$ rpki-client -vvf rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft File: Ys-2EOllD-PIACvGF7cFck0qAt0.mft (raw, json) Hash identifier: d0lA4HrY1phjMhSc+e5AJwINgYbNEnRR68JpTTsyKTI= Subject key identifier: EC:93:66:C2:62:3E:69:78:88:FC:49:C6:09:F7:6B:CB:3B:B6:8F:0C Authority key identifier: 62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD Certificate issuer: /CN=A917B1B1/serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD Certificate serial: 1878 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft Manifest number: 186A Signing time: Sun 02 Nov 2025 16:30:12 +0000 Manifest this update: Sun 02 Nov 2025 16:30:11 +0000 Manifest next update: Sun 09 Nov 2025 16:30:11 +0000 Files and hashes: 1: Ys-2EOllD-PIACvGF7cFck0qAt0.crl (hash: mwkRpmI0XHJ+ap1YFjsXv5IOafNeCEEbqWFTHh2k8Fg=) 2: C1C12662CFC811EB9A5C5879C4F9AE02.roa (hash: XNKpRb8/02tHDrrS9S3tLwWbmiJabIsnKyEKhJUYUM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.crl rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:30:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6264 (0x1878) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B1B1, serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD Validity Not Before: Nov 2 16:30:11 2025 GMT Not After : Nov 9 16:30:11 2025 GMT Subject: CN=69078714-7f7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4c:db:ae:09:3e:9a:b8:81:60:57:f0:0c:f5: 22:b9:12:23:93:e6:ef:40:0c:0f:91:de:36:bd:46: 47:57:1f:1a:af:f5:bb:38:23:c2:e7:23:39:52:57: 89:1e:70:57:9d:13:7d:58:12:cf:0a:4b:4a:c6:bd: 59:21:79:17:d8:9f:12:ce:1b:73:9e:32:0a:7e:0f: 5a:41:d0:53:78:06:e4:ba:00:f9:70:70:f3:69:8f: 52:f7:99:5a:5e:e3:b1:d4:b3:1d:8b:c0:8c:bc:c6: 3c:90:75:87:fb:b7:1f:25:c8:d7:d5:db:27:1b:0e: f6:d4:86:4c:57:20:c3:2a:e4:dd:8b:b9:73:3e:a8: 9a:94:12:c0:3a:0f:f9:78:d0:0e:d9:e6:f0:c4:74: 23:ea:97:6b:dd:fb:d8:e3:44:72:b6:09:6a:59:38: fe:dc:37:0a:66:44:78:77:2e:29:3c:10:4a:3c:04: 71:cf:c0:36:d0:4d:c9:b5:5b:0d:88:90:e5:08:05: 4a:56:d2:9d:e5:1c:61:55:cf:20:cb:06:c9:5d:a3: ac:90:fd:75:ce:f9:0a:a5:39:e4:43:53:49:b4:84: 71:2c:6a:02:41:02:ea:94:51:cf:ec:c3:a7:bf:f1: c0:82:e6:ee:0a:09:82:77:c4:ee:80:0b:e3:bf:55: 60:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:93:66:C2:62:3E:69:78:88:FC:49:C6:09:F7:6B:CB:3B:B6:8F:0C X509v3 Authority Key Identifier: keyid:62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:34:5d:de:f0:69:a8:e9:b0:77:1a:d1:1c:96:b8:37:29:c9: bd:8e:4d:f8:47:3b:61:d0:1c:10:4b:14:d5:b4:44:c3:9a:e5: 5a:07:34:01:6b:80:55:be:d8:9e:d4:f8:fc:fd:fc:cb:1b:c9: 60:15:b0:75:d6:b7:c5:05:f3:81:60:47:67:cf:30:68:1a:0d: a1:91:4b:b3:bf:79:a1:12:50:63:0c:76:fb:01:86:82:35:e0: cf:e3:2f:a6:f4:61:80:19:1e:a8:e1:81:24:12:9d:11:07:e0: 8c:30:1d:66:9e:69:c0:c8:41:23:4e:7d:a1:ff:4c:41:24:24: 22:ed:2a:5f:c1:e5:46:1e:1b:40:34:cb:e2:2e:e7:df:da:76: 67:fa:3f:a0:4a:f1:5e:ff:17:fa:fa:65:0e:19:16:7d:48:32: 25:55:88:93:3e:65:86:77:d9:26:a5:56:5b:6d:e8:73:e6:7a: 3d:bf:c7:29:42:dc:a8:15:dc:cf:a3:85:98:9d:92:72:80:48: 93:df:f4:d0:17:88:ae:39:d1:ef:c0:f4:e8:ff:39:84:2d:02: e6:08:78:c0:18:d2:92:73:27:3a:a6:cb:20:ea:a7:55:81:6f: d7:81:a0:24:92:51:f2:3c:70:31:e3:20:fe:3e:7b:60:4a:9f: 67:85:1c:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IxQjExMTAvBgNVBAUTKDYyQ0ZCNjEwRTk2NTBGRTNDODAwMkJDNjE3QjcwNTcy NEQyQTAyREQwHhcNMjUxMTAyMTYzMDExWhcNMjUxMTA5MTYzMDExWjAYMRYwFAYD VQQDEw02OTA3ODcxNC03ZjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEzbrgk+mriBYFfwDPUiuRIjk+bvQAwPkd42vUZHVx8ar/W7OCPC5yM5UleJ HnBXnRN9WBLPCktKxr1ZIXkX2J8SzhtznjIKfg9aQdBTeAbkugD5cHDzaY9S95la XuOx1LMdi8CMvMY8kHWH+7cfJcjX1dsnGw721IZMVyDDKuTdi7lzPqialBLAOg/5 eNAO2ebwxHQj6pdr3fvY40RytglqWTj+3DcKZkR4dy4pPBBKPARxz8A20E3JtVsN iJDlCAVKVtKd5RxhVc8gywbJXaOskP11zvkKpTnkQ1NJtIRxLGoCQQLqlFHP7MOn v/HAgubuCgmCd8TugAvjv1VgawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOyTZsJi Pml4iPxJxgn3a8s7to8MMB8GA1UdIwQYMBaAFGLPthDpZQ/jyAArxhe3BXJNKgLd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjFCMS9BMEYwQURGMEIy NTIxMUU3OEI1MEZGNjBDNEY5QUUwMi9Zcy0yRU9sbEQtUElBQ3ZHRjdjRmNrMHFB dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzLTJFT2xsRC1QSUFDdkdGN2NGY2swcUF0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjFCMS9BMEYwQURGMEIyNTIxMUU3OEI1MEZGNjBDNEY5QUUwMi9Zcy0yRU9sbEQt UElBQ3ZHRjdjRmNrMHFBdDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFNF3e8Gmo6bB3GtEclrg3Kcm9jk34Rzth0BwQSxTVtETDmuVaBzQB a4BVvtie1Pj8/fzLG8lgFbB11rfFBfOBYEdnzzBoGg2hkUuzv3mhElBjDHb7AYaC NeDP4y+m9GGAGR6o4YEkEp0RB+CMMB1mnmnAyEEjTn2h/0xBJCQi7SpfweVGHhtA NMviLuff2nZn+j+gSvFe/xf6+mUOGRZ9SDIlVYiTPmWGd9kmpVZbbehz5no9v8cp QtyoFdzPo4WYnZJygEiT3/TQF4iuOdHvwPTo/zmELQLmCHjAGNKScyc6pssg6qdV gW/XgaAkklHyPHAx4yD+PntgSp9nhRw3 -----END CERTIFICATE-----Generated at Tue Nov 4 12:34:14 2025 by rpki-client