$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft File: YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft (raw, json) Hash identifier: bwus4+oMdQj75KAq/4Kr9UWNSp54tqoqsbn6Y6A4ZBo= Subject key identifier: 42:C9:6A:B9:89:22:2D:65:C5:29:A2:60:26:50:03:22:39:1D:DE:83 Authority key identifier: 61:4D:88:C4:31:87:54:EE:33:C0:12:A6:4C:54:2B:39:EA:04:D4:E1 Certificate issuer: /CN=A91AE9CC/serialNumber=614D88C4318754EE33C012A64C542B39EA04D4E1 Certificate serial: 251D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft Manifest number: 250B Signing time: Tue 04 Nov 2025 15:50:25 +0000 Manifest this update: Tue 04 Nov 2025 15:50:24 +0000 Manifest next update: Tue 11 Nov 2025 15:50:24 +0000 Files and hashes: 1: YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl (hash: i8p4ALGiMwJVYPf/yhR5nXx1aIOtef5OKNUsjPYWKV0=) 2: 3A73B3A254EB11E7A50F9822C4F9AE02.roa (hash: XiLxVcA3A5SvnNZPgANRplMFygJvziR4GhZISOC/34g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:50:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9501 (0x251d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE9CC, serialNumber=614D88C4318754EE33C012A64C542B39EA04D4E1 Validity Not Before: Nov 4 15:50:24 2025 GMT Not After : Nov 11 15:50:24 2025 GMT Subject: CN=690a20c0-6779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:dc:bb:88:88:6f:d9:0d:a8:a5:d0:b9:d7:9d: 45:f6:ef:86:98:d6:96:8b:f3:b8:d1:3d:d0:0d:7a: 5f:03:2e:3b:62:83:4e:3f:fa:ac:9e:1a:98:da:97: 45:db:1c:29:a5:b4:fa:6a:df:d7:70:7e:1f:15:db: 64:58:73:ab:66:0e:16:83:e1:6a:da:1c:13:1c:85: 62:06:0b:28:41:7f:fa:6e:7c:b5:4f:d0:b1:1b:35: 0d:38:c5:07:16:93:7a:c9:3d:75:5c:01:40:2c:11: ba:86:0e:57:40:49:ea:3d:6b:73:78:b4:b4:32:63: 1a:db:f6:40:f3:23:a3:21:3b:29:db:c4:47:55:69: 20:90:10:42:2f:1f:03:92:bd:6c:d3:ea:a0:5c:d2: cb:e8:e4:40:63:72:d2:39:5a:67:4f:a3:52:4e:5f: 6b:c6:14:52:08:64:e9:6e:90:b9:ef:0f:92:ea:ec: 18:59:ef:33:83:c3:70:ba:4b:76:0b:88:06:64:c9: 27:84:27:80:40:08:94:29:9b:aa:56:fc:f6:0d:3c: 68:54:c2:ba:e1:aa:12:14:01:cf:1f:0d:69:7a:98: 34:ba:ac:69:21:8f:24:eb:ac:70:41:ea:86:25:19: 01:1d:d2:42:17:f7:e5:e8:7a:6e:ee:e6:09:2f:76: c3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C9:6A:B9:89:22:2D:65:C5:29:A2:60:26:50:03:22:39:1D:DE:83 X509v3 Authority Key Identifier: keyid:61:4D:88:C4:31:87:54:EE:33:C0:12:A6:4C:54:2B:39:EA:04:D4:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:90:52:f6:af:3c:3e:22:30:4c:da:eb:55:cb:65:cc:61:cf: 