$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft File: yddu42nMHPDmKcUQpLr0ZeFfteE.mft (raw, json) Hash identifier: ZpkGaThMDvK+yNh10nWBNL3Z9hvr+i8FmNAvLXO9vLI= Subject key identifier: 28:39:10:49:B7:52:1F:76:7A:C8:25:7A:88:90:C8:2B:D3:29:EA:73 Authority key identifier: C9:D7:6E:E3:69:CC:1C:F0:E6:29:C5:10:A4:BA:F4:65:E1:5F:B5:E1 Certificate issuer: /CN=A9194E59/serialNumber=C9D76EE369CC1CF0E629C510A4BAF465E15FB5E1 Certificate serial: 0460 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft Manifest number: 045B Signing time: Sun 19 Oct 2025 02:04:14 +0000 Manifest this update: Sun 19 Oct 2025 02:04:13 +0000 Manifest next update: Sun 26 Oct 2025 02:04:13 +0000 Files and hashes: 1: yddu42nMHPDmKcUQpLr0ZeFfteE.crl (hash: /2iXRsdZP21iTT/SDxrLBy6R+QBa1JGHN5YPSSbqTjg=) 2: AD9D02406C6811ECB7C0925AC4F9AE02.roa (hash: kw8NlMSw+Nqcx4jBYDikGpkNhg4pIHl7KmPwkj2eC0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.crl rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:04:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1120 (0x460) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194E59, serialNumber=C9D76EE369CC1CF0E629C510A4BAF465E15FB5E1 Validity Not Before: Oct 19 02:04:13 2025 GMT Not After : Oct 26 02:04:13 2025 GMT Subject: CN=68f4471e-fcbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:70:d2:ec:83:cf:fb:a8:89:0c:2c:92:d8:f5: 99:f1:f6:32:2e:bd:95:0b:cd:28:2d:99:90:96:90: 59:df:15:97:70:dc:89:3e:7a:6f:a3:df:6d:0e:30: 38:94:66:30:e6:0d:03:b0:8f:1f:91:b5:69:5a:7e: af:7e:71:e5:e8:60:9d:3b:8f:54:dc:f1:ec:ec:8b: 60:59:55:f8:65:28:23:20:df:0f:75:c3:9f:43:fe: f3:dd:89:31:85:20:34:9a:d7:25:f7:97:ac:94:ae: 6e:3e:c1:93:6a:6a:0c:49:ab:ab:b9:fe:34:72:77: 4a:7c:7c:2e:8d:7a:2d:40:1a:4b:19:61:98:4a:55: c0:3b:d9:64:91:71:4f:b6:ce:c6:db:35:29:ca:21: 68:8e:59:ca:6c:a3:82:b3:a6:89:31:ef:3d:75:82: 8a:65:53:8e:f5:78:d0:61:08:cf:c1:1e:a6:b8:29: 28:6b:3c:1d:e2:41:11:a1:98:ff:c1:27:33:3c:dd: a3:1d:20:c1:0c:13:bb:4e:01:bd:40:5e:89:2c:ff: e4:a6:0f:01:26:b6:b4:b2:c2:76:fd:9a:ed:4f:73: 25:9f:60:35:1b:1a:c1:bd:5c:ea:74:71:6f:47:d5: 1d:eb:73:6a:97:6f:25:25:f9:36:c5:79:09:65:77: 31:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:39:10:49:B7:52:1F:76:7A:C8:25:7A:88:90:C8:2B:D3:29:EA:73 X509v3 Authority Key Identifier: keyid:C9:D7:6E:E3:69:CC:1C:F0:E6:29:C5:10:A4:BA:F4:65:E1:5F:B5:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:1e:6d:25:f1:7a:20:82:62:e8:77:47:b8:34:3a:9a:f1:4a: 