$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft File: yoPUPlpeWcd1mxubL72YqUff07w.mft (raw, json) Hash identifier: HDDfB47XS7nIXVeeXPRACWBEmhIrRWlyS/ItytohzS0= Subject key identifier: 21:48:2A:DC:9A:6B:52:8F:E9:0C:53:D2:D6:2F:DF:3D:71:C1:98:14 Authority key identifier: CA:83:D4:3E:5A:5E:59:C7:75:9B:1B:9B:2F:BD:98:A9:47:DF:D3:BC Certificate issuer: /CN=A9136DD6/serialNumber=CA83D43E5A5E59C7759B1B9B2FBD98A947DFD3BC Certificate serial: 10D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft Manifest number: 10AE Signing time: Sat 18 Oct 2025 17:55:57 +0000 Manifest this update: Sat 18 Oct 2025 17:55:57 +0000 Manifest next update: Sat 25 Oct 2025 17:55:57 +0000 Files and hashes: 1: yoPUPlpeWcd1mxubL72YqUff07w.crl (hash: rfRhuKZVVRowi8A/Kze3knl+ldPtZ51FpM1KO7cuZu8=) 2: 7B306A34218D11EC87C96D6DC4F9AE02.roa (hash: yOodJ3nH5QwD9eT88M4j+d+u4VfxJX6b3Bq0+MSkMHg=) 3: AAAA30A6288411EEAD22D65DC4F9AE02.roa (hash: G+uGWRjp80LrgRmLSZBd2dtMIpT6KA8B8JU7ZRHYork=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.crl rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:55:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4313 (0x10d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136DD6, serialNumber=CA83D43E5A5E59C7759B1B9B2FBD98A947DFD3BC Validity Not Before: Oct 18 17:55:57 2025 GMT Not After : Oct 25 17:55:57 2025 GMT Subject: CN=68f3d4ad-3d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d9:42:e6:c2:b0:1c:1b:b9:77:91:7d:e8:d4: ba:dd:dc:44:51:04:8c:42:f4:6d:b4:1d:4f:89:86: e4:2d:4b:5f:ed:16:d5:40:f0:85:10:c0:80:35:e4: fe:49:be:1f:cf:09:7f:19:94:0a:0c:a7:14:3b:90: 76:9e:76:c7:72:fb:e9:71:c1:4d:9f:92:fb:82:30: f8:05:b2:4f:cf:98:42:a2:1c:02:e5:0f:e6:41:95: fa:b9:2b:c9:90:bd:6c:75:c2:a9:4d:10:4e:4f:f8: 0b:4d:c9:58:e9:4e:1c:a5:0d:5e:5b:df:a7:52:e2: 46:57:7b:b6:33:5f:ab:78:f8:6f:58:ef:48:51:01: a9:ef:60:61:0c:71:ee:a5:cc:54:d5:84:26:85:50: b0:89:db:95:a4:da:ce:9e:8d:17:c0:b1:d4:b8:5c: 77:98:ac:e5:b7:b6:21:58:eb:4d:eb:4d:41:22:a1: be:f1:be:d6:4f:78:d2:41:1a:17:63:2f:7d:d0:a3: 8a:b3:4e:6e:5c:d6:61:65:12:47:99:15:31:f4:08: fb:1b:a1:33:09:77:ca:b3:3b:90:42:5f:8d:38:4d: 1e:2a:2c:41:47:77:3f:4d:59:43:97:71:0b:60:c3: 1c:fb:85:fa:2a:52:da:0e:95:f0:e5:17:77:ab:a9: 65:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:48:2A:DC:9A:6B:52:8F:E9:0C:53:D2:D6:2F:DF:3D:71:C1:98:14 X509v3 Authority Key Identifier: keyid:CA:83:D4:3E:5A:5E:59:C7:75:9B:1B:9B:2F:BD:98:A9:47:DF:D3:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:16:4f:87:a4:65:35:6d:be:e3:30:7b:af:14:8d:25:c8:bd: 