$ rpki-client -vvf rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft File: YLrcBCw3e4bA3J7riVEnJc4-IzY.mft (raw, json) Hash identifier: xY6iO34F2LyoUoMjNk/J+ScTwLNWchyCdSy79qa4ELk= Subject key identifier: 60:33:70:A3:28:AE:0A:2D:45:7F:1B:E3:70:93:36:F4:2F:1F:60:4D Authority key identifier: 60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36 Certificate issuer: /CN=A918D0AA/serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336 Certificate serial: 0234 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft Manifest number: 022A Signing time: Mon 03 Nov 2025 02:06:04 +0000 Manifest this update: Mon 03 Nov 2025 02:06:03 +0000 Manifest next update: Mon 10 Nov 2025 02:06:03 +0000 Files and hashes: 1: YLrcBCw3e4bA3J7riVEnJc4-IzY.crl (hash: P2+rjz6E7fMNgjPcHs8LxH8RLnThcptebaBvtepa0Fc=) 2: B6C4F8787A5911EDB8C4E04FC4F9AE02.roa (hash: WbvHWJpGhR5F5UQEA2wky32hyI5JtD8Tsxw8FwN0LUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.crl rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:06:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 564 (0x234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D0AA, serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336 Validity Not Before: Nov 3 02:06:03 2025 GMT Not After : Nov 10 02:06:03 2025 GMT Subject: CN=69080e0c-887c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9f:d0:0c:ac:58:b0:21:29:91:3e:32:29:cf: 68:e2:38:bf:e8:29:56:ed:66:e2:76:19:90:a4:9b: 81:bb:4c:ef:ae:49:4d:b0:3d:17:fd:82:c9:d2:3b: b5:2f:ea:e3:83:b3:9f:be:3c:82:dc:74:ec:59:7e: bd:b5:0b:c0:33:19:44:7a:ba:9d:f5:e8:d2:61:5b: 28:a4:46:3b:82:a6:dd:62:18:99:94:84:d9:ad:cd: 32:65:4c:cd:fc:16:df:50:9a:ec:2c:f9:58:e5:4c: d0:d6:65:38:c6:9f:06:43:e9:58:f6:b4:9e:8f:a3: 13:c3:90:1d:78:f6:ab:ab:db:58:fb:4f:22:52:8f: 05:45:a1:47:66:94:24:b3:27:61:00:98:2b:d1:56: 44:97:5d:9e:01:83:55:26:e6:9a:e1:d6:96:2e:7f: 3c:f5:04:2d:57:50:d3:6d:d7:6e:e5:41:88:33:d3: f1:d1:c1:5d:85:cf:68:4a:03:69:b8:89:35:47:ef: 08:01:f0:c6:0f:5b:26:0d:a4:aa:46:c0:9f:a0:53: b0:84:ab:c2:1d:dd:c4:f4:0f:c5:5a:de:8d:a8:58: af:c3:25:1e:dc:3a:31:99:c1:c2:4d:0e:1c:d8:97: 83:e8:72:0c:9b:75:36:60:67:f7:fb:e4:c6:6c:c8: 53:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:33:70:A3:28:AE:0A:2D:45:7F:1B:E3:70:93:36:F4:2F:1F:60:4D X509v3 Authority Key Identifier: keyid:60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:db:50:c8:77:3a:37:75:b6:44:10:89:c5:0d:a2:75:b1:d7: 