$ rpki-client -vvf rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft File: 9yY4deggn7olR_uOOH2AP3WAvtY.mft (raw, json) Hash identifier: uxgxPqGU6V4tqWLWXMlromf/gib8b9+NOBpFwsSlLDg= Subject key identifier: 4E:C3:8D:9D:B3:11:24:52:91:76:63:67:48:A2:CB:9B:6B:FE:F1:92 Authority key identifier: F7:26:38:75:E8:20:9F:BA:25:47:FB:8E:38:7D:80:3F:75:80:BE:D6 Certificate issuer: /CN=A9126AFE/serialNumber=F7263875E8209FBA2547FB8E387D803F7580BED6 Certificate serial: 067D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft Manifest number: 0676 Signing time: Sun 02 Nov 2025 22:30:48 +0000 Manifest this update: Sun 02 Nov 2025 22:30:47 +0000 Manifest next update: Sun 09 Nov 2025 22:30:47 +0000 Files and hashes: 1: 9yY4deggn7olR_uOOH2AP3WAvtY.crl (hash: n0KDOS15SV9jJ1Swc0QJf8QByN7WNcMOlyyw/hhxzZs=) 2: B46F501C994D11EBB61C0C71C4F9AE02.roa (hash: j/GF9Fp/8A3iAGqlLey+nPmFjem1hKBzyG3C/3FfPBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.crl rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:30:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1661 (0x67d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126AFE, serialNumber=F7263875E8209FBA2547FB8E387D803F7580BED6 Validity Not Before: Nov 2 22:30:47 2025 GMT Not After : Nov 9 22:30:47 2025 GMT Subject: CN=6907db97-62f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f9:d3:70:84:61:b5:ed:ba:35:be:41:37:75: 95:20:b7:f9:e7:53:ec:c5:47:82:60:c6:97:b6:be: eb:27:31:5b:a9:b8:f9:9b:7f:b2:8f:1e:3b:0f:48: ba:d8:14:6c:94:17:89:60:1b:10:de:55:e9:23:be: 65:a6:13:25:a5:25:1c:fe:90:92:69:22:30:5d:41: c2:b2:5e:0d:dd:e5:6b:eb:64:97:f9:48:9e:b9:db: 91:02:5e:14:35:03:d3:9c:8d:5c:8d:5a:96:f1:3f: 1e:6f:a0:18:4a:f0:19:93:ba:04:57:f5:53:e3:9e: 86:29:5a:8e:cf:bc:3f:7c:30:fb:18:52:d4:ed:06: 74:49:10:8c:ee:08:8f:11:8f:18:47:0e:68:bd:22: 0b:82:1b:3f:ff:83:d4:a5:38:bb:90:78:82:2a:14: 68:de:ad:a9:82:94:bb:00:70:a7:02:a9:20:08:89: 3f:04:a3:ac:36:2a:c9:dc:62:ec:fd:0e:4b:d1:2d: 93:47:5e:55:42:f4:a8:13:6d:d0:ab:34:b7:48:03: 5f:72:91:ec:77:f6:16:fe:f7:51:50:a8:61:38:74: 42:0c:db:2e:c6:ea:48:b2:f2:64:f1:2d:d4:4e:ba: 37:d0:44:8e:0c:8d:b5:b8:35:4d:bc:2e:ee:69:c2: 47:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C3:8D:9D:B3:11:24:52:91:76:63:67:48:A2:CB:9B:6B:FE:F1:92 X509v3 Authority Key Identifier: keyid:F7:26:38:75:E8:20:9F:BA:25:47:FB:8E:38:7D:80:3F:75:80:BE:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:a7:8f:38:49:48:8f:f6:0d:04:61:57:7a:5a:a6:fc:3d:50: 