$ rpki-client -vvf rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft File: _Yje-aa92-pZOJ7cYXGq3KEGtQk.mft (raw, json) Hash identifier: FJt6zC8w33aCG86FNFIMUs40Ef4qrUjb7vJKnHR8VAU= Subject key identifier: BF:A1:67:51:3B:13:E3:89:82:E7:93:B7:5D:4A:23:65:74:DE:01:71 Authority key identifier: FD:88:DE:F9:A6:BD:DB:EA:59:38:9E:DC:61:71:AA:DC:A1:06:B5:09 Certificate issuer: /CN=A9172FC5/serialNumber=FD88DEF9A6BDDBEA59389EDC6171AADCA106B509 Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft Manifest number: A8 Signing time: Sun 19 Oct 2025 09:23:11 +0000 Manifest this update: Sun 19 Oct 2025 09:23:10 +0000 Manifest next update: Sun 26 Oct 2025 09:23:10 +0000 Files and hashes: 1: _Yje-aa92-pZOJ7cYXGq3KEGtQk.crl (hash: GprIAEenpcWzD0AiAXH7Z40jYzyDJZo+gJwilZBDtvc=) 2: 2D810A88AB4011EF849D9515C4F9AE02.roa (hash: Y+fJ5KK7IVdhYlyuLVkF2P1TQN/5/+n0ri0WCyCm2Xk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.crl rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172FC5, serialNumber=FD88DEF9A6BDDBEA59389EDC6171AADCA106B509 Validity Not Before: Oct 19 09:23:10 2025 GMT Not After : Oct 26 09:23:10 2025 GMT Subject: CN=68f4adff-c920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:05:e0:2e:81:7d:77:98:7a:86:c8:8f:52:fd: 9d:b4:d9:25:87:65:98:21:b2:b4:de:8c:a3:05:fa: d2:fc:89:2f:05:aa:c5:19:ec:d5:19:f5:d2:6b:8f: 22:b1:4b:03:b5:92:2d:65:87:28:f7:f2:83:d9:5b: d4:d3:26:6c:cd:e8:70:03:69:fa:0a:6d:4e:27:f5: 4b:69:2d:b5:f9:ef:ea:36:18:5a:93:0a:77:6b:38: ea:02:21:d1:83:9e:2b:39:24:94:73:02:9c:a5:cf: 3b:20:20:15:84:8a:af:84:11:ae:ac:82:5d:f1:c2: 8e:3a:ea:4c:f2:28:09:63:9e:b5:98:a5:54:1f:20: 6c:34:99:dc:e9:cf:c7:5a:4d:cf:62:da:c6:77:d2: 1f:b1:f0:6d:cc:65:f9:68:80:0b:1a:7c:3d:3c:32: de:3a:96:ab:1a:43:a1:05:8b:ff:38:fc:2b:0a:5d: 96:9c:66:db:04:a2:2a:00:8d:d1:89:47:16:ff:ab: 10:cd:72:82:ae:79:4f:3c:b3:c3:4b:3f:6a:e4:64: 71:20:b7:4b:b2:45:56:68:16:a2:5b:a2:01:33:29: f7:17:ab:f0:53:9b:65:58:72:bd:75:ef:4a:49:f3: ff:47:2b:49:d6:08:38:e5:b5:1d:10:ba:2f:2c:03: 6d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A1:67:51:3B:13:E3:89:82:E7:93:B7:5D:4A:23:65:74:DE:01:71 X509v3 Authority Key Identifier: keyid:FD:88:DE:F9:A6:BD:DB:EA:59:38:9E:DC:61:71:AA:DC:A1:06:B5:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:c6:2e:a8:4d:8e:2f:f0:d4:46:78:01:dc:74:e2:53:77:ac: 