$ rpki-client -vvf rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft File: YDL2P9JhaBpA9zC5eHJR5jMozW4.mft (raw, json) Hash identifier: tYW6fI0DwxQE3w7DMUNm398NRBE4VIIOoqARlI3sIBA= Subject key identifier: 4B:EF:84:81:5E:7A:C6:23:A0:D3:47:B8:81:E5:4F:9B:DD:E7:B7:CE Authority key identifier: 60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E Certificate issuer: /CN=A9155098/serialNumber=6032F63FD261681A40F730B9787251E63328CD6E Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft Manifest number: 0121 Signing time: Sun 19 Oct 2025 07:40:23 +0000 Manifest this update: Sun 19 Oct 2025 07:40:23 +0000 Manifest next update: Sun 26 Oct 2025 07:40:23 +0000 Files and hashes: 1: YDL2P9JhaBpA9zC5eHJR5jMozW4.crl (hash: Hu3tXbnfeQxO7kaXtbPlKSvK+Z9XnX1czC2Z7kyaobs=) 2: 2FA6E74C0E0511F0971F7328C4F9AE02.roa (hash: ZuV1m3RVCFuLNu5PVZ3hMbWj1JgqSl1bBNnQdfczgAE=) 3: 8A27B986FFB811EFB6E16425C4F9AE02.roa (hash: g20Eco9SaLOp8CUCQLbxBAHWlc3BxmlgHVHA64eMjfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155098, serialNumber=6032F63FD261681A40F730B9787251E63328CD6E Validity Not Before: Oct 19 07:40:23 2025 GMT Not After : Oct 26 07:40:23 2025 GMT Subject: CN=68f495e7-6af7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c6:be:73:7d:6a:06:0a:d0:d9:6f:38:5e:fe: fd:e7:b2:5d:87:44:84:96:da:dd:44:6f:52:1b:43: 3b:ea:73:e8:6b:4f:bb:73:c8:81:bb:5e:68:4b:cb: 56:99:0d:98:3a:f1:75:89:84:e9:e9:ce:ec:c8:21: f3:80:0e:05:d0:84:03:a0:86:24:55:ba:02:9d:9d: f6:79:3f:6b:b6:ea:e6:03:64:ca:37:02:77:f8:1e: 5a:2a:94:24:36:ed:24:a4:1c:70:a6:8d:31:8f:e7: 87:9e:5b:f2:f7:d2:f8:70:a8:fd:3a:52:a4:bd:75: 0f:8c:32:39:55:45:65:d3:2e:74:a9:10:a4:61:95: 60:20:e4:2a:38:0b:5d:a7:fb:fb:f9:3f:11:96:40: e4:87:e0:26:18:8f:84:c6:6e:ba:82:ac:76:14:5c: ed:0b:72:3d:c9:da:b2:15:72:ac:b2:c4:7f:e6:50: 13:de:07:27:bd:2b:dc:a4:2e:6b:bb:b2:de:f5:82: 19:9f:b7:4f:4b:ce:92:4b:69:7b:05:a8:8a:38:10: a7:93:39:10:72:ff:aa:08:ce:5b:ad:a9:c5:2d:43: ce:15:d3:7c:1b:ca:5e:55:8c:61:b7:c3:c4:3e:96: 68:f9:c9:6f:f8:0f:d9:4c:f4:78:3c:2e:99:f3:a2: 1e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:EF:84:81:5E:7A:C6:23:A0:D3:47:B8:81:E5:4F:9B:DD:E7:B7:CE X509v3 Authority Key Identifier: keyid:60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:82:86:02:25:16:c7:41:54:56:ac:e0:9d:0d:90:d8:5a:b5: 