$ rpki-client -vvf rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft File: YQPK5q-yXkC6nl2kxULP4JtndCo.mft (raw, json) Hash identifier: FaNWcfyc/Y1GWjNvyZPhxBWeeYp7rO6oHLC8JMV/FR0= Subject key identifier: CA:FB:E1:8A:1E:B1:E5:B4:8A:98:95:19:4F:19:AD:06:CB:FC:58:95 Authority key identifier: 61:03:CA:E6:AF:B2:5E:40:BA:9E:5D:A4:C5:42:CF:E0:9B:67:74:2A Certificate issuer: /CN=A9186193/serialNumber=6103CAE6AFB25E40BA9E5DA4C542CFE09B67742A Certificate serial: 09CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft Manifest number: 09C6 Signing time: Mon 20 Oct 2025 20:48:29 +0000 Manifest this update: Mon 20 Oct 2025 20:48:28 +0000 Manifest next update: Mon 27 Oct 2025 20:48:28 +0000 Files and hashes: 1: YQPK5q-yXkC6nl2kxULP4JtndCo.crl (hash: rxot5FZxbr0VkvZ98K2vt+jfbit761d0wF0Cdcs8gGU=) 2: B781FD5C8FB411EAA396FB5CC4F9AE02.roa (hash: kppfjOmUGO+tWg93gbF2w14mllXA4v8g2v3smcz3zqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.crl rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 20:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2510 (0x9ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186193, serialNumber=6103CAE6AFB25E40BA9E5DA4C542CFE09B67742A Validity Not Before: Oct 20 20:48:28 2025 GMT Not After : Oct 27 20:48:28 2025 GMT Subject: CN=68f6a01d-d4ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a3:e7:80:28:03:6c:38:60:e5:95:b3:bc:ac: d1:87:d2:4f:f9:3c:15:70:9a:b2:54:63:3c:ba:94: 42:65:de:77:4e:98:38:fc:2e:9e:69:e8:34:b3:fc: 29:f3:26:e3:d9:a9:47:a7:f6:6b:a3:af:c2:16:45: 56:0d:82:7c:ef:e5:57:89:b9:29:38:58:dc:e3:64: 36:f0:0e:cb:88:d8:6f:df:cb:ce:29:f4:65:2a:6b: 03:7d:f8:12:4b:f0:8a:a0:cc:a6:89:e1:a3:a5:54: 28:c7:c5:5b:b3:4f:50:47:12:4d:2e:df:ac:bf:4c: 7d:0a:f9:08:e1:54:fe:52:fe:ac:12:53:35:4e:5c: 6a:39:c2:71:03:e4:4b:1d:ba:99:1b:67:a5:8f:a9: e6:a4:3e:8c:dc:e8:49:aa:7a:36:9b:f7:0a:1a:f2: db:06:85:ba:0e:8e:be:57:b5:c1:04:45:38:96:d6: 0f:50:c2:0d:ea:d2:e5:c1:b8:04:aa:ea:f6:06:72: d2:49:50:e9:b2:21:72:f6:27:ab:1c:2a:ba:fc:ec: a2:a6:dc:ce:86:cc:5a:da:8d:ca:ae:9c:5a:f2:3b: 17:75:8c:23:47:78:37:26:db:35:cf:2d:ab:70:e4: d6:06:dc:2d:7d:44:85:49:b7:6b:53:72:a3:ae:69: 8f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:FB:E1:8A:1E:B1:E5:B4:8A:98:95:19:4F:19:AD:06:CB:FC:58:95 X509v3 Authority Key Identifier: keyid:61:03:CA:E6:AF:B2:5E:40:BA:9E:5D:A4:C5:42:CF:E0:9B:67:74:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:35:c8:83:61:ef:ae:f4:ed:6a:a9:19:b1:ab:6c:0c:b7:71: 