$ rpki-client -vvf rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft File: YRQatT_Urx2yqGr-fsj-yX1eodU.mft (raw, json) Hash identifier: wyEE7ALUceSchPaLUtYPHqU+D6Ffg0y3u68XlCuulp0= Subject key identifier: 05:47:A5:1A:EA:E3:25:75:5E:C1:DF:5A:A9:E0:F8:E0:5E:00:65:87 Authority key identifier: 61:14:1A:B5:3F:D4:AF:1D:B2:A8:6A:FE:7E:C8:FE:C9:7D:5E:A1:D5 Certificate issuer: /CN=A918DEF0/serialNumber=61141AB53FD4AF1DB2A86AFE7EC8FEC97D5EA1D5 Certificate serial: 01C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft Manifest number: 01C2 Signing time: Mon 03 Nov 2025 02:58:19 +0000 Manifest this update: Mon 03 Nov 2025 02:58:19 +0000 Manifest next update: Mon 10 Nov 2025 02:58:19 +0000 Files and hashes: 1: YRQatT_Urx2yqGr-fsj-yX1eodU.crl (hash: NXDRnvsNJLmsVWGeV+3woH4gCSJvWNMRJtz75ZR/KZc=) 2: 7F4ED0A0B83011EFA5108619C4F9AE02.roa (hash: fc1mmSSRqzCuGE7h3o2YcW/Wc0vCR2x5Y/Ca8guGROk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.crl rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 456 (0x1c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DEF0, serialNumber=61141AB53FD4AF1DB2A86AFE7EC8FEC97D5EA1D5 Validity Not Before: Nov 3 02:58:19 2025 GMT Not After : Nov 10 02:58:19 2025 GMT Subject: CN=69081a4b-7fec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:31:3b:37:6a:b9:12:e1:bb:2a:37:23:c7:4e: 8c:65:26:6e:30:18:c0:7a:40:09:b1:c7:d7:54:27: 8a:35:c1:e1:91:fc:33:7a:f1:ef:95:c7:72:01:74: c5:50:9a:d4:8d:ad:fd:df:77:17:8e:c4:52:c4:7a: 84:8c:99:5f:94:d7:ac:04:c7:67:1c:7f:d7:29:5c: 76:d0:1b:39:ae:6a:f1:0a:99:22:f8:9a:6d:4a:07: 42:64:69:a5:bf:9f:51:60:73:30:49:02:85:56:ed: 2d:c6:a2:03:1e:62:7d:64:d9:99:54:11:2b:cd:e3: 2c:ca:f8:7b:67:9d:50:75:d4:5c:8c:f6:95:23:70: d8:e1:3f:b7:e1:c5:fb:85:41:25:07:d2:42:c7:68: 40:5c:e5:91:6f:40:80:12:08:4d:23:11:1f:84:15: 26:3c:ee:61:a1:0c:84:8e:cb:c1:da:42:19:85:a2: 84:6b:07:76:7c:15:cb:c6:9a:3e:88:c7:3f:d5:72: f6:73:91:24:5e:10:7f:c7:9c:e0:5f:ed:7f:ba:c7: b6:ac:32:6f:58:a8:a2:d1:d5:ea:62:c3:ec:78:12: 7f:13:23:b3:fb:8c:07:fd:b4:95:2e:18:87:f8:c2: d4:88:e0:2c:d4:62:0a:c8:a4:62:3c:3b:75:3f:ae: 35:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:47:A5:1A:EA:E3:25:75:5E:C1:DF:5A:A9:E0:F8:E0:5E:00:65:87 X509v3 Authority Key Identifier: keyid:61:14:1A:B5:3F:D4:AF:1D:B2:A8:6A:FE:7E:C8:FE:C9:7D:5E:A1:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:ce:11:7e:27:4b:de:30:71:fe:d0:f8:34:e9:bf:82:06:eb: 