$ rpki-client -vvf rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft File: Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft (raw, json) Hash identifier: HvCHgajJpkplNGr+gk7p2pumUCtfINvtCosD4cbjKxI= Subject key identifier: 57:FE:27:B0:4D:AD:05:3E:01:5E:A3:50:F0:F1:9D:B0:D4:BB:BF:EF Authority key identifier: 62:2E:76:62:D9:FB:E1:0C:1A:AE:0B:DF:E9:88:DB:99:6A:E3:FD:59 Certificate issuer: /CN=A9142B70/serialNumber=622E7662D9FBE10C1AAE0BDFE988DB996AE3FD59 Certificate serial: 0177 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft Manifest number: 0174 Signing time: Sun 19 Oct 2025 06:28:12 +0000 Manifest this update: Sun 19 Oct 2025 06:28:11 +0000 Manifest next update: Sun 26 Oct 2025 06:28:11 +0000 Files and hashes: 1: Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl (hash: zib0smWe9dNQu3TV3gcJ9fO5g5rfdZz3pkiaqA6Be7Y=) 2: CF1D6B3873B111EEB1254A5AC4F9AE02.roa (hash: 6/RNoQhjZDLc2AhsjhYLjFVymAZMY+bhp7y0D06E0yU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:28:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 375 (0x177) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142B70, serialNumber=622E7662D9FBE10C1AAE0BDFE988DB996AE3FD59 Validity Not Before: Oct 19 06:28:11 2025 GMT Not After : Oct 26 06:28:11 2025 GMT Subject: CN=68f484fb-1881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ad:dd:a5:ac:43:85:45:51:d4:b1:62:4a:79: 91:da:2f:14:c2:32:bc:45:36:eb:88:cc:24:78:9f: b3:05:7d:c0:9b:1e:6c:76:3b:7f:19:bd:49:ef:96: e8:b5:20:1c:b9:23:cc:e5:4c:ef:9c:45:a5:71:4c: e6:3e:c8:68:c6:31:60:a5:69:82:88:26:6f:a1:3b: a7:72:41:96:0f:25:b4:ad:39:e3:f3:ff:d9:fd:63: ad:32:a6:38:c2:d9:1e:80:66:9f:17:41:3c:82:66: 4b:9d:4c:fe:64:af:54:6e:2c:6f:05:dd:ab:09:d8: 35:f6:ae:ba:bc:bd:fd:9e:c4:b3:ed:d0:fe:c2:78: 19:76:ad:0f:a8:63:c3:a2:d1:ed:22:f7:fc:17:89: 77:12:cf:86:2c:98:31:0e:75:0d:a4:c0:6c:aa:fa: 62:3d:57:f0:26:eb:34:90:40:62:5f:25:ff:5d:b7: 59:20:ed:fd:4c:34:c7:17:9a:fd:e7:49:54:1f:31: c0:93:43:b8:d3:6b:2c:ab:dc:7f:e2:e7:e6:5e:34: 5d:c7:89:50:2d:bd:cb:f0:df:26:c6:98:67:60:47: 0e:82:e4:8e:ea:c5:29:90:73:ae:77:43:2c:9e:d1: 76:53:df:cd:6d:21:dc:c5:01:c7:72:84:7d:c7:43: dc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:FE:27:B0:4D:AD:05:3E:01:5E:A3:50:F0:F1:9D:B0:D4:BB:BF:EF X509v3 Authority Key Identifier: keyid:62:2E:76:62:D9:FB:E1:0C:1A:AE:0B:DF:E9:88:DB:99:6A:E3:FD:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:2c:31:74:60:5e:10:23:55:21:61:0e:4a:46:c1:4c:59:52: 