$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft File: yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft (raw, json) Hash identifier: Gs80DbIiG3U+AJv8xVSd9R7FksWPwhc/AQ522fGEz+A= Subject key identifier: F4:70:7A:FC:2E:5A:2D:F3:AD:84:F3:13:C8:9F:87:53:B6:BB:8E:8B Authority key identifier: CA:A9:69:FF:37:74:BC:D9:ED:60:27:73:D2:9D:87:8B:C4:E2:65:6B Certificate issuer: /CN=A916B4B7/serialNumber=CAA969FF3774BCD9ED602773D29D878BC4E2656B Certificate serial: 0933 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft Manifest number: 092D Signing time: Thu 18 Sep 2025 20:28:23 +0000 Manifest this update: Thu 18 Sep 2025 20:28:22 +0000 Manifest next update: Thu 25 Sep 2025 20:28:22 +0000 Files and hashes: 1: yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl (hash: sST2pBjcxHWxLiytO5L7XsRoIN9eAtj9L2b/NVXd4Tc=) 2: 90798692AA0A11EA89D5161EC4F9AE02.roa (hash: SjfL0z+V8r1mG2yvSd88vw9Fy41PjMV8KGz6ODEkn2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:28:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2355 (0x933) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B4B7, serialNumber=CAA969FF3774BCD9ED602773D29D878BC4E2656B Validity Not Before: Sep 18 20:28:22 2025 GMT Not After : Sep 25 20:28:22 2025 GMT Subject: CN=68cc6b67-31c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:25:a8:e5:36:87:77:f0:f4:df:e4:59:64:71: 64:ea:35:62:e4:6d:6e:c4:e2:63:3b:3b:c0:9f:19: bd:03:1f:be:79:bc:87:81:a1:a9:13:04:dc:7d:7a: 3e:bc:27:89:b1:a8:5f:42:48:63:d3:fd:f8:b0:34: dc:a7:1d:26:f5:c5:02:a3:23:84:e1:67:38:81:be: 57:ac:9f:58:36:82:75:98:a7:ab:31:e1:5b:4c:dc: 94:38:cf:fb:f5:9e:ce:08:fe:65:7b:a3:95:d3:13: 40:80:1c:12:2d:1c:21:b1:72:17:a4:42:fc:08:50: c2:e0:e6:ec:fd:54:8f:47:18:55:5a:28:df:9d:de: 7e:60:2e:21:16:e3:94:7e:ab:be:11:e2:e7:50:af: 08:05:89:fc:04:35:c9:f1:51:8c:32:0a:35:92:7b: f2:af:66:0c:82:af:1b:39:f7:56:51:5d:ec:18:e3: f6:a9:8b:19:c5:d8:9b:89:47:7e:75:ae:5d:3b:d0: e2:d8:f1:df:89:82:ea:17:e5:dc:dd:4e:96:48:55: 68:3c:b4:66:08:bc:2b:1f:77:6c:c6:04:67:22:3f: b5:4d:3b:14:2d:fd:bb:c2:8f:34:ef:fa:45:62:15: 42:96:61:0f:68:17:16:30:aa:1b:ce:91:f0:b7:d4: 74:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:70:7A:FC:2E:5A:2D:F3:AD:84:F3:13:C8:9F:87:53:B6:BB:8E:8B X509v3 Authority Key Identifier: keyid:CA:A9:69:FF:37:74:BC:D9:ED:60:27:73:D2:9D:87:8B:C4:E2:65:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:2b:fc:03:3a:02:f0:51:ec:e8:23:26:a6:ec:68:87:97:0a: 