$ rpki-client -vvf rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.mft File: YCgZkDDJlCoUSqFr-zB450H27CM.mft (raw, json) Hash identifier: 3sSF7uJEKxVItZC2sof0gXBkXt8yVviXojR21e1hh2A= Subject key identifier: B2:4E:2A:65:AD:7E:AB:BB:CD:E9:63:75:CC:C8:C0:A1:FB:0B:2F:A2 Authority key identifier: 60:28:19:90:30:C9:94:2A:14:4A:A1:6B:FB:30:78:E7:41:F6:EC:23 Certificate issuer: /CN=A9175D4F/serialNumber=6028199030C9942A144AA16BFB3078E741F6EC23 Certificate serial: 0A4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCgZkDDJlCoUSqFr-zB450H27CM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.mft Manifest number: 0A3F Signing time: Sat 18 Oct 2025 20:41:58 +0000 Manifest this update: Sat 18 Oct 2025 20:41:57 +0000 Manifest next update: Sat 25 Oct 2025 20:41:57 +0000 Files and hashes: 1: YCgZkDDJlCoUSqFr-zB450H27CM.crl (hash: iak16ubxpzGAgqdn1eBq1s72hwOW6JJskx6Ox1jgDTg=) 2: 5D2B0616A9C011EABAAB4624C4F9AE02.roa (hash: WJcxZE//v/qgwM5L8UFDfgSzlZEjCMButWifhGqcTAY=) 3: 5C1CF19EA9C011EABAAB4624C4F9AE02.roa (hash: 6/x/Fge5uH5YfUQOVxF7eyYbzP45tBqEPaICPxzEb2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.crl rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCgZkDDJlCoUSqFr-zB450H27CM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:41:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2639 (0xa4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175D4F, serialNumber=6028199030C9942A144AA16BFB3078E741F6EC23 Validity Not Before: Oct 18 20:41:57 2025 GMT Not After : Oct 25 20:41:57 2025 GMT Subject: CN=68f3fb95-759c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:96:5f:33:48:cf:4d:3b:b6:90:af:33:04:dd: c6:34:de:b1:10:20:43:e2:35:a1:36:3c:8e:54:7c: d1:34:f8:6a:b3:92:d2:fe:89:41:30:97:7e:c0:39: 81:9e:bb:f3:07:e2:95:39:fe:c5:bb:65:5d:5d:53: 9e:aa:e6:db:fb:1b:96:f1:3f:e4:b5:5e:6f:bb:85: c9:e9:24:3d:1b:62:8b:d9:6f:a1:27:59:8b:4f:62: 06:36:2f:6a:a6:25:c2:3e:07:a0:31:6c:66:ae:f6: 2c:47:77:a5:b3:a5:ef:be:3e:91:9a:41:86:c1:dd: d9:1d:8b:af:61:80:ff:b7:8b:ab:ac:f7:e4:5e:ad: b3:ff:57:70:35:79:0d:0f:c6:d8:b7:53:1d:ad:00: 9e:3c:7c:cf:a3:cd:bc:62:3d:8b:eb:6a:ec:6f:d6: cd:13:99:0d:05:d1:24:e0:e6:2c:1d:2e:f2:83:ff: f1:58:1e:92:d2:6e:fc:4c:17:54:f4:57:84:09:60: 55:28:97:e3:91:7a:11:7f:f7:2f:f1:13:9b:bd:be: bb:a9:fd:b7:6a:42:1c:ab:ed:2b:0a:b1:e0:c1:45: 88:fa:a2:02:8a:9b:5d:05:62:b4:a3:9e:6a:47:aa: 8f:0f:a0:dc:3e:bc:44:44:86:ba:db:ef:5a:a5:f6: 84:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:4E:2A:65:AD:7E:AB:BB:CD:E9:63:75:CC:C8:C0:A1:FB:0B:2F:A2 X509v3 Authority Key Identifier: keyid:60:28:19:90:30:C9:94:2A:14:4A:A1:6B:FB:30:78:E7:41:F6:EC:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCgZkDDJlCoUSqFr-zB450H27CM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:67:61:62:de:74:29:cb:d1:9c:7c:24:f1:b0:02:8f:dc:bd: b7:ae:f4:de:16:f8:bd:d8:89:d8:4c:20:a2:a2:85:00:2b:f9: 66:fd:f7:b7:fa:dc:c4:87:82:4d:b8:45:f1:a5:dc:dd:44:76: 76:16:e4:13:6b:a6:72:0a:1c:bf:f3:89:9b:fa:af:73:ef:e5: f1:61:2c:6c:e3:d9:aa:ce:64:6e:fc:5c:35:88:0b:ed:21:8f: df:0c:6b:3d:53:15:fe:bc:eb:3f:20:2a:6a:25:17:de:4c:5d: 6c:89:07:cb:94:5c:fb:82:18:58:99:93:1d:60:73:df:4f:d4: 4c:aa:47:fc:66:7f:23:fa:4e:1e:f7:0c:33:58:b8:cb:43:d3: d2:83:1a:c7:c6:7c:2b:6f:ef:9a:f4:7a:c5:ac:8d:1c:90:e2: 87:af:90:e2:bd:87:7a:67:b3:f6:e4:10:cf:e1:74:26:be:a4: ee:f4:d0:14:c2:0a:db:21:17:bc:bd:6a:83:f6:38:fc:11:da: bd:6a:c2:fe:56:72:73:6a:80:19:9f:47:dc:2e:e6:b0:ca:e7: f2:85:63:55:90:60:3a:5b:0d:4c:48:60:59:b6:85:b0:07:92: b1:60:d6:61:eb:44:08:d1:0c:44:47:c8:27:8d:ee:21:93:57: 26:cd:52:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVENEYxMTAvBgNVBAUTKDYwMjgxOTkwMzBDOTk0MkExNDRBQTE2QkZCMzA3OEU3 NDFGNkVDMjMwHhcNMjUxMDE4MjA0MTU3WhcNMjUxMDI1MjA0MTU3WjAYMRYwFAYD VQQDEw02OGYzZmI5NS03NTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJZfM0jPTTu2kK8zBN3GNN6xECBD4jWhNjyOVHzRNPhqs5LS/olBMJd+wDmB nrvzB+KVOf7Fu2VdXVOequbb+xuW8T/ktV5vu4XJ6SQ9G2KL2W+hJ1mLT2IGNi9q piXCPgegMWxmrvYsR3els6Xvvj6RmkGGwd3ZHYuvYYD/t4urrPfkXq2z/1dwNXkN D8bYt1MdrQCePHzPo828Yj2L62rsb9bNE5kNBdEk4OYsHS7yg//xWB6S0m78TBdU 9FeECWBVKJfjkXoRf/cv8RObvb67qf23akIcq+0rCrHgwUWI+qICiptdBWK0o55q R6qPD6DcPrxERIa62+9apfaEeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLJOKmWt fqu7zeljdczIwKH7Cy+iMB8GA1UdIwQYMBaAFGAoGZAwyZQqFEqha/sweOdB9uwj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUQ0Ri81ODVGNEQwRTc4 NzkxMUVBQUVCQTNCMzhDNEY5QUUwMi9ZQ2daa0RESmxDb1VTcUZyLXpCNDUwSDI3 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lDZ1prRERKbENvVVNxRnItekI0NTBIMjdDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUQ0Ri81ODVGNEQwRTc4NzkxMUVBQUVCQTNCMzhDNEY5QUUwMi9ZQ2daa0RESmxD b1VTcUZyLXpCNDUwSDI3Q00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0Z2Fi3nQpy9GcfCTxsAKP3L23rvTeFvi92InYTCCiooUAK/lm/fe3 +tzEh4JNuEXxpdzdRHZ2FuQTa6ZyChy/84mb+q9z7+XxYSxs49mqzmRu/Fw1iAvt IY/fDGs9UxX+vOs/ICpqJRfeTF1siQfLlFz7ghhYmZMdYHPfT9RMqkf8Zn8j+k4e 9wwzWLjLQ9PSgxrHxnwrb++a9HrFrI0ckOKHr5DivYd6Z7P25BDP4XQmvqTu9NAU wgrbIRe8vWqD9jj8Edq9asL+VnJzaoAZn0fcLuawyufyhWNVkGA6Ww1MSGBZtoWw B5KxYNZh60QI0QxER8gnje4hk1cmzVLo -----END CERTIFICATE-----Generated at Mon Oct 20 09:37:30 2025 by rpki-client