$ rpki-client -vvf rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft File: y7aOmQU8HeJHirvi3_KrzsDRsUg.mft (raw, json) Hash identifier: t5wGzwLYqKEuHDDaV+cIvvgMafKR2JMkhmISoyZAooI= Subject key identifier: 27:82:A5:CF:2B:8F:25:EB:B0:CD:B1:60:16:A0:11:C2:98:28:EC:0D Authority key identifier: CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48 Certificate issuer: /CN=A9149905/serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148 Certificate serial: 34D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft Manifest number: 34D1 Signing time: Sat 18 Oct 2025 15:03:42 +0000 Manifest this update: Sat 18 Oct 2025 15:03:41 +0000 Manifest next update: Sat 25 Oct 2025 15:03:41 +0000 Files and hashes: 1: y7aOmQU8HeJHirvi3_KrzsDRsUg.crl (hash: 6e5IJzoR9RiZYKvFKjmuQS9R8JDj1kaKfdsuu6bXckE=) 2: A6D6CA7E022C11EBAC47A831C4F9AE02.roa (hash: w/zPMK06vnyoVLL/BGNp77uAUStxaD44YXARWWRfkvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.crl rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:03:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13527 (0x34d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149905, serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148 Validity Not Before: Oct 18 15:03:41 2025 GMT Not After : Oct 25 15:03:41 2025 GMT Subject: CN=68f3ac4e-19fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3d:d5:4d:34:1b:64:d7:72:b1:8f:a8:f4:a5: f6:e4:df:59:c4:92:76:e7:10:68:26:60:b3:a9:d0: 66:d1:09:6c:00:54:00:4c:95:1a:44:7e:2c:e4:ac: 03:c2:2b:8d:7f:3b:2c:19:55:e7:2c:49:ae:56:c0: 10:55:54:bf:57:20:8f:2a:73:f3:b8:84:a0:2e:02: ad:43:45:e2:ec:f8:c8:b4:19:01:1a:ae:72:4e:38: 83:34:95:3c:56:e4:03:59:1d:14:c5:0a:1b:cf:50: b3:66:dd:76:b0:02:ea:3b:cd:cc:3d:86:0e:db:a9: 08:98:63:9d:b8:c2:02:c0:c6:c9:5e:8b:a7:d4:d6: 84:5f:60:e7:40:94:0f:d2:13:0f:c8:bd:8c:71:80: 88:bd:51:f2:2f:ec:20:37:d3:69:e9:33:53:84:b4: 1a:c9:e9:91:b2:1e:cd:f1:d5:b9:84:f3:9e:c9:5d: f7:0a:18:d2:73:43:d7:b9:be:5f:c8:3a:60:a1:41: 75:8e:b5:10:b4:3e:0d:0b:73:bc:94:94:d4:f4:47: 45:3f:d7:ea:00:e6:5e:c8:55:9c:dd:3f:c3:f9:fb: d8:44:e6:ab:1f:ff:ae:f0:95:7a:7d:1b:8b:39:da: 3d:e9:3a:55:1b:85:56:f0:2b:73:21:2d:42:d2:fc: b4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:82:A5:CF:2B:8F:25:EB:B0:CD:B1:60:16:A0:11:C2:98:28:EC:0D X509v3 Authority Key Identifier: keyid:CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ad:0e:d6:e0:0c:27:24:04:0d:88:df:41:47:9a:92:5d:ff: 