8d:0b:9a:1e:1b:c4:3e:6b:a7:14:ed:01:79:02:7c:10:d1:94: c6:b1:38:c0:f2:b4:8f:81:07:f1:27:a7:5f:ba:5f:f2:42:a7: bd:42:34:a6:ac:9d:17:0b:d7:02:40:8f:35:3d:b1:65:e8:42: 52:8f:42:08:18:08:61:7f:e8:37:2d:0c:b5:2e:47:45:e0:fc: 5f:79:39:6a:a8:f3:cc:47:8b:c4:3f:5a:01:24:82:cb:7f:af: 9d:18:44:e1:df:02:46:e3:af:f7:50:b9:f5:5a:96:50:e2:0a: bf:91:c9:dc:6e:9f:f1:90:13:b8:a1:b8:e7:45:54:62:48:58: 0d:19:45:d4:ba:44:00:e9:61:e1:78:81:2b:f1:a2:29:07:88: a1:bb:5a:38:5d:5c:e2:e7:0e:c3:3b:a7:ee:10:43:c2:b9:b6: 5b:5e:c8:c1:8b:ba:0d:17:67:74:ff:44:44:73:19:29:db:6f: f6:8b:fc:e3:f6:b5:32:f8:2d:af:11:a9:c6:06:4b:da:d6:c2: 12:87:68:96:db:70:a8:65:d5:c8:07:cc:0f:0d:5d:8a:ee:72: b8:a3:d6:8a:ab:05:1f:c0:d4:7b:92:3c:33:70:51:9b:71:89: 72:16:47:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5Q0MxMTAvBgNVBAUTKDYxNEQ4OEM0MzE4NzU0RUUzM0MwMTJBNjRDNTQyQjM5 RUEwNEQ0RTEwHhcNMjUxMTA0MTU1MDI0WhcNMjUxMTExMTU1MDI0WjAYMRYwFAYD VQQDEw02OTBhMjBjMC02Nzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqdy7iIhv2Q2opdC5151F9u+GmNaWi/O40T3QDXpfAy47YoNOP/qsnhqY2pdF 2xwppbT6at/XcH4fFdtkWHOrZg4Wg+Fq2hwTHIViBgsoQX/6bny1T9CxGzUNOMUH FpN6yT11XAFALBG6hg5XQEnqPWtzeLS0MmMa2/ZA8yOjITsp28RHVWkgkBBCLx8D kr1s0+qgXNLL6ORAY3LSOVpnT6NSTl9rxhRSCGTpbpC57w+S6uwYWe8zg8Nwukt2 C4gGZMknhCeAQAiUKZuqVvz2DTxoVMK64aoSFAHPHw1pepg0uqxpIY8k66xwQeqG JRkBHdJCF/fl6Hpu7uYJL3bDLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELJarmJ Ii1lxSmiYCZQAyI5Hd6DMB8GA1UdIwQYMBaAFGFNiMQxh1TuM8ASpkxUKznqBNTh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTlDQy8xNDBFNTI3QzNB ODkxMUU1OUU4MDIzNjJDNEY5QUUwMi9ZVTJJeERHSFZPNHp3QkttVEZRck9lb0Ux T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lVMkl4REdIVk80endCS21URlFyT2VvRTFPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTlDQy8xNDBFNTI3QzNBODkxMUU1OUU4MDIzNjJDNEY5QUUwMi9ZVTJJeERHSFZP NHp3QkttVEZRck9lb0UxT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPkFL2rzw+IjBM2utVy2XMYc+NC5oeG8Q+a6cU7QF5AnwQ0ZTGsTjA 8rSPgQfxJ6dful/yQqe9QjSmrJ0XC9cCQI81PbFl6EJSj0IIGAhhf+g3LQy1LkdF 4PxfeTlqqPPMR4vEP1oBJILLf6+dGETh3wJG46/3ULn1WpZQ4gq/kcncbp/xkBO4 objnRVRiSFgNGUXUukQA6WHheIEr8aIpB4ihu1o4XVzi5w7DO6fuEEPCubZbXsjB i7oNF2d0/0REcxkp22/2i/zj9rUy+C2vEanGBkva1sISh2iW23CoZdXIB8wPDV2K 7nK4o9aKqwUfwNR7kjwzcFGbcYlyFkcO -----END CERTIFICATE-----Generated at Wed Nov 5 15:17:33 2025 by rpki-client