$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft File: YmEJu-zJi6UufzmbgJYtOv5astQ.mft (raw, json) Hash identifier: CoBr+VlY8YdJw6dnRz0unwDYpjXhAWLME6vlT3ikDPM= Subject key identifier: 3F:DD:70:AD:AF:5D:53:06:D3:C6:94:2D:D4:27:1E:09:A7:D5:97:C8 Authority key identifier: 62:61:09:BB:EC:C9:8B:A5:2E:7F:39:9B:80:96:2D:3A:FE:5A:B2:D4 Certificate issuer: /CN=A91D50A2/serialNumber=626109BBECC98BA52E7F399B80962D3AFE5AB2D4 Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft Manifest number: 0141 Signing time: Mon 03 Nov 2025 04:24:50 +0000 Manifest this update: Mon 03 Nov 2025 04:24:49 +0000 Manifest next update: Mon 10 Nov 2025 04:24:49 +0000 Files and hashes: 1: YmEJu-zJi6UufzmbgJYtOv5astQ.crl (hash: cd6hepMi96MBO/p3QR+6VPc0hORHSjm6Vva5+CWEorg=) 2: 7447BEF0928411EFB854A522C4F9AE02.roa (hash: 8r1ggxGUtscfFUhVNnn2tSXuD/VeviYdi6zXjlI+agM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.crl rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D50A2, serialNumber=626109BBECC98BA52E7F399B80962D3AFE5AB2D4 Validity Not Before: Nov 3 04:24:49 2025 GMT Not After : Nov 10 04:24:49 2025 GMT Subject: CN=69082e91-55a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:99:f7:4e:cc:7e:be:f6:6d:63:11:c3:d8:bf: 57:03:90:80:cb:c0:18:8a:48:80:c2:23:71:33:e4: 4e:0e:db:ec:94:d7:61:bb:9d:8c:d6:61:f2:d7:28: f8:28:d6:70:50:58:da:42:41:5d:0b:91:85:0c:bd: d2:8b:b8:98:0b:69:73:e5:87:09:d1:b8:ff:6a:d7: c2:77:b1:98:7b:9f:de:73:eb:fb:a3:f7:3b:86:83: ea:36:60:00:65:ce:23:20:39:2e:5d:8a:39:f6:be: 48:23:75:f5:a3:5b:65:df:3e:66:d4:45:5c:a1:b6: 33:84:5b:61:c8:ed:72:b0:09:66:47:fb:00:0d:58: d6:e5:65:23:e8:53:45:04:94:1d:fa:fc:26:78:05: 14:e8:b2:d5:dd:30:30:60:2a:9a:48:29:b5:8e:51: a3:1f:74:07:76:09:d2:c4:42:85:88:bf:69:68:d7: 3f:5f:e5:0a:75:9f:7c:b0:9a:ee:7f:0b:81:e6:ff: 44:e8:5f:a9:1f:95:52:55:55:8d:e4:92:fb:a9:3f: 08:af:43:1d:1d:69:46:c7:27:90:60:b9:b3:df:37: d4:c5:ea:0a:24:9d:41:e7:68:ec:59:d7:63:80:6e: c2:33:90:bf:e6:1c:f1:b2:6e:86:85:96:7a:c1:80: 43:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:DD:70:AD:AF:5D:53:06:D3:C6:94:2D:D4:27:1E:09:A7:D5:97:C8 X509v3 Authority Key Identifier: keyid:62:61:09:BB:EC:C9:8B:A5:2E:7F:39:9B:80:96:2D:3A:FE:5A:B2:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:bd:3b:44:e5:d6:5d:ee:5d:26:ab:8a:79:67:b5:fc:e4:e7: 82:a2:1a:70:57:22:7c:a1:88:0f:e9:53:de:b6:94:7e:ef:02: 