$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft File: yEnB9uuNGws3lLBgxJxam9U61Mk.mft (raw, json) Hash identifier: wtsSS07SNULwRoZEbrWHkghEG/ijTiR+0fvPicBRX6Y= Subject key identifier: FD:1C:6D:98:CE:BC:81:80:EF:DB:26:00:18:18:DD:CF:74:36:41:B2 Authority key identifier: C8:49:C1:F6:EB:8D:1B:0B:37:94:B0:60:C4:9C:5A:9B:D5:3A:D4:C9 Certificate issuer: /CN=A9180DA5/serialNumber=C849C1F6EB8D1B0B3794B060C49C5A9BD53AD4C9 Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft Manifest number: CC Signing time: Sun 19 Oct 2025 08:47:54 +0000 Manifest this update: Sun 19 Oct 2025 08:47:54 +0000 Manifest next update: Sun 26 Oct 2025 08:47:54 +0000 Files and hashes: 1: yEnB9uuNGws3lLBgxJxam9U61Mk.crl (hash: rajHWeGX38n8pPyduGZzez3pt7SuGHYlm0DAKk/8Vi8=) 2: FC9B052E73ED11EFBE08A45AC4F9AE02.roa (hash: rHJo5UtLh1VULKC52eRZg4xQTH8t25GY8hXDj9/zGnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.crl rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180DA5, serialNumber=C849C1F6EB8D1B0B3794B060C49C5A9BD53AD4C9 Validity Not Before: Oct 19 08:47:54 2025 GMT Not After : Oct 26 08:47:54 2025 GMT Subject: CN=68f4a5ba-f4af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5f:a5:ec:04:62:74:64:14:fb:41:53:b6:5e: 17:5e:b1:a2:62:39:f2:af:c1:0b:7f:0a:44:10:e4: 49:5b:ba:7a:aa:58:f4:b0:df:f8:a8:dd:85:ae:f3: ed:c2:03:76:91:b0:9d:8a:8c:97:b7:41:69:9e:2a: 72:f2:af:7b:c3:18:5b:66:2d:fa:66:f6:78:53:8c: d7:83:6b:84:6c:9d:1b:7f:dd:13:91:a1:61:89:1c: 9d:92:fb:c7:b4:d8:c6:ec:ec:3a:3d:5b:d5:b1:c6: c5:0b:b6:bc:ea:cc:11:89:0f:1f:ab:72:ee:78:8c: 39:1a:47:9f:07:9d:86:9e:57:0f:af:95:fc:0a:59: 6d:d3:59:0a:b0:2b:be:93:7f:5d:53:e0:0a:fc:70: 1e:b4:94:74:d8:42:bc:84:1d:d5:7e:0a:9f:35:59: 77:ee:25:b6:41:a5:d2:3e:80:c7:53:b6:ae:4d:7b: 60:cd:39:86:0e:b8:ed:b2:43:51:3d:0e:2b:61:00: de:b2:81:b3:d7:eb:f7:af:2b:ba:f9:6d:19:04:b9: 07:cf:a8:e5:00:01:6c:d6:0f:8a:5e:e2:7b:62:7c: 2f:8c:28:2a:07:c8:ea:79:03:cb:9b:11:72:d6:f1: 49:26:7d:bf:a4:16:0f:8a:0c:ee:11:a8:93:f2:57: 9a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:1C:6D:98:CE:BC:81:80:EF:DB:26:00:18:18:DD:CF:74:36:41:B2 X509v3 Authority Key Identifier: keyid:C8:49:C1:F6:EB:8D:1B:0B:37:94:B0:60:C4:9C:5A:9B:D5:3A:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:ad:7d:9b:19:5b:4f:ef:b7:f1:88:8f:b6:49:e5:d9:0c:a8: 