$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft File: yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft (raw, json) Hash identifier: x0okgGbjOHt+0FNpX4/HrmwBa2eHcnicLaiWiQYaoRY= Subject key identifier: A8:C1:3C:5D:5E:A0:DD:50:77:B6:49:09:A5:1F:7A:B4:59:33:37:A2 Authority key identifier: C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E Certificate issuer: /CN=A9147B4B/serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft Manifest number: 93 Signing time: Sun 19 Oct 2025 09:43:27 +0000 Manifest this update: Sun 19 Oct 2025 09:43:26 +0000 Manifest next update: Sun 26 Oct 2025 09:43:26 +0000 Files and hashes: 1: yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl (hash: 47+1xVKkNdyC7Dsi5VELXv4wlxdUcxWNEzF1Pz2C0uU=) 2: C4B41888CF3911EFBA26F564C4F9AE02.roa (hash: GeuC23bQErzKdp21604gyKYVikutfo5J7NTb8XiSV2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147B4B, serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E Validity Not Before: Oct 19 09:43:26 2025 GMT Not After : Oct 26 09:43:26 2025 GMT Subject: CN=68f4b2bf-9e92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4b:59:76:ee:bb:b4:c9:39:21:81:98:f1:0b: 9f:cb:b3:a9:7f:12:e0:89:a5:ff:22:6c:31:e7:a8: 4a:cc:91:93:9d:a5:8e:f5:bc:f5:69:1b:f7:7c:b8: e0:dd:26:4f:35:6e:c7:17:e9:81:ae:f1:42:7d:4c: 6f:33:aa:e9:96:85:f7:5c:b3:a5:64:e5:56:f6:d4: 5a:b3:4e:b1:4e:f9:1b:fa:99:90:7b:de:ae:d1:7a: f8:2b:d6:32:84:31:8a:5f:02:05:bf:05:dd:6c:11: 27:d5:25:f0:cc:8a:59:3a:a3:fa:7a:26:de:cc:f5: bb:bb:97:36:ce:08:4a:cc:43:ab:c9:f2:c0:c5:3b: 5d:74:67:aa:76:c9:ee:73:2b:6a:a0:6a:35:93:a0: b9:e2:52:4f:9f:36:12:69:2a:d2:5d:64:e1:33:51: 4b:b9:b5:5f:4e:a5:32:26:b6:dd:ce:d1:b7:d7:4f: 1d:31:c9:b5:ce:6b:b2:1d:dc:eb:bd:4b:7a:b0:b1: 20:4b:54:4f:da:12:06:9c:03:b7:9d:63:00:f4:e4: df:9e:d8:05:6b:ed:51:cc:ff:ae:4d:0c:5f:29:78: f7:12:ce:11:b9:d8:e8:d3:c1:29:10:e0:95:a1:53: 3c:7f:1c:03:9e:99:99:16:34:ed:46:bb:6d:88:5c: e8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C1:3C:5D:5E:A0:DD:50:77:B6:49:09:A5:1F:7A:B4:59:33:37:A2 X509v3 Authority Key Identifier: keyid:C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:16:f5:fb:69:b4:3a:58:14:62:b4:d0:55:7e:f9:0c:39:79: 1e:14:1c:af:38:b3:0e:22:61:f3:79:1b:21:98:e6:9c:fb:5a: 95:17:71:6c:4e:72:c3:17:9f:3b:df:7c:05:62:27:97:c5:60: af:70:51:89:cf:b5:23:ab:8a:68:17:f2:a1:aa:47:55:7b:2e: bc:77:87:42:27:43:6b:35:09:1a:59:fd:d0:a1:bc:57:e5:60: 29:ea:9b:28:5f:86:ee:13:de:d5:66:fd:76:44:57:43:86:61: 09:16:34:fe:2e:bd:de:70:f8:e7:b1:c4:52:8a:8e:ee:ff:37: 18:a0:2a:37:72:08:7c:0f:e4:79:6e:54:58:0c:76:6e:4e:a2: e1:71:c7:db:18:c5:ba:58:2a:60:e5:30:6c:ae:7f:e8:f1:17: 0d:fe:92:52:0a:24:b8:f7:31:cd:54:88:7f:0d:0f:53:0e:0b: b6:e6:ee:ac:e1:32:47:20:e0:20:0b:a4:4e:76:8b:3d:68:e0: 43:c8:f7:d6:9d:4e:63:c8:38:2e:47:9a:61:5e:74:61:00:08: 51:bd:68:ed:b4:3a:20:5f:e8:32:95:75:67:58:bf:33:a3:0a: 2e:fd:1a:7a:bb:47:7c:4f:02:f5:dd:7f:d5:92:a5:36:5f:17: d7:0f:19:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCNEIxMTAvBgNVBAUTKEM4NzdDREYyMkQyNUI2RTMzRkM1RTQ5NUJFNTVFNTlE MEE5NDk4N0UwHhcNMjUxMDE5MDk0MzI2WhcNMjUxMDI2MDk0MzI2WjAYMRYwFAYD VQQDEw02OGY0YjJiZi05ZTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3UtZdu67tMk5IYGY8Qufy7OpfxLgiaX/Imwx56hKzJGTnaWO9bz1aRv3fLjg 3SZPNW7HF+mBrvFCfUxvM6rploX3XLOlZOVW9tRas06xTvkb+pmQe96u0Xr4K9Yy hDGKXwIFvwXdbBEn1SXwzIpZOqP6eibezPW7u5c2zghKzEOryfLAxTtddGeqdsnu cytqoGo1k6C54lJPnzYSaSrSXWThM1FLubVfTqUyJrbdztG3108dMcm1zmuyHdzr vUt6sLEgS1RP2hIGnAO3nWMA9OTfntgFa+1RzP+uTQxfKXj3Es4Rudjo08EpEOCV oVM8fxwDnpmZFjTtRrttiFzovwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjBPF1e oN1Qd7ZJCaUferRZMzeiMB8GA1UdIwQYMBaAFMh3zfItJbbjP8Xklb5V5Z0KlJh+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0I0Qi9FMTU2QTA0Q0NG MzgxMUVGODQ4NEU5MkZDNEY5QUUwMi95SGZOOGkwbHR1TV94ZVNWdmxYbG5RcVVt SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lIZk44aTBsdHVNX3hlU1Z2bFhsblFxVW1INC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0I0Qi9FMTU2QTA0Q0NGMzgxMUVGODQ4NEU5MkZDNEY5QUUwMi95SGZOOGkwbHR1 TV94ZVNWdmxYbG5RcVVtSDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdFvX7abQ6WBRitNBVfvkMOXkeFByvOLMOImHzeRshmOac+1qVF3Fs TnLDF58733wFYieXxWCvcFGJz7Ujq4poF/KhqkdVey68d4dCJ0NrNQkaWf3QobxX 5WAp6psoX4buE97VZv12RFdDhmEJFjT+Lr3ecPjnscRSio7u/zcYoCo3cgh8D+R5 blRYDHZuTqLhccfbGMW6WCpg5TBsrn/o8RcN/pJSCiS49zHNVIh/DQ9TDgu25u6s 4TJHIOAgC6ROdos9aOBDyPfWnU5jyDguR5phXnRhAAhRvWjttDogX+gylXVnWL8z owou/Rp6u0d8TwL13X/VkqU2XxfXDxnS -----END CERTIFICATE-----Generated at Mon Oct 20 13:40:45 2025 by rpki-client