$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft File: YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft (raw, json) Hash identifier: FCa6jfP+A9cNjQ9IR81IP1kfC5J/USlpO6NUAIalRJs= Subject key identifier: 01:34:FA:3E:26:BC:5B:9E:62:03:36:0F:3F:75:7E:08:E8:88:1B:C3 Authority key identifier: 61:35:49:A8:D5:96:37:3D:86:5A:22:0E:2E:B1:A8:60:4B:D7:51:8A Certificate issuer: /CN=A9171D16/serialNumber=613549A8D596373D865A220E2EB1A8604BD7518A Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft Manifest number: 0153 Signing time: Mon 03 Nov 2025 04:08:15 +0000 Manifest this update: Mon 03 Nov 2025 04:08:14 +0000 Manifest next update: Mon 10 Nov 2025 04:08:14 +0000 Files and hashes: 1: YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl (hash: SDsycpFMKm7Craq3mWialwruoSJ1SAkNfuUPVGljsuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:08:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D16, serialNumber=613549A8D596373D865A220E2EB1A8604BD7518A Validity Not Before: Nov 3 04:08:14 2025 GMT Not After : Nov 10 04:08:14 2025 GMT Subject: CN=69082aae-1ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a1:a0:ce:85:c9:1d:7e:a8:20:2c:9e:83:7f: b2:e5:f2:e8:7f:c0:1c:03:f8:05:dd:bd:c7:90:d2: 27:35:66:47:19:0f:05:2b:8f:57:9f:26:64:be:4b: 05:36:e8:2b:35:38:ae:4e:50:ef:c8:c2:a5:51:5a: 51:e0:0c:33:c4:1e:0e:94:70:30:1b:69:10:7b:18: a5:d2:9c:0e:fc:9f:0f:0e:7b:b4:54:2b:08:4a:db: 3a:64:ff:59:79:d7:87:7b:20:94:90:d7:85:28:81: 91:a6:ef:35:2e:8b:32:17:d8:3b:bc:c5:43:a0:ab: fa:7e:65:65:03:7c:4f:fb:74:c1:02:fd:46:51:c5: 9d:28:c6:91:a4:60:85:96:74:a6:6f:4c:0f:a5:0e: 20:8e:02:be:0c:6f:a6:79:b5:d6:6a:7c:28:84:81: 99:52:c7:49:8f:6f:c1:28:98:9d:5c:25:15:a0:24: f2:1f:c0:ac:f6:39:da:4c:71:18:ad:7d:90:b0:d2: 6d:63:1d:75:42:39:e7:78:eb:e8:50:43:00:9e:e1: a8:78:21:d8:63:7e:40:2f:84:8f:6f:c4:f4:fa:29: 78:6a:ea:f5:fd:c6:b4:d6:e0:92:3c:b6:46:b6:c3: c1:57:e9:a3:79:fb:c0:d5:ea:b1:af:12:2c:8e:41: 63:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:34:FA:3E:26:BC:5B:9E:62:03:36:0F:3F:75:7E:08:E8:88:1B:C3 X509v3 Authority Key Identifier: keyid:61:35:49:A8:D5:96:37:3D:86:5A:22:0E:2E:B1:A8:60:4B:D7:51:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YTVJqNWWNz2GWiIOLrGoYEvXUYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D16/6EA30B02AE9C11EE911AFB63C4F9AE02/YTVJqNWWNz2GWiIOLrGoYEvXUYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:1b:a8:a0:0e:72:c6:1f:fb:c4:05:aa:5e:47:dc:b8:2b:fb: 