$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft File: 3YoriGVMM2b_5_z2VWqXhgAqpls.mft (raw, json) Hash identifier: 8BM9+1SH9/YafZ6cPY9jv19Sw6sczVruUn9rGRIGdtU= Subject key identifier: C5:AF:39:15:BB:7A:50:D5:A8:DD:4C:8A:7E:A1:86:C2:12:AE:C9:87 Authority key identifier: DD:8A:2B:88:65:4C:33:66:FF:E7:FC:F6:55:6A:97:86:00:2A:A6:5B Certificate issuer: /CN=A91CFAB9/serialNumber=DD8A2B88654C3366FFE7FCF6556A9786002AA65B Certificate serial: 03F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YoriGVMM2b_5_z2VWqXhgAqpls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft Manifest number: 03EC Signing time: Tue 04 Nov 2025 02:45:18 +0000 Manifest this update: Tue 04 Nov 2025 02:45:17 +0000 Manifest next update: Tue 11 Nov 2025 02:45:17 +0000 Files and hashes: 1: 3YoriGVMM2b_5_z2VWqXhgAqpls.crl (hash: 8UrDFLpD0GvPrdkSmdg8WFBaB7pwaMFJAXe0g08+Mok=) 2: 596CCC4E9F1911EC8FDFEA7DC4F9AE02.roa (hash: YvFcrpBbAoiYQIP04bSjgNkLWr3WOARquHbbaVU+Mxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.crl rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YoriGVMM2b_5_z2VWqXhgAqpls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 02:45:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1013 (0x3f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFAB9, serialNumber=DD8A2B88654C3366FFE7FCF6556A9786002AA65B Validity Not Before: Nov 4 02:45:17 2025 GMT Not After : Nov 11 02:45:17 2025 GMT Subject: CN=690968bd-a5de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a9:9f:db:0f:b2:14:7d:58:e2:42:9e:70:ac: 1c:d0:33:84:aa:3b:a9:09:a7:f6:04:fc:7a:b6:8c: e7:b2:7c:32:47:85:19:c4:85:3f:f5:fd:8b:57:63: f4:26:7d:11:0c:a0:e3:97:0d:25:a9:2b:e6:00:2c: da:0e:43:cf:8d:d8:d0:71:b7:a2:43:33:14:5f:66: 8b:81:a2:b7:d6:0f:ee:ec:9d:b2:cc:ae:34:48:fd: f2:4c:0a:74:17:f7:c3:c2:b9:13:1b:67:08:df:e6: 2e:21:5f:f3:83:72:1a:cc:00:ea:5b:f9:8c:01:3d: 53:ab:47:a5:ee:be:12:58:b7:46:66:07:b1:5e:f5: b1:cb:8e:8f:81:81:ef:31:23:91:e9:27:37:c4:95: bc:06:1c:da:6f:d4:90:19:8c:d2:91:43:98:f5:c5: c0:6b:b6:bc:17:75:06:b1:a9:e0:b2:0b:38:51:1c: af:0e:88:9a:04:62:ea:95:2d:e3:40:e1:f8:57:1d: fb:a1:68:6e:c1:8e:43:fd:5f:02:d8:ad:70:ae:f4: 1d:bd:ba:26:49:2e:28:f0:20:d3:8f:e3:6c:c4:02: a7:62:6e:cb:44:19:25:32:d2:c4:90:3b:d1:12:6b: e7:88:57:1d:46:ac:b1:89:9a:b2:a7:15:e1:0a:a0: 1f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:AF:39:15:BB:7A:50:D5:A8:DD:4C:8A:7E:A1:86:C2:12:AE:C9:87 X509v3 Authority Key Identifier: