$ rpki-client -vvf rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft File: YfjH66e1XnGy5rF3QJFCUdiM8KY.mft (raw, json) Hash identifier: Awsc022fOhcXdHhf3BFVY/K923eqDvIkghsPr4qiqEg= Subject key identifier: 25:15:3A:86:72:A4:16:D4:DE:AB:EE:68:DC:69:DE:70:C2:A2:40:95 Authority key identifier: 61:F8:C7:EB:A7:B5:5E:71:B2:E6:B1:77:40:91:42:51:D8:8C:F0:A6 Certificate issuer: /CN=A9158491/serialNumber=61F8C7EBA7B55E71B2E6B17740914251D88CF0A6 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft Manifest number: 95 Signing time: Sun 19 Oct 2025 09:53:23 +0000 Manifest this update: Sun 19 Oct 2025 09:53:22 +0000 Manifest next update: Sun 26 Oct 2025 09:53:22 +0000 Files and hashes: 1: YfjH66e1XnGy5rF3QJFCUdiM8KY.crl (hash: tL3eepwoqaR8COaFMi+w98YOXYboc/pGQxLiBHwAPEs=) 2: 5FDDEE1CE34211EF8EA0CA77C4F9AE02.roa (hash: mzE4Rj9TzgxYoPFC7hLQmMNdU4o1ATX8k/0uu+bhb9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.crl rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:53:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158491, serialNumber=61F8C7EBA7B55E71B2E6B17740914251D88CF0A6 Validity Not Before: Oct 19 09:53:22 2025 GMT Not After : Oct 26 09:53:22 2025 GMT Subject: CN=68f4b513-41a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3a:4e:e7:8c:7d:24:54:8a:c3:26:eb:03:15: 25:f9:ad:a7:55:1a:9a:18:c2:96:a7:a5:77:d2:f6: c2:53:cb:0b:29:58:0d:d2:25:d2:a7:bc:2d:ff:b9: e7:5f:3e:8b:77:71:66:99:95:b0:f2:02:02:3f:be: c2:07:68:0c:0a:0a:a5:d4:89:e0:a1:9f:43:fb:08: 55:14:90:21:3c:3e:e6:a3:04:48:86:37:e4:21:13: 10:2a:8b:fe:f1:58:ca:e9:b0:45:7d:d8:65:d9:65: 27:93:94:75:67:06:d6:0e:e5:45:a4:e3:57:73:00: f0:f7:04:1b:eb:89:08:99:27:26:95:17:28:a8:2c: ea:29:73:86:99:0d:b6:03:4a:b0:cd:fa:c4:c4:94: e0:50:de:be:24:00:dd:74:f2:52:3f:e1:b3:35:c3: 04:f8:f5:48:32:7d:51:b1:05:8a:32:2c:20:b7:50: 9a:49:f2:72:69:3e:1d:b5:9a:a7:71:4d:e6:0c:16: 0c:f6:4b:25:d8:df:22:57:f5:46:17:5b:38:15:9a: 79:46:94:b5:d4:85:34:22:7b:9c:64:3b:57:ef:ad: ef:78:d3:56:30:6f:8e:23:bd:9d:4b:a1:09:ed:ff: 11:de:ee:15:0b:f2:e1:7c:0e:69:1b:f2:8b:75:71: 7e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:15:3A:86:72:A4:16:D4:DE:AB:EE:68:DC:69:DE:70:C2:A2:40:95 X509v3 Authority Key Identifier: keyid:61:F8:C7:EB:A7:B5:5E:71:B2:E6:B1:77:40:91:42:51:D8:8C:F0:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfjH66e1XnGy5rF3QJFCUdiM8KY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158491/60DA53FADFA511EF8BD49F87C4F9AE02/YfjH66e1XnGy5rF3QJFCUdiM8KY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:f5:45:87:ed:bf:f4:78:24:d0:4c:be:5f:9c:fc:fa:84:19: 