$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft File: yNpkCWcTSBB928ixg_VavykxJVY.mft (raw, json) Hash identifier: FLqgDUeIFlY/RBg2VK3lIvGDnPoBG30ZJnYjs8BZNpU= Subject key identifier: 5A:91:3F:7B:42:69:34:58:F3:03:C3:9D:5B:96:7F:80:1A:13:4D:BC Authority key identifier: C8:DA:64:09:67:13:48:10:7D:DB:C8:B1:83:F5:5A:BF:29:31:25:56 Certificate issuer: /CN=A9120974/serialNumber=C8DA6409671348107DDBC8B183F55ABF29312556 Certificate serial: 109B Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft Manifest number: 109B Signing time: Fri 31 Oct 2025 17:31:55 +0000 Manifest this update: Fri 31 Oct 2025 17:31:54 +0000 Manifest next update: Fri 07 Nov 2025 17:31:54 +0000 Files and hashes: 1: yNpkCWcTSBB928ixg_VavykxJVY.crl (hash: S1KDWwxqGKtWHx8TUNaakw682M8DCA5pC+UoVJOqBj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.crl rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 17:31:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4251 (0x109b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974, serialNumber=C8DA6409671348107DDBC8B183F55ABF29312556 Validity Not Before: Oct 31 17:31:54 2025 GMT Not After : Nov 7 17:31:54 2025 GMT Subject: CN=6904f28a-10ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:16:5a:cf:ca:75:d2:40:08:cd:18:c5:3c:1e: 70:0d:f4:ce:7b:45:fd:b3:27:cd:05:c1:98:3f:6a: 25:76:f2:84:3b:8a:31:20:f5:6b:49:94:33:4b:f4: a1:4f:9a:77:9a:1a:1f:e5:00:e6:bd:e6:64:d7:3a: cc:e4:ff:5f:e3:8c:66:d2:a7:08:fe:0e:4e:c8:3d: db:6a:24:a7:cc:f9:f8:45:78:79:8c:7e:41:7a:be: 44:9c:0c:c5:0c:15:53:ee:2c:46:76:e6:7a:ad:ba: 71:74:d9:63:e3:4e:6b:6e:69:ea:fe:b2:84:2b:f6: 13:29:90:27:cb:7b:60:21:a7:c4:2e:24:07:71:21: cd:66:41:d0:74:8e:e5:34:20:a6:7a:ea:c4:43:06: 62:c2:b5:7d:f7:24:ad:f3:ec:19:8b:c9:08:d7:10: 8a:90:ba:53:4c:45:4b:0b:ac:3f:fd:5f:34:2d:90: 8d:e5:63:b6:09:dd:e3:28:40:75:e3:39:f3:ba:3d: 7b:d7:06:03:81:f4:28:56:8e:29:64:d8:64:b1:59: 8c:8c:1d:06:c7:d7:12:1b:8e:b7:5a:da:e6:71:ce: 0e:69:ad:5a:c6:bf:96:8e:fd:94:77:6c:2c:24:13: af:8b:7e:ec:77:fc:e7:c3:a4:39:f0:da:81:39:d6: 09:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:91:3F:7B:42:69:34:58:F3:03:C3:9D:5B:96:7F:80:1A:13:4D:BC X509v3 Authority Key Identifier: keyid:C8:DA:64:09:67:13:48:10:7D:DB:C8:B1:83:F5:5A:BF:29:31:25:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yNpkCWcTSBB928ixg_VavykxJVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/D677D31A3A4911E9940F2D16C4F9AE02/yNpkCWcTSBB928ixg_VavykxJVY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:45:a0:90:66:08:04:ef:03:6d:4a:03:19:2e:34:a0:e6:5e: 