNSUiYZmkroq3v7k0vmGEjBxSGsKTqKR ctNr+HT3cTGo/5CiaIqdAlTXBovkMCHT -----END CERTIFICATE-----Generated at Mon Oct 20 11:07:51 2025 by rpki-client