94:ff:25:8f:93:01:74:bf:f8:33:54:8d:ba:bf:5f:04:54:d4: 82:dd:3a:0b:6c:fb:28:3b:7c:8e:9f:08:a5:6f:bc:e8:5b:2d: a6:96:38:44:04:2d:43:fa:7e:27:d9:14:f1:15:62:89:03:21: e4:18:ae:0e:9b:38:73:33:cd:36:9c:f5:a0:f4:11:ca:03:c1: 2c:50:1c:33:7b:11:ea:2c:a8:7c:9f:06:05:2d:f5:e2:55:9b: f9:da:4c:dd:56:8a:d8:8d:8a:31:3b:42:8c:34:76:11:8b:76: b3:27:77:7f:0e:a3:68:8b:24:9b:55:4c:45:50:d7:40:e2:c7: 86:6b:90:9b:0a:9e:31:66:36:fd:cb:25:fb:8c:5b:5e:91:24: 75:0c:84:08:db:c3:22:2d:1e:35:87:67:48:22:77:7c:de:a1: c6:0a:90:33:2e:be:95:da:fc:0b:86:a9:ec:98:d7:5e:28:d7: 7c:ab:ff:38:c2:14:48:a5:7e:ba:b8:39:02:6c:23:06:23:21: 25:d4:52:1a:2e:57:1b:96:00:ff:5c:65:7a:78:13:a0:db:df: 45:ef:79:68:0d:92:87:fa:1d:64:af:d0:02:7f:e7:44:52:46: 94:eb:ae:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEMTYxMTAvBgNVBAUTKDYxMzU0OUE4RDU5NjM3M0Q4NjVBMjIwRTJFQjFBODYw NEJENzUxOEEwHhcNMjUxMTAzMDQwODE0WhcNMjUxMTEwMDQwODE0WjAYMRYwFAYD VQQDEw02OTA4MmFhZS0xZWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0KGgzoXJHX6oICyeg3+y5fLof8AcA/gF3b3HkNInNWZHGQ8FK49XnyZkvksF NugrNTiuTlDvyMKlUVpR4AwzxB4OlHAwG2kQexil0pwO/J8PDnu0VCsISts6ZP9Z edeHeyCUkNeFKIGRpu81LosyF9g7vMVDoKv6fmVlA3xP+3TBAv1GUcWdKMaRpGCF lnSmb0wPpQ4gjgK+DG+mebXWanwohIGZUsdJj2/BKJidXCUVoCTyH8Cs9jnaTHEY rX2QsNJtYx11QjnneOvoUEMAnuGoeCHYY35AL4SPb8T0+il4aur1/ca01uCSPLZG tsPBV+mjefvA1eqxrxIsjkFjDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAE0+j4m vFueYgM2Dz91fgjoiBvDMB8GA1UdIwQYMBaAFGE1SajVljc9hloiDi6xqGBL11GK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQxNi82RUEzMEIwMkFF OUMxMUVFOTExQUZCNjNDNEY5QUUwMi9ZVFZKcU5XV056MkdXaUlPTHJHb1lFdlhV WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lUVkpxTldXTnoyR1dpSU9MckdvWUV2WFVZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUQxNi82RUEzMEIwMkFFOUMxMUVFOTExQUZCNjNDNEY5QUUwMi9ZVFZKcU5XV056 MkdXaUlPTHJHb1lFdlhVWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDG6igDnLGH/vEBapeR9y4K/uU/yWPkwF0v/gzVI26v18EVNSC3ToL bPsoO3yOnwilb7zoWy2mljhEBC1D+n4n2RTxFWKJAyHkGK4OmzhzM802nPWg9BHK A8EsUBwzexHqLKh8nwYFLfXiVZv52kzdVorYjYoxO0KMNHYRi3azJ3d/DqNoiySb VUxFUNdA4seGa5CbCp4xZjb9yyX7jFtekSR1DIQI28MiLR41h2dIInd83qHGCpAz Lr6V2vwLhqnsmNdeKNd8q/84whRIpX66uDkCbCMGIyEl1FIaLlcblgD/XGV6eBOg 299F73loDZKH+h1kr9ACf+dEUkaU6647 -----END CERTIFICATE-----Generated at Mon Nov 3 18:20:13 2025 by rpki-client