$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft File: Y04osQAuVW6OsU-VPq1jttZ3WAk.mft (raw, json) Hash identifier: xLSM0gv6m71XwdGjHC7KLltDDL3eHFXhT4/gzDnwIEs= Subject key identifier: E4:CD:3B:AB:36:A2:92:9F:23:2B:19:C2:B7:CC:94:39:C4:C6:15:64 Authority key identifier: 63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09 Certificate issuer: /CN=A9194C0D/serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809 Certificate serial: 01BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft Manifest number: 01A9 Signing time: Sun 19 Oct 2025 06:11:22 +0000 Manifest this update: Sun 19 Oct 2025 06:11:22 +0000 Manifest next update: Sun 26 Oct 2025 06:11:22 +0000 Files and hashes: 1: Y04osQAuVW6OsU-VPq1jttZ3WAk.crl (hash: YjPbO2y30dqTmH5owT3XH7K3M6tL/9XtLiCNPOufr94=) 2: F6FAEC5CCB0411EEAB05F93CC4F9AE02.roa (hash: 0UB6vf7tsJ4/eqdU0xPwdgNnTiXM+SW0/ez8sQsDOEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:11:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194C0D, serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809 Validity Not Before: Oct 19 06:11:22 2025 GMT Not After : Oct 26 06:11:22 2025 GMT Subject: CN=68f4810a-fe30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2a:f2:0c:ea:2e:33:7b:4b:2a:5f:29:4d:bc: 6c:e6:cf:42:0a:d9:ea:40:70:51:f9:dd:78:b3:cf: a2:f8:c7:a9:69:95:74:9b:95:57:0f:79:4d:4d:3d: bc:5d:74:e3:07:cc:56:20:ff:73:b1:b5:ae:f2:cf: 32:0f:4b:08:26:1a:0f:11:57:4f:e1:c7:fa:3b:7d: 88:c4:b5:b1:d7:e3:87:a8:f2:a8:0c:0f:8f:d2:21: 7e:85:bb:56:25:38:8a:e5:1d:5d:94:ff:4d:1c:45: bf:ff:5d:38:41:0d:77:49:60:79:ee:c9:9b:8c:e2: 81:57:31:29:58:79:ac:09:08:3f:31:d0:e7:0d:ec: 96:ea:d4:e7:ec:d8:2b:db:b3:ba:4b:58:ff:49:21: 6e:84:f0:1c:0f:7d:6b:51:93:f2:0a:c2:47:55:d4: 64:b6:1b:fd:92:34:0a:05:f7:0c:ee:50:1a:1c:af: 75:ff:98:bb:f5:92:24:75:d1:90:fd:8f:8c:aa:d0: 48:7d:cf:cd:ef:e3:16:9f:56:70:e0:0b:15:d3:d4: 9b:73:6f:2d:4b:43:47:d3:3c:4d:60:9a:7c:30:4d: e7:e0:5c:cc:5e:66:90:a1:bd:e9:e3:90:89:84:10: 63:21:89:23:05:85:11:4e:ad:03:e0:7b:8f:c9:4a: 06:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CD:3B:AB:36:A2:92:9F:23:2B:19:C2:B7:CC:94:39:C4:C6:15:64 X509v3 Authority Key Identifier: keyid:63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:ca:ce:47:b4:1b:4b:7b:ba:b7:3d:92:dd:19:c0:70:63:77: 