67:37:bc:8f:c4:da:4b:77:a3:9b:d4:b0:d3:4b:b5:ba:93:d0: 11:76:2d:dd:77:f2:56:90:b0:b6:5f:74:94:e5:25:12:b0:04: 19:04:8e:ab:af:28:13:13:8c:5f:33:86:d5:74:0e:c1:96:25: b1:0f:cd:1e:3d:dd:3b:97:f5:43:22:3b:67:4f:a1:b0:98:b9: 09:aa:4e:25:45:c3:8d:d0:82:0d:a7:27:cf:2c:b3:a2:b4:64: 93:4a:f1:91:c7:f1:1f:0f:08:b4:08:73:48:8f:de:83:af:a2: 93:17:2c:10:20:1a:2c:3f:d3:48:8d:fc:cc:b0:97:d0:5f:81: 15:02:29:34:b1:7f:3f:84:38:5c:b3:62:76:b3:9a:88:34:f3: c3:ef:a2:3c:be:95:da:f5:ef:d5:e0:a7:17:4f:d0:7c:2f:ac: 2b:5d:3d:02:79:5f:ee:c1:1b:5a:73:fb:fb:6a:77:52:a6:74: 41:50:9c:60:eb:9e:e7:3c:2d:87:a5:fb:b9:7d:a4:7e:b3:dd: a3:c4:17:9f:de:b3:8a:5b:a9:26:c3:bd:90:db:38:78:21:86: da:5f:05:9f:a4:8f:92:0b:75:7c:77:32:1a:df:e4:af:6f:8a: 67:83:b4:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUwOTgxMTAvBgNVBAUTKDYwMzJGNjNGRDI2MTY4MUE0MEY3MzBCOTc4NzI1MUU2 MzMyOENENkUwHhcNMjUxMDE5MDc0MDIzWhcNMjUxMDI2MDc0MDIzWjAYMRYwFAYD VQQDEw02OGY0OTVlNy02YWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz8a+c31qBgrQ2W84Xv7957Jdh0SEltrdRG9SG0M76nPoa0+7c8iBu15oS8tW mQ2YOvF1iYTp6c7syCHzgA4F0IQDoIYkVboCnZ32eT9rturmA2TKNwJ3+B5aKpQk Nu0kpBxwpo0xj+eHnlvy99L4cKj9OlKkvXUPjDI5VUVl0y50qRCkYZVgIOQqOAtd p/v7+T8RlkDkh+AmGI+Exm66gqx2FFztC3I9ydqyFXKsssR/5lAT3gcnvSvcpC5r u7Le9YIZn7dPS86SS2l7BaiKOBCnkzkQcv+qCM5branFLUPOFdN8G8peVYxht8PE PpZo+clv+A/ZTPR4PC6Z86Ie1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEvvhIFe esYjoNNHuIHlT5vd57fOMB8GA1UdIwQYMBaAFGAy9j/SYWgaQPcwuXhyUeYzKM1u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTA5OC9CMkIxQTJCOEZD NzExMUVFQkRDQzRCNTNDNEY5QUUwMi9ZREwyUDlKaGFCcEE5ekM1ZUhKUjVqTW96 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lETDJQOUpoYUJwQTl6QzVlSEpSNWpNb3pXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTA5OC9CMkIxQTJCOEZDNzExMUVFQkRDQzRCNTNDNEY5QUUwMi9ZREwyUDlKaGFC cEE5ekM1ZUhKUjVqTW96VzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQgoYCJRbHQVRWrOCdDZDYWrVnN7yPxNpLd6Ob1LDTS7W6k9ARdi3d d/JWkLC2X3SU5SUSsAQZBI6rrygTE4xfM4bVdA7BliWxD80ePd07l/VDIjtnT6Gw mLkJqk4lRcON0IINpyfPLLOitGSTSvGRx/EfDwi0CHNIj96Dr6KTFywQIBosP9NI jfzMsJfQX4EVAik0sX8/hDhcs2J2s5qINPPD76I8vpXa9e/V4KcXT9B8L6wrXT0C eV/uwRtac/v7andSpnRBUJxg657nPC2Hpfu5faR+s92jxBef3rOKW6kmw72Q2zh4 IYbaXwWfpI+SC3V8dzIa3+Svb4png7Qf -----END CERTIFICATE-----Generated at Mon Oct 20 08:55:28 2025 by rpki-client