$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/YrvIR87fi9d90MN073t-ZMJQ470.mft File: YrvIR87fi9d90MN073t-ZMJQ470.mft (raw, json) Hash identifier: KNX1p4bXYhSXW+Yj9IAoal5yycXOSSjjl8Ran2MSJsw= Subject key identifier: 89:D3:21:2F:BF:BB:F5:59:42:43:24:75:3C:27:55:7D:51:F2:DA:93 Authority key identifier: 62:BB:C8:47:CE:DF:8B:D7:7D:D0:C3:74:EF:7B:7E:64:C2:50:E3:BD Certificate issuer: /CN=A91EF634/serialNumber=62BBC847CEDF8BD77DD0C374EF7B7E64C250E3BD Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YrvIR87fi9d90MN073t-ZMJQ470.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/YrvIR87fi9d90MN073t-ZMJQ470.mft Manifest number: 27 Signing time: Mon 03 Nov 2025 07:41:10 +0000 Manifest this update: Mon 03 Nov 2025 07:41:10 +0000 Manifest next update: Mon 10 Nov 2025 07:41:10 +0000 Files and hashes: 1: YrvIR87fi9d90MN073t-ZMJQ470.crl (hash: kKknY2oQ0Ny+5nrGfG7YdzfXElTKhflrZh9OJIgPDyY=) 2: 746CEA6E7CD911F0942A980CC4F9AE02.roa (hash: dtwgvFiT0agZNrnZV5YlHwJWndOHgTVg9Hlvyneymg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/YrvIR87fi9d90MN073t-ZMJQ470.crl rsync://rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/YrvIR87fi9d90MN073t-ZMJQ470.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YrvIR87fi9d90MN073t-ZMJQ470.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF634, serialNumber=62BBC847CEDF8BD77DD0C374EF7B7E64C250E3BD Validity Not Before: Nov 3 07:41:10 2025 GMT Not After : Nov 10 07:41:10 2025 GMT Subject: CN=69085c96-6d14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0d:f7:ba:03:47:61:25:30:a7:5d:cd:41:83: c8:0c:99:ae:7e:ca:f4:03:ae:99:86:d3:6b:48:b3: 63:cb:66:8a:75:a9:4f:1c:10:61:7f:68:bd:8e:72: ff:80:87:ed:a9:53:f5:c7:f2:1f:56:cb:c0:53:21: 36:45:c4:96:a9:ab:e1:19:cc:25:7c:2b:6c:54:59: 40:df:de:bb:a0:f1:1e:c4:be:93:20:11:b1:06:87: 05:2c:ce:f5:15:00:c3:ec:67:11:eb:c4:b0:d9:e5: 30:ac:a0:7e:5c:f3:00:1d:4f:43:33:a4:3a:b1:3d: 01:36:b3:35:68:b9:e3:03:d8:c3:36:8b:99:8f:bb: 56:da:0c:c6:1a:86:c9:6c:e1:85:90:74:1a:bc:24: a2:6e:28:3f:11:ee:61:50:44:74:28:2b:ee:f0:27: 18:d0:09:1e:cb:1e:73:ef:68:e9:38:e4:9e:c6:6d: 50:28:92:a5:e8:66:60:33:f5:c4:f2:4c:4d:ea:52: c8:52:4b:27:0f:7a:cf:6a:fc:31:dc:bd:d8:f8:b2: 9e:33:ad:77:ba:f4:4b:a5:b8:e7:98:bf:8b:ad:de: b8:42:ca:47:7d:27:c6:5c:dc:86:38:1e:9d:55:cc: de:db:2a:f9:b5:2f:c1:67:2d:4c:57:0e:60:03:9d: 13:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D3:21:2F:BF:BB:F5:59:42:43:24:75:3C:27:55:7D:51:F2:DA:93 X509v3 Authority Key Identifier: keyid:62:BB:C8:47:CE:DF:8B:D7:7D:D0:C3:74:EF:7B:7E:64:C2:50:E3:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/YrvIR87fi9d90MN073t-ZMJQ470.