05:b4:35:89:0f:b7:ae:3c:d3:1b:5a:8f:a5:b2:b1:0d:87:32: 62:d9:fa:63:65:4a:cc:03:3f:ff:ac:13:66:16:e5:2e:02:db: ae:3a:cc:4b:df:3f:2b:5a:5c:43:45:06:64:14:7e:d1:8d:10: d4:cf:87:2b:12:02:81:94:b8:b6:d4:34:ec:10:06:2b:60:db: 44:73:83:e9:90:a5:fc:b6:3c:4c:1e:2c:35:88:f9:81:87:4f: 26:17:84:04:50:bf:b3:69:cd:6d:b3:15:a2:4d:80:47:e9:22: b8:ad:dd:46:ab:25:18:de:11:ed:6f:e0:fb:73:8c:2e:4d:7b: d8:f0:41:bd:dd:05:2c:09:fa:6d:15:72:2e:fb:ca:99:c9:9b: 7e:be:33:ce:43:6c:3f:16:61:c6:18:c5:48:b5:6b:85:0b:2d: 29:82:e7:df:33:52:86:28:07:38:97:3b:a3:99:81:f5:86:f1: d4:ca:f8:e8:96:ec:5f:70:9b:c7:8b:46:4c:51:60:6c:e7:da: 20:f4:16:98:e8:db:fe:74:2c:55:63:eb:15:9c:a7:0e:46:ac: 6e:65:b3:db:01:97:a0:e9:e0:f1:91:40:22:09:d0:f8:8a:64: 22:8e:54:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDMEQxMTAvBgNVBAUTKDYzNEUyOEIxMDAyRTU1NkU4RUIxNEY5NTNFQUQ2M0I2 RDY3NzU4MDkwHhcNMjUxMDE5MDYxMTIyWhcNMjUxMDI2MDYxMTIyWjAYMRYwFAYD VQQDEw02OGY0ODEwYS1mZTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyryDOouM3tLKl8pTbxs5s9CCtnqQHBR+d14s8+i+MepaZV0m5VXD3lNTT28 XXTjB8xWIP9zsbWu8s8yD0sIJhoPEVdP4cf6O32IxLWx1+OHqPKoDA+P0iF+hbtW JTiK5R1dlP9NHEW//104QQ13SWB57smbjOKBVzEpWHmsCQg/MdDnDeyW6tTn7Ngr 27O6S1j/SSFuhPAcD31rUZPyCsJHVdRkthv9kjQKBfcM7lAaHK91/5i79ZIkddGQ /Y+MqtBIfc/N7+MWn1Zw4AsV09Sbc28tS0NH0zxNYJp8ME3n4FzMXmaQob3p45CJ hBBjIYkjBYURTq0D4HuPyUoGOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOTNO6s2 opKfIysZwrfMlDnExhVkMB8GA1UdIwQYMBaAFGNOKLEALlVujrFPlT6tY7bWd1gJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEMwRC9BRDI1ODg5MDU3 NTQxMUVFOTQwQ0Q5NTRDNEY5QUUwMi9ZMDRvc1FBdVZXNk9zVS1WUHExanR0WjNX QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kwNG9zUUF1Vlc2T3NVLVZQcTFqdHRaM1dBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEMwRC9BRDI1ODg5MDU3NTQxMUVFOTQwQ0Q5NTRDNEY5QUUwMi9ZMDRvc1FBdVZX Nk9zVS1WUHExanR0WjNXQWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjys5HtBtLe7q3PZLdGcBwY3cFtDWJD7euPNMbWo+lsrENhzJi2fpj ZUrMAz//rBNmFuUuAtuuOsxL3z8rWlxDRQZkFH7RjRDUz4crEgKBlLi21DTsEAYr YNtEc4PpkKX8tjxMHiw1iPmBh08mF4QEUL+zac1tsxWiTYBH6SK4rd1GqyUY3hHt b+D7c4wuTXvY8EG93QUsCfptFXIu+8qZyZt+vjPOQ2w/FmHGGMVItWuFCy0pguff M1KGKAc4lzujmYH1hvHUyvjoluxfcJvHi0ZMUWBs59og9BaY6Nv+dCxVY+sVnKcO RqxuZbPbAZeg6eDxkUAiCdD4imQijlRY -----END CERTIFICATE-----Generated at Mon Oct 20 14:00:14 2025 by rpki-client