$ rpki-client -vvf rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft File: yUoDUOcJ9WwjluMLRwyLXh37FwA.mft (raw, json) Hash identifier: v22bZyfOA6bB2MoHMfA71Qiff5zOunhnzUGFuxOa0O4= Subject key identifier: 48:1E:DC:B6:76:E6:94:9F:F9:82:75:7A:EE:D0:6C:D9:02:1E:83:B4 Authority key identifier: C9:4A:03:50:E7:09:F5:6C:23:96:E3:0B:47:0C:8B:5E:1D:FB:17:00 Certificate issuer: /CN=A9137992/serialNumber=C94A0350E709F56C2396E30B470C8B5E1DFB1700 Certificate serial: 14BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft Manifest number: 14BD Signing time: Mon 20 Oct 2025 17:15:14 +0000 Manifest this update: Mon 20 Oct 2025 17:15:13 +0000 Manifest next update: Mon 27 Oct 2025 17:15:13 +0000 Files and hashes: 1: yUoDUOcJ9WwjluMLRwyLXh37FwA.crl (hash: wFgY2NxK80dpBhLbMH8Sdd6brP4UO3D3XQmMWM1C/bw=) 2: 811B0DF274CB11EF941F0A71C4F9AE02.roa (hash: 9CCdXAmyhsUIKZ6n8Wk1KKSvrNfp24roJJogpEjyBYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.crl rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:15:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5311 (0x14bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137992, serialNumber=C94A0350E709F56C2396E30B470C8B5E1DFB1700 Validity Not Before: Oct 20 17:15:13 2025 GMT Not After : Oct 27 17:15:13 2025 GMT Subject: CN=68f66e21-83dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:84:5f:1f:7d:4e:9f:0a:99:69:6b:24:5a:a2: 70:3a:49:4e:d0:38:87:7a:e3:38:b9:92:a0:1e:48: 79:5d:95:9b:81:2e:fb:09:a7:64:f2:1d:97:ed:40: 02:c7:72:8a:90:70:fb:ad:e8:d1:73:a0:98:57:c7: f3:06:9b:6e:41:d8:5f:39:25:80:55:5f:9b:fc:a2: 10:09:96:cd:ca:6a:28:e9:b2:bc:ac:4e:a8:06:b5: 23:48:d5:63:18:66:b4:9a:8e:60:a1:ea:c1:67:d5: d5:8c:bc:0e:cf:ce:5d:b9:07:f4:4d:02:4c:af:39: a0:0b:67:84:ff:04:2b:79:7b:99:09:e1:c8:4f:b4: 2e:ac:e8:a0:f1:d6:3e:e5:10:2e:cc:5e:ed:d8:0a: ad:fd:2e:b9:a5:ef:bd:58:97:8f:bb:d9:fb:5c:c8: 68:92:00:7a:25:88:b7:02:6b:22:90:9d:c0:55:55: 6c:02:15:1a:67:f2:ad:44:60:68:df:5e:48:a1:01: 4a:12:1a:ab:28:16:34:ec:45:b5:9b:f3:2f:8b:4d: 22:22:1c:3a:67:4e:6d:83:ad:94:20:24:1d:6e:1c: 86:32:2b:36:15:90:c7:97:2b:2b:d3:39:7a:12:00: b9:75:f4:e1:ad:3d:39:fb:e2:8c:49:cc:d3:a4:9e: df:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:1E:DC:B6:76:E6:94:9F:F9:82:75:7A:EE:D0:6C:D9:02:1E:83:B4 X509v3 Authority Key Identifier: keyid:C9:4A:03:50:E7:09:F5:6C:23:96:E3:0B:47:0C:8B:5E:1D:FB:17:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:93:35:d2:73:b4:32:f6:c9:07:67:7b:fa:ec:01:c7:ba:d8: