$ rpki-client -vvf rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft File: yRauWpUgtfZ2fnnJFa-hv25JGJk.mft (raw, json) Hash identifier: g5zt5lZZq6XJm3QWhTdBfEZ0+np0V67Tu3+9CZu9GRY= Subject key identifier: E6:3D:BA:92:A5:98:C4:06:CD:38:F9:16:1B:E7:ED:5C:BC:1F:AC:68 Authority key identifier: C9:16:AE:5A:95:20:B5:F6:76:7E:79:C9:15:AF:A1:BF:6E:49:18:99 Certificate issuer: /CN=A9188CC3/serialNumber=C916AE5A9520B5F6767E79C915AFA1BF6E491899 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRauWpUgtfZ2fnnJFa-hv25JGJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft Manifest number: 8D Signing time: Sun 19 Oct 2025 09:49:21 +0000 Manifest this update: Sun 19 Oct 2025 09:49:21 +0000 Manifest next update: Sun 26 Oct 2025 09:49:21 +0000 Files and hashes: 1: yRauWpUgtfZ2fnnJFa-hv25JGJk.crl (hash: rLKraZ5zyYd5+ruslD7fjfnyYjZATpMu3wkD+9HJ+1U=) 2: DAB3F33EDE0B11EF8FDDD043C4F9AE02.roa (hash: Rb4ZTb+DIpBolhpNi77VSAYUPtHpBMXs9JxNCJqiIFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.crl rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRauWpUgtfZ2fnnJFa-hv25JGJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:49:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188CC3, serialNumber=C916AE5A9520B5F6767E79C915AFA1BF6E491899 Validity Not Before: Oct 19 09:49:21 2025 GMT Not After : Oct 26 09:49:21 2025 GMT Subject: CN=68f4b421-9f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:04:d8:72:4a:75:d1:80:f4:29:cc:fe:5a:a7: 9f:13:12:6f:e7:cd:41:86:17:43:d8:3d:e6:35:c7: d9:df:1d:3d:48:32:03:1f:52:12:b4:b5:72:cc:f4: f7:43:c4:6b:6e:ce:cf:c3:28:35:05:da:d8:32:63: 9f:49:f9:b4:fb:9d:79:44:45:8c:5f:84:40:ad:0d: be:68:cb:84:05:be:14:ba:3b:91:bd:45:13:af:37: c7:e8:43:93:4e:4d:1d:91:61:22:79:f7:f9:58:1b: 3f:ce:2e:ce:8d:bb:30:4b:e5:13:42:24:ef:63:fa: 76:de:e1:e0:d3:fa:ad:24:8d:9c:20:bb:60:80:68: f2:21:87:b4:89:fb:fd:f8:d8:21:3d:e0:88:2b:f6: c4:61:9d:be:c0:0d:84:86:61:f4:15:65:0c:a5:72: e1:ee:da:dd:fd:98:59:a3:57:8f:32:25:f4:14:b7: f2:ae:46:2f:2a:35:5c:ff:bc:04:b0:45:ac:1b:be: 85:7f:79:cc:59:be:2f:1a:8a:83:f6:58:74:fe:90: 40:a5:df:fe:7b:52:d7:c4:2a:ca:e8:67:e0:d3:f4: 06:7f:3d:ea:94:05:6a:88:79:c6:fc:ed:08:52:76: da:7c:9f:1a:48:27:ec:6d:41:90:a2:a2:e6:33:30: d9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3D:BA:92:A5:98:C4:06:CD:38:F9:16:1B:E7:ED:5C:BC:1F:AC:68 X509v3 Authority Key Identifier: keyid:C9:16:AE:5A:95:20:B5:F6:76:7E:79:C9:15:AF:A1:BF:6E:49:18:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRauWpUgtfZ2fnnJFa-hv25JGJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:89:30:77:b1:7b:f4:64:c2:21:00:a0:b6:5b:c7:43:03:3e: 30:65:37:79:78:0d:90:85:aa:92:2b:ba:6e:83:99:cc:00:30: a4:e2:2d:6b:63:ae:f9:18:4c:b7:ce:09:56:11:0c:b2:60:af: 2d:9c:aa:69:07:51:7d:26:c9:68:41:97:05:3f:b6:22:f1:70: 0a:43:71:04:cf:93:61:52:8e:08:61:24:60:89:e0:c0:d2:cb: a1:f3:25:2a:b3:4a:c6:73:7e:e3:7d:76:5e:28:5b:08:cf:80: 0a:7b:77:c4:1e:b7:05:47:e0:38:87:7e:cc:bd:81:a8:06:b8: 54:d1:ee:3a:c3:88:d0:21:6d:fd:11:4d:92:30:57:99:5f:31: 06:05:c4:3b:4b:d9:67:34:25:a1:f5:31:51:12:e2:c6:bc:92: 27:45:c1:f0:84:4d:63:11:e3:8d:1d:4c:49:8b:45:e7:5c:fa: 7f:a2:4a:2d:33:a7:66:2e:c7:e6:4c:f8:ef:a9:4c:21:1d:86: bd:9a:78:9b:07:8e:51:87:b3:1e:04:49:3e:59:7b:ee:52:03: 62:18:b1:a2:b9:3f:07:9f:96:32:7e:9c:45:07:65:7a:d4:6f: 3b:78:0e:ec:92:25:36:93:0c:fc:9b:84:48:c4:d1:0e:25:14: 71:68:29:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhDQzMxMTAvBgNVBAUTKEM5MTZBRTVBOTUyMEI1RjY3NjdFNzlDOTE1QUZBMUJG NkU0OTE4OTkwHhcNMjUxMDE5MDk0OTIxWhcNMjUxMDI2MDk0OTIxWjAYMRYwFAYD VQQDEw02OGY0YjQyMS05ZjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwTYckp10YD0Kcz+WqefExJv581BhhdD2D3mNcfZ3x09SDIDH1IStLVyzPT3 Q8Rrbs7Pwyg1BdrYMmOfSfm0+515REWMX4RArQ2+aMuEBb4UujuRvUUTrzfH6EOT Tk0dkWEieff5WBs/zi7OjbswS+UTQiTvY/p23uHg0/qtJI2cILtggGjyIYe0ifv9 +NghPeCIK/bEYZ2+wA2EhmH0FWUMpXLh7trd/ZhZo1ePMiX0FLfyrkYvKjVc/7wE sEWsG76Ff3nMWb4vGoqD9lh0/pBApd/+e1LXxCrK6Gfg0/QGfz3qlAVqiHnG/O0I UnbafJ8aSCfsbUGQoqLmMzDZ2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOY9upKl mMQGzTj5Fhvn7Vy8H6xoMB8GA1UdIwQYMBaAFMkWrlqVILX2dn55yRWvob9uSRiZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OENDMy9FRERBMzZFMkQ3 MjMxMUVGQTIyNjk0MTlDNEY5QUUwMi95UmF1V3BVZ3RmWjJmbm5KRmEtaHYyNUpH SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lSYXVXcFVndGZaMmZubkpGYS1odjI1SkdKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OENDMy9FRERBMzZFMkQ3MjMxMUVGQTIyNjk0MTlDNEY5QUUwMi95UmF1V3BVZ3Rm WjJmbm5KRmEtaHYyNUpHSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIiTB3sXv0ZMIhAKC2W8dDAz4wZTd5eA2QhaqSK7pug5nMADCk4i1r Y675GEy3zglWEQyyYK8tnKppB1F9JsloQZcFP7Yi8XAKQ3EEz5NhUo4IYSRgieDA 0suh8yUqs0rGc37jfXZeKFsIz4AKe3fEHrcFR+A4h37MvYGoBrhU0e46w4jQIW39 EU2SMFeZXzEGBcQ7S9lnNCWh9TFREuLGvJInRcHwhE1jEeONHUxJi0XnXPp/okot M6dmLsfmTPjvqUwhHYa9mnibB45Rh7MeBEk+WXvuUgNiGLGiuT8Hn5YyfpxFB2V6 1G87eA7skiU2kwz8m4RIxNEOJRRxaCkr -----END CERTIFICATE-----Generated at Mon Oct 20 04:48:41 2025 by rpki-client