$ rpki-client -vvf rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft File: DYxttID--Lv1xosdQ5bdhfWTwUY.mft (raw, json) Hash identifier: YlN9vOC6vuYzl26XUWWNCBqmgv/gaDEzeBcfz7BtYK0= Subject key identifier: 9B:D8:DA:50:07:75:45:FD:0A:19:60:92:FE:41:76:9F:6D:6F:34:3B Authority key identifier: 0D:8C:6D:B4:80:FE:F8:BB:F5:C6:8B:1D:43:96:DD:85:F5:93:C1:46 Certificate issuer: /CN=A9150A44/serialNumber=0D8C6DB480FEF8BBF5C68B1D4396DD85F593C146 Certificate serial: 1193 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft Manifest number: 1189 Signing time: Mon 20 Oct 2025 17:39:47 +0000 Manifest this update: Mon 20 Oct 2025 17:39:46 +0000 Manifest next update: Mon 27 Oct 2025 17:39:46 +0000 Files and hashes: 1: DYxttID--Lv1xosdQ5bdhfWTwUY.crl (hash: fk5w/C/1vmaEZGVFp78YFA1ackJIAJtV0k8GMUHaGco=) 2: 9F3D07940A3D11E9A4A5D873C4F9AE02.roa (hash: Spm004TXuVGOEFLldkv6JM6JGz/wok2Xo213QhmJOo4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.crl rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:39:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4499 (0x1193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150A44, serialNumber=0D8C6DB480FEF8BBF5C68B1D4396DD85F593C146 Validity Not Before: Oct 20 17:39:46 2025 GMT Not After : Oct 27 17:39:46 2025 GMT Subject: CN=68f673e3-116b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1c:bc:64:b5:8b:80:1e:84:2b:2c:ff:8a:e5: 1f:13:84:50:c5:42:41:e8:27:f4:00:52:e1:96:2d: cd:a1:c1:bc:40:5a:90:d8:e7:8d:19:c6:7a:20:91: ce:de:33:04:44:c3:fd:90:16:b9:1d:ae:77:34:3d: ae:99:ba:41:e8:2d:24:3c:6b:c5:eb:a9:5c:a4:86: 51:60:a0:47:06:15:e2:14:6b:24:57:49:9b:34:c9: 84:8d:e3:44:c3:fb:40:b2:d8:13:63:ca:e4:e5:94: 2d:0e:45:ad:09:ab:97:81:52:97:b0:9b:3a:53:15: 56:1f:52:a8:44:3a:32:f6:5c:f9:19:b1:76:0e:21: 35:71:19:84:35:5c:61:ae:b1:8c:77:13:3a:d1:41: 1b:b7:bf:88:63:d9:5c:35:42:7d:40:c7:5f:c9:35: 29:84:63:1d:20:87:9a:61:db:49:da:31:5c:c4:af: 89:65:e9:57:18:06:4f:c0:73:2d:98:52:0b:5b:b2: fc:be:4c:ed:bb:31:2f:42:f6:4d:6c:bf:71:87:00: f5:15:30:a8:3f:df:2f:f9:dd:04:d2:89:b7:58:40: 4f:60:5f:d6:1c:f3:cd:e7:9f:8b:ec:5e:f9:a2:77: 4d:1c:da:f0:1f:96:3d:89:a4:02:8e:fb:8e:3b:68: ca:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D8:DA:50:07:75:45:FD:0A:19:60:92:FE:41:76:9F:6D:6F:34:3B X509v3 Authority Key Identifier: keyid:0D:8C:6D:B4:80:FE:F8:BB:F5:C6:8B:1D:43:96:DD:85:F5:93:C1:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:02:a2:a3:fa:85:6e:7a:05:c0:e6:62:57:ad:3b:fb:79:2a: e9:3c:78:30:f3:62:ba:ff:df:4e:e0:d8:71:90:b5:ba:41:2a: 59:7d:3c:4c:46:5f:2d:48:13:d7:4b:ec:1e:64:93:78:4d:b4: 2b:eb:c8:b3:83:d1:be:65:84:6e:95:b4:d9:5c:a2:b8:a7:c6: a6:8a:3f:e3:25:f3:9e:81:f3:cb:59:28:fe:ff:26:41:8d:21: 55:35:19:a0:e3:78:c7:ee:26:f9:59:1c:e6:d5:48:18:22:fd: 0b:cf:bb:a4:32:f8:35:28:78:b2:e3:92:f9:58:b4:31:4a:8b: 01:1a:8d:b4:d1:7f:f7:28:bf:d1:61:fb:d1:ad:01:32:6d:fb: 8d:d8:b6:9c:ab:85:8b:d1:d9:46:5b:b4:4e:83:f3:c2:4c:2f: 8e:40:3e:2c:19:8e:13:24:03:ca:3e:7f:bb:ba:fe:dc:fd:ee: e2:e5:30:41:2a:52:f1:b6:84:cf:25:9c:db:e6:dc:06:b8:9f: f5:30:e0:6c:fb:ed:b0:90:c0:68:2b:d8:34:d3:65:49:cc:64: a3:92:80:e0:4e:fa:21:41:2f:4c:4b:22:26:53:e4:96:bc:43: 1b:c1:ae:29:16:a1:19:e3:22:22:7f:c0:ea:73:60:b9:18:a1: 87:51:c5:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBBNDQxMTAvBgNVBAUTKDBEOEM2REI0ODBGRUY4QkJGNUM2OEIxRDQzOTZERDg1 RjU5M0MxNDYwHhcNMjUxMDIwMTczOTQ2WhcNMjUxMDI3MTczOTQ2WjAYMRYwFAYD VQQDEw02OGY2NzNlMy0xMTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoRy8ZLWLgB6EKyz/iuUfE4RQxUJB6Cf0AFLhli3NocG8QFqQ2OeNGcZ6IJHO 3jMERMP9kBa5Ha53ND2umbpB6C0kPGvF66lcpIZRYKBHBhXiFGskV0mbNMmEjeNE w/tAstgTY8rk5ZQtDkWtCauXgVKXsJs6UxVWH1KoRDoy9lz5GbF2DiE1cRmENVxh rrGMdxM60UEbt7+IY9lcNUJ9QMdfyTUphGMdIIeaYdtJ2jFcxK+JZelXGAZPwHMt mFILW7L8vkztuzEvQvZNbL9xhwD1FTCoP98v+d0E0om3WEBPYF/WHPPN55+L7F75 ondNHNrwH5Y9iaQCjvuOO2jK/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvY2lAH dUX9Chlgkv5Bdp9tbzQ7MB8GA1UdIwQYMBaAFA2MbbSA/vi79caLHUOW3YX1k8FG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEE0NC83Mzk3NzVDRTBB MzQxMUU5OEVFODcxNUVDNEY5QUUwMi9EWXh0dElELS1MdjF4b3NkUTViZGhmV1R3 VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RZeHR0SUQtLUx2MXhvc2RRNWJkaGZXVHdVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEE0NC83Mzk3NzVDRTBBMzQxMUU5OEVFODcxNUVDNEY5QUUwMi9EWXh0dElELS1M djF4b3NkUTViZGhmV1R3VVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2AqKj+oVuegXA5mJXrTv7eSrpPHgw82K6/99O4NhxkLW6QSpZfTxM Rl8tSBPXS+weZJN4TbQr68izg9G+ZYRulbTZXKK4p8amij/jJfOegfPLWSj+/yZB jSFVNRmg43jH7ib5WRzm1UgYIv0Lz7ukMvg1KHiy45L5WLQxSosBGo200X/3KL/R YfvRrQEybfuN2Lacq4WL0dlGW7ROg/PCTC+OQD4sGY4TJAPKPn+7uv7c/e7i5TBB KlLxtoTPJZzb5twGuJ/1MOBs++2wkMBoK9g002VJzGSjkoDgTvohQS9MSyImU+SW vEMbwa4pFqEZ4yIif8Dqc2C5GKGHUcXm -----END CERTIFICATE-----Generated at Tue Oct 21 03:15:18 2025 by rpki-client