keyid:DD:8A:2B:88:65:4C:33:66:FF:E7:FC:F6:55:6A:97:86:00:2A:A6:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YoriGVMM2b_5_z2VWqXhgAqpls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:b2:70:c8:28:69:53:72:5a:84:df:47:69:b5:5f:83:8e:e0: 16:ae:9d:97:5a:d3:c9:b3:ca:88:19:9f:d8:3e:3b:a8:25:5e: fc:68:9b:16:c8:e3:c2:85:32:a5:57:3d:35:54:a7:08:19:22: b2:4b:23:fc:e2:84:e5:44:d3:4b:6a:c5:4d:d8:a9:5c:66:12: 78:73:15:21:bb:dd:af:b7:15:b5:93:1e:c7:e5:c4:44:59:5f: ba:17:e9:b2:9b:58:b4:1e:d5:1e:8d:06:39:aa:7c:70:8d:7c: 47:d7:6a:bd:6b:85:e6:a9:c7:cf:43:0f:bb:c1:a4:b8:ef:3f: ba:d8:65:56:80:4a:a4:bb:c7:07:87:15:c4:8c:12:ee:f0:3b: d1:4a:ba:bf:65:e6:c8:0a:63:04:62:58:2d:72:ce:38:3b:fc: 52:94:6f:ff:09:76:66:d4:21:e2:2c:df:4b:5b:75:98:3b:09: 50:7d:94:4d:3a:e9:76:a8:4d:87:37:0f:7c:74:09:f8:50:3e: 92:65:54:28:b0:31:12:3c:e0:13:9a:43:83:fd:e2:d6:4b:75: a3:65:4a:cb:a8:7f:64:c8:bb:17:aa:1a:1e:7f:56:e7:68:30: d6:0c:0d:6a:ae:4f:ec:76:6f:f8:4a:43:40:5c:b7:44:a2:0c: 94:26:59:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBQjkxMTAvBgNVBAUTKEREOEEyQjg4NjU0QzMzNjZGRkU3RkNGNjU1NkE5Nzg2 MDAyQUE2NUIwHhcNMjUxMTA0MDI0NTE3WhcNMjUxMTExMDI0NTE3WjAYMRYwFAYD VQQDEw02OTA5NjhiZC1hNWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoqmf2w+yFH1Y4kKecKwc0DOEqjupCaf2BPx6toznsnwyR4UZxIU/9f2LV2P0 Jn0RDKDjlw0lqSvmACzaDkPPjdjQcbeiQzMUX2aLgaK31g/u7J2yzK40SP3yTAp0 F/fDwrkTG2cI3+YuIV/zg3IazADqW/mMAT1Tq0el7r4SWLdGZgexXvWxy46PgYHv MSOR6Sc3xJW8Bhzab9SQGYzSkUOY9cXAa7a8F3UGsangsgs4URyvDoiaBGLqlS3j QOH4Vx37oWhuwY5D/V8C2K1wrvQdvbomSS4o8CDTj+NsxAKnYm7LRBklMtLEkDvR EmvniFcdRqyxiZqypxXhCqAfvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWvORW7 elDVqN1Min6hhsISrsmHMB8GA1UdIwQYMBaAFN2KK4hlTDNm/+f89lVql4YAKqZb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkFCOS9FODUzMzgyQzlG MTMxMUVDOUU0NUQ1NzJDNEY5QUUwMi8zWW9yaUdWTU0yYl81X3oyVldxWGhnQXFw bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZb3JpR1ZNTTJiXzVfejJWV3FYaGdBcXBscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkFCOS9FODUzMzgyQzlGMTMxMUVDOUU0NUQ1NzJDNEY5QUUwMi8zWW9yaUdWTU0y Yl81X3oyVldxWGhnQXFwbHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZsnDIKGlTclqE30dptV+DjuAWrp2XWtPJs8qIGZ/YPjuoJV78aJsW yOPChTKlVz01VKcIGSKySyP84oTlRNNLasVN2KlcZhJ4cxUhu92vtxW1kx7H5cRE WV+6F+mym1i0HtUejQY5qnxwjXxH12q9a4XmqcfPQw+7waS47z+62GVWgEqku8cH hxXEjBLu8DvRSrq/ZebICmMEYlgtcs44O/xSlG//CXZm1CHiLN9LW3WYOwlQfZRN Oul2qE2HNw98dAn4UD6SZVQosDESPOATmkOD/eLWS3WjZUrLqH9kyLsXqhoef1bn aDDWDA1qrk/sdm/4SkNAXLdEogyUJlnG -----END CERTIFICATE-----Generated at Wed Nov 5 00:57:47 2025 by rpki-client