$ rpki-client -vvf rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft File: Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft (raw, json) Hash identifier: gRamsqtiZjSSdS59bQr+/tQNSZFe3UKfCdhO4+NCqPA= Subject key identifier: 01:F4:AE:65:82:18:80:86:A2:B2:B8:E2:A1:73:11:92:91:B8:47:47 Authority key identifier: 62:7F:A9:96:0E:A2:83:AA:23:92:13:CA:CD:37:50:4D:24:60:A1:04 Certificate issuer: /CN=A9190FEA/serialNumber=627FA9960EA283AA239213CACD37504D2460A104 Certificate serial: 0C7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft Manifest number: 0C6D Signing time: Thu 18 Sep 2025 18:42:45 +0000 Manifest this update: Thu 18 Sep 2025 18:42:45 +0000 Manifest next update: Thu 25 Sep 2025 18:42:45 +0000 Files and hashes: 1: Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl (hash: R5NV9rUahJ4XNN+tvBsWH/NpGY/gNj0vDiesbXv6mVQ=) 2: EC7403A0B20711EFAADEFA2CC4F9AE02.roa (hash: 41gtdkmTRXbX1drZcFOb/E12vO66zREAaSFWLwXsUVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3198 (0xc7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190FEA, serialNumber=627FA9960EA283AA239213CACD37504D2460A104 Validity Not Before: Sep 18 18:42:45 2025 GMT Not After : Sep 25 18:42:45 2025 GMT Subject: CN=68cc52a5-6fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:87:6e:b5:64:84:df:67:5e:4e:f0:c7:2b:0e: 4c:03:78:42:7d:55:a6:ed:89:fb:6b:14:4c:ff:2d: d3:1b:d7:dc:60:15:6b:ff:70:ae:72:69:58:87:fe: 54:a2:df:be:9b:59:33:21:0a:3c:a0:66:67:b3:55: e4:81:a8:2b:84:ec:39:99:c4:db:6f:bb:5d:b1:f3: 26:79:b0:ca:68:5e:54:4c:1a:88:16:e1:3d:df:19: b7:5e:6c:ec:53:d2:f3:36:59:91:b1:d5:fa:3a:81: d3:ac:86:c3:19:e7:ea:33:76:34:84:65:de:97:da: 46:12:d5:e3:c7:e4:d8:cd:10:44:ad:f4:be:f0:a4: bf:96:a3:a9:62:8f:42:5f:53:2c:34:31:41:17:2c: 67:eb:97:92:a2:6d:ee:f8:be:37:44:48:ca:fc:ce: dd:7e:c7:0a:ba:cf:d0:f0:3e:da:dc:80:9f:75:72: e1:91:72:36:8e:e2:9b:69:1a:00:c4:bd:95:4a:88: 69:91:55:e0:51:4f:f1:59:f2:80:6d:95:30:cc:78: 3d:95:4f:9e:05:64:fb:89:b6:ee:f7:d2:7f:8e:72: da:25:08:b6:13:c3:66:05:37:a4:b4:e0:96:11:c8: a2:7d:97:49:e1:ae:01:0f:f3:d7:0c:d6:39:62:47: 38:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F4:AE:65:82:18:80:86:A2:B2:B8:E2:A1:73:11:92:91:B8:47:47 X509v3 Authority Key Identifier: keyid:62:7F:A9:96:0E:A2:83:AA:23:92:13:CA:CD:37:50:4D:24:60:A1:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:23:5d:15:68:f4:ff:1a:e4:16:bf:6e:b9:05:68:30:ce:e8: b8:c1:e6:0d:f5:7a:ba:75:37:07:de:fb:a0:e2:d8:65:78:0d: 2e:ea:6f:e1:63:60:89:9e:9c:5d:49:e5:d6:3f:c0:b8:ec:64: 79:63:bd:fc:2e:92:86:28:57:a8:d7:78:11:77:da:3c:87:4e: 5e:ee:1e:d5:4c:24:4c:cc:9b:90:ab:42:32:20:18:04:6e:75: 13:a9:e7:6f:64:d7:7a:12:fc:ae:0c:a2:6e:94:aa:10:e4:92: fc:6f:9f:74:9f:73:b9:50:01:9c:db:df:8d:a4:5b:a6:eb:57: 42:10:a9:e1:fe:c3:a7:04:a6:2a:d1:c8:60:7e:a4:af:88:2f: bc:32:0d:9a:ee:cb:4b:5e:ef:0c:a6:78:64:14:db:5a:83:f7: 0c:f8:b8:43:8a:3f:c0:d7:78:d3:1f:7f:36:c1:81:6e:91:85: 44:12:8e:8a:33:3d:0b:88:ae:97:48:76:07:fe:fb:5e:31:5a: d5:92:cd:4f:54:d2:8a:8f:9f:a0:f6:81:9d:ed:0e:78:10:73: 1b:57:5d:a3:78:43:54:14:f3:0b:5e:39:de:25:28:3e:55:72: 77:ae:41:db:6a:d2:9d:5d:14:9b:76:64:b6:a6:4b:42:60:5a: 85:2a:49:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBGRUExMTAvBgNVBAUTKDYyN0ZBOTk2MEVBMjgzQUEyMzkyMTNDQUNEMzc1MDRE MjQ2MEExMDQwHhcNMjUwOTE4MTg0MjQ1WhcNMjUwOTI1MTg0MjQ1WjAYMRYwFAYD VQQDEw02OGNjNTJhNS02ZmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA24dutWSE32deTvDHKw5MA3hCfVWm7Yn7axRM/y3TG9fcYBVr/3CucmlYh/5U ot++m1kzIQo8oGZns1XkgagrhOw5mcTbb7tdsfMmebDKaF5UTBqIFuE93xm3Xmzs U9LzNlmRsdX6OoHTrIbDGefqM3Y0hGXel9pGEtXjx+TYzRBErfS+8KS/lqOpYo9C X1MsNDFBFyxn65eSom3u+L43REjK/M7dfscKus/Q8D7a3ICfdXLhkXI2juKbaRoA xL2VSohpkVXgUU/xWfKAbZUwzHg9lU+eBWT7ibbu99J/jnLaJQi2E8NmBTektOCW EciifZdJ4a4BD/PXDNY5Ykc4GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAH0rmWC GICGorK44qFzEZKRuEdHMB8GA1UdIwQYMBaAFGJ/qZYOooOqI5ITys03UE0kYKEE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEZFQS8yNDBEQUNFQTBC NzIxMUVBQUNGQjY5MTZDNEY5QUUwMi9Zbi1wbGc2aWc2b2praFBLelRkUVRTUmdv UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1luLXBsZzZpZzZvamtoUEt6VGRRVFNSZ29RUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEZFQS8yNDBEQUNFQTBCNzIxMUVBQUNGQjY5MTZDNEY5QUUwMi9Zbi1wbGc2aWc2 b2praFBLelRkUVRTUmdvUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRI10VaPT/GuQWv265BWgwzui4weYN9Xq6dTcH3vug4thleA0u6m/h Y2CJnpxdSeXWP8C47GR5Y738LpKGKFeo13gRd9o8h05e7h7VTCRMzJuQq0IyIBgE bnUTqedvZNd6EvyuDKJulKoQ5JL8b590n3O5UAGc29+NpFum61dCEKnh/sOnBKYq 0chgfqSviC+8Mg2a7stLXu8MpnhkFNtag/cM+LhDij/A13jTH382wYFukYVEEo6K Mz0LiK6XSHYH/vteMVrVks1PVNKKj5+g9oGd7Q54EHMbV12jeENUFPMLXjneJSg+ VXJ3rkHbatKdXRSbdmS2pktCYFqFKkmy -----END CERTIFICATE-----Generated at Fri Sep 19 00:08:58 2025 by rpki-client