45:53:49:e3:a5:ae:d6:f6:d8:5f:eb:7c:3f:32:87:67:73:ec: a3:e1:c8:64:8a:bf:b8:df:5d:a5:aa:b9:69:13:6c:a4:51:5d: 4b:65:9d:23:02:b0:00:c4:53:8e:e6:6f:c4:82:74:27:45:1e: 76:75:ec:3b:68:01:f1:03:e1:2a:fd:a6:bb:63:b1:71:93:d4: 85:9c:32:35:bc:61:e0:8b:d4:fb:cb:45:33:e7:65:44:64:48: f9:a8:12:7c:31:96:27:30:91:72:53:34:84:58:bb:76:4d:bb: a8:cf:fb:fc:5f:17:b8:71:b7:a0:23:5c:b0:3f:32:88:1f:01: d1:6f:c3:4c:6a:a0:79:23:c8:35:06:2a:a3:46:85:80:2b:15: a0:9c:2d:be:77:5c:93:f6:8d:ce:e8:5f:bf:7f:d5:0c:e6:f2: 70:28:86:e5:19:dd:15:14:58:f2:4c:93:d9:2b:76:b8:3a:f1: 8c:ab:0d:19:bc:da:21:b4:07:19:72:91:21:98:2e:45:46:3d: e3:6a:b1:66:60:93:02:55:e3:98:7a:61:c3:a6:86:51:54:93: cb:9b:4d:4d:a5:e9:d8:45:0a:66:a8:89:e0:ae:10:89:69:3b: 6f:19:23:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJCNzAxMTAvBgNVBAUTKDYyMkU3NjYyRDlGQkUxMEMxQUFFMEJERkU5ODhEQjk5 NkFFM0ZENTkwHhcNMjUxMDE5MDYyODExWhcNMjUxMDI2MDYyODExWjAYMRYwFAYD VQQDEw02OGY0ODRmYi0xODgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAra3dpaxDhUVR1LFiSnmR2i8UwjK8RTbriMwkeJ+zBX3Amx5sdjt/Gb1J75bo tSAcuSPM5UzvnEWlcUzmPshoxjFgpWmCiCZvoTunckGWDyW0rTnj8//Z/WOtMqY4 wtkegGafF0E8gmZLnUz+ZK9UbixvBd2rCdg19q66vL39nsSz7dD+wngZdq0PqGPD otHtIvf8F4l3Es+GLJgxDnUNpMBsqvpiPVfwJus0kEBiXyX/XbdZIO39TDTHF5r9 50lUHzHAk0O402ssq9x/4ufmXjRdx4lQLb3L8N8mxphnYEcOguSO6sUpkHOud0Ms ntF2U9/NbSHcxQHHcoR9x0PcywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFf+J7BN rQU+AV6jUPDxnbDUu7/vMB8GA1UdIwQYMBaAFGIudmLZ++EMGq4L3+mI25lq4/1Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkI3MC9DQ0I0NTRBNDcz QTkxMUVFODQ1MjdGMkVDNEY5QUUwMi9ZaTUyWXRuNzRRd2FyZ3ZmNllqYm1Xcmpf VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lpNTJZdG43NFF3YXJndmY2WWpibVdyal9Way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkI3MC9DQ0I0NTRBNDczQTkxMUVFODQ1MjdGMkVDNEY5QUUwMi9ZaTUyWXRuNzRR d2FyZ3ZmNllqYm1XcmpfVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCELDF0YF4QI1UhYQ5KRsFMWVJFU0njpa7W9thf63w/Modnc+yj4chk ir+4312lqrlpE2ykUV1LZZ0jArAAxFOO5m/EgnQnRR52dew7aAHxA+Eq/aa7Y7Fx k9SFnDI1vGHgi9T7y0Uz52VEZEj5qBJ8MZYnMJFyUzSEWLt2Tbuoz/v8Xxe4cbeg I1ywPzKIHwHRb8NMaqB5I8g1BiqjRoWAKxWgnC2+d1yT9o3O6F+/f9UM5vJwKIbl Gd0VFFjyTJPZK3a4OvGMqw0ZvNohtAcZcpEhmC5FRj3jarFmYJMCVeOYemHDpoZR VJPLm01NpenYRQpmqIngrhCJaTtvGSOC -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:32 2025 by rpki-client