$ rpki-client -vvf rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft File: yukPRsIh0AstoIB61MSwZQM3Q0Q.mft (raw, json) Hash identifier: GubgDwmD1MgMjx5SJx6yTN77q6ywLttrNkFKDixanY4= Subject key identifier: 04:9F:F8:13:4F:6C:46:A9:E1:7C:FB:51:B3:99:DD:15:55:3D:D9:11 Authority key identifier: CA:E9:0F:46:C2:21:D0:0B:2D:A0:80:7A:D4:C4:B0:65:03:37:43:44 Certificate issuer: /CN=A9148526/serialNumber=CAE90F46C221D00B2DA0807AD4C4B06503374344 Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft Manifest number: 0153 Signing time: Mon 03 Nov 2025 04:11:14 +0000 Manifest this update: Mon 03 Nov 2025 04:11:14 +0000 Manifest next update: Mon 10 Nov 2025 04:11:14 +0000 Files and hashes: 1: yukPRsIh0AstoIB61MSwZQM3Q0Q.crl (hash: H98mncAEy0cmXbN0Iid8enFWjN7TJt7+dg7Rex5k8I0=) 2: 40F782C8B4AA11EEB330C137C4F9AE02.roa (hash: Oy0sD/XZsc15D/sxcRQlGFb92CKWJ3EipEQzMz/zoGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.crl rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:11:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148526, serialNumber=CAE90F46C221D00B2DA0807AD4C4B06503374344 Validity Not Before: Nov 3 04:11:14 2025 GMT Not After : Nov 10 04:11:14 2025 GMT Subject: CN=69082b62-d600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6e:40:a4:de:bc:c6:87:50:c6:56:a7:b0:11: 31:31:4e:de:a3:45:b0:dd:ba:de:4e:16:cd:21:44: 5b:23:90:80:e8:fc:75:bb:b1:31:d9:3d:1d:6f:b1: cd:eb:7e:ff:89:9b:12:a5:3e:ec:69:1e:4e:dc:a7: 04:17:fc:f3:e0:5f:2b:ac:fb:3d:aa:69:cd:2a:4b: e4:55:cf:70:c4:fc:dc:ac:a9:31:b1:c5:47:c9:63: 71:93:d9:70:bc:61:e5:f1:c0:f9:3b:d2:e7:79:21: 2a:e6:f1:08:bd:ee:1a:53:79:59:eb:ef:36:41:e6: 4a:bf:56:05:b2:d2:50:db:89:bf:1a:86:54:14:a8: a1:79:54:66:f7:c8:ed:4c:3e:30:96:a5:a3:26:23: 7c:db:6b:70:6e:c9:32:ed:9a:c1:b6:4e:06:e8:26: 84:87:51:c2:db:70:f3:d1:87:33:01:1c:c2:9b:0f: f4:d6:c6:ce:4e:6c:3a:54:cf:aa:27:89:74:80:ae: db:33:5e:57:33:23:8f:c9:b6:16:57:bd:10:8d:ba: 22:02:ec:e1:27:6c:30:e8:c4:05:5c:00:af:bb:f2: 2e:a8:64:cc:7d:bb:3c:21:e3:1e:ba:8a:18:10:46: ff:ab:58:b9:37:cf:1b:64:22:6c:64:f3:be:10:8f: 46:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:9F:F8:13:4F:6C:46:A9:E1:7C:FB:51:B3:99:DD:15:55:3D:D9:11 X509v3 Authority Key Identifier: keyid:CA:E9:0F:46:C2:21:D0:0B:2D:A0:80:7A:D4:C4:B0:65:03:37:43:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:f8:a7:ea:65:dc:76:46:46:41:b9:0c:e8:58:f5:dd:ac:67: 