56:69:5c:90:df:a7:ff:1f:a9:8b:f2:2c:1d:39:17:10:ab:50: 30:1a:c7:ca:46:2b:e4:31:00:85:fb:50:fb:b9:eb:d5:ca:7e: 5c:02:45:01:63:db:30:d9:c4:f2:e1:b3:14:39:0c:64:7d:18: f1:5b:ef:0f:3c:6c:cc:e5:bf:e5:82:64:b3:e8:7e:73:d9:08: dc:ba:1a:31:2f:c8:69:51:95:37:74:20:f2:08:45:c7:91:0b: 3e:67:3b:dd:d6:c1:80:28:c3:c9:1c:b3:76:8d:63:2a:82:e4: 85:3f:90:40:05:c0:e2:14:3c:7f:89:29:27:54:0c:45:5d:f8: f2:ab:da:ae:ab:92:1a:d2:56:a7:50:06:f4:94:6a:ed:20:ae: ed:75:f0:81:f0:86:0f:82:69:81:54:8c:77:62:2e:8a:22:aa: 1c:56:55:88:67:ac:06:c7:ae:35:31:b6:f6:da:b7:1a:d6:3e: 67:30:58:46:3e:b0:d6:b4:c4:13:79:04:3f:c3:f4:3c:a1:4d: e3:88:bf:29:6a:e6:9b:09:c9:4c:ce:2a:72:bf:32:e0:6d:e1: f2:98:dc:e9:ca:20:ea:9b:32:e9:5a:23:50:01:85:69:fb:3a: 0a:52:4b:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYxOTMxMTAvBgNVBAUTKDYxMDNDQUU2QUZCMjVFNDBCQTlFNURBNEM1NDJDRkUw OUI2Nzc0MkEwHhcNMjUxMDIwMjA0ODI4WhcNMjUxMDI3MjA0ODI4WjAYMRYwFAYD VQQDEw02OGY2YTAxZC1kNGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKPngCgDbDhg5ZWzvKzRh9JP+TwVcJqyVGM8upRCZd53Tpg4/C6eaeg0s/wp 8ybj2alHp/Zro6/CFkVWDYJ87+VXibkpOFjc42Q28A7LiNhv38vOKfRlKmsDffgS S/CKoMymieGjpVQox8Vbs09QRxJNLt+sv0x9CvkI4VT+Uv6sElM1TlxqOcJxA+RL HbqZG2elj6nmpD6M3OhJqno2m/cKGvLbBoW6Do6+V7XBBEU4ltYPUMIN6tLlwbgE qur2BnLSSVDpsiFy9ierHCq6/OyiptzOhsxa2o3Krpxa8jsXdYwjR3g3Jts1zy2r cOTWBtwtfUSFSbdrU3KjrmmPFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMr74Yoe seW0ipiVGU8ZrQbL/FiVMB8GA1UdIwQYMBaAFGEDyuavsl5Aup5dpMVCz+CbZ3Qq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjE5My8xRDUxNDA1RThG QjMxMUVBQjcxMjZDNTdDNEY5QUUwMi9ZUVBLNXEteVhrQzZubDJreFVMUDRKdG5k Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lRUEs1cS15WGtDNm5sMmt4VUxQNEp0bmRDby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjE5My8xRDUxNDA1RThGQjMxMUVBQjcxMjZDNTdDNEY5QUUwMi9ZUVBLNXEteVhr QzZubDJreFVMUDRKdG5kQ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfNciDYe+u9O1qqRmxq2wMt3FWaVyQ36f/H6mL8iwdORcQq1AwGsfK RivkMQCF+1D7uevVyn5cAkUBY9sw2cTy4bMUOQxkfRjxW+8PPGzM5b/lgmSz6H5z 2QjcuhoxL8hpUZU3dCDyCEXHkQs+Zzvd1sGAKMPJHLN2jWMqguSFP5BABcDiFDx/ iSknVAxFXfjyq9quq5Ia0lanUAb0lGrtIK7tdfCB8IYPgmmBVIx3Yi6KIqocVlWI Z6wGx641Mbb22rca1j5nMFhGPrDWtMQTeQQ/w/Q8oU3jiL8pauabCclMzipyvzLg beHymNzpyiDqmzLpWiNQAYVp+zoKUku/ -----END CERTIFICATE-----Generated at Tue Oct 21 01:02:41 2025 by rpki-client