05:ac:c4:3c:d9:c2:02:e3:70:9e:5e:db:90:d3:6e:ce:3a:03: 51:a1:a8:4e:3c:5f:de:77:e2:6d:e6:9f:d4:3b:5d:5d:e4:bd: 38:cc:13:79:39:f4:8d:eb:19:68:b0:96:6c:41:8c:e6:94:32: c9:ac:23:e7:ca:e0:f4:35:42:6b:a3:25:fa:67:e7:b7:03:90: 63:28:6b:48:d4:54:c2:f2:b5:12:99:66:c0:bc:18:30:ce:5c: e4:11:79:42:d4:bd:cf:22:2e:df:68:ee:09:c9:32:d4:e5:f5: 95:29:8d:58:a7:4a:e2:c6:a5:4d:22:41:04:6a:0e:48:d9:37: ef:94:39:68:bb:d7:f0:01:62:34:13:a4:d7:fa:0e:69:95:ed: 90:9e:b5:95:79:09:37:85:02:ef:f3:9e:50:3f:3a:a7:6f:e4: 11:f6:35:85:2d:5e:dc:68:fb:23:c4:25:9b:2f:6a:52:49:5b: 52:a1:5d:fe:bc:18:bb:11:88:0a:05:e3:04:91:cf:5e:0d:92: 9b:f3:f9:47:8e:de:0f:ce:60:64:a5:d3:f9:6f:21:ca:51:c0: 05:7a:c8:ff:79:3d:23:9f:b1:44:a6:38:fc:b5:79:76:68:b2: 4e:de:c5:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJGQzUxMTAvBgNVBAUTKEZEODhERUY5QTZCRERCRUE1OTM4OUVEQzYxNzFBQURD QTEwNkI1MDkwHhcNMjUxMDE5MDkyMzEwWhcNMjUxMDI2MDkyMzEwWjAYMRYwFAYD VQQDEw02OGY0YWRmZi1jOTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgXgLoF9d5h6hsiPUv2dtNklh2WYIbK03oyjBfrS/IkvBarFGezVGfXSa48i sUsDtZItZYco9/KD2VvU0yZszehwA2n6Cm1OJ/VLaS21+e/qNhhakwp3azjqAiHR g54rOSSUcwKcpc87ICAVhIqvhBGurIJd8cKOOupM8igJY561mKVUHyBsNJnc6c/H Wk3PYtrGd9IfsfBtzGX5aIALGnw9PDLeOparGkOhBYv/OPwrCl2WnGbbBKIqAI3R iUcW/6sQzXKCrnlPPLPDSz9q5GRxILdLskVWaBaiW6IBMyn3F6vwU5tlWHK9de9K SfP/RytJ1gg45bUdELovLANtoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+hZ1E7 E+OJgueTt11KI2V03gFxMB8GA1UdIwQYMBaAFP2I3vmmvdvqWTie3GFxqtyhBrUJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkZDNS9FREFCRDIzMEFC M0YxMUVGQkUwMkNGMTRDNEY5QUUwMi9fWWplLWFhOTItcFpPSjdjWVhHcTNLRUd0 UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19ZamUtYWE5Mi1wWk9KN2NZWEdxM0tFR3RRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkZDNS9FREFCRDIzMEFCM0YxMUVGQkUwMkNGMTRDNEY5QUUwMi9fWWplLWFhOTIt cFpPSjdjWVhHcTNLRUd0UWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOxi6oTY4v8NRGeAHcdOJTd6wFrMQ82cIC43CeXtuQ027OOgNRoahO PF/ed+Jt5p/UO11d5L04zBN5OfSN6xlosJZsQYzmlDLJrCPnyuD0NUJroyX6Z+e3 A5BjKGtI1FTC8rUSmWbAvBgwzlzkEXlC1L3PIi7faO4JyTLU5fWVKY1Yp0rixqVN IkEEag5I2TfvlDlou9fwAWI0E6TX+g5ple2QnrWVeQk3hQLv855QPzqnb+QR9jWF LV7caPsjxCWbL2pSSVtSoV3+vBi7EYgKBeMEkc9eDZKb8/lHjt4PzmBkpdP5byHK UcAFesj/eT0jn7FEpjj8tXl2aLJO3sWB -----END CERTIFICATE-----Generated at Mon Oct 20 01:49:17 2025 by rpki-client