34:19:58:4d:e0:e6:b6:db:da:2a:a5:a7:e0:40:66:c2:91:68: bf:7a:c5:24:5d:63:02:16:aa:40:84:4e:94:46:ef:4b:dd:c6: 49:29:39:ad:84:94:a0:1f:a4:07:91:11:88:dc:f0:68:d1:59: 91:ac:83:01:f7:ea:a1:3d:63:85:dc:ab:72:d5:c5:32:86:8b: 1e:74:a5:04:a2:1a:4b:28:b9:b4:08:28:c6:d3:b3:77:96:f7: 58:06:69:bc:04:ca:b9:1f:e5:3a:3f:0c:4f:3c:46:8c:ff:34: 33:9e:bb:95:52:4e:ba:3b:de:1a:de:71:c9:4c:76:c2:71:fe: 65:f1:df:2c:03:42:8b:94:87:71:ea:90:1b:16:df:14:0d:b5: d5:f8:2a:d6:84:0e:78:a0:62:a6:40:bc:cf:2b:c1:25:eb:fe: 10:2e:57:a3:85:d7:39:13:f5:f2:59:37:1b:c9:ee:23:3c:0e: 94:50:3d:7a:bd:9b:ed:94:6b:e2:5e:b7:52:d9:7b:44:e8:e3: d8:47:59:ca:b3:7a:ef:49:e2:cc:ff:e5:39:49:d0:a3:33:d6: 90:89:54:54:ab:c7:c7:75:9e:5f:1d:0d:f7:a8:fe:83:5d:ae: dc:39:24:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg0OTExMTAvBgNVBAUTKDYxRjhDN0VCQTdCNTVFNzFCMkU2QjE3NzQwOTE0MjUx RDg4Q0YwQTYwHhcNMjUxMDE5MDk1MzIyWhcNMjUxMDI2MDk1MzIyWjAYMRYwFAYD VQQDEw02OGY0YjUxMy00MWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4DpO54x9JFSKwybrAxUl+a2nVRqaGMKWp6V30vbCU8sLKVgN0iXSp7wt/7nn Xz6Ld3FmmZWw8gICP77CB2gMCgql1IngoZ9D+whVFJAhPD7mowRIhjfkIRMQKov+ 8VjK6bBFfdhl2WUnk5R1ZwbWDuVFpONXcwDw9wQb64kImScmlRcoqCzqKXOGmQ22 A0qwzfrExJTgUN6+JADddPJSP+GzNcME+PVIMn1RsQWKMiwgt1CaSfJyaT4dtZqn cU3mDBYM9ksl2N8iV/VGF1s4FZp5RpS11IU0InucZDtX763veNNWMG+OI72dS6EJ 7f8R3u4VC/LhfA5pG/KLdXF+EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCUVOoZy pBbU3qvuaNxp3nDCokCVMB8GA1UdIwQYMBaAFGH4x+untV5xsuaxd0CRQlHYjPCm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODQ5MS82MERBNTNGQURG QTUxMUVGOEJENDlGODdDNEY5QUUwMi9ZZmpINjZlMVhuR3k1ckYzUUpGQ1VkaU04 S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lmakg2NmUxWG5HeTVyRjNRSkZDVWRpTThLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODQ5MS82MERBNTNGQURGQTUxMUVGOEJENDlGODdDNEY5QUUwMi9ZZmpINjZlMVhu R3k1ckYzUUpGQ1VkaU04S1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa9UWH7b/0eCTQTL5fnPz6hBk0GVhN4Oa229oqpafgQGbCkWi/esUk XWMCFqpAhE6URu9L3cZJKTmthJSgH6QHkRGI3PBo0VmRrIMB9+qhPWOF3Kty1cUy hosedKUEohpLKLm0CCjG07N3lvdYBmm8BMq5H+U6PwxPPEaM/zQznruVUk66O94a 3nHJTHbCcf5l8d8sA0KLlIdx6pAbFt8UDbXV+CrWhA54oGKmQLzPK8El6/4QLlej hdc5E/XyWTcbye4jPA6UUD16vZvtlGviXrdS2XtE6OPYR1nKs3rvSeLM/+U5SdCj M9aQiVRUq8fHdZ5fHQ33qP6DXa7cOSRK -----END CERTIFICATE-----Generated at Tue Oct 21 02:24:54 2025 by rpki-client