5d:a8:fd:62:39:67:26:dc:50:8c:40:aa:62:ef:11:ff:34:d9: e1:8b:45:12:6a:3e:21:c6:68:d5:b6:b6:d8:5e:92:7a:cb:45: c0:9a:f5:17:2c:1e:96:0c:dd:d6:46:68:19:7a:bf:b0:40:bd: 73:ed:01:8a:0d:d8:67:83:0e:52:c8:2e:79:c2:a5:69:b2:d2: 33:68:9d:7f:ad:58:cb:9d:5b:5a:e1:dc:ea:a1:7a:d0:05:b2: c3:50:0d:17:e3:2d:12:50:9e:9d:3e:62:46:7a:87:ec:0d:e0: a2:2b:b0:db:6b:1b:b9:27:38:0b:bd:8c:34:21:5f:2b:95:33: 3f:c2:e0:c1:f9:4c:26:90:00:f4:17:19:59:dd:f2:9a:b3:7a: 47:71:ac:6b:33:90:50:12:43:3d:56:80:fc:71:62:db:c4:da: 0f:96:d1:e3:0a:31:7e:6b:36:0b:c8:92:83:3d:61:cd:b4:b6: 7e:55:83:19:bd:c3:08:28:25:81:0b:22:91:4f:1d:d2:3b:26: 72:7a:61:53:c9:41:15:7d:a5:5e:b9:66:2e:ae:ba:8c:2c:00: 84:39:6e:f4:46:13:d9:8b:79:cf:e4:70:ca:4c:e5:1c:a1:31: 12:34:89:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICENkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZERDYxMTAvBgNVBAUTKENBODNENDNFNUE1RTU5Qzc3NTlCMUI5QjJGQkQ5OEE5 NDdERkQzQkMwHhcNMjUxMDE4MTc1NTU3WhcNMjUxMDI1MTc1NTU3WjAYMRYwFAYD VQQDEw02OGYzZDRhZC0zZDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs9lC5sKwHBu5d5F96NS63dxEUQSMQvRttB1PiYbkLUtf7RbVQPCFEMCANeT+ Sb4fzwl/GZQKDKcUO5B2nnbHcvvpccFNn5L7gjD4BbJPz5hCohwC5Q/mQZX6uSvJ kL1sdcKpTRBOT/gLTclY6U4cpQ1eW9+nUuJGV3u2M1+rePhvWO9IUQGp72BhDHHu pcxU1YQmhVCwiduVpNrOno0XwLHUuFx3mKzlt7YhWOtN601BIqG+8b7WT3jSQRoX Yy990KOKs05uXNZhZRJHmRUx9Aj7G6EzCXfKszuQQl+NOE0eKixBR3c/TVlDl3EL YMMc+4X6KlLaDpXw5Rd3q6llMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCFIKtya a1KP6QxT0tYv3z1xwZgUMB8GA1UdIwQYMBaAFMqD1D5aXlnHdZsbmy+9mKlH39O8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkRENi9ERjM4OTU1RTNC MzcxMUU5QTAzOEFCMkFDNEY5QUUwMi95b1BVUGxwZVdjZDFteHViTDcyWXFVZmYw N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lvUFVQbHBlV2NkMW14dWJMNzJZcVVmZjA3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkRENi9ERjM4OTU1RTNCMzcxMUU5QTAzOEFCMkFDNEY5QUUwMi95b1BVUGxwZVdj ZDFteHViTDcyWXFVZmYwN3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzFk+HpGU1bb7jMHuvFI0lyL1dqP1iOWcm3FCMQKpi7xH/NNnhi0US aj4hxmjVtrbYXpJ6y0XAmvUXLB6WDN3WRmgZer+wQL1z7QGKDdhngw5SyC55wqVp stIzaJ1/rVjLnVta4dzqoXrQBbLDUA0X4y0SUJ6dPmJGeofsDeCiK7Dbaxu5JzgL vYw0IV8rlTM/wuDB+UwmkAD0FxlZ3fKas3pHcaxrM5BQEkM9VoD8cWLbxNoPltHj CjF+azYLyJKDPWHNtLZ+VYMZvcMIKCWBCyKRTx3SOyZyemFTyUEVfaVeuWYurrqM LACEOW70RhPZi3nP5HDKTOUcoTESNIlU -----END CERTIFICATE-----Generated at Mon Oct 20 05:33:53 2025 by rpki-client