2c:44:9c:a9:3e:cd:b8:04:e4:3c:55:0b:47:d0:d2:28:62:ca: 42:3a:52:9e:c8:e2:b2:8e:9a:72:35:ef:66:e0:e7:5b:6b:e6: d8:10:99:5b:0c:aa:c6:93:6c:f8:2e:e0:ca:6b:05:17:77:95: f4:46:6b:5b:77:9d:6b:5d:8f:bc:d9:60:18:e5:14:ea:75:4e: 1f:19:ca:9b:92:1f:50:f6:07:17:11:d1:20:1b:f6:b4:13:6e: d2:7b:b9:9d:9b:b2:2b:f1:01:ae:ec:e4:12:72:55:6b:8b:9a: cd:1f:f1:fc:08:28:4a:ca:dc:43:5a:3c:90:70:f1:29:b9:ae: 7c:f0:6c:bc:1d:83:93:e9:ef:c7:af:79:6d:58:1c:47:e7:7b: 7d:92:10:f0:52:d0:55:05:ea:80:42:ed:7f:04:79:23:47:ef: 74:3b:56:d5:67:f6:1b:ea:86:c9:51:3a:54:01:e9:6d:ab:f7: de:12:47:e1:b1:53:30:68:f5:95:cc:6d:4d:7c:aa:26:b5:f1: 0a:2f:af:17:c7:e4:9e:62:de:ba:4e:0d:38:eb:62:a4:43:2b: 3a:d0:72:4a:00:06:35:86:13:16:4b:6c:e7:b3:a3:ea:3a:87: 37:1a:d3:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBEQTUxMTAvBgNVBAUTKEM4NDlDMUY2RUI4RDFCMEIzNzk0QjA2MEM0OUM1QTlC RDUzQUQ0QzkwHhcNMjUxMDE5MDg0NzU0WhcNMjUxMDI2MDg0NzU0WjAYMRYwFAYD VQQDEw02OGY0YTViYS1mNGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArl+l7ARidGQU+0FTtl4XXrGiYjnyr8ELfwpEEORJW7p6qlj0sN/4qN2FrvPt wgN2kbCdioyXt0Fpnipy8q97wxhbZi36ZvZ4U4zXg2uEbJ0bf90TkaFhiRydkvvH tNjG7Ow6PVvVscbFC7a86swRiQ8fq3LueIw5GkefB52GnlcPr5X8Cllt01kKsCu+ k39dU+AK/HAetJR02EK8hB3VfgqfNVl37iW2QaXSPoDHU7auTXtgzTmGDrjtskNR PQ4rYQDesoGz1+v3ryu6+W0ZBLkHz6jlAAFs1g+KXuJ7YnwvjCgqB8jqeQPLmxFy 1vFJJn2/pBYPigzuEaiT8leaEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0cbZjO vIGA79smABgY3c90NkGyMB8GA1UdIwQYMBaAFMhJwfbrjRsLN5SwYMScWpvVOtTJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MERBNS9BNzMzN0M2QTcz RUQxMUVGQjBCQTAyNUFDNEY5QUUwMi95RW5COXV1Tkd3czNsTEJneEp4YW05VTYx TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3lFbkI5dXVOR3dzM2xMQmd4SnhhbTlVNjFNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MERBNS9BNzMzN0M2QTczRUQxMUVGQjBCQTAyNUFDNEY5QUUwMi95RW5COXV1Tkd3 czNsTEJneEp4YW05VTYxTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxrX2bGVtP77fxiI+2SeXZDKgsRJypPs24BOQ8VQtH0NIoYspCOlKe yOKyjppyNe9m4Odba+bYEJlbDKrGk2z4LuDKawUXd5X0Rmtbd51rXY+82WAY5RTq dU4fGcqbkh9Q9gcXEdEgG/a0E27Se7mdm7Ir8QGu7OQSclVri5rNH/H8CChKytxD WjyQcPEpua588Gy8HYOT6e/Hr3ltWBxH53t9khDwUtBVBeqAQu1/BHkjR+90O1bV Z/Yb6obJUTpUAeltq/feEkfhsVMwaPWVzG1NfKomtfEKL68Xx+SeYt66Tg0462Kk Qys60HJKAAY1hhMWS2zns6PqOoc3GtMB -----END CERTIFICATE-----Generated at Tue Oct 21 02:04:44 2025 by rpki-client