$ rpki-client -vvf rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft File: YRQatT_Urx2yqGr-fsj-yX1eodU.mft (raw, json) Hash identifier: mGUSe161kFPrLAMkqNWnnmcfU9JEQjHGg3A+blz8KI4= Subject key identifier: 8D:7F:59:55:0A:69:19:30:1D:43:97:BE:D2:75:C7:A6:91:E6:F8:8F Authority key identifier: 61:14:1A:B5:3F:D4:AF:1D:B2:A8:6A:FE:7E:C8:FE:C9:7D:5E:A1:D5 Certificate issuer: /CN=A918DEF0/serialNumber=61141AB53FD4AF1DB2A86AFE7EC8FEC97D5EA1D5 Certificate serial: 01B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft Manifest number: 01AB Signing time: Wed 17 Sep 2025 03:44:38 +0000 Manifest this update: Wed 17 Sep 2025 03:44:38 +0000 Manifest next update: Wed 24 Sep 2025 03:44:38 +0000 Files and hashes: 1: YRQatT_Urx2yqGr-fsj-yX1eodU.crl (hash: 6j/4ZK2JLPQpu4+XnEzs6AKTzDoOw6J/m5WSI5D6CPA=) 2: 7F4ED0A0B83011EFA5108619C4F9AE02.roa (hash: fc1mmSSRqzCuGE7h3o2YcW/Wc0vCR2x5Y/Ca8guGROk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.crl rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 03:44:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 433 (0x1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DEF0, serialNumber=61141AB53FD4AF1DB2A86AFE7EC8FEC97D5EA1D5 Validity Not Before: Sep 17 03:44:38 2025 GMT Not After : Sep 24 03:44:38 2025 GMT Subject: CN=68ca2ea6-ec88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:10:09:7c:d0:5a:db:60:2e:a0:e5:a7:fd:b6: 3e:b2:d2:17:19:06:29:32:8e:72:fd:c8:35:b1:f1: 13:97:4b:8c:0d:77:27:51:9c:84:f4:bd:2c:e4:66: ed:63:af:8f:35:07:e8:35:5d:14:1a:ee:24:00:34: 12:38:a5:48:9a:fd:ea:59:a5:50:7e:d1:08:2a:38: 1c:ee:7c:0b:45:47:71:de:72:45:38:b8:2a:06:a9: c0:72:d4:18:f3:ef:10:ff:e9:2c:5a:c0:07:17:e0: e6:97:c3:38:0e:8a:10:3d:6e:12:a3:20:96:fd:2c: dd:af:bf:98:b0:d7:86:c5:2f:c2:4c:95:a3:e0:c0: f9:19:58:44:60:fa:f9:a9:9c:c1:40:bc:19:14:94: 8d:a4:d3:5a:7e:10:70:2b:72:76:c0:20:b9:46:43: 2a:9b:57:d9:35:fd:9c:aa:e6:16:95:3d:8e:f4:09: fe:79:6e:da:ba:87:58:ea:e7:9c:0b:d6:56:27:8f: 5c:5c:f8:87:da:2c:d5:77:45:76:4b:35:55:52:61: 28:fc:68:3a:ca:30:a0:58:19:62:fb:b2:13:5f:bb: 97:57:6e:93:83:2b:87:02:75:05:9c:a5:44:73:17: 93:29:9d:3b:21:60:ba:f4:3d:e6:37:ed:2c:de:b9: d5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:7F:59:55:0A:69:19:30:1D:43:97:BE:D2:75:C7:A6:91:E6:F8:8F X509v3 Authority Key Identifier: keyid:61:14:1A:B5:3F:D4:AF:1D:B2:A8:6A:FE:7E:C8:FE:C9:7D:5E:A1:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:f6:bb:46:7c:55:25:15:f3:fc:26:f3:08:3e:df:eb:00:93: 