$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft File: YcuQhfAv-PpF5zL1gDQPQkngDKI.mft (raw, json) Hash identifier: IsoWNXeBXzU9WvkRhW7GcBI8GgmTermBAZoIP4aF2gg= Subject key identifier: 6A:68:39:63:85:6F:DC:CE:FB:EF:0F:C6:25:73:C4:35:8A:89:F1:A2 Authority key identifier: 61:CB:90:85:F0:2F:F8:FA:45:E7:32:F5:80:34:0F:42:49:E0:0C:A2 Certificate issuer: /CN=A91DCB25/serialNumber=61CB9085F02FF8FA45E732F580340F4249E00CA2 Certificate serial: 11BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft Manifest number: 11B5 Signing time: Thu 18 Sep 2025 17:20:56 +0000 Manifest this update: Thu 18 Sep 2025 17:20:55 +0000 Manifest next update: Thu 25 Sep 2025 17:20:55 +0000 Files and hashes: 1: YcuQhfAv-PpF5zL1gDQPQkngDKI.crl (hash: qIwBUjrMXL3rcdcJwl8jKCqjCWYiEu/Jj9gdMJ7m3GA=) 2: BDC1AB0AFDA611E88FA5E26DC4F9AE02.roa (hash: SB9Ipu4AFekvf7xWy+dJxrZfjpqZ4b1Xx/G1XVRpODY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.crl rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:20:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4542 (0x11be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCB25, serialNumber=61CB9085F02FF8FA45E732F580340F4249E00CA2 Validity Not Before: Sep 18 17:20:55 2025 GMT Not After : Sep 25 17:20:55 2025 GMT Subject: CN=68cc3f78-64da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4f:15:92:b8:8e:99:50:24:f1:05:d7:aa:8b: 0a:9b:78:45:cf:ee:4b:41:aa:51:9a:6b:5f:7f:fb: 47:85:04:f9:5a:da:f9:1e:6c:6f:99:52:1f:c2:fb: 44:1b:78:0e:e6:9a:1d:eb:13:c1:69:03:dc:2e:d5: 9a:12:27:a1:46:cf:2b:e7:5c:46:3e:43:a2:54:4c: e5:6c:c8:f5:a7:37:9d:31:c4:df:71:41:1a:e7:66: 3d:8f:93:26:40:13:a7:73:4c:74:0e:e0:c3:b2:7b: fe:7c:a5:52:38:ea:97:df:4e:a0:2f:bb:28:0e:02: 1f:f9:ea:9d:36:02:cf:c9:dc:10:66:9f:93:83:d5: aa:f8:9d:93:77:41:d1:23:92:9d:3a:b8:7a:2e:8b: 9b:02:ae:3c:0a:a9:7c:82:15:24:19:b2:ab:98:1c: 36:c3:bf:eb:d5:b8:71:eb:bf:05:75:15:40:86:e2: cc:11:e0:9a:14:86:67:64:bf:bb:bd:1d:3a:9c:f3: 5e:a8:92:95:33:98:c4:0f:e5:61:df:dc:4a:0f:b8: a3:7a:d1:65:56:ad:63:7d:47:d2:22:52:9e:c0:0b: 0d:09:67:ae:b6:a0:c7:99:be:1a:9a:3d:fd:f8:05: c2:41:45:7a:6d:04:cc:aa:db:ca:23:5d:2f:8b:86: 64:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:68:39:63:85:6F:DC:CE:FB:EF:0F:C6:25:73:C4:35:8A:89:F1:A2 X509v3 Authority Key Identifier: keyid:61:CB:90:85:F0:2F:F8:FA:45:E7:32:F5:80:34:0F:42:49:E0:0C:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:5a:a0:c1:5f:b1:43:b5:ee:ac:78:98:b6:86:4d:e4:a5:c1: 