22:a1:cf:5b:dd:b2:13:bb:f3:1b:70:3a:9d:c2:2d:d4:bb:16: f9:dd:fc:b8:8c:21:f7:f6:b2:b8:0f:43:82:7a:44:6c:72:a8: 32:8d:31:25:8d:30:e7:c9:66:5f:84:e8:a9:65:ba:44:c8:8c: 14:c7:71:1d:eb:08:b9:86:3e:9f:d6:13:20:ca:63:40:1e:33: ff:5c:03:96:28:77:c5:ab:4c:fa:4b:07:f5:eb:cf:d5:af:f1: 03:28:e6:e9:4b:80:d0:b9:21:ec:41:b4:26:11:f2:89:19:d3: 30:8b:e5:2b:6f:a5:ca:f6:2f:dd:c5:22:50:03:bb:db:84:1a: c1:eb:aa:93:f9:68:73:83:69:83:7b:cb:82:68:04:39:c5:57: 3a:e5:1a:39:1f:03:71:58:5a:0b:ea:b2:8e:93:ad:c2:7e:3b: 10:f7:2e:93:02:6c:bd:14:1d:3e:6e:54:fa:69:bb:e8:75:4a: d5:8c:66:e3:b5:bb:10:d5:50:cc:4d:a9:a4:59:09:be:d5:9c: d8:ca:16:6d:a8:a0:63:bf:01:81:9f:2e:ca:0b:cd:eb:c8:16: 1e:e2:a2:cd:c0:61:06:0f:24:2c:a7:d3:4b:7b:15:53:d6:0d: dd:6f:c5:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQwQUExMTAvBgNVBAUTKDYwQkFEQzA0MkMzNzdCODZDMERDOUVFQjg5NTEyNzI1 Q0UzRTIzMzYwHhcNMjUxMTAzMDIwNjAzWhcNMjUxMTEwMDIwNjAzWjAYMRYwFAYD VQQDEw02OTA4MGUwYy04ODdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsp/QDKxYsCEpkT4yKc9o4ji/6ClW7WbidhmQpJuBu0zvrklNsD0X/YLJ0ju1 L+rjg7OfvjyC3HTsWX69tQvAMxlEerqd9ejSYVsopEY7gqbdYhiZlITZrc0yZUzN /BbfUJrsLPlY5UzQ1mU4xp8GQ+lY9rSej6MTw5AdeParq9tY+08iUo8FRaFHZpQk sydhAJgr0VZEl12eAYNVJuaa4daWLn889QQtV1DTbddu5UGIM9Px0cFdhc9oSgNp uIk1R+8IAfDGD1smDaSqRsCfoFOwhKvCHd3E9A/FWt6NqFivwyUe3DoxmcHCTQ4c 2JeD6HIMm3U2YGf3++TGbMhTIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGAzcKMo rgotRX8b43CTNvQvH2BNMB8GA1UdIwQYMBaAFGC63AQsN3uGwNye64lRJyXOPiM2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDBBQS8yQzc1RkVDODdB M0MxMUVEODYxQjI5MzNDNEY5QUUwMi9ZTHJjQkN3M2U0YkEzSjdyaVZFbkpjNC1J elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lMcmNCQ3czZTRiQTNKN3JpVkVuSmM0LUl6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDBBQS8yQzc1RkVDODdBM0MxMUVEODYxQjI5MzNDNEY5QUUwMi9ZTHJjQkN3M2U0 YkEzSjdyaVZFbkpjNC1JelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW21DIdzo3dbZEEInFDaJ1sdcioc9b3bITu/MbcDqdwi3Uuxb53fy4 jCH39rK4D0OCekRscqgyjTEljTDnyWZfhOipZbpEyIwUx3Ed6wi5hj6f1hMgymNA HjP/XAOWKHfFq0z6Swf168/Vr/EDKObpS4DQuSHsQbQmEfKJGdMwi+Urb6XK9i/d xSJQA7vbhBrB66qT+Whzg2mDe8uCaAQ5xVc65Ro5HwNxWFoL6rKOk63CfjsQ9y6T Amy9FB0+blT6abvodUrVjGbjtbsQ1VDMTamkWQm+1ZzYyhZtqKBjvwGBny7KC83r yBYe4qLNwGEGDyQsp9NLexVT1g3db8Wa -----END CERTIFICATE-----Generated at Wed Nov 5 00:47:40 2025 by rpki-client