8c:25:df:15:19:06:a4:26:bd:d4:18:59:3a:a6:a5:bf:ff:b7: 4c:bb:8f:df:c4:7e:a7:a1:ff:fe:f1:9b:aa:9c:cc:95:51:1d: 83:8a:e6:94:9d:a9:88:e3:0e:93:0b:d3:3b:c8:fe:2a:2d:32: d3:30:44:d8:5f:de:fe:44:35:bd:2c:24:ba:7d:1a:4d:d8:eb: 04:2e:5a:a2:9e:43:7b:de:d8:db:ec:ec:a7:6c:60:e7:47:3e: 83:d2:7c:54:d6:b6:78:48:7a:d5:56:6e:97:cf:66:7a:9d:83: 51:45:5e:b6:ed:9b:c5:72:fe:98:d3:f6:1c:2a:f4:89:78:98: c3:b3:50:9c:e9:1d:fc:aa:cf:bf:e0:81:7e:52:f6:de:72:56: aa:7d:02:56:d4:1e:d8:bd:2b:35:66:20:bc:e1:03:75:d9:92: 55:4d:3f:7f:e8:8d:cd:48:b3:ff:ec:63:6c:b5:e2:ba:47:a5: 60:f6:f3:b4:05:40:94:b3:cc:59:4e:5b:01:43:b0:6d:fa:45: b9:85:de:ea:c5:f3:a8:2c:4e:06:74:19:7b:f7:eb:4f:9a:55: a0:31:56:88:cf:5f:a4:25:b9:85:ff:f4:78:eb:dc:91:aa:8b: f1:16:57:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OERFRjAxMTAvBgNVBAUTKDYxMTQxQUI1M0ZENEFGMURCMkE4NkFGRTdFQzhGRUM5 N0Q1RUExRDUwHhcNMjUxMTAzMDI1ODE5WhcNMjUxMTEwMDI1ODE5WjAYMRYwFAYD VQQDEw02OTA4MWE0Yi03ZmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjE7N2q5EuG7Kjcjx06MZSZuMBjAekAJscfXVCeKNcHhkfwzevHvlcdyAXTF UJrUja3933cXjsRSxHqEjJlflNesBMdnHH/XKVx20Bs5rmrxCpki+JptSgdCZGml v59RYHMwSQKFVu0txqIDHmJ9ZNmZVBErzeMsyvh7Z51QddRcjPaVI3DY4T+34cX7 hUElB9JCx2hAXOWRb0CAEghNIxEfhBUmPO5hoQyEjsvB2kIZhaKEawd2fBXLxpo+ iMc/1XL2c5EkXhB/x5zgX+1/use2rDJvWKii0dXqYsPseBJ/EyOz+4wH/bSVLhiH +MLUiOAs1GIKyKRiPDt1P641eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAVHpRrq 4yV1XsHfWqng+OBeAGWHMB8GA1UdIwQYMBaAFGEUGrU/1K8dsqhq/n7I/sl9XqHV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REVGMC84MjAzMDlDMjBB NUYxMUVFQjRGRUQyNjVDNEY5QUUwMi9ZUlFhdFRfVXJ4MnlxR3ItZnNqLXlYMWVv ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lSUWF0VF9VcngyeXFHci1mc2oteVgxZW9kVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 REVGMC84MjAzMDlDMjBBNUYxMUVFQjRGRUQyNjVDNEY5QUUwMi9ZUlFhdFRfVXJ4 MnlxR3ItZnNqLXlYMWVvZFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAczhF+J0veMHH+0Pg06b+CBuuMJd8VGQakJr3UGFk6pqW//7dMu4/f xH6nof/+8ZuqnMyVUR2DiuaUnamI4w6TC9M7yP4qLTLTMETYX97+RDW9LCS6fRpN 2OsELlqinkN73tjb7OynbGDnRz6D0nxU1rZ4SHrVVm6Xz2Z6nYNRRV627ZvFcv6Y 0/YcKvSJeJjDs1Cc6R38qs+/4IF+UvbeclaqfQJW1B7YvSs1ZiC84QN12ZJVTT9/ 6I3NSLP/7GNsteK6R6Vg9vO0BUCUs8xZTlsBQ7Bt+kW5hd7qxfOoLE4GdBl79+tP mlWgMVaIz1+kJbmF//R469yRqovxFlfP -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:57 2025 by rpki-client