$ rpki-client -vvf rpki.apnic.net/member_repository/A9193037/940E46B4AABC11EAB106C176C4F9AE02/ypVZFPmLL8kWpFEtpyq3WhHFK9A.mft File: ypVZFPmLL8kWpFEtpyq3WhHFK9A.mft (raw, json) Hash identifier: rI3AbgUiNyt9+NUbs/adUPfkfaOY1MjJSxLXcZxcWw8= Subject key identifier: 22:09:E6:47:D8:6C:C2:F1:9F:DB:8B:2A:88:DC:D3:C1:7C:2E:BE:F3 Authority key identifier: CA:95:59:14:F9:8B:2F:C9:16:A4:51:2D:A7:2A:B7:5A:11:C5:2B:D0 Certificate issuer: /CN=A9193037/serialNumber=CA955914F98B2FC916A4512DA72AB75A11C52BD0 Certificate serial: 0948 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypVZFPmLL8kWpFEtpyq3WhHFK9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193037/940E46B4AABC11EAB106C176C4F9AE02/ypVZFPmLL8kWpFEtpyq3WhHFK9A.mft Manifest number: 0940 Signing time: Sat 18 Oct 2025 21:17:18 +0000 Manifest this update: Sat 18 Oct 2025 21:17:18 +0000 Manifest next update: Sat 25 Oct 2025 21:17:18 +0000 Files and hashes: 1: ypVZFPmLL8kWpFEtpyq3WhHFK9A.crl (hash: cCUC+HOBgrKYweIY295/P8yCu6HXy5OE1w1gpqGo5vs=) 2: D9C523A0B05A11EAA233021EC4F9AE02.roa (hash: plSH71jqFHiqVOcppEgGivQOT8E3EqzsKsifhjqPdW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193037/940E46B4AABC11EAB106C176C4F9AE02/ypVZFPmLL8kWpFEtpyq3WhHFK9A.crl rsync://rpki.apnic.net/member_repository/A9193037/940E46B4AABC11EAB106C176C4F9AE02/ypVZFPmLL8kWpFEtpyq3WhHFK9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypVZFPmLL8kWpFEtpyq3WhHFK9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:17:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2376 (0x948) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193037, serialNumber=CA955914F98B2FC916A4512DA72AB75A11C52BD0 Validity Not Before: Oct 18 21:17:18 2025 GMT Not After : Oct 25 21:17:18 2025 GMT Subject: CN=68f403de-31f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2f:0f:96:86:4d:a5:6b:bc:7d:3a:5d:22:41: 16:48:4f:c4:b4:97:d5:4e:f9:8c:2e:86:fc:d3:88: 80:53:f9:92:81:86:ae:0f:ce:e0:bb:5b:b6:07:d9: e2:bb:1a:30:eb:a6:fd:09:16:9d:75:aa:6c:ab:7f: 3c:aa:34:b6:c1:30:aa:c1:11:ef:e4:57:46:3d:bf: 9d:9f:be:23:c1:34:20:06:ce:94:78:b7:6f:ac:8d: a8:97:80:6c:16:77:fc:5c:c7:2b:80:c9:79:5a:d7: 5e:aa:5f:4a:f0:a2:13:d6:f3:5c:4b:97:e8:97:4a: 5f:b4:2b:ce:c3:50:43:3c:52:90:ec:c1:f5:c4:92: 19:af:02:91:a0:b8:a5:49:78:9e:48:43:1d:5b:1a: 33:bb:7c:8b:b1:cc:89:d4:67:41:be:3a:7e:35:db: ce:f2:79:f4:35:4e:b0:b9:5b:db:1b:46:e7:3a:c1: 11:74:b4:12:bc:cc:a1:50:91:83:17:33:f1:65:25: 95:fc:4a:4d:28:94:85:5d:ec:ba:ee:c9:54:ae:f5: 56:a3:7b:f7:7f:c0:f4:03:7d:13:87:9d:ef:38:39: 33:e1:aa:6f:ed:30:f7:6d:2a:4e:28:8b:c9:d5:06: d7:42:f6:cd:89:8c:e7:8c:14:b2:f4:ff:9b:14:2a: e6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:09:E6:47:D8:6C:C2:F1:9F:DB:8B:2A:88:DC:D3:C1:7C:2E:BE:F3 X509v3 Authority Key Identifier: keyid:CA:95:59:14:F9:8B:2F:C9:16:A4:51:2D:A7:2A:B7:5A:11:C5:2B:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193037/940E46B4AABC11EAB106C176C4F9AE02/ypVZFPmLL8kWpFEtpyq3WhHFK9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypVZFPmLL8kWpFEtpyq3WhHFK9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193037/940E46B4AABC11EAB106C176C4F9AE02/ypVZFPmLL8kWpFEtpyq3WhHFK9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:88:b4:81:7b:44:17:06:72:44:14:9f:41:48:da:4e:a8:ac: d9:30:29:83:7a:68:8e:ba:3d:af:00:19:1c:46:db:52:11:04: 7d:25:d0:65:ec:a9:f9:ce:49:58:22:91:7d:5a:33:78:e2:fe: f9:6a:57:1e:fd:bb:bd:13:a2:ff:72:6c:02:3e:cb:63:cf:21: a1:d4:bf:3b:16:c3:e8:38:11:93:04:32:d1:ac:a8:92:ee:c8: ae:2a:a5:51:5a:d7:34:9c:46:06:36:a3:5f:70:36:71:9b:83: 33:6b:48:8a:e1:8c:e4:5e:87:b5:8f:c4:ad:b2:40:70:fd:96: fe:fd:fb:62:c9:f2:63:b7:37:cc:68:f1:0c:a7:f5:f6:83:06: 41:9e:86:34:63:5b:c9:fe:24:e5:8b:3b:8c:a7:74:46:3f:d7: e2:c3:c6:95:76:4d:76:c1:35:00:11:a5:9e:b9:3b:89:01:ee: ee:b3:83:11:c3:41:1e:2c:18:de:43:fa:f8:34:17:20:bf:e6: be:ba:7b:fb:9a:75:2c:2e:52:f6:e0:f6:29:6f:13:31:65:19: 3f:4c:d2:8b:8b:7e:98:15:91:94:ec:b1:3a:ef:89:2d:90:bf: 38:27:21:f5:21:b0:4f:d0:eb:5e:ba:95:16:50:af:50:86:3a: 7b:0c:f8:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMwMzcxMTAvBgNVBAUTKENBOTU1OTE0Rjk4QjJGQzkxNkE0NTEyREE3MkFCNzVB MTFDNTJCRDAwHhcNMjUxMDE4MjExNzE4WhcNMjUxMDI1MjExNzE4WjAYMRYwFAYD VQQDEw02OGY0MDNkZS0zMWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvS8PloZNpWu8fTpdIkEWSE/EtJfVTvmMLob804iAU/mSgYauD87gu1u2B9ni uxow66b9CRaddapsq388qjS2wTCqwRHv5FdGPb+dn74jwTQgBs6UeLdvrI2ol4Bs Fnf8XMcrgMl5Wtdeql9K8KIT1vNcS5fol0pftCvOw1BDPFKQ7MH1xJIZrwKRoLil SXieSEMdWxozu3yLscyJ1GdBvjp+NdvO8nn0NU6wuVvbG0bnOsERdLQSvMyhUJGD FzPxZSWV/EpNKJSFXey67slUrvVWo3v3f8D0A30Th53vODkz4apv7TD3bSpOKIvJ 1QbXQvbNiYznjBSy9P+bFCrmlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCIJ5kfY bMLxn9uLKojc08F8Lr7zMB8GA1UdIwQYMBaAFMqVWRT5iy/JFqRRLacqt1oRxSvQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzAzNy85NDBFNDZCNEFB QkMxMUVBQjEwNkMxNzZDNEY5QUUwMi95cFZaRlBtTEw4a1dwRkV0cHlxM1doSEZL OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lwVlpGUG1MTDhrV3BGRXRweXEzV2hIRks5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzAzNy85NDBFNDZCNEFBQkMxMUVBQjEwNkMxNzZDNEY5QUUwMi95cFZaRlBtTEw4 a1dwRkV0cHlxM1doSEZLOUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBziLSBe0QXBnJEFJ9BSNpOqKzZMCmDemiOuj2vABkcRttSEQR9JdBl 7Kn5zklYIpF9WjN44v75alce/bu9E6L/cmwCPstjzyGh1L87FsPoOBGTBDLRrKiS 7siuKqVRWtc0nEYGNqNfcDZxm4Mza0iK4YzkXoe1j8StskBw/Zb+/ftiyfJjtzfM aPEMp/X2gwZBnoY0Y1vJ/iTlizuMp3RGP9fiw8aVdk12wTUAEaWeuTuJAe7us4MR w0EeLBjeQ/r4NBcgv+a+unv7mnUsLlL24PYpbxMxZRk/TNKLi36YFZGU7LE674kt kL84JyH1IbBP0OteupUWUK9Qhjp7DPgM -----END CERTIFICATE-----Generated at Mon Oct 20 17:10:56 2025 by rpki-client