75:ca:07:cb:ef:2d:08:2d:e1:cb:a2:7d:9f:e4:d6:3d:52:9b: 08:a5:9b:e5:ba:56:5b:0c:05:54:82:1e:2c:a4:ae:97:6c:0a: 2b:d7:e8:b2:45:64:d5:f1:c6:9f:fc:a6:f7:1f:2d:75:07:a1: 2f:aa:5c:94:7f:f0:8e:9e:f7:fd:b3:58:fb:46:0a:57:3a:64: 3a:56:c9:ac:81:02:35:47:df:dc:f4:25:d9:bb:f4:3d:98:cc: cd:07:ee:a3:43:dc:ab:49:73:da:38:28:3f:2e:41:85:83:08: 54:09:19:9f:e3:63:e0:c3:80:c4:25:db:94:e6:c4:70:21:89: 18:9e:f5:b1:79:e0:15:cd:2f:30:c2:e3:5b:b6:bf:7c:02:8c: ec:0f:f8:d0:98:74:75:d2:f5:fe:8b:98:a7:ae:55:df:a7:15: bc:99:5a:f8:b8:15:92:6d:86:e4:6c:d9:86:4b:c1:55:67:f9: c7:18:ba:f0:c7:d4:a2:4d:9b:d7:5d:de:e5:2a:e3:47:01:2c: 2a:b6:74:d8:fc:3c:64:35:77:e6:c3:26:4f:c5:a7:89:b4:58: 21:f7:b5:a1:78:eb:49:09:b3:91:11:99:1b:d9:34:55:5b:df: 51:d1:64:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI0QjcxMTAvBgNVBAUTKENBQTk2OUZGMzc3NEJDRDlFRDYwMjc3M0QyOUQ4NzhC QzRFMjY1NkIwHhcNMjUwOTE4MjAyODIyWhcNMjUwOTI1MjAyODIyWjAYMRYwFAYD VQQDEw02OGNjNmI2Ny0zMWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAviWo5TaHd/D03+RZZHFk6jVi5G1uxOJjOzvAnxm9Ax++ebyHgaGpEwTcfXo+ vCeJsahfQkhj0/34sDTcpx0m9cUCoyOE4Wc4gb5XrJ9YNoJ1mKerMeFbTNyUOM/7 9Z7OCP5le6OV0xNAgBwSLRwhsXIXpEL8CFDC4Obs/VSPRxhVWijfnd5+YC4hFuOU fqu+EeLnUK8IBYn8BDXJ8VGMMgo1knvyr2YMgq8bOfdWUV3sGOP2qYsZxdibiUd+ da5dO9Di2PHfiYLqF+Xc3U6WSFVoPLRmCLwrH3dsxgRnIj+1TTsULf27wo807/pF YhVClmEPaBcWMKobzpHwt9R0RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPRwevwu Wi3zrYTzE8ifh1O2u46LMB8GA1UdIwQYMBaAFMqpaf83dLzZ7WAnc9Kdh4vE4mVr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjRCNy8wOTcyQzc0MEFB MDkxMUVBOEZFM0I2MUJDNEY5QUUwMi95cWxwX3pkMHZObnRZQ2R6MHAySGk4VGla V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lxbHBfemQwdk5udFlDZHowcDJIaThUaVpXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjRCNy8wOTcyQzc0MEFBMDkxMUVBOEZFM0I2MUJDNEY5QUUwMi95cWxwX3pkMHZO bnRZQ2R6MHAySGk4VGlaV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDSK/wDOgLwUezoIyam7GiHlwp1ygfL7y0ILeHLon2f5NY9UpsIpZvl ulZbDAVUgh4spK6XbAor1+iyRWTV8caf/Kb3Hy11B6EvqlyUf/COnvf9s1j7RgpX OmQ6VsmsgQI1R9/c9CXZu/Q9mMzNB+6jQ9yrSXPaOCg/LkGFgwhUCRmf42Pgw4DE JduU5sRwIYkYnvWxeeAVzS8wwuNbtr98AozsD/jQmHR10vX+i5inrlXfpxW8mVr4 uBWSbYbkbNmGS8FVZ/nHGLrwx9SiTZvXXd7lKuNHASwqtnTY/DxkNXfmwyZPxaeJ tFgh97WheOtJCbOREZkb2TRVW99R0WQH -----END CERTIFICATE-----Generated at Fri Sep 19 18:31:29 2025 by rpki-client