73:06:ea:db:63:77:40:72:88:f5:2a:55:c7:70:26:88:30:6b: 28:88:50:f5:42:11:4a:59:ef:cc:c9:eb:23:8d:d2:15:7e:af: a5:d6:0c:d9:a6:0c:43:6d:b2:7e:73:03:b5:b0:e2:6e:e3:ee: 5f:d0:ee:a4:a5:bb:1d:69:91:19:2d:03:a3:09:b1:7f:12:02: e4:84:0c:5c:f5:6e:b8:0c:3c:02:02:19:69:f8:e4:f1:b9:8f: 86:cf:14:b4:39:99:f8:a1:4f:2d:7c:7b:45:1a:dc:2c:df:64: 08:a9:cf:19:cb:c2:fe:6f:04:c9:b8:cb:10:ed:fc:11:df:c6: 4e:06:c3:13:2b:81:14:98:60:c6:5f:b5:4c:74:0a:65:84:81: 24:23:e5:47:f1:59:87:20:a6:29:e8:be:e1:2c:82:0a:55:e8: 5f:a7:54:0b:45:a4:05:ef:4b:c2:4c:52:f9:8a:77:8b:6d:55: 95:24:dd:c2:c0:78:00:a2:8b:3f:78:da:92:4c:33:3d:c6:88: c3:85:f0:f0:9d:99:24:3b:bb:5f:7e:b2:17:e6:08:59:53:07: 9a:89:23:56:36:11:ce:64:ad:7b:64:f7:19:36:cb:c8:1a:14: d6:18:58:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5MDUxMTAvBgNVBAUTKENCQjY4RTk5MDUzQzFERTI0NzhBQkJFMkRGRjJBQkNF QzBEMUIxNDgwHhcNMjUxMDE4MTUwMzQxWhcNMjUxMDI1MTUwMzQxWjAYMRYwFAYD VQQDEw02OGYzYWM0ZS0xOWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyj3VTTQbZNdysY+o9KX25N9ZxJJ25xBoJmCzqdBm0QlsAFQATJUaRH4s5KwD wiuNfzssGVXnLEmuVsAQVVS/VyCPKnPzuISgLgKtQ0Xi7PjItBkBGq5yTjiDNJU8 VuQDWR0UxQobz1CzZt12sALqO83MPYYO26kImGOduMICwMbJXoun1NaEX2DnQJQP 0hMPyL2McYCIvVHyL+wgN9Np6TNThLQayemRsh7N8dW5hPOeyV33ChjSc0PXub5f yDpgoUF1jrUQtD4NC3O8lJTU9EdFP9fqAOZeyFWc3T/D+fvYROarH/+u8JV6fRuL Odo96TpVG4VW8CtzIS1C0vy0zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCeCpc8r jyXrsM2xYBagEcKYKOwNMB8GA1UdIwQYMBaAFMu2jpkFPB3iR4q74t/yq87A0bFI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTkwNS8zOTREMDY0QTFE OUIxMUUyQkUxMkVGODgwOEIwMkNEMi95N2FPbVFVOEhlSkhpcnZpM19LcnpzRFJz VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3YU9tUVU4SGVKSGlydmkzX0tyenNEUnNVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTkwNS8zOTREMDY0QTFEOUIxMUUyQkUxMkVGODgwOEIwMkNEMi95N2FPbVFVOEhl SkhpcnZpM19LcnpzRFJzVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNrQ7W4AwnJAQNiN9BR5qSXf9zBurbY3dAcoj1KlXHcCaIMGsoiFD1 QhFKWe/MyesjjdIVfq+l1gzZpgxDbbJ+cwO1sOJu4+5f0O6kpbsdaZEZLQOjCbF/ EgLkhAxc9W64DDwCAhlp+OTxuY+GzxS0OZn4oU8tfHtFGtws32QIqc8Zy8L+bwTJ uMsQ7fwR38ZOBsMTK4EUmGDGX7VMdAplhIEkI+VH8VmHIKYp6L7hLIIKVehfp1QL RaQF70vCTFL5ineLbVWVJN3CwHgAoos/eNqSTDM9xojDhfDwnZkkO7tffrIX5ghZ UweaiSNWNhHOZK17ZPcZNsvIGhTWGFjo -----END CERTIFICATE-----Generated at Mon Oct 20 12:43:57 2025 by rpki-client