$ rpki-client -vvf rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft File: yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft (raw, json) Hash identifier: 6Th+Dm1mmazpvvdvVkJN0YykXRgO+45HdDUG6BN7hY0= Subject key identifier: 9F:23:55:47:0B:9A:0F:E1:FF:B0:A8:2F:37:B7:9D:29:F9:8F:DA:A6 Authority key identifier: C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47 Certificate issuer: /CN=A912438F/serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47 Certificate serial: 07BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft Manifest number: 07A7 Signing time: Sat 18 Oct 2025 22:46:35 +0000 Manifest this update: Sat 18 Oct 2025 22:46:34 +0000 Manifest next update: Sat 25 Oct 2025 22:46:34 +0000 Files and hashes: 1: yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl (hash: AqB2bu7epL/L5WNMYxA4s0lTAriKtgFv3B6MjSOqXOY=) 2: 5C95BDC0C12E11EEA47CBB59C4F9AE02.roa (hash: pfFLA6S00NJF9wnUh3eyO3xPwlEBQIG4Qg4AiW8MLVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:46:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1978 (0x7ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912438F, serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47 Validity Not Before: Oct 18 22:46:34 2025 GMT Not After : Oct 25 22:46:34 2025 GMT Subject: CN=68f418cb-74e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8e:83:0a:ba:e8:a1:a5:55:bb:60:8d:cd:a9: 9a:e2:04:f2:dd:a4:e4:b6:87:ea:59:ef:6c:9c:76: 98:51:ec:f9:a1:6c:7e:da:4d:e0:33:63:c9:96:85: 8f:3f:95:c3:1b:67:0b:a1:d5:94:89:f7:c9:82:e2: 95:a3:be:05:28:a9:ac:1f:13:30:87:b0:6a:e4:87: d5:08:02:d8:2d:3f:7c:a2:90:d7:b9:07:2b:78:a1: 82:30:c8:17:2a:38:48:30:ed:5c:8e:d4:d2:07:e8: 87:13:95:a0:ca:c4:6c:22:a1:fb:87:e5:63:be:31: 96:46:f1:a4:87:0b:cd:17:73:80:8f:3f:e2:ec:d2: dc:95:e4:28:7e:59:4f:f5:7a:39:8f:e9:e8:20:0a: 07:55:cc:58:8e:85:3a:2b:9d:29:ab:7c:01:b7:a6: 1f:c6:23:65:36:b0:bd:d7:01:cf:7e:8f:73:cb:e6: e3:5c:27:22:40:1c:43:63:de:f0:bb:dd:dd:43:db: 5e:f7:89:0d:02:13:be:df:67:ff:fd:f2:e1:b6:a9: 49:9d:2d:c2:a4:e6:37:35:d9:3c:a9:e3:74:0b:6d: fc:8c:92:4a:a1:4a:71:5d:f3:a4:ab:a3:ff:3f:3f: a2:59:be:be:8d:9d:00:69:4b:39:2c:37:90:0a:fd: 1e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:23:55:47:0B:9A:0F:E1:FF:B0:A8:2F:37:B7:9D:29:F9:8F:DA:A6 X509v3 Authority Key Identifier: keyid:C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:48:81:fe:b8:c0:d1:47:e1:26:a8:5b:13:1d:10:e4:a0:13: 42:da:15:44:6f:c3:44:71:47:4e:8d:dc:e5:29:ac:b5:6b:cc: 22:68:22:40:4c:a3:c9:29:aa:c3:2a:d0:b2:89:75:1e:51:35: fd:eb:35:f7:d5:80:89:f0:c1:50:f9:4f:1d:b1:77:66:9e:3a: e9:23:70:0e:29:79:ee:9f:9b:e5:a1:89:4d:f4:80:9e:83:9d: ac:56:b5:9c:26:36:3c:db:02:28:02:4d:39:4f:09:6c:5f:15: 57:a4:70:b0:a8:5e:84:03:16:a4:b2:ff:a1:3a:bd:b4:52:77: f4:ed:cc:7f:75:5d:18:1a:fb:b3:7c:b3:46:03:d4:9f:c5:66: 58:a6:b2:c7:b9:58:5f:e4:d7:3c:0f:9f:67:0f:bf:87:88:98: a5:9d:3b:4d:d3:70:7c:4c:cf:e2:25:3e:c5:b6:96:4d:51:9c: 9d:9b:ef:22:69:e1:37:6c:eb:e2:f3:7f:7d:98:a9:89:ac:1b: 7f:1e:94:57:e3:78:3d:cc:b0:91:a2:bd:b4:58:3c:4f:69:e7: bd:e7:4b:8f:52:78:37:61:ac:0c:59:cc:58:aa:4c:02:87:14: c2:10:30:7e:8b:a3:58:47:7e:a7:ed:a5:c3:08:7f:77:4e:f0: 4b:a4:81:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQzOEYxMTAvBgNVBAUTKEM4ODhEMUVFRTA0QkVGM0U4MTVGMDlEREZBMTkxOTNE Njk5QjRGNDcwHhcNMjUxMDE4MjI0NjM0WhcNMjUxMDI1MjI0NjM0WjAYMRYwFAYD VQQDEw02OGY0MThjYi03NGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyY6DCrrooaVVu2CNzama4gTy3aTktofqWe9snHaYUez5oWx+2k3gM2PJloWP P5XDG2cLodWUiffJguKVo74FKKmsHxMwh7Bq5IfVCALYLT98opDXuQcreKGCMMgX KjhIMO1cjtTSB+iHE5WgysRsIqH7h+VjvjGWRvGkhwvNF3OAjz/i7NLcleQofllP 9Xo5j+noIAoHVcxYjoU6K50pq3wBt6YfxiNlNrC91wHPfo9zy+bjXCciQBxDY97w u93dQ9te94kNAhO+32f//fLhtqlJnS3CpOY3Ndk8qeN0C238jJJKoUpxXfOkq6P/ Pz+iWb6+jZ0AaUs5LDeQCv0exwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8jVUcL mg/h/7CoLze3nSn5j9qmMB8GA1UdIwQYMBaAFMiI0e7gS+8+gV8J3foZGT1pm09H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDM4Ri9DNzU5MEJENjI1 QUUxMUVCOEVFQzIyMEFDNEY5QUUwMi95SWpSN3VCTDd6NkJYd25kLWhrWlBXbWJU MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lJalI3dUJMN3o2Qlh3bmQtaGtaUFdtYlQwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDM4Ri9DNzU5MEJENjI1QUUxMUVCOEVFQzIyMEFDNEY5QUUwMi95SWpSN3VCTDd6 NkJYd25kLWhrWlBXbWJUMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZSIH+uMDRR+EmqFsTHRDkoBNC2hVEb8NEcUdOjdzlKay1a8wiaCJA TKPJKarDKtCyiXUeUTX96zX31YCJ8MFQ+U8dsXdmnjrpI3AOKXnun5vloYlN9ICe g52sVrWcJjY82wIoAk05TwlsXxVXpHCwqF6EAxaksv+hOr20Unf07cx/dV0YGvuz fLNGA9SfxWZYprLHuVhf5Nc8D59nD7+HiJilnTtN03B8TM/iJT7FtpZNUZydm+8i aeE3bOvi8399mKmJrBt/HpRX43g9zLCRor20WDxPaee950uPUng3YawMWcxYqkwC hxTCEDB+i6NYR36n7aXDCH93TvBLpIFI -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:05 2025 by rpki-client