0a:3a:36:91:62:fe:cc:a7:55:5b:9a:e5:06:59:c9:41:48:70: f6:d5:c0:f8:e3:e9:fa:af:bf:a2:a1:9f:4b:50:6f:05:f5:99: e3:07:b6:50:3b:aa:74:e6:3c:96:4c:bd:bc:a1:16:c1:3f:15: e8:ab:10:28:34:6f:21:d9:02:36:55:dd:30:02:8b:12:84:c0: 48:c6:34:24:d5:80:a3:8c:c8:bd:16:66:ca:24:ef:27:60:1b: 01:a2:fa:1d:59:01:db:16:b8:7e:09:24:85:39:90:0a:2b:a2: 48:09:57:1d:d5:ab:21:d5:bd:20:90:71:3c:a5:bc:42:9d:a9: 6d:81:bc:cd:14:f7:cc:67:6d:a0:05:86:c8:3d:d0:25:1e:04: 06:4e:ea:76:e1:b3:bf:d0:39:71:04:0a:df:0a:94:5c:ed:1a: 5c:07:63:17:f6:57:86:f6:9f:6f:28:6d:c5:a7:c7:70:dd:b3: 1e:b5:f6:e4:a3:aa:f3:c1:77:c1:29:7e:61:1a:33:0d:1d:b9: c5:62:ee:ad:e8:2b:7f:61:cc:99:a4:a6:8b:f1:34:55:aa:4a: e2:76:09:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUwQTIxMTAvBgNVBAUTKDYyNjEwOUJCRUNDOThCQTUyRTdGMzk5QjgwOTYyRDNB RkU1QUIyRDQwHhcNMjUxMTAzMDQyNDQ5WhcNMjUxMTEwMDQyNDQ5WjAYMRYwFAYD VQQDEw02OTA4MmU5MS01NWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZn3Tsx+vvZtYxHD2L9XA5CAy8AYikiAwiNxM+RODtvslNdhu52M1mHy1yj4 KNZwUFjaQkFdC5GFDL3Si7iYC2lz5YcJ0bj/atfCd7GYe5/ec+v7o/c7hoPqNmAA Zc4jIDkuXYo59r5II3X1o1tl3z5m1EVcobYzhFthyO1ysAlmR/sADVjW5WUj6FNF BJQd+vwmeAUU6LLV3TAwYCqaSCm1jlGjH3QHdgnSxEKFiL9paNc/X+UKdZ98sJru fwuB5v9E6F+pH5VSVVWN5JL7qT8Ir0MdHWlGxyeQYLmz3zfUxeoKJJ1B52jsWddj gG7CM5C/5hzxsm6GhZZ6wYBD2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/dcK2v XVMG08aULdQnHgmn1ZfIMB8GA1UdIwQYMBaAFGJhCbvsyYulLn85m4CWLTr+WrLU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTBBMi9FRTMxRDg3NEQw MjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9ZbUVKdS16Smk2VXVmem1iZ0pZdE92NWFz dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ltRUp1LXpKaTZVdWZ6bWJnSll0T3Y1YXN0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTBBMi9FRTMxRDg3NEQwMjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9ZbUVKdS16Smk2 VXVmem1iZ0pZdE92NWFzdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrvTtE5dZd7l0mq4p5Z7X85OeCohpwVyJ8oYgP6VPetpR+7wIKOjaR Yv7Mp1VbmuUGWclBSHD21cD44+n6r7+ioZ9LUG8F9ZnjB7ZQO6p05jyWTL28oRbB PxXoqxAoNG8h2QI2Vd0wAosShMBIxjQk1YCjjMi9FmbKJO8nYBsBovodWQHbFrh+ CSSFOZAKK6JICVcd1ash1b0gkHE8pbxCnaltgbzNFPfMZ22gBYbIPdAlHgQGTup2 4bO/0DlxBArfCpRc7RpcB2MX9leG9p9vKG3Fp8dw3bMetfbko6rzwXfBKX5hGjMN HbnFYu6t6Ct/YcyZpKaL8TRVqkridgmJ -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:42 2025 by rpki-client