$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft File: YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft (raw, json) Hash identifier: BHzLNQOOigKlAkiAPsAdJEqJ3rWi9HuC8Gd9QIcJHu4= Subject key identifier: F0:36:A3:8C:6E:08:03:F4:2B:4F:7D:09:09:41:68:47:57:24:30:0B Authority key identifier: 61:4D:88:C4:31:87:54:EE:33:C0:12:A6:4C:54:2B:39:EA:04:D4:E1 Certificate issuer: /CN=A91AE9CC/serialNumber=614D88C4318754EE33C012A64C542B39EA04D4E1 Certificate serial: 251C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft Manifest number: 250A Signing time: Sun 02 Nov 2025 15:46:33 +0000 Manifest this update: Sun 02 Nov 2025 15:46:32 +0000 Manifest next update: Sun 09 Nov 2025 15:46:32 +0000 Files and hashes: 1: YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl (hash: 6xdspN57oIOJyyahEBgxFybQJzqJvUt3T/7u+dNOXxk=) 2: 3A73B3A254EB11E7A50F9822C4F9AE02.roa (hash: XiLxVcA3A5SvnNZPgANRplMFygJvziR4GhZISOC/34g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:46:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9500 (0x251c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE9CC, serialNumber=614D88C4318754EE33C012A64C542B39EA04D4E1 Validity Not Before: Nov 2 15:46:32 2025 GMT Not After : Nov 9 15:46:32 2025 GMT Subject: CN=69077cd8-5fcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b6:43:2a:39:1c:64:ff:ac:b5:26:b3:14:f9: 41:50:c5:84:e4:03:15:6f:80:43:b7:ed:8a:17:51: f9:69:ba:f9:25:d1:8a:f9:40:b5:65:d4:b1:cb:b0: ab:6a:ce:ca:8b:87:1c:cd:ea:74:b8:a2:3d:46:b5: 57:be:31:6c:9e:58:46:b2:7d:39:5f:a1:5b:30:95: 1d:30:6d:ba:d7:9a:f2:da:2a:82:5b:7a:ca:01:7b: 65:64:be:34:3d:cd:9a:27:e0:9a:5d:3f:41:c2:4e: 0d:93:fc:dc:90:f5:33:30:53:42:84:9c:02:35:37: 0a:55:a1:76:7c:0e:1f:36:57:70:ca:98:b0:d6:31: 2c:80:95:8f:26:e5:6a:8c:82:ba:d5:94:2e:4b:ce: 40:06:03:2b:f5:af:b3:6b:a0:f4:95:09:4a:5f:0b: a6:f5:76:5c:e0:a8:d5:2d:ce:6b:be:ba:60:f2:c1: 6d:22:f3:34:08:5d:6d:46:0f:cc:43:2c:75:66:43: 08:52:ed:9d:49:74:18:79:34:22:8f:d6:73:8e:f5: d8:43:4f:23:07:56:fa:fd:d3:4f:16:36:ce:4b:a9: 8d:92:ba:0b:6a:07:c4:f6:03:be:0e:61:5a:f5:8b: 9f:88:e2:b3:57:9c:22:43:38:c1:12:08:e8:89:7b: 27:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:36:A3:8C:6E:08:03:F4:2B:4F:7D:09:09:41:68:47:57:24:30:0B X509v3 Authority Key Identifier: keyid:61:4D:88:C4:31:87:54:EE:33:C0:12:A6:4C:54:2B:39:EA:04:D4:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:b2:98:46:11:fc:f0:41:52:7b:87:fe:87:e9:82:9b:ed:e6: 