$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft File: yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft (raw, json) Hash identifier: XQYtJM9oghTwmUusrVrO5u2IZCt83RdUAFrg5ABfscw= Subject key identifier: 54:B8:1C:29:B3:DB:A5:FC:3B:E1:2C:3B:7D:73:3E:10:8A:DA:CA:4A Authority key identifier: C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86 Certificate issuer: /CN=A919B06C/serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986 Certificate serial: 0E8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft Manifest number: 2020 Signing time: Tue 04 Nov 2025 17:17:04 +0000 Manifest this update: Tue 04 Nov 2025 17:17:03 +0000 Manifest next update: Tue 11 Nov 2025 17:17:03 +0000 Files and hashes: 1: yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl (hash: bUOqcRFlHR+pR/OpXqlnMe8UkEh/fK875AhZZUwmrUs=) 2: 3536466A2EFC11EE9618725BC4F9AE02.roa (hash: 2QTo+CsdRhAVYGY+SP4UeTuLXQh1z3BW1C7/XMRXisw=) 3: 70F15C5CC5CA11EEA9DD0141C4F9AE02.roa (hash: qTqcBFpr622OYkqG96eDnnoJ09wPpnvN7CHOU2zyZG0=) 4: BFD96CC4C5CA11EEBFA07341C4F9AE02.roa (hash: SV6dYe0/qbcbeBjCTRLSVOKAd3cmZlbo1prAD3jSVSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3722 (0xe8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B06C, serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986 Validity Not Before: Nov 4 17:17:03 2025 GMT Not After : Nov 11 17:17:03 2025 GMT Subject: CN=690a350f-2e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7c:ff:a2:e0:04:07:d8:e0:86:db:84:0a:19: 12:ef:a5:7f:b6:1c:fe:9d:f7:6a:58:07:b4:7d:01: 2f:0a:27:77:2d:81:69:a5:6c:43:2f:fb:b1:21:fd: c5:51:5a:a0:81:8e:4f:59:b9:60:99:29:32:2b:14: 97:66:7c:c4:9e:0b:8f:18:36:9b:df:9b:3e:a1:2f: 29:29:a2:47:35:df:a0:2c:f6:57:58:63:a8:5d:38: 25:69:17:79:ee:78:d8:66:9b:e7:64:d6:66:80:8a: 35:26:66:4d:34:8f:22:4d:c6:47:2d:6d:69:f5:d2: ea:7e:b0:0e:23:26:fd:02:eb:0d:81:b8:80:4e:ed: 79:8d:0b:db:57:3b:88:77:12:a8:b4:46:66:bb:ee: cb:0f:2a:71:c6:77:2a:aa:0d:b3:19:a9:58:19:7d: 14:03:9b:c9:a9:2f:f6:49:ef:30:5b:34:07:fb:bb: d5:b5:38:ad:f8:bc:78:48:6a:f2:fa:2c:5e:0a:e0: e5:b0:c2:18:de:e6:54:f2:dc:42:1b:29:99:7c:2a: 35:e7:65:b5:cb:60:56:b7:27:0c:c1:02:35:5d:9e: 6e:6d:09:b6:ba:15:43:7e:c0:ca:55:49:4c:c6:f7: 3c:a4:65:3a:71:a0:4c:69:f6:3a:46:8d:04:9d:6e: f5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B8:1C:29:B3:DB:A5:FC:3B:E1:2C:3B:7D:73:3E:10:8A:DA:CA:4A X509v3 Authority Key Identifier: