$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft File: YRGAfoKKxPmEJpPThhGVLfA9ckc.mft (raw, json) Hash identifier: bXoSywN2MCJIj4oUbGqQD85xrqUZJgOIx0+R6OEKFqA= Subject key identifier: C6:81:14:83:1D:FF:D7:88:D7:1D:E3:2D:D7:10:83:D4:32:64:B9:9F Authority key identifier: 61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47 Certificate issuer: /CN=A91B5D92/serialNumber=6111807E828AC4F9842693D38611952DF03D7247 Certificate serial: 01B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft Manifest number: 01A2 Signing time: Sat 25 Oct 2025 06:48:36 +0000 Manifest this update: Sat 25 Oct 2025 06:48:35 +0000 Manifest next update: Sat 01 Nov 2025 06:48:35 +0000 Files and hashes: 1: YRGAfoKKxPmEJpPThhGVLfA9ckc.crl (hash: v8HO91kq7TAs05494votoD+AS62NhIjdkyqMzLvXT44=) 2: C778D8FA402A11EEAC7DEF72C4F9AE02.roa (hash: V8EYXGGM5ehfMXNVHQoJfhAKwYo57AeE/3ynyZdkMrY=) 3: 3AFA35E04B2E11EEA07FEE34C4F9AE02.roa (hash: N6Bn0tjkAYOIirhCnX+L9qAa4FcrjkrvnPohqveujZw=) 4: FBE34DB8538011EFB6264579C4F9AE02.roa (hash: TcFb5btGGuGcCTENXu84bKs3B+lnqciAGdu0W4Z7mP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 06:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 433 (0x1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5D92, serialNumber=6111807E828AC4F9842693D38611952DF03D7247 Validity Not Before: Oct 25 06:48:35 2025 GMT Not After : Nov 1 06:48:35 2025 GMT Subject: CN=68fc72c3-bec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a1:8d:97:fc:49:49:7d:cf:ae:f4:88:bb:81: a7:33:cf:43:ce:b1:0d:9f:2c:71:1b:3c:71:b6:7b: dd:4e:17:9d:19:d7:bf:31:a1:7c:60:cf:29:2c:d2: fc:b8:28:32:61:35:e1:a6:e4:94:8e:c3:88:02:7c: 69:20:18:ba:4e:c1:06:6d:fe:9e:67:64:34:f7:2b: 6f:e1:3f:5d:17:07:fb:1b:77:6d:6c:75:4f:0e:d6: bf:1e:47:4b:77:4e:25:09:13:0d:73:67:7e:46:59: 2b:98:37:4b:71:5c:8b:d7:eb:05:2a:6d:2d:82:99: d2:33:f9:22:b8:f9:75:e8:7a:ee:ca:e1:16:c5:e3: 42:7d:36:eb:71:e3:09:39:25:d1:f8:a4:37:c5:b8: 51:d7:9c:43:f5:1d:6b:4f:cb:6f:be:67:47:d4:53: 80:40:b0:c4:77:69:bb:c5:48:53:97:20:3a:64:5b: 9f:70:ca:73:55:fd:b3:ca:3e:cd:91:28:2f:b0:06: 90:4b:26:25:82:0c:86:db:d0:d9:45:7c:7b:1e:c1: 7d:7e:60:b8:0a:48:e4:df:d7:b7:0c:95:57:31:44: 3f:ee:f2:fb:4c:a9:e8:ac:95:94:55:af:ba:14:e4: d7:3c:67:b8:73:cb:ab:53:de:f1:fa:d1:e0:5f:28: 14:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:81:14:83:1D:FF:D7:88:D7:1D:E3:2D:D7:10:83:D4:32:64:B9:9F X509v3 Authority Key Identifier: keyid:61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:2b:01:31:fe:2a:a4:9a:86:11:fd:c7:2f:c8:11:dd:f4:c0: 1a:d7:a2:63:8b:87:57:73:75:36:ea:a7:1b:fe:18:74:3e:bf: fb:96:99:89:bb:eb:f4:67:42:76:db:5b:2b:6b:b6:cc:1a:14: 3d:2a:69:bf:35:91:ea:cb:16:23:9f:f4:3f:b7:0e:ee:95:b4: 2c:22:90:4b:36:f9:fd:95:11:48:2b:ac:a1:8f:e1:ec:7e:a3: ed:1e:46:5e:77:1b:ef:cd:5c:2f:4d:17:8c:5c:ab:8f:29:5c: 51:f6:90:42:68:c0:c3:b0:55:15:ad:3f:30:bf:3b:43:80:2e: 97:24:eb:19:57:cd:dc:47:90:9f:7d:bf:b6:29:64:98:e0:16: 96:b4:38:20:8f:61:e7:89:55:58:d9:c9:38:84:ee:da:99:61: 9a:5b:8b:a8:92:17:e8:52:58:3c:0c:9b:9b:eb:63:70:43:21: 2f:d6:3d:95:fa:a9:ab:95:a0:00:a2:c9:db:19:2a:a1:6a:57: 06:21:95:de:29:2d:aa:55:f3:07:6a:3f:27:ce:29:ee:ac:b5: 4e:7d:36:68:51:31:d2:a3:05:ef:3e:1c:d2:38:2e:a2:9c:c9: 53:c5:8b:14:b1:b6:9d:bc:ae:97:f2:dc:50:6b:b1:3d:4b:24: 4b:48:96:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVEOTIxMTAvBgNVBAUTKDYxMTE4MDdFODI4QUM0Rjk4NDI2OTNEMzg2MTE5NTJE RjAzRDcyNDcwHhcNMjUxMDI1MDY0ODM1WhcNMjUxMTAxMDY0ODM1WjAYMRYwFAYD VQQDEw02OGZjNzJjMy1iZWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKGNl/xJSX3PrvSIu4GnM89DzrENnyxxGzxxtnvdThedGde/MaF8YM8pLNL8 uCgyYTXhpuSUjsOIAnxpIBi6TsEGbf6eZ2Q09ytv4T9dFwf7G3dtbHVPDta/HkdL d04lCRMNc2d+RlkrmDdLcVyL1+sFKm0tgpnSM/kiuPl16HruyuEWxeNCfTbrceMJ OSXR+KQ3xbhR15xD9R1rT8tvvmdH1FOAQLDEd2m7xUhTlyA6ZFufcMpzVf2zyj7N kSgvsAaQSyYlggyG29DZRXx7HsF9fmC4Ckjk39e3DJVXMUQ/7vL7TKnorJWUVa+6 FOTXPGe4c8urU97x+tHgXygUOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMaBFIMd /9eI1x3jLdcQg9QyZLmfMB8GA1UdIwQYMBaAFGERgH6CisT5hCaT04YRlS3wPXJH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ5Mi8zNTc3OThCMDQw MkExMUVFQTcxNjE4NzJDNEY5QUUwMi9ZUkdBZm9LS3hQbUVKcFBUaGhHVkxmQTlj a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lSR0Fmb0tLeFBtRUpwUFRoaEdWTGZBOWNrYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUQ5Mi8zNTc3OThCMDQwMkExMUVFQTcxNjE4NzJDNEY5QUUwMi9ZUkdBZm9LS3hQ bUVKcFBUaGhHVkxmQTlja2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8KwEx/iqkmoYR/ccvyBHd9MAa16Jji4dXc3U26qcb/hh0Pr/7lpmJ u+v0Z0J221sra7bMGhQ9Kmm/NZHqyxYjn/Q/tw7ulbQsIpBLNvn9lRFIK6yhj+Hs fqPtHkZedxvvzVwvTReMXKuPKVxR9pBCaMDDsFUVrT8wvztDgC6XJOsZV83cR5Cf fb+2KWSY4BaWtDggj2HniVVY2ck4hO7amWGaW4uokhfoUlg8DJub62NwQyEv1j2V +qmrlaAAosnbGSqhalcGIZXeKS2qVfMHaj8nzinurLVOfTZoUTHSowXvPhzSOC6i nMlTxYsUsbadvK6X8txQa7E9SyRLSJbx -----END CERTIFICATE-----Generated at Mon Oct 27 01:38:33 2025 by rpki-client