$ rpki-client -vvf rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft File: y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft (raw, json) Hash identifier: xVd+YCKinTxBwhlg2GTMXtcqCM9UkG0wf5xTsUon5/A= Subject key identifier: 48:62:99:9F:1E:35:A4:62:65:80:D1:37:58:2F:79:A2:B4:75:DD:E5 Authority key identifier: CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 Certificate issuer: /CN=A9159FAF/serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Certificate serial: 0187 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft Manifest number: 017F Signing time: Sun 19 Oct 2025 06:24:32 +0000 Manifest this update: Sun 19 Oct 2025 06:24:32 +0000 Manifest next update: Sun 26 Oct 2025 06:24:32 +0000 Files and hashes: 1: y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl (hash: RI1K0OAhfNdMjJ7+W5FsyCftXXFpWQj4CvEkyuq0jXA=) 2: A910F37297CE11F0885B0A30C4F9AE02.roa (hash: cQK647yMwwLX45q9mOT0EIccACxOtmPbIGvaw9w+/pc=) 3: B752E03A97CE11F0ADE43030C4F9AE02.roa (hash: UlT/oF85OcS2SKCUgl+PsPTlbGKhNl+SEibXUqkYmEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 391 (0x187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159FAF, serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Validity Not Before: Oct 19 06:24:32 2025 GMT Not After : Oct 26 06:24:32 2025 GMT Subject: CN=68f48420-5107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:70:ac:53:c0:92:68:ed:95:5e:1d:bc:60:cf: b9:85:aa:c6:80:72:94:1e:a9:30:fc:1e:33:bd:cc: f2:16:7a:90:60:93:2a:d7:2b:63:4b:7d:1c:ad:af: 4e:04:4d:85:f0:7a:10:b2:f9:73:2c:72:ea:55:56: 4a:b5:d5:9a:be:e3:62:ef:b5:6f:f7:d6:12:12:b4: 44:65:5f:81:ae:f8:5b:e9:95:a2:70:cb:0e:28:02: 14:50:2f:02:8b:ba:9a:98:51:c2:d9:24:2b:dd:3c: ec:c5:96:a9:ce:c7:2a:11:7e:bf:80:73:19:7f:b2: 5e:dd:28:6a:0f:6b:71:e8:21:80:d7:41:95:4d:2c: b6:8d:8b:39:f1:5e:87:eb:ea:4b:1d:b5:15:5c:0a: a3:28:f2:f4:f8:4f:bc:0a:31:56:71:9a:cb:5c:ac: 82:3a:18:b5:35:0c:fa:f4:42:f5:04:6c:35:b8:98: 9b:ee:13:11:23:1c:38:d9:c5:3d:9f:30:4d:5d:35: 82:8d:4f:a1:a2:1d:57:69:aa:a7:55:f2:b7:54:52: fd:d1:c4:46:66:43:b1:13:a8:b1:10:23:a0:72:19: e2:53:2d:ca:ea:4b:30:9a:5e:75:65:60:e5:f8:0c: 33:cc:e3:4f:06:40:4a:bb:6f:46:f5:52:bb:a5:75: 07:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:62:99:9F:1E:35:A4:62:65:80:D1:37:58:2F:79:A2:B4:75:DD:E5 X509v3 Authority Key Identifier: