$ rpki-client -vvf rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.mft File: ycf7MVXuXrRUGnY3mYlwgGpG878.mft (raw, json) Hash identifier: socU1fE0uvV/m+YdBmsmdryabymBE59poDhfoS1hS28= Subject key identifier: 75:6B:71:1D:B8:17:A5:1B:CB:DE:53:60:A5:10:D0:89:08:69:8C:A7 Authority key identifier: C9:C7:FB:31:55:EE:5E:B4:54:1A:76:37:99:89:70:80:6A:46:F3:BF Certificate issuer: /CN=A919AB96/serialNumber=C9C7FB3155EE5EB4541A7637998970806A46F3BF Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycf7MVXuXrRUGnY3mYlwgGpG878.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.mft Manifest number: 29 Signing time: Mon 03 Nov 2025 07:42:30 +0000 Manifest this update: Mon 03 Nov 2025 07:42:30 +0000 Manifest next update: Mon 10 Nov 2025 07:42:30 +0000 Files and hashes: 1: ycf7MVXuXrRUGnY3mYlwgGpG878.crl (hash: MrzhaQOxZmtPmTUOd8bDEFvZFc6ngWi3YYrTqGCnAvA=) 2: CDD6FA7CAD8511F08C759F59C4F9AE02.roa (hash: yXrHOs4+nJaaVCnnX4/LliEWbcY6OxUiaroiLnewb70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.crl rsync://rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycf7MVXuXrRUGnY3mYlwgGpG878.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919AB96, serialNumber=C9C7FB3155EE5EB4541A7637998970806A46F3BF Validity Not Before: Nov 3 07:42:30 2025 GMT Not After : Nov 10 07:42:30 2025 GMT Subject: CN=69085ce6-b208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1e:92:f0:bd:c0:12:49:f3:d0:d6:7f:26:81: 40:13:3f:e0:de:da:18:c0:e6:31:bb:e0:40:91:52: 2c:b0:bd:aa:27:3c:b5:5e:3f:19:bc:71:22:81:04: 6c:83:bd:c4:85:ab:50:89:53:b8:51:11:15:5c:64: 5b:ca:f0:5b:96:84:42:23:c9:95:41:de:ed:40:5d: b5:4d:32:d4:48:eb:4f:5c:eb:79:0b:e1:8d:fe:33: 8f:ec:83:ac:48:86:8a:ad:4d:0d:35:49:3a:92:39: 7e:2c:e9:ef:04:ed:44:21:aa:50:2c:0f:c3:69:06: 0d:a0:75:11:a1:ff:71:08:ac:d3:0b:79:06:7a:09: 8c:f5:ea:49:8a:e3:c6:cd:6f:0e:8e:ce:2f:1a:9b: 2a:0b:3c:23:d8:71:dc:3a:11:e3:6d:e6:c2:ff:58: 37:55:53:87:34:7f:04:f2:6c:a0:e2:c0:2a:cc:3c: de:c2:39:94:d6:e2:78:c4:f0:14:6e:71:b6:72:9b: 3d:26:60:47:22:36:e4:6c:47:9b:8f:e1:87:0f:a2: c6:1d:79:0d:ac:8a:aa:ff:78:86:c1:2a:a5:4e:fa: 9a:a0:ec:b0:22:54:dd:db:a3:85:c9:09:93:6f:8e: a6:3e:61:d7:cd:0d:6b:fe:03:10:8d:81:bb:84:31: 6d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:6B:71:1D:B8:17:A5:1B:CB:DE:53:60:A5:10:D0:89:08:69:8C:A7 X509v3 Authority Key Identifier: keyid:C9:C7:FB:31:55:EE:5E:B4:54:1A:76:37:99:89:70:80:6A:46:F3:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycf7MVXuXrRUGnY3mYlwgGpG878.