$ rpki-client -vvf rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft File: yT-PYPBn4kwb_PI7LPQivVhkvss.mft (raw, json) Hash identifier: WLfvrXCibUNndofdXwyG306lb+gKhogZtIg5dO1pCzc= Subject key identifier: B7:A2:01:E1:3D:00:AC:8E:03:7E:8E:B2:39:3C:B8:31:84:B4:79:C3 Authority key identifier: C9:3F:8F:60:F0:67:E2:4C:1B:FC:F2:3B:2C:F4:22:BD:58:64:BE:CB Certificate issuer: /CN=A915E4A4/serialNumber=C93F8F60F067E24C1BFCF23B2CF422BD5864BECB Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yT-PYPBn4kwb_PI7LPQivVhkvss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft Manifest number: 27 Signing time: Mon 03 Nov 2025 07:41:25 +0000 Manifest this update: Mon 03 Nov 2025 07:41:24 +0000 Manifest next update: Mon 10 Nov 2025 07:41:24 +0000 Files and hashes: 1: yT-PYPBn4kwb_PI7LPQivVhkvss.crl (hash: n/nQ1tdzYAt5KXx6fkq9ViARuJeoZs9gOSqC4TvC/K4=) 2: 7452F54C7D7D11F09C982A7CC4F9AE02.roa (hash: fSo3LQThSu3zM+wgt7BUnbtQ2wqM3uaigVctUk+6+W0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.crl rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yT-PYPBn4kwb_PI7LPQivVhkvss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:41:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E4A4, serialNumber=C93F8F60F067E24C1BFCF23B2CF422BD5864BECB Validity Not Before: Nov 3 07:41:24 2025 GMT Not After : Nov 10 07:41:24 2025 GMT Subject: CN=69085ca4-2006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:df:7d:87:98:ab:ba:02:83:1c:d2:02:ca:1b: a6:d8:68:97:e2:f9:2f:93:f3:83:39:17:b0:93:1c: ba:77:1f:35:63:56:39:23:24:e5:bb:78:12:84:ad: 45:aa:a8:29:b2:bf:3e:cd:00:ac:5a:ca:7a:42:2a: 37:bc:24:48:9e:ea:fe:a4:c5:35:11:c5:21:2f:18: f5:c6:28:7c:f0:2f:00:c9:67:4c:bc:14:2e:16:22: 56:19:22:e3:52:3c:72:2a:87:6e:ea:9c:e3:3a:25: 77:e0:8c:4d:5d:b0:81:40:64:4d:3c:e8:99:93:2f: 79:ca:29:98:2a:d5:e7:1e:e9:41:8a:9f:d5:e8:de: e4:be:62:59:2d:b7:68:30:47:66:96:98:48:fa:6a: a3:95:3f:47:41:af:5c:02:ce:20:9c:8b:bd:8d:24: e0:88:37:26:d8:c4:0e:f7:6a:33:0c:fd:75:4d:d9: 22:eb:58:a5:15:99:8a:aa:3b:3e:f9:d3:6d:c1:37: 3a:5e:29:1d:70:b1:2d:78:27:22:7e:55:71:cb:48: 9f:5b:36:76:96:03:88:4a:9d:bf:0a:4a:5f:c7:d8: 8e:5e:78:87:7f:b4:1a:95:26:17:44:f9:a8:73:72: f5:38:05:27:5e:6c:b4:cb:de:5e:bf:de:b8:b1:f1: c7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A2:01:E1:3D:00:AC:8E:03:7E:8E:B2:39:3C:B8:31:84:B4:79:C3 X509v3 Authority Key Identifier: keyid:C9:3F:8F:60:F0:67:E2:4C:1B:FC:F2:3B:2C:F4:22:BD:58:64:BE:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yT-PYPBn4kwb_PI7LPQivVhkvss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:50:73:1c:79:ad:aa:8d:91:a2:95:e4:9b:6a:45:12:cb:ca: bb:21:91:0d:d7:1f:47:3d:82:f0:08:90:58:12:75:b3:53:ff: 7c:d1:89:bd:6a:6a:03:95:67:50:d7:d9:06:d2:a7:80:66:2d: 22:ef:39:8d:8d:23:64:dd:8f:a4:01:16:0d:45:96:fd:a9:f0: 1e:25:b6:a5:20:34:b3:df:6b:61:27:5a:1c:c8:97:de:6c:c1: 9e:b5:e9:a3:ac:5c:90:52:b5:b5:54:b8:05:3b:a6:98:c4:cc: f9:31:60:fe:4c:e2:52:6a:90:fa:9b:0c:cb:10:5f:39:e2:bd: fa:f9:0c:bb:22:3b:7f:0d:62:a8:76:46:32:90:41:11:05:66: 8f:1d:69:bb:40:52:2d:e9:92:45:da:bf:0c:e3:ff:44:86:97: 8e:03:79:6c:42:89:67:16:9a:b6:44:ea:20:d8:ea:d0:c7:21: cc:da:9e:4d:b1:75:b6:d4:64:81:be:80:65:d6:a2:43:d4:ff: 1e:98:46:fd:73:cf:87:4a:77:b7:da:5f:43:43:2c:c1:eb:c0: 65:61:d1:c0:d1:7d:bb:58:8a:16:8e:5d:06:4d:6c:e2:e0:98: 1b:ad:f6:ff:3c:ea:79:d7:6a:c6:45:8a:f2:f1:68:85:cb:e6: fe:41:0e:a3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RTRBNDExMC8GA1UEBRMoQzkzRjhGNjBGMDY3RTI0QzFCRkNGMjNCMkNGNDIyQkQ1 ODY0QkVDQjAeFw0yNTExMDMwNzQxMjRaFw0yNTExMTAwNzQxMjRaMBgxFjAUBgNV BAMTDTY5MDg1Y2E0LTIwMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3332HmKu6AoMc0gLKG6bYaJfi+S+T84M5F7CTHLp3HzVjVjkjJOW7eBKErUWq qCmyvz7NAKxaynpCKje8JEie6v6kxTURxSEvGPXGKHzwLwDJZ0y8FC4WIlYZIuNS PHIqh27qnOM6JXfgjE1dsIFAZE086JmTL3nKKZgq1ece6UGKn9Xo3uS+Ylktt2gw R2aWmEj6aqOVP0dBr1wCziCci72NJOCINybYxA73ajMM/XVN2SLrWKUVmYqqOz75 023BNzpeKR1wsS14JyJ+VXHLSJ9bNnaWA4hKnb8KSl/H2I5eeId/tBqVJhdE+ahz cvU4BSdebLTL3l6/3rix8cdJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUt6IB4T0A rI4Dfo6yOTy4MYS0ecMwHwYDVR0jBBgwFoAUyT+PYPBn4kwb/PI7LPQivVhkvssw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFNEE0L0VBQjE3QkY2N0Q3 QzExRjA5NkU1OTU3OUM0RjlBRTAyL3lULVBZUEJuNGt3Yl9QSTdMUFFpdlZoa3Zz cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveVQtUFlQQm40a3diX1BJN0xQUWl2VmhrdnNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF NEE0L0VBQjE3QkY2N0Q3QzExRjA5NkU1OTU3OUM0RjlBRTAyL3lULVBZUEJuNGt3 Yl9QSTdMUFFpdlZoa3Zzcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKxQcxx5raqNkaKV5JtqRRLLyrshkQ3XH0c9gvAIkFgSdbNT/3zRib1q agOVZ1DX2QbSp4BmLSLvOY2NI2Tdj6QBFg1Flv2p8B4ltqUgNLPfa2EnWhzIl95s wZ616aOsXJBStbVUuAU7ppjEzPkxYP5M4lJqkPqbDMsQXznivfr5DLsiO38NYqh2 RjKQQREFZo8dabtAUi3pkkXavwzj/0SGl44DeWxCiWcWmrZE6iDY6tDHIczank2x dbbUZIG+gGXWokPU/x6YRv1zz4dKd7faX0NDLMHrwGVh0cDRfbtYihaOXQZNbOLg mBut9v886nnXasZFivLxaIXL5v5BDqM= -----END CERTIFICATE-----Generated at Tue Nov 4 01:06:04 2025 by rpki-client