$ rpki-client -vvf rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft File: YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft (raw, json) Hash identifier: VA+CT76lHVTvcMkj3K/iwJhjJvxKnVtCbRMRtPsDfAY= Subject key identifier: E8:1C:3E:9C:F5:50:1E:10:72:FB:7F:25:C8:25:17:86:46:01:1A:BC Authority key identifier: 62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4 Certificate issuer: /CN=A9120FD4/serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4 Certificate serial: 0CFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft Manifest number: 0CEF Signing time: Sun 02 Nov 2025 18:07:23 +0000 Manifest this update: Sun 02 Nov 2025 18:07:23 +0000 Manifest next update: Sun 09 Nov 2025 18:07:23 +0000 Files and hashes: 1: YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl (hash: 4CQeTR7azb1TTmXLbNhoDbR9Ngg6hpmywJmiW0OAsQs=) 2: 4154E51AC91311EBA6226F45C4F9AE02.roa (hash: X3uR7nkHEkJDs/4UDZXjCbVpYlI7ETxizWrqRmPT3Rg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3325 (0xcfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120FD4, serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4 Validity Not Before: Nov 2 18:07:23 2025 GMT Not After : Nov 9 18:07:23 2025 GMT Subject: CN=69079ddb-fa02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:15:e5:23:2a:db:0e:cc:03:e1:35:26:d4:48: a9:8b:80:c2:d1:57:99:bf:1d:74:f8:ba:dc:ef:3a: 91:98:d9:09:53:39:d8:8a:9e:d7:f9:72:f6:40:0b: a8:14:e0:27:3c:3a:36:6d:4b:d0:37:6a:77:bc:62: a9:1f:b5:96:4d:f5:5a:8c:40:83:f2:ba:48:75:a2: 6a:db:dc:16:4b:59:10:6a:17:38:0a:bf:37:b6:f0: a4:30:4d:e4:07:74:32:b4:9a:12:a3:b8:3a:5b:a2: 95:c1:db:4f:5e:49:48:2f:61:88:20:91:c6:e9:ac: df:c3:ea:52:e7:b3:86:ac:67:08:c8:a1:6d:2b:b1: 33:42:3d:38:cd:32:23:db:15:f8:25:a5:42:7f:bd: 18:11:9f:88:25:fe:ae:6c:76:3c:07:49:a3:97:44: 07:ee:bc:83:4d:d2:7f:68:eb:cb:f6:ae:fb:66:b5: d3:0c:3e:ce:a1:55:eb:df:3e:8b:5c:16:2d:20:e1: e9:64:66:f4:dc:7b:11:6c:f0:1c:4f:09:bc:1f:87: dc:7b:d2:03:55:4b:bc:01:43:a3:82:da:59:e5:94: 51:86:02:22:b7:af:71:2c:ba:9f:dc:33:23:e8:78: ad:27:a7:6f:28:b2:9f:f2:4e:cc:ab:ae:60:d2:f4: aa:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:1C:3E:9C:F5:50:1E:10:72:FB:7F:25:C8:25:17:86:46:01:1A:BC X509v3 Authority Key Identifier: keyid:62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:fd:cd:fa:0a:eb:64:ef:9e:9d:e7:b3:34:5c:20:3a:d2:ee: bf:7f:d1:24:cc:32:fd:37:c2:b4:f3:fd:13:91:3a:36:8a:c0: 05:0d:04:a4:60:9b:7a:4a:50:c6:77:54:48:1b:50:39:ad:4e: 6e:95:ed:3d:67:5e:a7:18:bf:bb:bd:7a:f4:d1:cc:87:56:e4: 2c:0a:c8:14:54:46:62:d8:77:81:ec:9d:5f:c1:d0:1e:a3:fd: a1:19:51:ec:74:c9:30:4d:ea:cd:38:bb:10:73:76:79:a9:c4: 3a:cb:dc:33:6b:cd:05:5a:ac:a6:ae:79:a3:89:d5:5e:d6:9e: 15:e9:13:14:26:c6:94:40:b4:64:c3:ce:1a:f8:d7:f8:47:e0: 9c:00:76:54:38:9c:c5:ef:ac:5d:9f:e5:e2:90:c8:2e:93:04: 1c:c3:0d:36:5c:69:51:50:f1:41:df:62:04:db:e0:56:9e:b8: 15:54:18:d6:46:24:0c:b8:d2:18:90:82:e2:f1:3e:dd:f9:e3: 37:38:1f:33:38:29:6b:37:e3:89:77:52:c3:49:c8:0c:58:e3: a9:5a:3c:43:44:5c:42:62:a1:6b:02:31:b5:2b:72:f0:64:2d: d6:0e:5a:cb:41:29:eb:77:bd:1c:93:ad:b6:9f:c9:f1:84:c9: c4:97:15:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBGRDQxMTAvBgNVBAUTKDYyQzZCMUEwQjJDM0E2MTRGM0NCNDNGQUJCMzFCRjgx NjE2QjU0QjQwHhcNMjUxMTAyMTgwNzIzWhcNMjUxMTA5MTgwNzIzWjAYMRYwFAYD VQQDEw02OTA3OWRkYi1mYTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5RXlIyrbDswD4TUm1Eipi4DC0VeZvx10+Lrc7zqRmNkJUznYip7X+XL2QAuo FOAnPDo2bUvQN2p3vGKpH7WWTfVajECD8rpIdaJq29wWS1kQahc4Cr83tvCkME3k B3QytJoSo7g6W6KVwdtPXklIL2GIIJHG6azfw+pS57OGrGcIyKFtK7EzQj04zTIj 2xX4JaVCf70YEZ+IJf6ubHY8B0mjl0QH7ryDTdJ/aOvL9q77ZrXTDD7OoVXr3z6L XBYtIOHpZGb03HsRbPAcTwm8H4fce9IDVUu8AUOjgtpZ5ZRRhgIit69xLLqf3DMj 6HitJ6dvKLKf8k7Mq65g0vSq+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgcPpz1 UB4Qcvt/JcglF4ZGARq8MB8GA1UdIwQYMBaAFGLGsaCyw6YU88tD+rsxv4Fha1S0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEZENC84MDlDMjREMkY1 NTExMUU5OUQ1QjdEM0RDNEY5QUUwMi9Zc2F4b0xMRHBoVHp5MFA2dXpHX2dXRnJW TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzYXhvTExEcGhUenkwUDZ1ekdfZ1dGclZMUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEZENC84MDlDMjREMkY1NTExMUU5OUQ1QjdEM0RDNEY5QUUwMi9Zc2F4b0xMRHBo VHp5MFA2dXpHX2dXRnJWTFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCT/c36Cutk756d57M0XCA60u6/f9EkzDL9N8K08/0TkTo2isAFDQSk YJt6SlDGd1RIG1A5rU5ule09Z16nGL+7vXr00cyHVuQsCsgUVEZi2HeB7J1fwdAe o/2hGVHsdMkwTerNOLsQc3Z5qcQ6y9wza80FWqymrnmjidVe1p4V6RMUJsaUQLRk w84a+Nf4R+CcAHZUOJzF76xdn+XikMgukwQcww02XGlRUPFB32IE2+BWnrgVVBjW RiQMuNIYkILi8T7d+eM3OB8zOClrN+OJd1LDScgMWOOpWjxDRFxCYqFrAjG1K3Lw ZC3WDlrLQSnrd70ck622n8nxhMnElxWc -----END CERTIFICATE-----Generated at Mon Nov 3 18:20:14 2025 by rpki-client