keyid:CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:b3:a5:5b:23:9f:90:a2:b0:06:93:07:1b:7d:21:23:ad:e2: 4a:26:0d:24:c7:25:d5:6e:3f:7a:b3:26:e8:53:7c:80:b3:bd: 6e:b0:60:2c:7b:d5:e1:39:42:56:da:ea:be:ac:3e:f5:09:5e: a6:d1:75:ce:d4:bb:33:7a:3e:27:b0:de:d8:7d:1d:4f:94:3a: db:7c:36:5f:6f:8b:c3:61:3d:ac:b3:a6:24:69:3c:3e:2b:dc: 99:45:b5:cd:78:47:e1:c0:ec:cd:69:0a:a4:f6:92:34:87:0b: ee:90:56:ee:34:4c:1f:56:5b:5c:61:c5:18:34:ad:46:9d:4c: d5:c6:db:ac:68:68:59:18:f1:e4:32:63:75:40:de:9f:c1:d5: cf:d6:78:b7:52:21:46:e7:d2:33:e8:2d:72:5a:a0:ba:09:6b: 6d:b7:a0:95:28:a7:37:39:1a:63:99:cc:ca:95:d3:2f:b8:e4: c0:ed:cf:71:e9:ef:6d:92:90:f3:95:9c:d7:08:64:32:fd:00: 3c:a8:fc:09:90:b7:f8:6d:25:18:9d:c9:51:6f:cd:1c:18:f2: df:4b:e7:ad:96:fd:41:99:ba:23:5b:42:e5:8c:85:7d:1b:c8: 45:dc:93:5a:47:28:9f:80:22:6f:62:8b:0b:34:c9:2e:1d:b8: a0:56:e6:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlGQUYxMTAvBgNVBAUTKENCRUM2RjE4MzkwNTQ4NzUyMUM3OTQ3QjRGN0JGRDZD Qjc4REE0NzkwHhcNMjUxMDE5MDYyNDMyWhcNMjUxMDI2MDYyNDMyWjAYMRYwFAYD VQQDEw02OGY0ODQyMC01MTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArHCsU8CSaO2VXh28YM+5harGgHKUHqkw/B4zvczyFnqQYJMq1ytjS30cra9O BE2F8HoQsvlzLHLqVVZKtdWavuNi77Vv99YSErREZV+Brvhb6ZWicMsOKAIUUC8C i7qamFHC2SQr3TzsxZapzscqEX6/gHMZf7Je3ShqD2tx6CGA10GVTSy2jYs58V6H 6+pLHbUVXAqjKPL0+E+8CjFWcZrLXKyCOhi1NQz69EL1BGw1uJib7hMRIxw42cU9 nzBNXTWCjU+hoh1XaaqnVfK3VFL90cRGZkOxE6ixECOgchniUy3K6kswml51ZWDl +AwzzONPBkBKu29G9VK7pXUHHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhimZ8e NaRiZYDRN1gveaK0dd3lMB8GA1UdIwQYMBaAFMvsbxg5BUh1IceUe097/Wy3jaR5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUZBRi8xMjk1NzVDNDZF NDIxMUVFQUI0QzlDNkNDNEY5QUUwMi95LXh2R0RrRlNIVWh4NVI3VDN2OWJMZU5w SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kteHZHRGtGU0hVaHg1UjdUM3Y5YkxlTnBIay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUZBRi8xMjk1NzVDNDZFNDIxMUVFQUI0QzlDNkNDNEY5QUUwMi95LXh2R0RrRlNI VWh4NVI3VDN2OWJMZU5wSGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAts6VbI5+QorAGkwcbfSEjreJKJg0kxyXVbj96syboU3yAs71usGAs e9XhOUJW2uq+rD71CV6m0XXO1Lszej4nsN7YfR1PlDrbfDZfb4vDYT2ss6YkaTw+ K9yZRbXNeEfhwOzNaQqk9pI0hwvukFbuNEwfVltcYcUYNK1GnUzVxtusaGhZGPHk MmN1QN6fwdXP1ni3UiFG59Iz6C1yWqC6CWttt6CVKKc3ORpjmczKldMvuOTA7c9x 6e9tkpDzlZzXCGQy/QA8qPwJkLf4bSUYnclRb80cGPLfS+etlv1BmbojW0LljIV9 G8hF3JNaRyifgCJvYosLNMkuHbigVubG -----END CERTIFICATE-----Generated at Mon Oct 20 08:03:54 2025 by rpki-client