$ rpki-client -vvf rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft File: YT7L4D69dbDJ5elhFPZXzliVsfc.mft (raw, json) Hash identifier: faudkVwTEnlrqnAwygUS5wZSsfdE6d3SLu0WyKCndpM= Subject key identifier: A3:52:F1:FD:CE:B3:BA:EA:66:F7:14:3A:04:F8:40:9F:CF:80:7B:E9 Authority key identifier: 61:3E:CB:E0:3E:BD:75:B0:C9:E5:E9:61:14:F6:57:CE:58:95:B1:F7 Certificate issuer: /CN=A9182794/serialNumber=613ECBE03EBD75B0C9E5E96114F657CE5895B1F7 Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YT7L4D69dbDJ5elhFPZXzliVsfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft Manifest number: C2 Signing time: Mon 03 Nov 2025 05:55:53 +0000 Manifest this update: Mon 03 Nov 2025 05:55:53 +0000 Manifest next update: Mon 10 Nov 2025 05:55:53 +0000 Files and hashes: 1: YT7L4D69dbDJ5elhFPZXzliVsfc.crl (hash: t5929TZOElGRGGVfCNXC5z2edyborUXjnuXV3OBZbtE=) 2: C296778C95CB11EFA3BE9873C4F9AE02.roa (hash: YFnVZs2sNdDdcoL6mfOS9gOjX930yi4DDrGYTFUTspw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.crl rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YT7L4D69dbDJ5elhFPZXzliVsfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:55:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182794, serialNumber=613ECBE03EBD75B0C9E5E96114F657CE5895B1F7 Validity Not Before: Nov 3 05:55:53 2025 GMT Not After : Nov 10 05:55:53 2025 GMT Subject: CN=690843e9-cc57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:83:e6:e6:82:38:62:e8:23:48:52:14:ac:c3: a1:8a:bf:6f:a0:be:ac:85:a3:df:cb:9c:69:ad:e8: 3d:18:61:34:73:ae:29:fb:f5:bc:9a:c4:6b:16:38: 72:2f:cb:5d:21:d3:a7:8f:7d:ec:af:a7:f4:2b:0c: 59:7b:c5:24:4c:08:f4:8c:43:e5:0d:b7:18:25:fd: 3d:cc:06:e8:56:92:f2:dc:ec:05:52:67:55:42:75: 47:1b:db:12:4e:b1:17:d1:b5:fd:6f:5f:a4:74:81: 8a:d8:9c:72:53:d4:a3:f8:3b:f8:0f:e7:ba:b0:ea: 2b:c2:bb:2c:f3:c9:bd:ac:e7:26:33:e6:76:f0:7e: 60:a7:8b:12:ae:ee:e8:b4:b7:40:6d:1c:47:09:c7: 84:12:35:e8:5f:c0:02:42:c7:91:a7:b7:3e:1a:0b: 22:3b:37:4f:50:ad:60:e7:d6:e0:f7:a2:3f:42:4f: 8a:3a:3c:b8:77:c9:af:d2:49:bb:18:35:17:2f:00: 95:33:96:02:dc:7c:c6:73:01:ff:64:46:da:bf:4e: 63:0e:3d:97:d0:1d:6b:ab:40:e4:1d:d4:0d:da:11: a1:f4:8b:d9:ee:08:f2:dd:92:68:a0:50:9e:24:69: 16:4b:4c:f1:35:0d:ea:7f:41:91:d9:e9:39:42:04: 09:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:52:F1:FD:CE:B3:BA:EA:66:F7:14:3A:04:F8:40:9F:CF:80:7B:E9 X509v3 Authority Key Identifier: