$ rpki-client -vvf rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft File: yW0SR_XLoniur1KTUbX4HKVxcKM.mft (raw, json) Hash identifier: Oa9VcGweMNrYGuXdHeZU1vBYWIIXBU89dE+1Rll00W0= Subject key identifier: 99:0F:ED:BC:F8:D4:B0:D0:00:8E:C0:36:A2:BB:FB:B4:72:3F:58:09 Authority key identifier: C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3 Certificate issuer: /CN=A9190E6C/serialNumber=C96D1247F5CBA278AEAF529351B5F81CA57170A3 Certificate serial: 0D96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft Manifest number: 0D8A Signing time: Sat 18 Oct 2025 18:36:58 +0000 Manifest this update: Sat 18 Oct 2025 18:36:57 +0000 Manifest next update: Sat 25 Oct 2025 18:36:57 +0000 Files and hashes: 1: yW0SR_XLoniur1KTUbX4HKVxcKM.crl (hash: /tyhgvtLro8z3XxOliLEkkESUCBjVIhai3Jqa87wpYM=) 2: 07C8CFD0E18F11EF82714B13C4F9AE02.roa (hash: pHVkzfX7SG48uWlsj9xFm7ATtwnDNjsznm3glTtz9F0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.crl rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:36:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3478 (0xd96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190E6C, serialNumber=C96D1247F5CBA278AEAF529351B5F81CA57170A3 Validity Not Before: Oct 18 18:36:57 2025 GMT Not After : Oct 25 18:36:57 2025 GMT Subject: CN=68f3de4a-9819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:03:2c:f7:8b:14:27:94:83:06:d9:76:c3:28: 9e:0e:9d:fe:ed:b5:6f:c5:62:0a:c4:6e:9b:b7:a8: 98:a3:da:d7:7e:d0:99:3a:50:17:11:17:6d:2e:00: ca:30:99:7d:d5:bc:a8:ce:47:46:ad:66:be:b3:13: ad:64:95:bd:a8:d0:6f:e3:99:7f:c6:7a:b0:30:2e: 44:b0:29:20:a1:71:bb:17:5e:c6:2b:49:ab:be:7d: e2:f1:6f:22:66:16:2d:b2:35:c6:f2:2c:b7:a2:3e: d8:12:fc:6f:c3:eb:35:31:98:5e:5b:22:f5:c6:e8: 9d:1e:d0:e6:18:ad:cd:cb:85:b2:2c:e9:a1:87:3b: d0:c4:26:13:bd:1a:88:f2:32:d6:d3:d5:5c:d9:33: 0e:33:58:b6:71:32:c2:1b:a3:a7:d1:62:7e:d0:0f: 3d:1c:67:c7:a8:d3:af:bc:c8:aa:08:e6:98:27:65: 45:9b:1f:f7:0a:90:0d:db:eb:57:73:d8:31:59:a2: 38:b5:e3:39:a3:b1:82:ee:58:85:4f:08:d7:64:8a: 81:63:60:a6:92:36:2d:28:6c:0a:77:66:38:0c:3a: cb:2c:39:6a:a9:ed:57:d0:54:4d:9b:b3:9d:31:c9: 9b:d3:dc:5b:87:20:5e:ed:00:9e:b0:81:24:6b:0d: 89:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:0F:ED:BC:F8:D4:B0:D0:00:8E:C0:36:A2:BB:FB:B4:72:3F:58:09 X509v3 Authority Key Identifier: keyid:C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:1c:38:2e:6e:ec:51:d1:7b:c0:8d:37:76:c5:99:00:ee:fd: 