$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft File: YHYovkVe83m-Zq-dbKm6js3tPwQ.mft (raw, json) Hash identifier: YybOYNPJlDo1m9zs1xW1Dy8HyFPRh4GLcLUa7c4GIp4= Subject key identifier: B0:59:79:2A:7E:C2:D7:B0:9C:3D:34:A8:7C:9E:7C:02:B2:AE:DB:46 Authority key identifier: 60:76:28:BE:45:5E:F3:79:BE:66:AF:9D:6C:A9:BA:8E:CD:ED:3F:04 Certificate issuer: /CN=A91817E6/serialNumber=607628BE455EF379BE66AF9D6CA9BA8ECDED3F04 Certificate serial: 016D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft Manifest number: 0B36 Signing time: Tue 04 Nov 2025 20:22:34 +0000 Manifest this update: Tue 04 Nov 2025 20:22:33 +0000 Manifest next update: Tue 11 Nov 2025 20:22:33 +0000 Files and hashes: 1: YHYovkVe83m-Zq-dbKm6js3tPwQ.crl (hash: p0lAFRtEyj0HrX46NnePNOFJHxVreNTu7r7ZhjLME48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.crl rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:22:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91817E6, serialNumber=607628BE455EF379BE66AF9D6CA9BA8ECDED3F04 Validity Not Before: Nov 4 20:22:33 2025 GMT Not After : Nov 11 20:22:33 2025 GMT Subject: CN=690a608a-7cc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:19:66:a2:07:ad:c4:f3:4b:31:b6:2b:87:63: e5:f5:db:f8:3a:52:87:41:f5:81:3b:32:81:11:be: fd:0c:7c:a1:dc:6a:7e:46:86:db:cf:f0:20:49:20: ff:b8:f5:57:22:96:a1:7e:87:ad:e8:0e:df:7f:87: d0:f5:46:c8:91:bb:11:98:c6:76:38:07:54:8c:e1: 4b:c1:9f:e5:e2:5a:df:80:27:af:2e:22:3c:c0:b7: 4a:07:01:0c:63:03:45:1a:7b:8a:c1:93:29:a6:eb: 49:88:da:47:89:98:76:a4:a6:c6:f2:fe:19:d8:26: 43:7e:bf:b5:7a:e3:50:91:f6:7c:c7:66:61:b2:22: 90:52:ab:3b:07:71:ad:1e:df:07:06:5a:2b:39:db: f0:29:3e:84:6e:7e:fd:6b:bd:1c:20:38:ca:38:fc: e8:04:cf:d1:0b:d6:6a:91:07:a2:53:8c:24:bc:7a: f7:05:4a:f9:f1:6a:e7:79:98:22:60:ed:59:21:73: 09:84:6d:14:4e:2a:55:26:d6:83:c4:39:fd:e0:78: 48:43:2c:e4:ab:01:15:e5:7e:51:07:c8:9c:73:21: eb:f9:36:32:9f:95:dd:b1:28:85:ed:85:ac:4c:9a: d4:d2:b5:8d:d6:d8:7f:15:78:b6:23:b8:55:70:19: d7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:59:79:2A:7E:C2:D7:B0:9C:3D:34:A8:7C:9E:7C:02:B2:AE:DB:46 X509v3 Authority Key Identifier: keyid:60:76:28:BE:45:5E:F3:79:BE:66:AF:9D:6C:A9:BA:8E:CD:ED:3F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:98:e7:cf:5d:23:14:15:52:61:1b:75:e9:2b:7a:93:4c:b3: 