$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft File: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft (raw, json) Hash identifier: OZ8XOcvEjIxR9TP+oy2WmB3bxaig3ID1LOPOpJuUkdk= Subject key identifier: DE:7F:D3:88:2F:4B:92:29:92:BB:A0:B0:30:43:C8:FC:26:88:4E:A5 Authority key identifier: 62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC Certificate issuer: /CN=A91685E9/serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC Certificate serial: C6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft Manifest number: B4 Signing time: Mon 03 Nov 2025 06:25:18 +0000 Manifest this update: Mon 03 Nov 2025 06:25:17 +0000 Manifest next update: Mon 10 Nov 2025 06:25:17 +0000 Files and hashes: 1: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl (hash: zrtS7WwJNOWmDXLOXiRyiLoR8B+nyVHBKabstpAsWgk=) 2: E3239FCAD48C11EFA27EEC37C4F9AE02.roa (hash: eDrkrHM6e7G8MkefF8uO0ebeRL2ZiilrSCVyjl1v/78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:25:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91685E9, serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC Validity Not Before: Nov 3 06:25:17 2025 GMT Not After : Nov 10 06:25:17 2025 GMT Subject: CN=69084acd-cdcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c5:dd:78:fe:b1:5a:e4:f9:0e:be:bb:a5:27: 1b:18:7f:d1:92:d4:eb:5a:0f:98:f2:c8:9f:a4:ec: 81:cd:98:6b:76:b9:14:42:0f:2a:a6:6a:91:41:03: 55:b8:4f:f5:54:97:65:70:cd:bb:f7:db:1e:e4:b3: 85:90:19:63:d0:7d:3e:b3:10:e3:07:f0:ed:71:0f: 33:97:3a:98:ce:71:cb:87:e0:5f:f0:29:4f:66:3e: c7:f6:3f:aa:25:61:cf:41:77:d3:e7:f7:f6:66:13: 93:15:1c:7b:bb:72:e8:93:5e:2a:ac:2a:d2:9d:e4: 35:4a:85:36:05:5b:6b:5f:dc:e1:e6:b7:76:ef:ed: 29:c7:0e:08:cb:c2:c2:1f:43:34:36:80:35:98:6a: 3b:8d:3d:b5:d2:61:bd:b5:a6:c6:bb:dd:fa:56:81: 5d:61:a0:45:ff:0c:cf:c8:b0:8b:e7:4d:bf:1f:13: 29:d3:cf:8c:64:3d:7c:6f:a3:91:47:47:5c:4e:64: e5:53:01:bd:c6:b7:a5:cf:c7:17:e4:1b:23:5e:35: 88:24:60:d3:3c:25:db:12:65:ea:cc:87:bf:6c:69: 51:6a:2d:c6:8b:53:77:74:58:85:6b:cb:fe:70:f1: d5:ec:bc:a0:32:dc:27:29:29:15:f6:43:0c:10:33: 0e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:7F:D3:88:2F:4B:92:29:92:BB:A0:B0:30:43:C8:FC:26:88:4E:A5 X509v3 Authority Key Identifier: keyid:62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:7f:6b:9f:4b:1c:f2:f6:c9:76:fb:6c:e5:cc:e1:12:a0:7e: 02:f5:41:ed:13:7d:db:c6:fb:68:76:4c:3c:d5:51:06:cc:29: f7:73:e4:f5:11:74:cc:7a:64:92:e1:d8:f6:aa:a2:f4:96:eb: 51:ef:c7:61:3a:c4:eb:3c:2d:3f:0a:18:75:d0:e0:b8:f4:07: 82:fd:fc:e0:13:27:41:6f:90:bc:20:79:c6:f4:29:3f:16:1d: a7:bb:c1:0f:9d:09:f1:b4:3d:d8:08:f1:ae:1c:6f:e7:13:4c: 02:c6:33:36:3c:4c:30:8d:5c:73:b5:87:aa:74:fe:d0:30:28: fc:46:c7:6a:4d:c1:50:66:64:c5:ce:4c:d3:da:4c:79:2a:9d: cc:32:45:0a:60:cd:ec:d9:f8:24:b2:85:9b:26:81:2a:0a:f5: 17:4c:85:b3:08:9a:3d:21:59:d0:f7:d0:dc:57:b4:ae:29:6a: 5a:2c:0d:bb:d1:d1:ed:da:9a:99:3d:bd:d5:1e:14:fb:ff:28: f8:a4:3a:51:68:ae:27:d6:e3:2e:eb:1c:2f:de:3a:5f:ad:28: 27:f8:67:74:5d:ba:01:f1:32:61:17:58:80:40:94:ad:7e:82: 7e:f2:55:57:41:d8:0b:db:55:d9:01:12:62:6f:8f:03:ba:ca: f4:96:38:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg1RTkxMTAvBgNVBAUTKDYyNEI5NkUxRDY2NUVENzhFNzhERkFGNkMyMjAxOTEw NzNEQjY2Q0MwHhcNMjUxMTAzMDYyNTE3WhcNMjUxMTEwMDYyNTE3WjAYMRYwFAYD VQQDEw02OTA4NGFjZC1jZGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3sXdeP6xWuT5Dr67pScbGH/RktTrWg+Y8sifpOyBzZhrdrkUQg8qpmqRQQNV uE/1VJdlcM2799se5LOFkBlj0H0+sxDjB/DtcQ8zlzqYznHLh+Bf8ClPZj7H9j+q JWHPQXfT5/f2ZhOTFRx7u3Lok14qrCrSneQ1SoU2BVtrX9zh5rd27+0pxw4Iy8LC H0M0NoA1mGo7jT210mG9tabGu936VoFdYaBF/wzPyLCL502/HxMp08+MZD18b6OR R0dcTmTlUwG9xrelz8cX5BsjXjWIJGDTPCXbEmXqzIe/bGlRai3Gi1N3dFiFa8v+ cPHV7LygMtwnKSkV9kMMEDMOSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN5/04gv S5IpkrugsDBDyPwmiE6lMB8GA1UdIwQYMBaAFGJLluHWZe1454369sIgGRBz22bM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODVFOS9DMTEyRjU1Q0Qx NzYxMUVGOTVDNURFNUFDNEY5QUUwMi9Za3VXNGRabDdYam5qZnIyd2lBWkVIUGJa c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lrdVc0ZFpsN1hqbmpmcjJ3aUFaRUhQYlpzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODVFOS9DMTEyRjU1Q0QxNzYxMUVGOTVDNURFNUFDNEY5QUUwMi9Za3VXNGRabDdY am5qZnIyd2lBWkVIUGJac3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWf2ufSxzy9sl2+2zlzOESoH4C9UHtE33bxvtodkw81VEGzCn3c+T1 EXTMemSS4dj2qqL0lutR78dhOsTrPC0/Chh10OC49AeC/fzgEydBb5C8IHnG9Ck/ Fh2nu8EPnQnxtD3YCPGuHG/nE0wCxjM2PEwwjVxztYeqdP7QMCj8RsdqTcFQZmTF zkzT2kx5Kp3MMkUKYM3s2fgksoWbJoEqCvUXTIWzCJo9IVnQ99DcV7SuKWpaLA27 0dHt2pqZPb3VHhT7/yj4pDpRaK4n1uMu6xwv3jpfrSgn+Gd0XboB8TJhF1iAQJSt foJ+8lVXQdgL21XZARJib48Dusr0ljie -----END CERTIFICATE-----Generated at Wed Nov 5 07:53:18 2025 by rpki-client