5f:e8:dc:82:8c:44:9d:48:89:8e:f9:f8:7d:fe:a5:6f:a5:a3: e0:2b:8d:c1:f2:d5:e6:83:d3:3c:0a:93:61:29:58:13:df:c1: 90:9c:b2:a0:01:93:ce:5e:52:07:e8:bf:41:e1:a5:a3:47:03: b0:7c:91:16:9c:20:b0:98:0f:b7:49:d2:58:24:02:0c:7d:f3: f9:81:95:82:3d:3c:cb:6f:c1:91:30:40:f9:9a:73:73:40:ab: 05:31:38:5c:a0:b1:42:21:f9:c9:5a:c0:b8:82:0a:c3:c0:63: 3f:5b:27:d5:b0:80:8c:3f:c2:6f:ce:1c:88:44:09:58:4c:48: e5:03:be:e1:8e:53:d9:c3:e1:73:c7:2c:b5:e6:9a:2c:78:07: 77:df:c2:17:a4:aa:33:42:84:5c:f8:f0:c4:b1:e3:9f:10:cc: 0e:f7:1a:99:19:fb:e7:91:79:60:8f:83:40:05:8f:85:0d:e8: 9b:73:7a:59:c7:4d:9e:02:3a:c3:46:e3:5d:3c:08:db:3e:de: 10:eb:53:24:32:78:9c:77:b8:d8:89:e3:13:75:fa:70:3a:81: 4a:07:db:ee:09:b7:58:c4:5a:40:09:f6:f1:92:1a:1e:00:65: f3:d2:c1:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg1MjYxMTAvBgNVBAUTKENBRTkwRjQ2QzIyMUQwMEIyREEwODA3QUQ0QzRCMDY1 MDMzNzQzNDQwHhcNMjUxMTAzMDQxMTE0WhcNMjUxMTEwMDQxMTE0WjAYMRYwFAYD VQQDEw02OTA4MmI2Mi1kNjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx25ApN68xodQxlansBExMU7eo0Ww3breThbNIURbI5CA6Px1u7Ex2T0db7HN 637/iZsSpT7saR5O3KcEF/zz4F8rrPs9qmnNKkvkVc9wxPzcrKkxscVHyWNxk9lw vGHl8cD5O9LneSEq5vEIve4aU3lZ6+82QeZKv1YFstJQ24m/GoZUFKiheVRm98jt TD4wlqWjJiN822twbsky7ZrBtk4G6CaEh1HC23Dz0YczARzCmw/01sbOTmw6VM+q J4l0gK7bM15XMyOPybYWV70QjboiAuzhJ2ww6MQFXACvu/IuqGTMfbs8IeMeuooY EEb/q1i5N88bZCJsZPO+EI9GPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFASf+BNP bEap4Xz7UbOZ3RVVPdkRMB8GA1UdIwQYMBaAFMrpD0bCIdALLaCAetTEsGUDN0NE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODUyNi9DNEM2RDA0NkI0 NEExMUVFOTBENDZGMENDNEY5QUUwMi95dWtQUnNJaDBBc3RvSUI2MU1Td1pRTTNR MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l1a1BSc0loMEFzdG9JQjYxTVN3WlFNM1EwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODUyNi9DNEM2RDA0NkI0NEExMUVFOTBENDZGMENDNEY5QUUwMi95dWtQUnNJaDBB c3RvSUI2MU1Td1pRTTNRMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBT+KfqZdx2RkZBuQzoWPXdrGdf6NyCjESdSImO+fh9/qVvpaPgK43B 8tXmg9M8CpNhKVgT38GQnLKgAZPOXlIH6L9B4aWjRwOwfJEWnCCwmA+3SdJYJAIM ffP5gZWCPTzLb8GRMED5mnNzQKsFMThcoLFCIfnJWsC4ggrDwGM/WyfVsICMP8Jv zhyIRAlYTEjlA77hjlPZw+Fzxyy15poseAd338IXpKozQoRc+PDEseOfEMwO9xqZ GfvnkXlgj4NABY+FDeibc3pZx02eAjrDRuNdPAjbPt4Q61MkMnicd7jYieMTdfpw OoFKB9vuCbdYxFpACfbxkhoeAGXz0sG+ -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:45 2025 by rpki-client