$ rpki-client -vvf rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.mft File: yy5uwVWepHY5RAtAqtdfleb9vF8.mft (raw, json) Hash identifier: tlL7uPuVDd5ATZ4lgQhQe+WeEo5+kOzQJO3KguFNarU= Subject key identifier: A7:CA:2E:4E:74:4F:4C:A4:A5:D5:E3:8F:02:90:56:A0:BE:3B:32:41 Authority key identifier: CB:2E:6E:C1:55:9E:A4:76:39:44:0B:40:AA:D7:5F:95:E6:FD:BC:5F Certificate issuer: /CN=A9127760/serialNumber=CB2E6EC1559EA47639440B40AAD75F95E6FDBC5F Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yy5uwVWepHY5RAtAqtdfleb9vF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.mft Manifest number: 1F Signing time: Sun 19 Oct 2025 11:20:14 +0000 Manifest this update: Sun 19 Oct 2025 11:20:13 +0000 Manifest next update: Sun 26 Oct 2025 11:20:13 +0000 Files and hashes: 1: yy5uwVWepHY5RAtAqtdfleb9vF8.crl (hash: KUURxlrhQbw0Oh/6t2m+gwPLBg6qE0o4GTiaBXTBhhg=) 2: F9B1B1167E3F11F0B7941020C4F9AE02.roa (hash: bK7hZCbYRKmxsAbM/VvM+9yVYJP6bmKeYAFIpnPtV6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.crl rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yy5uwVWepHY5RAtAqtdfleb9vF8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:20:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127760, serialNumber=CB2E6EC1559EA47639440B40AAD75F95E6FDBC5F Validity Not Before: Oct 19 11:20:13 2025 GMT Not After : Oct 26 11:20:13 2025 GMT Subject: CN=68f4c96e-7cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7a:35:77:bd:a7:2c:11:cc:50:64:89:7c:ed: a4:ec:fe:72:29:2a:b5:d2:0e:9c:da:8b:e1:04:1f: 9c:e6:86:d9:1d:9c:c7:73:7c:88:7b:97:11:f6:61: 78:fe:39:f5:68:52:e1:ac:51:31:7c:de:bc:86:76: 75:14:da:88:04:da:62:aa:3f:f1:1f:d1:dd:c9:61: 67:34:bc:e0:06:e2:23:7c:6e:0c:6f:e3:93:00:d2: 83:bd:3e:dd:0e:1f:76:a1:a9:96:d5:88:56:c6:14: ff:35:01:4b:82:a5:af:72:dc:c4:1e:bd:7f:f4:be: 1d:3f:25:5f:ca:63:9a:d8:7e:33:36:d9:ce:6b:ab: 32:10:49:f9:78:94:11:cb:eb:4e:51:b9:ff:28:30: 42:06:06:d8:3b:5f:d5:b1:58:c3:24:87:fb:e3:e8: f3:1f:ca:b7:2f:89:69:3e:c4:05:83:88:6d:44:ff: 5f:3c:98:85:2f:e1:29:ad:90:d9:b5:dd:f3:39:bd: 04:46:2c:0e:db:1a:80:57:ab:1d:9f:1d:57:0a:98: b6:c8:80:d0:27:b2:5c:94:21:9e:d7:4f:41:09:53: 91:75:a0:10:52:5b:87:51:b7:b2:7f:b6:31:5e:3c: 6e:23:58:15:97:19:2b:af:eb:29:2a:ae:31:b3:69: 0a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:CA:2E:4E:74:4F:4C:A4:A5:D5:E3:8F:02:90:56:A0:BE:3B:32:41 X509v3 Authority Key Identifier: keyid:CB:2E:6E:C1:55:9E:A4:76:39:44:0B:40:AA:D7:5F:95:E6:FD:BC:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yy5uwVWepHY5RAtAqtdfleb9vF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:18:ff:1d:46:19:84:32:fd:ee:c2:93:d0:47:08:d5:1c:c5: e9:2c:4a:aa:65:3d:84:65:25:94:87:cd:53:44:65:3d:22:c5: c1:28:14:0a:76:6e:5a:6a:6a:a1:c4:eb:84:25:2d:b2:07:fb: d7:2b:08:66:0e:c4:c8:7e:24:b4:c9:ef:83:ee:34:0b:a5:77: f9:3b:78:3e:04:27:b6:7d:f8:4e:52:1b:ec:09:85:d3:00:4d: 93:b3:b1:a8:14:f9:1b:2e:eb:05:46:93:6e:ad:b3:8d:33:ba: bb:8c:da:be:7b:fc:ca:36:00:6f:06:35:a7:e6:fb:25:26:cc: c2:1b:62:e4:41:94:5b:46:57:ae:c8:98:ad:55:49:4b:6e:10: 9c:e7:20:1e:94:e6:c2:3e:8f:f2:18:ba:f1:f4:03:3c:87:09: 2a:a9:53:39:4e:ea:af:05:4f:ae:04:31:e3:29:6b:f3:e5:4c: c2:f6:b2:0c:39:f5:a2:3c:47:19:a3:c5:b8:44:89:2a:5e:85: c2:2c:52:66:12:fc:b3:ec:60:9a:2f:c7:d0:8f:c2:6d:91:d8: 68:a7:62:da:00:f7:f6:dc:ae:0a:47:73:92:bd:82:a2:aa:79: d5:5c:3e:f3:b7:34:13:2b:81:96:fa:b4:65:67:a2:a5:8b:85: d5:05:26:4c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Nzc2MDExMC8GA1UEBRMoQ0IyRTZFQzE1NTlFQTQ3NjM5NDQwQjQwQUFENzVGOTVF NkZEQkM1RjAeFw0yNTEwMTkxMTIwMTNaFw0yNTEwMjYxMTIwMTNaMBgxFjAUBgNV BAMTDTY4ZjRjOTZlLTdjZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOejV3vacsEcxQZIl87aTs/nIpKrXSDpzai+EEH5zmhtkdnMdzfIh7lxH2YXj+ OfVoUuGsUTF83ryGdnUU2ogE2mKqP/Ef0d3JYWc0vOAG4iN8bgxv45MA0oO9Pt0O H3ahqZbViFbGFP81AUuCpa9y3MQevX/0vh0/JV/KY5rYfjM22c5rqzIQSfl4lBHL 605Ruf8oMEIGBtg7X9WxWMMkh/vj6PMfyrcviWk+xAWDiG1E/188mIUv4SmtkNm1 3fM5vQRGLA7bGoBXqx2fHVcKmLbIgNAnslyUIZ7XT0EJU5F1oBBSW4dRt7J/tjFe PG4jWBWXGSuv6ykqrjGzaQrrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUp8ouTnRP TKSl1eOPApBWoL47MkEwHwYDVR0jBBgwFoAUyy5uwVWepHY5RAtAqtdfleb9vF8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3NzYwLzc0M0QxNjdFN0Uz RjExRjBBQjA4OUIxRUM0RjlBRTAyL3l5NXV3VldlcEhZNVJBdEFxdGRmbGViOXZG OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveXk1dXdWV2VwSFk1UkF0QXF0ZGZsZWI5dkY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 NzYwLzc0M0QxNjdFN0UzRjExRjBBQjA4OUIxRUM0RjlBRTAyL3l5NXV3VldlcEhZ NVJBdEFxdGRmbGViOXZGOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFwY/x1GGYQy/e7Ck9BHCNUcxeksSqplPYRlJZSHzVNEZT0ixcEoFAp2 blpqaqHE64QlLbIH+9crCGYOxMh+JLTJ74PuNAuld/k7eD4EJ7Z9+E5SG+wJhdMA TZOzsagU+Rsu6wVGk26ts40zuruM2r57/Mo2AG8GNafm+yUmzMIbYuRBlFtGV67I mK1VSUtuEJznIB6U5sI+j/IYuvH0AzyHCSqpUzlO6q8FT64EMeMpa/PlTML2sgw5 9aI8RxmjxbhEiSpehcIsUmYS/LPsYJovx9CPwm2R2GinYtoA9/bcrgpHc5K9gqKq edVcPvO3NBMrgZb6tGVnoqWLhdUFJkw= -----END CERTIFICATE-----Generated at Tue Oct 21 10:28:13 2025 by rpki-client