$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft File: YmmU0Zdivg-YhPpO8NymbD9TAqg.mft (raw, json) Hash identifier: v3zJ6wmq8qOjVbYx9CRu0cQp4D7uc3y5rD9MF6baf48= Subject key identifier: 75:C5:26:F6:13:C2:FC:B8:9C:E5:BC:12:8D:F1:BE:E8:76:68:8C:B6 Authority key identifier: 62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8 Certificate issuer: /CN=A9157E6E/serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8 Certificate serial: 1BAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft Manifest number: 1BA5 Signing time: Sat 18 Oct 2025 16:35:11 +0000 Manifest this update: Sat 18 Oct 2025 16:35:11 +0000 Manifest next update: Sat 25 Oct 2025 16:35:11 +0000 Files and hashes: 1: YmmU0Zdivg-YhPpO8NymbD9TAqg.crl (hash: /nTTI0bzA9PiGqujtgp6Cy6slgJdi8BHkn79Pv6ohYk=) 2: B8F865A2147B11E7B5BEC457C4F9AE02.roa (hash: CIx5a/KDORd4MxJLQ+psYC26naN8iQLI+AuxYnr9L/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7087 (0x1baf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157E6E, serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8 Validity Not Before: Oct 18 16:35:11 2025 GMT Not After : Oct 25 16:35:11 2025 GMT Subject: CN=68f3c1bf-d188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:06:51:76:2e:3f:5b:a8:69:46:1f:f8:13:bf: 89:7c:20:17:90:4e:4d:12:07:16:17:de:41:e8:15: c0:ff:3e:22:ab:e4:8f:c8:82:12:1f:c8:df:d6:88: eb:98:79:e4:49:f1:10:da:a7:ac:16:2d:9c:8a:ea: 7c:c7:03:fd:ac:7f:aa:06:a2:f9:60:1d:9a:dd:5b: 6e:77:31:1b:e2:d8:6b:ab:a9:bc:38:33:a7:88:7c: d1:63:7c:08:c0:e6:15:08:5e:f0:54:df:c8:6c:a4: 69:be:15:6a:aa:30:00:aa:07:15:86:12:e7:27:17: 95:7f:27:1e:d0:c4:95:55:56:db:e1:33:9e:d5:ff: fd:06:9b:7d:bb:52:28:a6:45:80:b9:42:75:7a:16: 89:b0:af:78:6b:77:a3:c4:3c:08:41:ac:76:ef:00: d5:a6:65:04:11:30:28:5a:27:d0:5a:2d:65:70:9e: f9:9d:d8:6f:62:29:f9:a9:b7:be:e7:d7:40:91:d3: ca:3b:58:4c:19:42:e7:80:d9:ef:a9:bc:b7:90:a6: 40:4e:0f:aa:5c:36:8d:52:31:d5:96:8e:39:b7:e9: b3:a3:58:83:0d:76:a2:a2:e3:f1:99:89:3d:31:c8: fc:06:e8:50:f3:cd:de:21:25:d7:73:dd:23:0e:ba: f1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:C5:26:F6:13:C2:FC:B8:9C:E5:BC:12:8D:F1:BE:E8:76:68:8C:B6 X509v3 Authority Key Identifier: keyid:62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:11:61:79:94:38:4a:b8:7e:7a:b4:b3:8f:eb:12:bb:40:78: df:5b:50:f3:1d:f4:04:2e:a4:f0:e0:a4:10:ba:ba:a6:26:6e: 6a:a6:03:f9:98:42:e0:0b:54:63:26:a8:79:d3:a0:c1:69:e9: 5f:c2:64:be:5d:ff:05:ac:3e:d5:b3:d6:8e:b8:d4:d9:6a:4d: 81:7a:c6:2c:62:27:7c:fa:7e:e3:bd:88:2a:55:97:f6:a4:7f: bb:70:8d:15:3f:32:61:0b:66:99:eb:7b:bd:00:3f:84:f5:c3: 0a:d3:8a:99:93:18:e4:18:db:a1:43:8e:16:97:62:50:22:7c: 8a:8d:f5:fc:ba:b3:3d:b8:94:af:dd:b3:95:52:ce:dc:de:a6: b3:ef:dd:d7:10:bf:1f:ff:6c:0b:4f:fe:46:ae:77:4e:29:79: ae:42:d5:27:1b:3a:54:a1:7e:05:99:5e:12:02:86:3a:57:b9: 16:f2:0c:5f:65:ac:5b:b2:d2:5f:1f:d8:e3:ca:41:d0:02:56: 67:7e:be:51:0f:fd:0e:df:e8:e7:14:68:5e:fd:c0:22:d6:cc: 1e:02:14:5e:70:10:fc:07:ce:33:9e:58:39:b6:e8:26:66:c2: 00:34:41:05:b6:fe:7b:aa:0f:aa:02:b6:de:93:d9:29:26:88: b1:c9:e2:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdFNkUxMTAvBgNVBAUTKDYyNjk5NEQxOTc2MkJFMEY5ODg0RkE0RUYwRENBNjZD M0Y1MzAyQTgwHhcNMjUxMDE4MTYzNTExWhcNMjUxMDI1MTYzNTExWjAYMRYwFAYD VQQDEw02OGYzYzFiZi1kMTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4AZRdi4/W6hpRh/4E7+JfCAXkE5NEgcWF95B6BXA/z4iq+SPyIISH8jf1ojr mHnkSfEQ2qesFi2ciup8xwP9rH+qBqL5YB2a3VtudzEb4thrq6m8ODOniHzRY3wI wOYVCF7wVN/IbKRpvhVqqjAAqgcVhhLnJxeVfyce0MSVVVbb4TOe1f/9Bpt9u1Io pkWAuUJ1ehaJsK94a3ejxDwIQax27wDVpmUEETAoWifQWi1lcJ75ndhvYin5qbe+ 59dAkdPKO1hMGULngNnvqby3kKZATg+qXDaNUjHVlo45t+mzo1iDDXaiouPxmYk9 Mcj8BuhQ883eISXXc90jDrrxVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHXFJvYT wvy4nOW8Eo3xvuh2aIy2MB8GA1UdIwQYMBaAFGJplNGXYr4PmIT6TvDcpmw/UwKo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0U2RS84MzBDNjk3MDBE RUIxMUU3OTc3MUI2NjZDNEY5QUUwMi9ZbW1VMFpkaXZnLVloUHBPOE55bWJEOVRB cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ltbVUwWmRpdmctWWhQcE84TnltYkQ5VEFxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0U2RS84MzBDNjk3MDBERUIxMUU3OTc3MUI2NjZDNEY5QUUwMi9ZbW1VMFpkaXZn LVloUHBPOE55bWJEOVRBcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsEWF5lDhKuH56tLOP6xK7QHjfW1DzHfQELqTw4KQQurqmJm5qpgP5 mELgC1RjJqh506DBaelfwmS+Xf8FrD7Vs9aOuNTZak2BesYsYid8+n7jvYgqVZf2 pH+7cI0VPzJhC2aZ63u9AD+E9cMK04qZkxjkGNuhQ44Wl2JQInyKjfX8urM9uJSv 3bOVUs7c3qaz793XEL8f/2wLT/5GrndOKXmuQtUnGzpUoX4FmV4SAoY6V7kW8gxf ZaxbstJfH9jjykHQAlZnfr5RD/0O3+jnFGhe/cAi1sweAhRecBD8B84znlg5tugm ZsIANEEFtv57qg+qArbek9kpJoixyeJ5 -----END CERTIFICATE-----Generated at Mon Oct 20 16:35:30 2025 by rpki-client