7f:29:6c:ae:92:7d:1a:44:d3:4d:3f:e7:a5:ab:d1:27:2b:40: d7:61:59:3c:8e:a6:3d:55:ab:f3:c4:7c:e1:70:74:0d:de:d1: a9:39:45:85:fe:2c:01:0e:6f:3a:fc:56:31:c6:fb:79:6c:ae: 8f:a2:02:68:36:ed:74:22:a9:e9:d4:95:a0:eb:9f:84:fe:ee: 9d:04:a0:37:c3:26:8a:b9:6a:08:25:3f:46:48:8b:6e:43:9e: da:c8:a4:9b:32:1e:12:a6:cf:87:49:70:5a:b3:0b:df:fa:64: a7:0d:d1:16:43:c1:aa:ca:7f:f6:f4:0d:d0:b1:b0:e5:46:40: 2a:10:0b:69:9d:18:84:09:dc:cc:09:c7:76:28:d0:17:da:ef: b0:62:eb:66:a4:c1:bb:31:f9:fe:37:cb:70:30:55:08:f2:07: 63:b6:73:33:90:c7:19:10:0b:66:ce:b2:60:e9:46:58:da:f6: ce:aa:19:75:82:61:98:f0:33:cc:a5:2d:60:37:ef:89:73:06: 79:7c:16:e0:11:48:94:1f:27:82:8c:b9:31:3c:0f:9c:71:2f: ac:a2:04:9a:0c:19:53:db:03:50:27:5e:03:75:53:fa:b8:c5: 06:42:5f:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OERFRjAxMTAvBgNVBAUTKDYxMTQxQUI1M0ZENEFGMURCMkE4NkFGRTdFQzhGRUM5 N0Q1RUExRDUwHhcNMjUwOTE3MDM0NDM4WhcNMjUwOTI0MDM0NDM4WjAYMRYwFAYD VQQDEw02OGNhMmVhNi1lYzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRAJfNBa22AuoOWn/bY+stIXGQYpMo5y/cg1sfETl0uMDXcnUZyE9L0s5Gbt Y6+PNQfoNV0UGu4kADQSOKVImv3qWaVQftEIKjgc7nwLRUdx3nJFOLgqBqnActQY 8+8Q/+ksWsAHF+Dml8M4DooQPW4SoyCW/Szdr7+YsNeGxS/CTJWj4MD5GVhEYPr5 qZzBQLwZFJSNpNNafhBwK3J2wCC5RkMqm1fZNf2cquYWlT2O9An+eW7auodY6uec C9ZWJ49cXPiH2izVd0V2SzVVUmEo/Gg6yjCgWBli+7ITX7uXV26TgyuHAnUFnKVE cxeTKZ07IWC69D3mN+0s3rnVKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1/WVUK aRkwHUOXvtJ1x6aR5viPMB8GA1UdIwQYMBaAFGEUGrU/1K8dsqhq/n7I/sl9XqHV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REVGMC84MjAzMDlDMjBB NUYxMUVFQjRGRUQyNjVDNEY5QUUwMi9ZUlFhdFRfVXJ4MnlxR3ItZnNqLXlYMWVv ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lSUWF0VF9VcngyeXFHci1mc2oteVgxZW9kVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 REVGMC84MjAzMDlDMjBBNUYxMUVFQjRGRUQyNjVDNEY5QUUwMi9ZUlFhdFRfVXJ4 MnlxR3ItZnNqLXlYMWVvZFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg9rtGfFUlFfP8JvMIPt/rAJN/KWyukn0aRNNNP+elq9EnK0DXYVk8 jqY9VavzxHzhcHQN3tGpOUWF/iwBDm86/FYxxvt5bK6PogJoNu10Iqnp1JWg65+E /u6dBKA3wyaKuWoIJT9GSItuQ57ayKSbMh4Sps+HSXBaswvf+mSnDdEWQ8Gqyn/2 9A3QsbDlRkAqEAtpnRiECdzMCcd2KNAX2u+wYutmpMG7Mfn+N8twMFUI8gdjtnMz kMcZEAtmzrJg6UZY2vbOqhl1gmGY8DPMpS1gN++JcwZ5fBbgEUiUHyeCjLkxPA+c cS+sogSaDBlT2wNQJ14DdVP6uMUGQl+K -----END CERTIFICATE-----Generated at Fri Sep 19 02:41:08 2025 by rpki-client