$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft File: yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft (raw, json) Hash identifier: WI90hS37pPaAVcpeypskV2qrWZaYByJEPL7BDtf9238= Subject key identifier: B2:2F:D6:9F:63:4F:C0:89:9C:D3:C2:D3:B5:F0:2C:C5:FD:A8:FA:F1 Authority key identifier: C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86 Certificate issuer: /CN=A919B06C/serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986 Certificate serial: 0E85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft Manifest number: 2016 Signing time: Sun 26 Oct 2025 17:28:17 +0000 Manifest this update: Sun 26 Oct 2025 17:28:17 +0000 Manifest next update: Sun 02 Nov 2025 17:28:17 +0000 Files and hashes: 1: yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl (hash: NtKyzw1kPYG1UOO3wmGzLB2AnuiMzzSJJeJQe1c//qE=) 2: 3536466A2EFC11EE9618725BC4F9AE02.roa (hash: 2QTo+CsdRhAVYGY+SP4UeTuLXQh1z3BW1C7/XMRXisw=) 3: 70F15C5CC5CA11EEA9DD0141C4F9AE02.roa (hash: qTqcBFpr622OYkqG96eDnnoJ09wPpnvN7CHOU2zyZG0=) 4: BFD96CC4C5CA11EEBFA07341C4F9AE02.roa (hash: SV6dYe0/qbcbeBjCTRLSVOKAd3cmZlbo1prAD3jSVSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 17:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3717 (0xe85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B06C, serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986 Validity Not Before: Oct 26 17:28:17 2025 GMT Not After : Nov 2 17:28:17 2025 GMT Subject: CN=68fe5a31-5b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:19:c6:ec:22:0a:ff:cd:97:e2:57:2a:ad:f2: 7d:79:82:26:dd:78:c5:35:28:e4:9b:d2:e2:79:64: ed:ee:46:b2:66:8e:29:d2:0f:48:2b:f3:bc:27:30: 52:d8:8a:5b:54:d4:7b:f2:46:fb:20:f4:1d:40:aa: b0:57:61:0d:4a:7c:5f:35:27:72:c7:25:ed:4c:a8: 7a:d0:46:f0:79:02:7f:f6:ac:95:51:b4:03:d9:d2: 43:12:f9:58:d6:f1:7c:20:14:bf:26:0a:c6:d7:d4: 83:85:08:77:a4:12:24:3e:7d:b7:62:c9:ed:15:b2: 11:4d:7e:00:07:0e:1e:8e:80:71:96:f3:dd:3f:68: 5e:b2:b8:de:84:5a:8c:6d:82:3f:71:3d:f2:d3:d3: 56:c3:9b:34:7c:06:93:78:ae:6c:07:78:91:92:e8: 59:79:11:fa:80:88:42:61:af:75:3e:ee:9e:4a:bb: fa:b8:b3:62:c7:56:36:87:f4:d9:38:a0:9d:3d:c5: ed:9a:66:e6:86:36:2c:24:94:6c:3f:f6:40:cf:1c: 93:e0:c4:3d:15:bc:b3:16:87:9e:d9:68:77:f3:92: 93:c0:23:67:da:59:45:f6:c4:bf:76:3f:e8:23:f3: 45:17:26:26:b5:82:e2:bb:85:11:5a:fd:c1:97:db: 4e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2F:D6:9F:63:4F:C0:89:9C:D3:C2:D3:B5:F0:2C:C5:FD:A8:FA:F1 X509v3 Authority Key