93:13:1a:7f:70:8b:d0:d9:b9:58:81:96:b2:af:05:91:bc:59: 33:a4:08:45:b6:2f:1b:ff:3d:f6:64:d0:17:92:db:7d:66:bf: c0:45:c9:56:07:a8:21:36:7a:4e:35:66:53:4b:ef:15:48:6a: eb:63:d0:4c:db:52:39:6d:07:f8:a5:a3:78:18:ca:3e:75:e4: de:15:d1:b2:7c:d9:e6:76:6e:ed:4f:2b:8c:2e:ba:c0:7a:a9: f3:3d:6a:ee:47:e8:b4:e8:2b:8e:1c:08:8d:84:6c:fc:66:56: d1:95:fa:b4:4d:2a:d4:81:e8:88:6e:ac:09:70:f7:f2:8c:94: 4b:0e:05:eb:37:ba:8a:95:54:16:09:44:20:64:62:86:9e:36: 0d:01:5d:f5:00:4d:d1:3b:2f:14:e0:67:d7:a3:68:3e:e1:36: 08:ee:d9:c6:3f:34:25:a3:ca:b7:c3:bd:bf:70:66:d8:6d:74: 12:34:6f:40:77:6f:bd:fe:72:ac:42:34:66:54:63:59:6d:cd: 25:f7:ad:a7:bd:27:3b:67:71:0d:82:3b:9f:aa:a1:c5:d4:44: fe:62:26:8f:c4:6e:9d:c1:bf:6a:c8:ab:20:28:c4:91:db:03: 78:25:63:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKEM4REE2NDA5NjcxMzQ4MTA3RERCQzhCMTgzRjU1QUJG MjkzMTI1NTYwHhcNMjUxMDMxMTczMTU0WhcNMjUxMTA3MTczMTU0WjAYMRYwFAYD VQQDEw02OTA0ZjI4YS0xMGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAohZaz8p10kAIzRjFPB5wDfTOe0X9syfNBcGYP2oldvKEO4oxIPVrSZQzS/Sh T5p3mhof5QDmveZk1zrM5P9f44xm0qcI/g5OyD3baiSnzPn4RXh5jH5Ber5EnAzF DBVT7ixGduZ6rbpxdNlj405rbmnq/rKEK/YTKZAny3tgIafELiQHcSHNZkHQdI7l NCCmeurEQwZiwrV99ySt8+wZi8kI1xCKkLpTTEVLC6w//V80LZCN5WO2Cd3jKEB1 4znzuj171wYDgfQoVo4pZNhksVmMjB0Gx9cSG463Wtrmcc4Oaa1axr+Wjv2Ud2ws JBOvi37sd/znw6Q58NqBOdYJvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqRP3tC aTRY8wPDnVuWf4AaE028MB8GA1UdIwQYMBaAFMjaZAlnE0gQfdvIsYP1Wr8pMSVW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9ENjc3RDMxQTNB NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi95TnBrQ1djVFNCQjkyOGl4Z19WYXZ5a3hK VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL3lOcGtDV2NUU0JCOTI4aXhnX1ZhdnlreEpWWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC9ENjc3RDMxQTNBNDkxMUU5OTQwRjJEMTZDNEY5QUUwMi95TnBrQ1djVFNC QjkyOGl4Z19WYXZ5a3hKVlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDRaCQZggE7wNtSgMZLjSg5l6TExp/cIvQ2blYgZayrwWRvFkzpAhF ti8b/z32ZNAXktt9Zr/ARclWB6ghNnpONWZTS+8VSGrrY9BM21I5bQf4paN4GMo+ deTeFdGyfNnmdm7tTyuMLrrAeqnzPWruR+i06CuOHAiNhGz8ZlbRlfq0TSrUgeiI bqwJcPfyjJRLDgXrN7qKlVQWCUQgZGKGnjYNAV31AE3ROy8U4GfXo2g+4TYI7tnG PzQlo8q3w72/cGbYbXQSNG9Ad2+9/nKsQjRmVGNZbc0l962nvSc7Z3ENgjufqqHF 1ET+YiaPxG6dwb9qyKsgKMSR2wN4JWPp -----END CERTIFICATE-----Generated at Sun Nov 2 00:45:11 2025 by rpki-client