5b:d5:64:1b:3f:43:1d:ea:3e:e7:7e:00:f4:6c:06:54:9d:f8: 29:15:c0:cb:77:dc:7c:e7:33:69:71:c9:f7:ef:f9:6c:f8:5c: 79:e0:33:75:bc:3c:ed:cf:74:c1:b2:10:1d:b6:0f:87:3d:b5: 2b:93:48:5d:0e:e3:e1:6d:27:29:cf:d2:61:14:77:05:cf:53: 37:9a:aa:a6:a0:db:ff:98:8d:e2:ac:4c:c3:0e:cb:a4:cb:76: 96:d7:6a:84:31:f3:52:24:75:23:38:78:66:82:89:e6:d6:ce: 7e:34:27:e7:b9:46:95:7c:c8:b4:cb:57:19:fc:a7:88:61:05: 7a:6d:2e:ae:e6:13:50:41:09:4b:45:a6:e3:61:74:8e:45:1d: 9a:17:07:39:c7:17:02:5f:49:f7:87:17:78:0b:d3:ec:69:8b: da:b3:a5:28:cb:84:bc:06:ca:91:5e:c3:74:84:91:c8:29:aa: 6d:85:29:92:a8:23:ca:c7:9a:77:c4:85:51:e9:d2:8e:a8:11: 79:df:4d:44:9c:f2:59:55:f1:b0:c2:5b:67:ec:0e:b3:95:0a: 77:39:25:58:85:4a:66:3d:db:09:9f:1e:77:77:43:6f:29:78: 42:06:c8:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBFNkMxMTAvBgNVBAUTKEM5NkQxMjQ3RjVDQkEyNzhBRUFGNTI5MzUxQjVGODFD QTU3MTcwQTMwHhcNMjUxMDE4MTgzNjU3WhcNMjUxMDI1MTgzNjU3WjAYMRYwFAYD VQQDEw02OGYzZGU0YS05ODE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQMs94sUJ5SDBtl2wyieDp3+7bVvxWIKxG6bt6iYo9rXftCZOlAXERdtLgDK MJl91byozkdGrWa+sxOtZJW9qNBv45l/xnqwMC5EsCkgoXG7F17GK0mrvn3i8W8i ZhYtsjXG8iy3oj7YEvxvw+s1MZheWyL1xuidHtDmGK3Ny4WyLOmhhzvQxCYTvRqI 8jLW09Vc2TMOM1i2cTLCG6On0WJ+0A89HGfHqNOvvMiqCOaYJ2VFmx/3CpAN2+tX c9gxWaI4teM5o7GC7liFTwjXZIqBY2CmkjYtKGwKd2Y4DDrLLDlqqe1X0FRNm7Od Mcmb09xbhyBe7QCesIEkaw2JUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkP7bz4 1LDQAI7ANqK7+7RyP1gJMB8GA1UdIwQYMBaAFMltEkf1y6J4rq9Sk1G1+BylcXCj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEU2Qy85QzY5QTczMkQ0 OTIxMUU5QUFFM0MwMkJDNEY5QUUwMi95VzBTUl9YTG9uaXVyMUtUVWJYNEhLVnhj S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lXMFNSX1hMb25pdXIxS1RVYlg0SEtWeGNLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEU2Qy85QzY5QTczMkQ0OTIxMUU5QUFFM0MwMkJDNEY5QUUwMi95VzBTUl9YTG9u aXVyMUtUVWJYNEhLVnhjS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5HDgubuxR0XvAjTd2xZkA7v1b1WQbP0Md6j7nfgD0bAZUnfgpFcDL d9x85zNpccn37/ls+Fx54DN1vDztz3TBshAdtg+HPbUrk0hdDuPhbScpz9JhFHcF z1M3mqqmoNv/mI3irEzDDsuky3aW12qEMfNSJHUjOHhmgonm1s5+NCfnuUaVfMi0 y1cZ/KeIYQV6bS6u5hNQQQlLRabjYXSORR2aFwc5xxcCX0n3hxd4C9PsaYvas6Uo y4S8BsqRXsN0hJHIKapthSmSqCPKx5p3xIVR6dKOqBF5301EnPJZVfGwwltn7A6z lQp3OSVYhUpmPdsJnx53d0NvKXhCBsj+ -----END CERTIFICATE-----Generated at Mon Oct 20 13:50:02 2025 by rpki-client