72:f3:f7:6d:d9:b4:1b:0d:90:90:9f:84:8c:0b:3f:9b:c5:4b: 43:dd:95:e4:c1:ca:0b:64:9a:63:09:29:f5:e1:72:47:e0:dd: db:1d:15:c2:d4:19:e0:28:c7:2c:de:6f:e1:6c:18:d2:06:7e: 1c:5a:dc:c6:c7:bc:4e:76:4d:14:23:29:6d:7c:24:0d:8c:69: 55:16:6b:c9:ea:7e:f0:bc:48:34:e3:1d:29:cb:a8:fd:4f:c5: 75:f5:5a:b4:04:2a:31:b3:d5:41:f3:19:26:51:9b:14:75:57: dc:29:02:4b:32:4d:9e:c6:ea:f5:42:49:d8:02:b8:0e:c5:62: f5:33:8f:d2:f9:be:5e:58:34:3b:de:63:76:88:b6:4a:50:2c: c5:f6:8d:ec:00:1d:61:3f:9c:e1:ed:10:20:27:df:8e:f2:32: 07:1f:ea:17:d0:7a:6b:91:e4:d8:96:4a:19:b0:92:17:a4:f0: 07:52:1d:78:9e:71:f5:3d:b2:0a:2c:96:27:92:a5:58:56:7d: 8b:8e:c2:f7:c0:96:80:96:1f:d1:54:4e:9d:44:03:ee:49:cf: 09:74:ff:d3:ba:34:5a:95:40:fc:d4:98:8f:7a:38:2a:60:b3: 51:2c:30:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFNTkxMTAvBgNVBAUTKEM5RDc2RUUzNjlDQzFDRjBFNjI5QzUxMEE0QkFGNDY1 RTE1RkI1RTEwHhcNMjUxMDE5MDIwNDEzWhcNMjUxMDI2MDIwNDEzWjAYMRYwFAYD VQQDEw02OGY0NDcxZS1mY2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAynDS7IPP+6iJDCyS2PWZ8fYyLr2VC80oLZmQlpBZ3xWXcNyJPnpvo99tDjA4 lGYw5g0DsI8fkbVpWn6vfnHl6GCdO49U3PHs7ItgWVX4ZSgjIN8PdcOfQ/7z3Ykx hSA0mtcl95eslK5uPsGTamoMSauruf40cndKfHwujXotQBpLGWGYSlXAO9lkkXFP ts7G2zUpyiFojlnKbKOCs6aJMe89dYKKZVOO9XjQYQjPwR6muCkoazwd4kERoZj/ wSczPN2jHSDBDBO7TgG9QF6JLP/kpg8BJra0ssJ2/ZrtT3Mln2A1GxrBvVzqdHFv R9Ud63Nql28lJfk2xXkJZXcxzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCg5EEm3 Uh92esgleoiQyCvTKepzMB8GA1UdIwQYMBaAFMnXbuNpzBzw5inFEKS69GXhX7Xh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEU1OS9BQjYxMTFCNDZD NjQxMUVDQkVBQTE4NTJDNEY5QUUwMi95ZGR1NDJuTUhQRG1LY1VRcExyMFplRmZ0 ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lkZHU0Mm5NSFBEbUtjVVFwTHIwWmVGZnRlRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEU1OS9BQjYxMTFCNDZDNjQxMUVDQkVBQTE4NTJDNEY5QUUwMi95ZGR1NDJuTUhQ RG1LY1VRcExyMFplRmZ0ZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYHm0l8XoggmLod0e4NDqa8Upy8/dt2bQbDZCQn4SMCz+bxUtD3ZXk wcoLZJpjCSn14XJH4N3bHRXC1BngKMcs3m/hbBjSBn4cWtzGx7xOdk0UIyltfCQN jGlVFmvJ6n7wvEg04x0py6j9T8V19Vq0BCoxs9VB8xkmUZsUdVfcKQJLMk2exur1 QknYArgOxWL1M4/S+b5eWDQ73mN2iLZKUCzF9o3sAB1hP5zh7RAgJ9+O8jIHH+oX 0HprkeTYlkoZsJIXpPAHUh14nnH1PbIKLJYnkqVYVn2LjsL3wJaAlh/RVE6dRAPu Sc8JdP/TujRalUD81JiPejgqYLNRLDBY -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:15 2025 by rpki-client