keyid:61:3E:CB:E0:3E:BD:75:B0:C9:E5:E9:61:14:F6:57:CE:58:95:B1:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YT7L4D69dbDJ5elhFPZXzliVsfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:74:45:4c:a4:6a:16:5f:2a:83:52:66:d1:67:5f:16:89:87: a7:7c:fe:c5:29:6b:80:2b:51:e8:80:e7:08:44:a3:df:7d:30: 20:03:7e:4d:5b:95:0b:6b:97:a4:d7:0b:6f:98:57:61:69:e1: 9a:63:04:cc:25:f0:df:1c:1f:d5:c4:c5:76:e1:1b:c7:76:fa: 9e:20:4f:c8:a2:78:d3:8c:d9:c6:5b:7c:c9:df:b6:76:41:fb: 42:9a:45:49:f7:0e:d3:5d:6e:42:2c:8e:ac:d2:e7:03:02:fa: 4a:cc:93:28:35:33:41:12:06:e5:5c:77:48:12:52:cf:72:4a: 56:72:20:a1:9e:ab:71:e5:27:d6:78:01:b7:b8:02:12:df:b6: 7e:e4:20:8f:b2:a2:67:18:e2:8d:f8:85:45:eb:82:b3:a0:92: 90:38:b4:df:f1:4a:a1:05:4c:14:d6:86:b2:e7:72:2a:52:54: cd:2b:f1:be:ae:25:48:09:60:0a:2b:35:54:ec:da:3b:cf:cd: 28:f7:0d:35:a1:f5:1b:2d:24:84:d6:30:12:3d:c0:dd:b5:4c: 4e:41:05:c4:71:e7:0e:e1:1a:fd:61:b3:75:29:21:4c:23:4d: 50:bf:7e:17:22:7b:f6:14:7e:81:17:eb:52:c0:be:80:1a:d3: 14:6a:96:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI3OTQxMTAvBgNVBAUTKDYxM0VDQkUwM0VCRDc1QjBDOUU1RTk2MTE0RjY1N0NF NTg5NUIxRjcwHhcNMjUxMTAzMDU1NTUzWhcNMjUxMTEwMDU1NTUzWjAYMRYwFAYD VQQDEw02OTA4NDNlOS1jYzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7IPm5oI4YugjSFIUrMOhir9voL6shaPfy5xpreg9GGE0c64p+/W8msRrFjhy L8tdIdOnj33sr6f0KwxZe8UkTAj0jEPlDbcYJf09zAboVpLy3OwFUmdVQnVHG9sS TrEX0bX9b1+kdIGK2JxyU9Sj+Dv4D+e6sOorwrss88m9rOcmM+Z28H5gp4sSru7o tLdAbRxHCceEEjXoX8ACQseRp7c+GgsiOzdPUK1g59bg96I/Qk+KOjy4d8mv0km7 GDUXLwCVM5YC3HzGcwH/ZEbav05jDj2X0B1rq0DkHdQN2hGh9IvZ7gjy3ZJooFCe JGkWS0zxNQ3qf0GR2ek5QgQJqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNS8f3O s7rqZvcUOgT4QJ/PgHvpMB8GA1UdIwQYMBaAFGE+y+A+vXWwyeXpYRT2V85YlbH3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mjc5NC83M0RCNzdEMDk1 QkUxMUVGODRBODIzODFDNEY5QUUwMi9ZVDdMNEQ2OWRiREo1ZWxoRlBaWHpsaVZz ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lUN0w0RDY5ZGJESjVlbGhGUFpYemxpVnNmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mjc5NC83M0RCNzdEMDk1QkUxMUVGODRBODIzODFDNEY5QUUwMi9ZVDdMNEQ2OWRi REo1ZWxoRlBaWHpsaVZzZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLdEVMpGoWXyqDUmbRZ18WiYenfP7FKWuAK1HogOcIRKPffTAgA35N W5ULa5ek1wtvmFdhaeGaYwTMJfDfHB/VxMV24RvHdvqeIE/IonjTjNnGW3zJ37Z2 QftCmkVJ9w7TXW5CLI6s0ucDAvpKzJMoNTNBEgblXHdIElLPckpWciChnqtx5SfW eAG3uAIS37Z+5CCPsqJnGOKN+IVF64KzoJKQOLTf8UqhBUwU1oay53IqUlTNK/G+ riVICWAKKzVU7No7z80o9w01ofUbLSSE1jASPcDdtUxOQQXEcecO4Rr9YbN1KSFM I01Qv34XInv2FH6BF+tSwL6AGtMUapaQ -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:52 2025 by rpki-client