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:45:91:c7:b4:d9:15:4b:f0:15:28:f7:ca:e4:13:e7:73:04: 0f:28:72:44:57:9d:d1:26:f3:de:89:cd:d6:63:40:23:4e:73: 0d:a6:aa:d6:d7:46:de:e4:49:7c:a4:19:bb:60:47:d1:17:c1: 9a:8d:33:ab:27:73:22:02:39:e2:b2:e9:4f:33:77:6b:9a:b8: 2d:c7:fa:73:33:54:be:0e:9b:3b:67:54:10:7d:0b:6a:bb:62: 56:75:3e:20:23:0c:a6:8f:b9:01:7d:a4:83:f4:0d:ac:79:50: 14:25:a6:53:04:ae:da:45:42:db:72:ff:d5:2d:53:8b:0a:82: 27:00:64:3a:77:e7:5b:39:77:c9:69:c5:93:8d:79:7c:e4:56: 9d:96:25:12:33:ea:04:4a:2d:00:72:71:d1:b7:bb:61:dd:8b: 6c:b7:a0:03:77:80:8d:ed:49:df:8a:cc:bc:1c:de:29:23:c3: cf:5b:86:82:42:ff:02:01:5c:0e:b3:c7:9e:4b:bf:28:a8:d8: 94:b5:40:19:3e:3b:9f:a3:c0:99:4c:08:02:b2:ad:73:b6:c8: c7:4c:9d:e7:ee:91:0c:1e:72:00:73:40:16:b3:36:45:66:54: 42:5c:9f:31:6f:b4:d8:60:da:63:d5:fc:4b:55:d3:28:b6:6c: aa:3e:9d:1b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QUI5NjExMC8GA1UEBRMoQzlDN0ZCMzE1NUVFNUVCNDU0MUE3NjM3OTk4OTcwODA2 QTQ2RjNCRjAeFw0yNTExMDMwNzQyMzBaFw0yNTExMTAwNzQyMzBaMBgxFjAUBgNV BAMTDTY5MDg1Y2U2LWIyMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRHpLwvcASSfPQ1n8mgUATP+De2hjA5jG74ECRUiywvaonPLVePxm8cSKBBGyD vcSFq1CJU7hRERVcZFvK8FuWhEIjyZVB3u1AXbVNMtRI609c63kL4Y3+M4/sg6xI hoqtTQ01STqSOX4s6e8E7UQhqlAsD8NpBg2gdRGh/3EIrNMLeQZ6CYz16kmK48bN bw6Ozi8amyoLPCPYcdw6EeNt5sL/WDdVU4c0fwTybKDiwCrMPN7COZTW4njE8BRu cbZymz0mYEciNuRsR5uP4YcPosYdeQ2siqr/eIbBKqVO+pqg7LAiVN3bo4XJCZNv jqY+YdfNDWv+AxCNgbuEMW2xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdWtxHbgX pRvL3lNgpRDQiQhpjKcwHwYDVR0jBBgwFoAUycf7MVXuXrRUGnY3mYlwgGpG878w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlBQjk2LzExNjU2MTMyN0Y3 RjExRjA4NDE3NTkzRkM0RjlBRTAyL3ljZjdNVlh1WHJSVUduWTNtWWx3Z0dwRzg3 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveWNmN01WWHVYclJVR25ZM21ZbHdnR3BHODc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlB Qjk2LzExNjU2MTMyN0Y3RjExRjA4NDE3NTkzRkM0RjlBRTAyL3ljZjdNVlh1WHJS VUduWTNtWWx3Z0dwRzg3OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKFFkce02RVL8BUo98rkE+dzBA8ockRXndEm896JzdZjQCNOcw2mqtbX Rt7kSXykGbtgR9EXwZqNM6sncyICOeKy6U8zd2uauC3H+nMzVL4OmztnVBB9C2q7 YlZ1PiAjDKaPuQF9pIP0Dax5UBQlplMErtpFQtty/9UtU4sKgicAZDp351s5d8lp xZONeXzkVp2WJRIz6gRKLQBycdG3u2Hdi2y3oAN3gI3tSd+KzLwc3ikjw89bhoJC /wIBXA6zx55Lvyio2JS1QBk+O5+jwJlMCAKyrXO2yMdMnefukQwecgBzQBazNkVm VEJcnzFvtNhg2mPV/EtV0yi2bKo+nRs= -----END CERTIFICATE-----Generated at Tue Nov 4 07:19:27 2025 by rpki-client