53:b8:c0:f1:95:19:ef:90:d8:bf:30:da:e9:c2:90:1f:e0:3c: ce:9c:8e:03:60:eb:0c:be:a8:73:51:6b:92:a4:50:6c:68:5c: 73:81:5f:2f:fa:70:34:bc:25:4a:81:fb:fb:89:64:1a:a8:ff: 9d:a6:33:10:df:2b:c3:ec:13:66:8d:cd:9a:f1:1d:f8:92:93: cc:4e:0f:37:81:d8:2a:5e:77:f4:b5:86:1f:de:6c:87:02:2c: b6:02:9a:62:10:13:ed:6f:33:bc:93:20:fd:fb:a5:fb:a1:ab: 83:c1:d4:f3:36:03:39:5f:92:58:61:39:63:3f:b5:eb:d0:67: 14:63:25:a0:a4:fe:4e:e0:c8:8b:d1:1e:ac:2a:36:ce:e4:22: 4d:1f:2e:99:5d:19:ea:9d:95:36:ba:e8:b9:7a:2f:da:1e:85: 15:5d:f8:aa:7c:c3:a4:7e:a7:2d:03:e2:06:6d:b1:07:46:2a: f2:2d:eb:d9:0a:5f:3f:40:9b:03:f6:48:f0:2b:94:4e:98:ef: 4a:69:90:95:be:d0:86:ba:6a:01:0a:0a:65:a1:52:c6:1e:f1: 72:9e:55:8e:10:92:ed:c7:38:04:4c:29:3c:09:51:25:69:0f: d7:b6:9b:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE3RTYxMTAvBgNVBAUTKDYwNzYyOEJFNDU1RUYzNzlCRTY2QUY5RDZDQTlCQThF Q0RFRDNGMDQwHhcNMjUxMTA0MjAyMjMzWhcNMjUxMTExMjAyMjMzWjAYMRYwFAYD VQQDEw02OTBhNjA4YS03Y2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2RlmogetxPNLMbYrh2Pl9dv4OlKHQfWBOzKBEb79DHyh3Gp+Robbz/AgSSD/ uPVXIpahfoet6A7ff4fQ9UbIkbsRmMZ2OAdUjOFLwZ/l4lrfgCevLiI8wLdKBwEM YwNFGnuKwZMpputJiNpHiZh2pKbG8v4Z2CZDfr+1euNQkfZ8x2ZhsiKQUqs7B3Gt Ht8HBlorOdvwKT6Ebn79a70cIDjKOPzoBM/RC9ZqkQeiU4wkvHr3BUr58WrneZgi YO1ZIXMJhG0UTipVJtaDxDn94HhIQyzkqwEV5X5RB8iccyHr+TYyn5XdsSiF7YWs TJrU0rWN1th/FXi2I7hVcBnX9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBZeSp+ wtewnD00qHyefAKyrttGMB8GA1UdIwQYMBaAFGB2KL5FXvN5vmavnWypuo7N7T8E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTdFNi81NTc0MEU3MEIz QjMxMUVBQjE5OENFMERDNEY5QUUwMi9ZSFlvdmtWZTgzbS1acS1kYkttNmpzM3RQ d1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lIWW92a1ZlODNtLVpxLWRiS202anMzdFB3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTdFNi81NTc0MEU3MEIzQjMxMUVBQjE5OENFMERDNEY5QUUwMi9ZSFlvdmtWZTgz bS1acS1kYkttNmpzM3RQd1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACmOfPXSMUFVJhG3XpK3qTTLNTuMDxlRnvkNi/MNrpwpAf4DzOnI4D YOsMvqhzUWuSpFBsaFxzgV8v+nA0vCVKgfv7iWQaqP+dpjMQ3yvD7BNmjc2a8R34 kpPMTg83gdgqXnf0tYYf3myHAiy2AppiEBPtbzO8kyD9+6X7oauDwdTzNgM5X5JY YTljP7Xr0GcUYyWgpP5O4MiL0R6sKjbO5CJNHy6ZXRnqnZU2uui5ei/aHoUVXfiq fMOkfqctA+IGbbEHRiryLevZCl8/QJsD9kjwK5ROmO9KaZCVvtCGumoBCgploVLG HvFynlWOEJLtxzgETCk8CVElaQ/XtptN -----END CERTIFICATE-----Generated at Wed Nov 5 18:09:31 2025 by rpki-client