$ rpki-client -vvf rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.mft File: Y_oABiYdnkzUkFkG5UOWlL5ie7E.mft (raw, json) Hash identifier: qeF5+zojLoJthrBR2AIak/rKJl30qbRbakihZX+FC/w= Subject key identifier: 21:1B:32:13:A1:07:0F:ED:9F:87:50:B8:17:37:08:F1:D4:0A:B4:16 Authority key identifier: 63:FA:00:06:26:1D:9E:4C:D4:90:59:06:E5:43:96:94:BE:62:7B:B1 Certificate issuer: /CN=A9178F62/serialNumber=63FA0006261D9E4CD4905906E5439694BE627BB1 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_oABiYdnkzUkFkG5UOWlL5ie7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.mft Manifest number: 3A Signing time: Sun 19 Oct 2025 11:03:55 +0000 Manifest this update: Sun 19 Oct 2025 11:03:54 +0000 Manifest next update: Sun 26 Oct 2025 11:03:54 +0000 Files and hashes: 1: Y_oABiYdnkzUkFkG5UOWlL5ie7E.crl (hash: PLc2YyUfe0+iNa2XnUbBuWAJHe4O8yhIi6B3BROUluk=) 2: 8EA5A6E28C7D11F0B0706F1EC4F9AE02.roa (hash: EVLtvEiDogBu3QcVhxjleJTDGMs7gXBmi6TLdVrRV/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.crl rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_oABiYdnkzUkFkG5UOWlL5ie7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178F62, serialNumber=63FA0006261D9E4CD4905906E5439694BE627BB1 Validity Not Before: Oct 19 11:03:54 2025 GMT Not After : Oct 26 11:03:54 2025 GMT Subject: CN=68f4c59b-7eb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9c:61:be:0b:98:7f:34:b4:c1:34:d5:1f:f6: ac:44:28:96:53:e7:e9:55:61:d8:5b:63:23:7c:ce: b1:64:5c:13:92:3a:66:3c:d6:9a:f8:be:27:f5:99: 4f:8b:69:6b:97:7d:a7:dd:75:7b:9e:2f:73:9c:14: 8e:10:e6:14:f6:01:50:e0:b7:56:76:7d:93:56:65: 8c:45:34:f6:c1:57:ee:92:64:49:65:62:63:c3:2e: 36:6d:32:f1:c4:b6:4a:ca:9c:e5:ce:4b:16:b3:6e: 84:fb:27:8d:03:20:be:cd:bd:c4:ac:74:00:63:a7: cb:58:fb:dc:cb:46:fa:cc:2d:80:91:b2:8a:fc:01: e8:a6:0c:2b:ec:4d:00:e1:51:b7:31:7a:7e:ea:26: c9:5d:21:a2:d4:20:bc:75:25:70:9e:8e:fd:38:a1: 7c:da:bb:d1:2b:29:4a:9c:2f:e9:42:42:e2:d6:3f: 1a:05:52:f9:96:26:32:98:b2:46:45:06:5b:bc:6c: fa:2a:45:20:6d:0d:14:40:d7:c1:fb:53:23:78:5f: 61:68:ed:88:8a:5c:e0:fb:76:e4:fb:9c:78:08:77: e7:53:47:15:a8:00:ec:b3:cd:11:61:7b:00:8f:b4: a0:35:22:ea:7b:44:75:87:84:10:c4:a8:46:e0:be: db:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:1B:32:13:A1:07:0F:ED:9F:87:50:B8:17:37:08:F1:D4:0A:B4:16 X509v3 Authority Key Identifier: keyid:63:FA:00:06:26:1D:9E:4C:D4:90:59:06:E5:43:96:94:BE:62:7B:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_oABiYdnkzUkFkG5UOWlL5ie7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:41:7d:ca:f0:68:25:1d:2f:4f:e0:5b:7a:fa:8c:d1:f6:00: fc:2d:c5:f3:49:5e:ad:84:45:ff:5f:75:7a:de:b1:d5:76:b7: 0e:ec:12:38:3a:c8:4e:21:ec:da:88:e4:b5:49:d9:68:8d:46: db:35:d8:4a:5a:55:d4:37:93:b1:0e:fb:54:c1:3c:19:ab:0d: b2:36:29:90:42:b3:68:fa:94:05:a7:dd:a2:e1:40:97:a8:63: ab:7e:38:99:46:eb:4e:3d:ab:91:9d:96:27:fa:e1:01:0e:9d: 55:5e:83:5c:87:1c:14:ca:63:b9:92:b5:df:0e:35:1b:9b:01: d5:5d:44:7c:3a:10:6d:c0:f7:79:a3:49:62:d2:96:32:62:47: 55:07:b6:f6:bb:1e:8c:3e:d1:c5:26:79:5e:37:64:54:d4:be: c7:0c:64:0d:5f:24:20:1f:e4:fb:85:2a:ae:07:f3:af:57:91: b8:72:0a:29:d5:00:aa:27:e7:ca:56:1b:a5:67:4c:07:a4:5f: 55:15:83:c2:69:a1:85:36:4c:7c:f9:71:2e:ce:80:a9:21:87: 27:14:4c:28:86:2c:d8:bf:7f:c3:77:c2:e9:91:10:02:90:b0: 73:eb:01:2b:1e:14:58:17:54:59:29:52:17:67:65:72:30:66: ca:4c:74:7a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OEY2MjExMC8GA1UEBRMoNjNGQTAwMDYyNjFEOUU0Q0Q0OTA1OTA2RTU0Mzk2OTRC RTYyN0JCMTAeFw0yNTEwMTkxMTAzNTRaFw0yNTEwMjYxMTAzNTRaMBgxFjAUBgNV BAMTDTY4ZjRjNTliLTdlYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQnGG+C5h/NLTBNNUf9qxEKJZT5+lVYdhbYyN8zrFkXBOSOmY81pr4vif1mU+L aWuXfafddXueL3OcFI4Q5hT2AVDgt1Z2fZNWZYxFNPbBV+6SZEllYmPDLjZtMvHE tkrKnOXOSxazboT7J40DIL7NvcSsdABjp8tY+9zLRvrMLYCRsor8AeimDCvsTQDh Ubcxen7qJsldIaLUILx1JXCejv04oXzau9ErKUqcL+lCQuLWPxoFUvmWJjKYskZF Blu8bPoqRSBtDRRA18H7UyN4X2Fo7YiKXOD7duT7nHgId+dTRxWoAOyzzRFhewCP tKA1Iup7RHWHhBDEqEbgvtstAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIRsyE6EH D+2fh1C4FzcI8dQKtBYwHwYDVR0jBBgwFoAUY/oABiYdnkzUkFkG5UOWlL5ie7Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4RjYyL0I4NzhDMkM4NURG RDExRjBCNUMwN0I0QkM0RjlBRTAyL1lfb0FCaVlkbmt6VWtGa0c1VU9XbEw1aWU3 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWV9vQUJpWWRua3pVa0ZrRzVVT1dsTDVpZTdFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4 RjYyL0I4NzhDMkM4NURGRDExRjBCNUMwN0I0QkM0RjlBRTAyL1lfb0FCaVlkbmt6 VWtGa0c1VU9XbEw1aWU3RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB1BfcrwaCUdL0/gW3r6jNH2APwtxfNJXq2ERf9fdXresdV2tw7sEjg6 yE4h7NqI5LVJ2WiNRts12EpaVdQ3k7EO+1TBPBmrDbI2KZBCs2j6lAWn3aLhQJeo Y6t+OJlG6049q5Gdlif64QEOnVVeg1yHHBTKY7mStd8ONRubAdVdRHw6EG3A93mj SWLSljJiR1UHtva7How+0cUmeV43ZFTUvscMZA1fJCAf5PuFKq4H869XkbhyCinV AKon58pWG6VnTAekX1UVg8JpoYU2THz5cS7OgKkhhycUTCiGLNi/f8N3wumREAKQ sHPrASseFFgXVFkpUhdnZXIwZspMdHo= -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:18 2025 by rpki-client