Identifier: keyid:C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:19:4c:c1:98:4f:05:81:4c:8d:bf:db:89:13:02:15:5e:fb: a3:61:d3:3a:3a:d8:6c:2d:7e:b0:be:4d:55:b1:cb:1b:ff:f2: 39:2b:65:b8:0e:e3:3d:60:f9:e8:66:36:b4:6f:c1:e2:1d:c9: ad:45:70:45:c3:aa:f8:7c:0c:d2:59:03:db:16:b0:7e:9f:68: 03:e2:34:8c:06:64:c7:83:95:2c:15:e2:18:c2:cf:42:f0:a3: 0c:25:33:d6:7f:21:14:9e:36:0b:7d:70:43:5b:fc:65:55:66: 00:fa:35:e3:59:94:cb:55:cc:51:06:e8:4e:d6:23:6d:1e:3c: 21:5e:8f:df:9f:0e:24:11:fa:b1:b5:d3:6e:8a:b2:d2:c4:ca: 62:39:bd:5b:af:49:e1:52:71:89:3c:ff:ef:11:ce:d3:f7:53: 1e:0e:13:9c:2f:9b:9a:26:ee:96:3b:f3:11:f6:df:4a:d8:b5: 07:11:0a:c7:fd:77:f5:2d:6b:f5:93:41:f2:46:df:21:17:8d: eb:7b:bb:65:8a:46:3a:7e:33:40:d2:ae:2f:85:8b:0e:f1:b5: 2f:c1:b2:2b:4c:16:e6:18:ad:75:79:84:f3:6d:32:33:dd:58: 0e:c0:35:85:d7:46:1c:57:59:c1:12:19:18:da:2c:b5:a4:b3: b3:f5:dd:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIwNkMxMTAvBgNVBAUTKEM4MzQ5M0MwMjk3Q0NCNThEMjgzNzk0NkQ2MDYzRjE0 QTdERUU5ODYwHhcNMjUxMDI2MTcyODE3WhcNMjUxMTAyMTcyODE3WjAYMRYwFAYD VQQDEw02OGZlNWEzMS01YjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1BnG7CIK/82X4lcqrfJ9eYIm3XjFNSjkm9LieWTt7kayZo4p0g9IK/O8JzBS 2IpbVNR78kb7IPQdQKqwV2ENSnxfNSdyxyXtTKh60EbweQJ/9qyVUbQD2dJDEvlY 1vF8IBS/JgrG19SDhQh3pBIkPn23YsntFbIRTX4ABw4ejoBxlvPdP2hesrjehFqM bYI/cT3y09NWw5s0fAaTeK5sB3iRkuhZeRH6gIhCYa91Pu6eSrv6uLNix1Y2h/TZ OKCdPcXtmmbmhjYsJJRsP/ZAzxyT4MQ9FbyzFoee2Wh385KTwCNn2llF9sS/dj/o I/NFFyYmtYLiu4URWv3Bl9tO4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLIv1p9j T8CJnNPC07XwLMX9qPrxMB8GA1UdIwQYMBaAFMg0k8ApfMtY0oN5RtYGPxSn3umG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjA2Qy9FOUQ2MkU3NEZF QUUxMUU4OTEwRDRENjZDNEY5QUUwMi95RFNUd0NsOHkxalNnM2xHMWdZX0ZLZmU2 WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lEU1R3Q2w4eTFqU2czbEcxZ1lfRktmZTZZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjA2Qy9FOUQ2MkU3NEZFQUUxMUU4OTEwRDRENjZDNEY5QUUwMi95RFNUd0NsOHkx alNnM2xHMWdZX0ZLZmU2WVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVGUzBmE8FgUyNv9uJEwIVXvujYdM6OthsLX6wvk1Vscsb//I5K2W4 DuM9YPnoZja0b8HiHcmtRXBFw6r4fAzSWQPbFrB+n2gD4jSMBmTHg5UsFeIYws9C 8KMMJTPWfyEUnjYLfXBDW/xlVWYA+jXjWZTLVcxRBuhO1iNtHjwhXo/fnw4kEfqx tdNuirLSxMpiOb1br0nhUnGJPP/vEc7T91MeDhOcL5uaJu6WO/MR9t9K2LUHEQrH /Xf1LWv1k0HyRt8hF43re7tlikY6fjNA0q4vhYsO8bUvwbIrTBbmGK11eYTzbTIz 3VgOwDWF10YcV1nBEhkY2iy1pLOz9d1l -----END CERTIFICATE-----Generated at Mon Oct 27 17:31:45 2025 by rpki-client