f4:30:20:cc:17:e8:a9:57:4d:05:bf:03:e2:81:59:fd:71:8d: c3:f7:b7:7f:91:80:87:7f:58:fc:65:4d:d6:28:b7:78:ba:58: 03:99:7d:b5:e8:20:80:9f:13:8b:32:72:51:8b:7f:28:29:05: 65:d7:19:52:80:ce:04:53:1e:01:56:cc:da:4f:be:09:98:00: 3c:03:c1:0d:a2:19:ce:b6:3a:31:2e:99:bc:be:e6:2b:c3:f5: c1:6f:2d:27:35:7f:96:f0:34:62:95:9d:fd:a0:58:fc:11:2c: 9b:68:31:21:39:a3:2d:0e:69:72:cd:0d:3d:27:b7:e6:1e:d9: c6:94:4e:8e:a8:93:30:59:fd:f3:77:52:68:9a:cb:dc:f9:7e: 13:f0:84:db:6d:8e:5e:4d:65:bf:43:95:d2:bf:85:16:37:b1: 7f:c9:65:72:db:d8:15:22:1a:7e:66:b3:60:23:a7:70:8c:55: 17:79:0b:58:cf:66:7e:58:9a:52:99:16:1e:65:60:5c:b9:c6: 26:15:c2:79:53:62:cc:d0:4a:b9:16:ac:63:8c:bf:a3:52:e0: 9f:51:1a:04:ae:3e:08:d4:05:9b:28:20:7f:ba:9c:de:c6:88: 8d:2d:37:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc5OTIxMTAvBgNVBAUTKEM5NEEwMzUwRTcwOUY1NkMyMzk2RTMwQjQ3MEM4QjVF MURGQjE3MDAwHhcNMjUxMDIwMTcxNTEzWhcNMjUxMDI3MTcxNTEzWjAYMRYwFAYD VQQDEw02OGY2NmUyMS04M2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4YRfH31OnwqZaWskWqJwOklO0DiHeuM4uZKgHkh5XZWbgS77Cadk8h2X7UAC x3KKkHD7rejRc6CYV8fzBptuQdhfOSWAVV+b/KIQCZbNymoo6bK8rE6oBrUjSNVj GGa0mo5goerBZ9XVjLwOz85duQf0TQJMrzmgC2eE/wQreXuZCeHIT7QurOig8dY+ 5RAuzF7t2Aqt/S65pe+9WJePu9n7XMhokgB6JYi3AmsikJ3AVVVsAhUaZ/KtRGBo 315IoQFKEhqrKBY07EW1m/Mvi00iIhw6Z05tg62UICQdbhyGMis2FZDHlysr0zl6 EgC5dfThrT05++KMSczTpJ7fLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEge3LZ2 5pSf+YJ1eu7QbNkCHoO0MB8GA1UdIwQYMBaAFMlKA1DnCfVsI5bjC0cMi14d+xcA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzk5Mi8wMjMyODM0ODY3 Q0MxMUU4QUQ4NDM5NjNDNEY5QUUwMi95VW9EVU9jSjlXd2psdU1MUnd5TFhoMzdG d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lVb0RVT2NKOVd3amx1TUxSd3lMWGgzN0Z3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Nzk5Mi8wMjMyODM0ODY3Q0MxMUU4QUQ4NDM5NjNDNEY5QUUwMi95VW9EVU9jSjlX d2psdU1MUnd5TFhoMzdGd0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHkzXSc7Qy9skHZ3v67AHHutj0MCDMF+ipV00FvwPigVn9cY3D97d/ kYCHf1j8ZU3WKLd4ulgDmX216CCAnxOLMnJRi38oKQVl1xlSgM4EUx4BVszaT74J mAA8A8ENohnOtjoxLpm8vuYrw/XBby0nNX+W8DRilZ39oFj8ESybaDEhOaMtDmly zQ09J7fmHtnGlE6OqJMwWf3zd1Jomsvc+X4T8ITbbY5eTWW/Q5XSv4UWN7F/yWVy 29gVIhp+ZrNgI6dwjFUXeQtYz2Z+WJpSmRYeZWBcucYmFcJ5U2LM0Eq5FqxjjL+j UuCfURoErj4I1AWbKCB/upzexoiNLTfD -----END CERTIFICATE-----Generated at Mon Oct 20 21:45:12 2025 by rpki-client