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YrvIR87fi9d90MN073t-ZMJQ470.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF634/1BFDEE5A7CD911F0A9A43D0BC4F9AE02/YrvIR87fi9d90MN073t-ZMJQ470.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:6a:0b:c8:a6:d0:b8:48:e5:9c:d6:85:42:c2:c5:4a:2d:30: a3:00:be:46:83:d4:b5:fb:ca:4f:c2:1d:7a:ff:a0:cc:27:93: 3a:6d:1f:da:57:5c:7b:04:b8:08:34:00:00:b6:6d:b8:86:2c: 10:00:c5:01:ac:e0:24:99:34:25:77:2c:fd:ab:15:c7:85:c0: 06:4e:86:58:af:a9:37:a0:2d:1e:e5:48:72:a0:71:13:56:8d: 52:f8:ea:70:22:29:38:4f:37:52:f6:e5:2e:65:09:0b:41:87: e8:00:5f:36:e8:20:63:d6:af:93:5b:d9:f3:5f:21:0a:ac:37: f7:4d:62:f8:1a:85:62:1d:7f:d1:78:be:76:fc:96:60:12:69: a1:43:14:97:54:70:29:f7:93:45:b8:bb:ef:ae:cd:07:d3:5c: 8d:69:21:5f:39:76:60:0d:f2:2f:1e:5f:5d:f4:ed:b7:38:c9: a2:b3:ea:66:46:f8:6a:6b:98:1a:fe:12:5b:74:a7:da:b8:9a: a1:3e:3f:a9:4c:36:90:f0:18:e3:bb:f5:45:51:8d:ab:b7:e1: 31:7c:b6:b7:4e:f3:94:dd:bd:aa:51:13:64:a1:47:47:d7:c0: b3:bb:8c:7e:6f:e2:23:c3:49:b1:13:b5:76:54:8c:5f:be:f7: 62:41:15:45 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RjYzNDExMC8GA1UEBRMoNjJCQkM4NDdDRURGOEJENzdERDBDMzc0RUY3QjdFNjRD MjUwRTNCRDAeFw0yNTExMDMwNzQxMTBaFw0yNTExMTAwNzQxMTBaMBgxFjAUBgNV BAMTDTY5MDg1Yzk2LTZkMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/Dfe6A0dhJTCnXc1Bg8gMma5+yvQDrpmG02tIs2PLZop1qU8cEGF/aL2Ocv+A h+2pU/XH8h9Wy8BTITZFxJapq+EZzCV8K2xUWUDf3rug8R7EvpMgEbEGhwUszvUV AMPsZxHrxLDZ5TCsoH5c8wAdT0MzpDqxPQE2szVoueMD2MM2i5mPu1baDMYahsls 4YWQdBq8JKJuKD8R7mFQRHQoK+7wJxjQCR7LHnPvaOk45J7GbVAokqXoZmAz9cTy TE3qUshSSycPes9q/DHcvdj4sp4zrXe69EuluOeYv4ut3rhCykd9J8Zc3IY4Hp1V zN7bKvm1L8FnLUxXDmADnRMHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUidMhL7+7 9VlCQyR1PCdVfVHy2pMwHwYDVR0jBBgwFoAUYrvIR87fi9d90MN073t+ZMJQ470w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGNjM0LzFCRkRFRTVBN0NE OTExRjBBOUE0M0QwQkM0RjlBRTAyL1lydklSODdmaTlkOTBNTjA3M3QtWk1KUTQ3 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWXJ2SVI4N2ZpOWQ5ME1OMDczdC1aTUpRNDcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVG NjM0LzFCRkRFRTVBN0NEOTExRjBBOUE0M0QwQkM0RjlBRTAyL1lydklSODdmaTlk OTBNTjA3M3QtWk1KUTQ3MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADRqC8im0LhI5ZzWhULCxUotMKMAvkaD1LX7yk/CHXr/oMwnkzptH9pX XHsEuAg0AAC2bbiGLBAAxQGs4CSZNCV3LP2rFceFwAZOhlivqTegLR7lSHKgcRNW jVL46nAiKThPN1L25S5lCQtBh+gAXzboIGPWr5Nb2fNfIQqsN/dNYvgahWIdf9F4 vnb8lmASaaFDFJdUcCn3k0W4u++uzQfTXI1pIV85dmAN8i8eX1307bc4yaKz6mZG +GprmBr+Elt0p9q4mqE+P6lMNpDwGOO79UVRjau34TF8trdO85TdvapRE2ShR0fX wLO7jH5v4iPDSbETtXZUjF++92JBFUU= -----END CERTIFICATE-----Generated at Wed Nov 5 05:37:55 2025 by rpki-client