49:79:54:ac:fc:d7:48:85:0e:70:a9:5c:9a:30:15:69:a2:7f: 5d:d0:3f:ad:d9:c2:6f:d9:1b:a3:10:0e:f1:10:89:27:a5:16: 8d:58:56:58:f7:9b:92:d8:ee:9d:7c:a5:a0:de:ed:83:23:07: bc:59:6b:b0:54:b6:4e:02:4f:52:ad:14:65:9f:6a:1e:39:47: 82:dd:ae:c1:42:3b:8e:de:94:51:65:29:bb:82:da:3f:d2:98: 8b:a5:5e:7c:a5:99:78:6f:1c:af:73:2d:fe:49:69:4f:01:86: 82:ff:db:af:bd:6d:a1:93:10:a1:c2:7b:11:13:9f:8d:46:a6: 5f:ff:8d:19:80:a0:b0:ad:56:b9:d0:04:b0:2d:1f:7d:20:55: 5a:46:65:f8:a1:f0:48:3b:71:1b:25:aa:6d:be:ef:87:b9:81: 25:3f:1e:62:1a:8b:f3:a4:b1:5a:97:a1:7d:ac:15:91:ef:af: 38:d0:0b:fe:b6:f6:55:64:01:c4:58:b6:9b:6e:3a:54:ca:30: 29:ed:69:90:b2:0a:c8:e9:31:5e:25:6f:a8:9f:58:d7:fc:07: 07:5f:55:96:99:94:7f:4f:6f:e8:dd:8d:11:f3:f3:b2:6d:c1: c0:d5:82:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5Q0MxMTAvBgNVBAUTKDYxNEQ4OEM0MzE4NzU0RUUzM0MwMTJBNjRDNTQyQjM5 RUEwNEQ0RTEwHhcNMjUxMTAyMTU0NjMyWhcNMjUxMTA5MTU0NjMyWjAYMRYwFAYD VQQDEw02OTA3N2NkOC01ZmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7ZDKjkcZP+stSazFPlBUMWE5AMVb4BDt+2KF1H5abr5JdGK+UC1ZdSxy7Cr as7Ki4cczep0uKI9RrVXvjFsnlhGsn05X6FbMJUdMG2615ry2iqCW3rKAXtlZL40 Pc2aJ+CaXT9Bwk4Nk/zckPUzMFNChJwCNTcKVaF2fA4fNldwypiw1jEsgJWPJuVq jIK61ZQuS85ABgMr9a+za6D0lQlKXwum9XZc4KjVLc5rvrpg8sFtIvM0CF1tRg/M Qyx1ZkMIUu2dSXQYeTQij9ZzjvXYQ08jB1b6/dNPFjbOS6mNkroLagfE9gO+DmFa 9YufiOKzV5wiQzjBEgjoiXsn8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPA2o4xu CAP0K099CQlBaEdXJDALMB8GA1UdIwQYMBaAFGFNiMQxh1TuM8ASpkxUKznqBNTh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTlDQy8xNDBFNTI3QzNB ODkxMUU1OUU4MDIzNjJDNEY5QUUwMi9ZVTJJeERHSFZPNHp3QkttVEZRck9lb0Ux T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lVMkl4REdIVk80endCS21URlFyT2VvRTFPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTlDQy8xNDBFNTI3QzNBODkxMUU1OUU4MDIzNjJDNEY5QUUwMi9ZVTJJeERHSFZP NHp3QkttVEZRck9lb0UxT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUsphGEfzwQVJ7h/6H6YKb7eZJeVSs/NdIhQ5wqVyaMBVpon9d0D+t 2cJv2RujEA7xEIknpRaNWFZY95uS2O6dfKWg3u2DIwe8WWuwVLZOAk9SrRRln2oe OUeC3a7BQjuO3pRRZSm7gto/0piLpV58pZl4bxyvcy3+SWlPAYaC/9uvvW2hkxCh wnsRE5+NRqZf/40ZgKCwrVa50ASwLR99IFVaRmX4ofBIO3EbJaptvu+HuYElPx5i GovzpLFal6F9rBWR76840Av+tvZVZAHEWLabbjpUyjAp7WmQsgrI6TFeJW+on1jX /AcHX1WWmZR/T2/o3Y0R8/OybcHA1YK8 -----END CERTIFICATE-----Generated at Tue Nov 4 07:21:44 2025 by rpki-client