keyid:C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:df:ed:10:80:cc:0c:15:57:6b:7f:03:ad:ae:c9:a9:81:15: 8b:96:6c:8a:90:c9:ae:39:05:71:01:3b:ce:6d:ac:0d:30:bf: 94:e3:2c:c5:8c:1f:67:09:5c:ee:e1:3c:77:f0:1b:93:d9:57: 2b:ff:a8:91:48:0b:7d:63:9e:91:87:19:83:ba:10:65:9d:d0: a5:d7:e6:96:bd:8a:5e:86:1d:cd:f7:8c:c5:2b:b5:21:45:8c: 66:63:ff:f0:0d:d4:53:c5:8a:6a:7e:05:e5:ad:da:fb:ee:4b: 5f:2b:bb:42:ab:f0:7e:d2:cc:cb:34:08:f4:5b:a1:d1:f6:fc: fb:08:ce:83:1f:03:7a:4e:c8:9a:cf:08:b7:95:12:08:2a:d8: 2c:65:f6:b2:d0:be:68:70:d1:eb:94:eb:01:65:8b:ef:de:d0: d5:99:9f:35:0a:46:cf:0e:27:34:9d:a2:9d:7c:d5:f1:57:b5: 90:d5:36:ea:16:96:83:d5:0e:70:82:0e:ac:0b:b9:80:ce:e3: 06:18:79:c3:8f:a1:0f:8f:23:6d:db:65:b0:16:5b:76:bb:22: 27:ad:57:bd:45:2a:36:8a:b9:c8:b5:7e:7e:44:bc:aa:7f:f1: 95:94:d2:90:c5:57:12:2a:54:72:8c:f3:90:d8:57:8e:b6:98: e5:fd:41:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIwNkMxMTAvBgNVBAUTKEM4MzQ5M0MwMjk3Q0NCNThEMjgzNzk0NkQ2MDYzRjE0 QTdERUU5ODYwHhcNMjUxMTA0MTcxNzAzWhcNMjUxMTExMTcxNzAzWjAYMRYwFAYD VQQDEw02OTBhMzUwZi0yZTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnz/ouAEB9jghtuEChkS76V/thz+nfdqWAe0fQEvCid3LYFppWxDL/uxIf3F UVqggY5PWblgmSkyKxSXZnzEnguPGDab35s+oS8pKaJHNd+gLPZXWGOoXTglaRd5 7njYZpvnZNZmgIo1JmZNNI8iTcZHLW1p9dLqfrAOIyb9AusNgbiATu15jQvbVzuI dxKotEZmu+7LDypxxncqqg2zGalYGX0UA5vJqS/2Se8wWzQH+7vVtTit+Lx4SGry +ixeCuDlsMIY3uZU8txCGymZfCo152W1y2BWtycMwQI1XZ5ubQm2uhVDfsDKVUlM xvc8pGU6caBMafY6Ro0EnW71JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFS4HCmz 26X8O+EsO31zPhCK2spKMB8GA1UdIwQYMBaAFMg0k8ApfMtY0oN5RtYGPxSn3umG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjA2Qy9FOUQ2MkU3NEZF QUUxMUU4OTEwRDRENjZDNEY5QUUwMi95RFNUd0NsOHkxalNnM2xHMWdZX0ZLZmU2 WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lEU1R3Q2w4eTFqU2czbEcxZ1lfRktmZTZZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjA2Qy9FOUQ2MkU3NEZFQUUxMUU4OTEwRDRENjZDNEY5QUUwMi95RFNUd0NsOHkx alNnM2xHMWdZX0ZLZmU2WVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB3+0QgMwMFVdrfwOtrsmpgRWLlmyKkMmuOQVxATvObawNML+U4yzF jB9nCVzu4Tx38BuT2Vcr/6iRSAt9Y56RhxmDuhBlndCl1+aWvYpehh3N94zFK7Uh RYxmY//wDdRTxYpqfgXlrdr77ktfK7tCq/B+0szLNAj0W6HR9vz7CM6DHwN6Tsia zwi3lRIIKtgsZfay0L5ocNHrlOsBZYvv3tDVmZ81CkbPDic0naKdfNXxV7WQ1Tbq FpaD1Q5wgg6sC7mAzuMGGHnDj6EPjyNt22WwFlt2uyInrVe9RSo2irnItX5+RLyq f/GVlNKQxVcSKlRyjPOQ2FeOtpjl/UHk -----END CERTIFICATE-----Generated at Wed Nov 5 05:42:11 2025 by rpki-client