$ rpki-client -vvf rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft File: yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft (raw, json) Hash identifier: lIZY38J5pgmfxWtUYaKwcGjquWz/6wz0kl/nr3FFGVk= Subject key identifier: 07:90:87:23:56:60:E4:5E:31:F9:1C:23:75:92:97:AA:97:29:B0:73 Authority key identifier: CB:1C:80:B4:03:4B:E4:1B:58:C3:C6:4B:24:A0:8C:D9:C7:7B:96:3B Certificate issuer: /CN=A9162914/serialNumber=CB1C80B4034BE41B58C3C64B24A08CD9C77B963B Certificate serial: 02CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxyAtANL5BtYw8ZLJKCM2cd7ljs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft Manifest number: 02C6 Signing time: Sun 19 Oct 2025 03:34:59 +0000 Manifest this update: Sun 19 Oct 2025 03:34:58 +0000 Manifest next update: Sun 26 Oct 2025 03:34:57 +0000 Files and hashes: 1: yxyAtANL5BtYw8ZLJKCM2cd7ljs.crl (hash: 7lXH9dQ7xBAdlAB30r9s9Zh1ZqNHfFELpG/zk6gFUm0=) 2: 755581D40D7E11EDA9F2CA4AC4F9AE02.roa (hash: L/OoYrYOhuGJMFdRgAmm9owGHD6xvG0PlHjA2AQlTLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.crl rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxyAtANL5BtYw8ZLJKCM2cd7ljs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 716 (0x2cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162914, serialNumber=CB1C80B4034BE41B58C3C64B24A08CD9C77B963B Validity Not Before: Oct 19 03:34:58 2025 GMT Not After : Oct 26 03:34:57 2025 GMT Subject: CN=68f45c62-5918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:29:6e:1d:9a:a3:82:f7:70:a4:00:5e:ab:b4: f4:f6:58:e3:37:d2:b3:ef:19:f8:89:2d:02:cb:32: 30:6a:77:32:a1:3b:29:cf:cd:55:6b:b4:7f:dd:b2: 8e:aa:bb:a3:28:71:40:7c:2b:73:a9:c5:6f:c1:d5: c6:64:63:1d:9c:fc:40:bb:74:a0:25:7e:35:8f:48: 03:84:3d:6d:27:2a:39:09:60:f1:d4:d1:ee:67:54: aa:2a:8d:08:9c:6e:b1:9f:48:40:24:0a:d2:c4:c2: 1a:f5:67:3f:39:fb:6c:67:22:39:2d:58:71:c8:a2: 28:4c:7d:e2:cf:21:ac:fe:44:ae:56:c7:e9:a7:81: 3f:f9:fc:75:fc:88:b2:15:b6:88:39:1c:85:9b:c4: d3:c0:a8:29:52:28:6c:1d:66:c2:a7:5c:3c:85:8e: f5:6c:be:6d:ff:1d:9d:4e:67:14:d7:89:53:98:22: 9a:85:1e:e1:d3:70:8d:05:47:10:5d:b3:4c:42:3f: c2:78:82:6d:3a:af:ea:b3:c4:96:5c:ef:1f:5d:a2: 72:38:c5:f5:84:d0:ed:94:44:97:47:b6:4d:0f:9e: 73:2a:96:4c:90:52:4e:51:64:2b:f1:31:0b:e6:1a: 19:04:d7:3e:0e:6c:bb:5c:14:e8:8e:49:0e:c0:0a: 6d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:90:87:23:56:60:E4:5E:31:F9:1C:23:75:92:97:AA:97:29:B0:73 X509v3 Authority Key Identifier: keyid:CB:1C:80:B4:03:4B:E4:1B:58:C3:C6:4B:24:A0:8C:D9:C7:7B:96:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxyAtANL5BtYw8ZLJKCM2cd7ljs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption eb:f2:66:c9:13:01:82:32:66:d2:43:a4:b4:4a:41:31:78:47: 47:41:1b:ac:94:d8:3f:c2:29:fa:be:5b:17:77:04:24:a2:5c: 49:35:62:f7:e9:c6:7a:75:bf:63:e0:e2:0d:1e:18:78:13:10: 60:73:06:c9:7f:12:0d:47:af:9f:92:19:0d:b8:54:f5:b4:59: 2d:80:a4:9d:c5:62:51:e0:ac:96:fa:cf:11:be:26:c7:9b:e1: d6:95:08:e5:d4:e6:f3:a1:21:ea:74:3e:e2:b7:93:7a:23:72: f9:d6:2c:fa:8c:49:87:4e:db:07:10:61:87:0b:2e:de:48:38: 9a:9c:e6:29:c5:98:b1:d4:42:48:cd:3e:5b:ce:3f:de:ef:17: ca:23:bb:c3:98:32:78:6d:ca:ed:92:0b:94:38:a4:3a:b7:8e: 4c:8a:c1:5f:4a:28:c3:54:c6:c3:83:59:d4:b0:a3:e6:6f:23: 0d:7f:a8:6a:99:e0:ca:4e:18:46:d0:b9:39:8b:ea:a7:09:57: 56:6a:78:5f:e6:96:46:4e:e5:ea:f9:e0:c8:82:12:b9:c0:10: 8e:d2:23:32:77:d7:af:01:bf:0f:94:ca:36:3d:dd:46:70:c9: 9f:0e:f2:f5:59:ad:43:83:38:01:1b:1b:1b:fc:a6:be:d2:bc: 68:c2:f5:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI5MTQxMTAvBgNVBAUTKENCMUM4MEI0MDM0QkU0MUI1OEMzQzY0QjI0QTA4Q0Q5 Qzc3Qjk2M0IwHhcNMjUxMDE5MDMzNDU4WhcNMjUxMDI2MDMzNDU3WjAYMRYwFAYD VQQDEw02OGY0NWM2Mi01OTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArSluHZqjgvdwpABeq7T09ljjN9Kz7xn4iS0CyzIwancyoTspz81Va7R/3bKO qrujKHFAfCtzqcVvwdXGZGMdnPxAu3SgJX41j0gDhD1tJyo5CWDx1NHuZ1SqKo0I nG6xn0hAJArSxMIa9Wc/OftsZyI5LVhxyKIoTH3izyGs/kSuVsfpp4E/+fx1/Iiy FbaIORyFm8TTwKgpUihsHWbCp1w8hY71bL5t/x2dTmcU14lTmCKahR7h03CNBUcQ XbNMQj/CeIJtOq/qs8SWXO8fXaJyOMX1hNDtlESXR7ZND55zKpZMkFJOUWQr8TEL 5hoZBNc+Dmy7XBTojkkOwAptpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAeQhyNW YOReMfkcI3WSl6qXKbBzMB8GA1UdIwQYMBaAFMscgLQDS+QbWMPGSySgjNnHe5Y7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjkxNC9ENjZDOTNGQzBE NzYxMUVEODJBQkUyNENDNEY5QUUwMi95eHlBdEFOTDVCdFl3OFpMSktDTTJjZDds anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l4eUF0QU5MNUJ0WXc4WkxKS0NNMmNkN2xqcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjkxNC9ENjZDOTNGQzBENzYxMUVEODJBQkUyNENDNEY5QUUwMi95eHlBdEFOTDVC dFl3OFpMSktDTTJjZDdsanMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDr8mbJEwGCMmbSQ6S0SkExeEdHQRuslNg/win6vlsXdwQkolxJNWL3 6cZ6db9j4OINHhh4ExBgcwbJfxINR6+fkhkNuFT1tFktgKSdxWJR4KyW+s8RvibH m+HWlQjl1ObzoSHqdD7it5N6I3L51iz6jEmHTtsHEGGHCy7eSDianOYpxZix1EJI zT5bzj/e7xfKI7vDmDJ4bcrtkguUOKQ6t45MisFfSijDVMbDg1nUsKPmbyMNf6hq meDKThhG0Lk5i+qnCVdWanhf5pZGTuXq+eDIghK5wBCO0iMyd9evAb8PlMo2Pd1G cMmfDvL1Wa1DgzgBGxsb/Ka+0rxowvXI -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:24 2025 by rpki-client