7d:ac:49:88:c5:3b:34:9a:48:43:4e:36:6c:15:5e:f8:d8:09: 1e:37:39:2f:c9:6b:b5:bb:6a:fd:06:ed:bc:a3:78:b6:7a:02: 3d:5c:06:e5:d8:cd:1c:41:33:e2:74:af:ff:17:8d:d6:50:91: 61:db:d2:c5:91:44:2e:17:7e:04:3c:18:de:a3:78:75:3a:0f: fc:5e:1f:34:18:47:c8:4a:6f:bb:b8:1c:dd:21:b8:95:91:0a: ff:df:53:98:09:d0:51:b1:e4:12:67:9d:bc:fb:e1:0a:05:2a: cf:98:17:d4:f4:6d:cf:3c:26:16:1a:83:94:6d:1c:94:96:c1: 0f:9c:bf:d6:c2:12:4b:ca:68:5d:af:dc:b4:b8:bd:ca:34:ce: 5a:95:4a:d3:6f:07:a6:ab:a3:3d:20:32:2a:49:e7:90:24:65: 16:b5:51:8f:bb:a6:2a:be:6d:c1:d4:cc:8a:0c:80:53:a7:f3: 96:9e:f8:0f:3d:88:b7:fc:39:9d:32:05:33:94:85:31:23:51: 10:60:e3:8c:38:71:79:d1:32:f3:3b:55:8e:76:17:0e:1f:ff: 9f:92:d3:13:60:cf:c5:4f:ae:c3:8b:e6:25:5c:a5:72:93:03: 7c:38:8f:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZBRkUxMTAvBgNVBAUTKEY3MjYzODc1RTgyMDlGQkEyNTQ3RkI4RTM4N0Q4MDNG NzU4MEJFRDYwHhcNMjUxMTAyMjIzMDQ3WhcNMjUxMTA5MjIzMDQ3WjAYMRYwFAYD VQQDEw02OTA3ZGI5Ny02MmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2fnTcIRhte26Nb5BN3WVILf551PsxUeCYMaXtr7rJzFbqbj5m3+yjx47D0i6 2BRslBeJYBsQ3lXpI75lphMlpSUc/pCSaSIwXUHCsl4N3eVr62SX+UieuduRAl4U NQPTnI1cjVqW8T8eb6AYSvAZk7oEV/VT456GKVqOz7w/fDD7GFLU7QZ0SRCM7giP EY8YRw5ovSILghs//4PUpTi7kHiCKhRo3q2pgpS7AHCnAqkgCIk/BKOsNirJ3GLs /Q5L0S2TR15VQvSoE23QqzS3SANfcpHsd/YW/vdRUKhhOHRCDNsuxupIsvJk8S3U Tro30ESODI21uDVNvC7uacJHwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7DjZ2z ESRSkXZjZ0iiy5tr/vGSMB8GA1UdIwQYMBaAFPcmOHXoIJ+6JUf7jjh9gD91gL7W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkFGRS81ODI3MjkzQTk5 NEIxMUVCQkYxRDY5NkFDNEY5QUUwMi85eVk0ZGVnZ243b2xSX3VPT0gyQVAzV0F2 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzl5WTRkZWdnbjdvbFJfdU9PSDJBUDNXQXZ0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkFGRS81ODI3MjkzQTk5NEIxMUVCQkYxRDY5NkFDNEY5QUUwMi85eVk0ZGVnZ243 b2xSX3VPT0gyQVAzV0F2dFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfp484SUiP9g0EYVd6Wqb8PVB9rEmIxTs0mkhDTjZsFV742AkeNzkv yWu1u2r9Bu28o3i2egI9XAbl2M0cQTPidK//F43WUJFh29LFkUQuF34EPBjeo3h1 Og/8Xh80GEfISm+7uBzdIbiVkQr/31OYCdBRseQSZ528++EKBSrPmBfU9G3PPCYW GoOUbRyUlsEPnL/WwhJLymhdr9y0uL3KNM5alUrTbwemq6M9IDIqSeeQJGUWtVGP u6Yqvm3B1MyKDIBTp/OWnvgPPYi3/DmdMgUzlIUxI1EQYOOMOHF50TLzO1WOdhcO H/+fktMTYM/FT67Di+YlXKVykwN8OI/y -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:15 2025 by rpki-client