17:ca:fb:57:bc:27:cd:16:11:c8:a3:20:90:6d:98:8c:a3:14: 6f:14:b4:2f:8e:86:84:15:99:25:7a:51:93:38:bd:35:dd:b5: 7d:99:1f:16:14:64:38:a5:65:3c:87:8a:4f:39:32:04:56:b4: 9b:a8:6d:bd:8c:2f:53:e8:c5:dd:09:67:f9:3e:64:1e:e7:7e: 84:40:97:99:b1:d6:1e:da:1d:c6:d7:3e:38:51:f3:b6:66:30: ca:17:ef:ef:b9:9d:8c:82:73:59:4f:05:2a:35:2a:13:b3:0e: a8:d4:5d:43:93:04:5c:11:03:30:a6:96:3d:08:75:1b:bf:e2: 9d:96:8d:86:97:e1:73:ce:14:fa:1a:e0:b1:f4:dd:17:21:27: e2:e4:52:82:ec:59:ac:40:eb:c2:2d:8d:39:b2:b0:7c:99:84: a1:93:e2:63:71:35:c3:3c:06:2d:09:c1:a6:3d:11:7c:af:3d: 8b:31:3d:a5:e0:35:43:71:fc:5c:bf:b7:8a:19:fe:10:cd:f8: a2:ca:8f:2e:eb:69:e9:43:49:02:6d:67:af:6a:3c:a3:49:60: cf:4d:df:e8:39:25:2d:b4:9b:a8:82:20:9a:0d:97:66:c7:12: 1d:98:95:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENCMjUxMTAvBgNVBAUTKDYxQ0I5MDg1RjAyRkY4RkE0NUU3MzJGNTgwMzQwRjQy NDlFMDBDQTIwHhcNMjUwOTE4MTcyMDU1WhcNMjUwOTI1MTcyMDU1WjAYMRYwFAYD VQQDEw02OGNjM2Y3OC02NGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqE8VkriOmVAk8QXXqosKm3hFz+5LQapRmmtff/tHhQT5Wtr5HmxvmVIfwvtE G3gO5pod6xPBaQPcLtWaEiehRs8r51xGPkOiVEzlbMj1pzedMcTfcUEa52Y9j5Mm QBOnc0x0DuDDsnv+fKVSOOqX306gL7soDgIf+eqdNgLPydwQZp+Tg9Wq+J2Td0HR I5KdOrh6LoubAq48Cql8ghUkGbKrmBw2w7/r1bhx678FdRVAhuLMEeCaFIZnZL+7 vR06nPNeqJKVM5jED+Vh39xKD7ijetFlVq1jfUfSIlKewAsNCWeutqDHmb4amj39 +AXCQUV6bQTMqtvKI10vi4ZkSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGpoOWOF b9zO++8PxiVzxDWKifGiMB8GA1UdIwQYMBaAFGHLkIXwL/j6Recy9YA0D0JJ4Ayi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0IyNS8yQzYwREZEOEZE QTUxMUU4ODg1OUMwNkJDNEY5QUUwMi9ZY3VRaGZBdi1QcEY1ekwxZ0RRUFFrbmdE S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ljdVFoZkF2LVBwRjV6TDFnRFFQUWtuZ0RLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0IyNS8yQzYwREZEOEZEQTUxMUU4ODg1OUMwNkJDNEY5QUUwMi9ZY3VRaGZBdi1Q cEY1ekwxZ0RRUFFrbmdES0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7WqDBX7FDte6seJi2hk3kpcEXyvtXvCfNFhHIoyCQbZiMoxRvFLQv joaEFZklelGTOL013bV9mR8WFGQ4pWU8h4pPOTIEVrSbqG29jC9T6MXdCWf5PmQe 536EQJeZsdYe2h3G1z44UfO2ZjDKF+/vuZ2MgnNZTwUqNSoTsw6o1F1DkwRcEQMw ppY9CHUbv+Kdlo2Gl+FzzhT6GuCx9N0XISfi5FKC7FmsQOvCLY05srB8mYShk+Jj cTXDPAYtCcGmPRF8rz2LMT2l4DVDcfxcv7eKGf4Qzfiiyo8u62npQ0kCbWevajyj SWDPTd/oOSUttJuogiCaDZdmxxIdmJVt -----END CERTIFICATE-----Generated at Fri Sep 19 08:47:05 2025 by rpki-client