$ rpki-client -vvf rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.mft File: yy5uwVWepHY5RAtAqtdfleb9vF8.mft (raw, json) Hash identifier: 65DUW2ydzNx7iNNhefmfKgk579nHdhXtR878IUy+pxM= Subject key identifier: 2A:90:BC:AA:72:9B:41:18:62:80:28:30:21:D9:80:BE:07:59:6D:3B Authority key identifier: CB:2E:6E:C1:55:9E:A4:76:39:44:0B:40:AA:D7:5F:95:E6:FD:BC:5F Certificate issuer: /CN=A9127760/serialNumber=CB2E6EC1559EA47639440B40AAD75F95E6FDBC5F Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yy5uwVWepHY5RAtAqtdfleb9vF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.mft Manifest number: 1E Signing time: Fri 17 Oct 2025 11:35:24 +0000 Manifest this update: Fri 17 Oct 2025 11:35:24 +0000 Manifest next update: Fri 24 Oct 2025 11:35:24 +0000 Files and hashes: 1: yy5uwVWepHY5RAtAqtdfleb9vF8.crl (hash: YWt2Pm02mgcUu8fuPH5czwYvCP4sZrnUgOtnhDNO5UU=) 2: F9B1B1167E3F11F0B7941020C4F9AE02.roa (hash: bK7hZCbYRKmxsAbM/VvM+9yVYJP6bmKeYAFIpnPtV6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.crl rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yy5uwVWepHY5RAtAqtdfleb9vF8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 11:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127760, serialNumber=CB2E6EC1559EA47639440B40AAD75F95E6FDBC5F Validity Not Before: Oct 17 11:35:24 2025 GMT Not After : Oct 24 11:35:24 2025 GMT Subject: CN=68f229fc-f2fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0c:98:0e:7e:c3:ad:51:8f:96:d4:68:db:48: 20:60:e6:4f:2c:79:dd:f8:9d:cd:3f:8d:2f:7e:58: 54:28:98:a5:b8:1d:44:3c:0f:c4:6b:a1:c2:0f:69: 4d:dd:77:bd:78:7a:df:14:1d:87:f4:4b:ce:17:07: 6a:ef:d6:17:5e:db:51:05:61:53:9c:d1:67:e9:75: 8e:f2:f3:78:2a:83:9c:84:22:70:cc:bf:35:4c:f4: e7:09:9c:cb:57:8a:7f:1f:20:c9:1e:81:65:17:bd: a5:1a:c5:30:04:e7:62:31:92:08:f7:1e:61:2e:b9: de:36:5a:9f:80:3e:b0:4f:1a:47:14:bc:b6:8a:50: b1:f2:e8:2b:f5:6b:e9:f9:25:e9:1d:b0:2e:60:10: d6:fa:bb:8f:62:b2:6d:3d:77:30:00:8a:21:b7:30: f5:bb:4c:13:d6:47:f8:35:54:f2:b8:3d:3b:41:5d: ae:d1:0d:17:a6:ca:46:6f:77:a4:aa:8c:18:24:ca: 73:3b:7f:b9:f8:8e:a1:61:9b:48:0b:97:58:00:85: d3:6c:1d:d6:00:72:cb:b1:5c:49:ac:de:57:e1:7f: 7d:c8:e8:a9:bb:18:50:32:8a:51:49:78:d6:94:e8: ba:92:59:48:d7:f3:83:60:24:4f:ea:eb:1a:9f:80: bd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:90:BC:AA:72:9B:41:18:62:80:28:30:21:D9:80:BE:07:59:6D:3B X509v3 Authority Key Identifier: keyid:CB:2E:6E:C1:55:9E:A4:76:39:44:0B:40:AA:D7:5F:95:E6:FD:BC:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yy5uwVWepHY5RAtAqtdfleb9vF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:18:e4:69:f6:3e:45:02:ff:ce:b9:33:1d:78:5e:7f:69:0a: 69:59:24:31:42:b3:77:68:f0:fa:21:18:93:6c:6b:90:91:54: 93:92:9c:94:ad:fb:78:b8:e3:a7:36:b0:ea:74:fb:04:91:7f: 60:f0:3f:c1:65:39:09:11:5b:fd:ad:25:79:41:b1:64:2e:db: 14:dd:2d:b1:f1:4d:e3:e4:3e:1b:62:56:6f:4a:72:43:be:93: e8:00:40:a1:27:75:07:c5:5b:87:04:38:f7:30:79:46:26:74: 5c:bb:16:42:67:4a:35:6a:71:00:c2:3e:bb:24:99:aa:46:a1: 17:1a:21:a5:80:d5:a5:3b:b0:f7:ea:13:a6:45:09:77:ed:cf: 33:e4:87:0b:37:4c:80:62:f0:9e:b0:12:48:1d:99:22:0c:b2: dd:cb:b9:8c:d9:da:56:97:94:e2:b5:0e:78:92:20:ed:12:d8: a6:09:bc:cf:a4:7e:57:ba:eb:54:fc:e4:a2:89:f4:ea:a4:9e: 8c:83:68:c9:31:f5:4a:bf:7d:59:f6:b4:fb:c9:a8:d1:73:d7: 59:06:c5:2a:ea:80:d5:7f:f9:ed:bb:e1:aa:c7:c8:4e:e5:7e: 34:95:21:90:cc:ba:47:12:06:8e:aa:8f:9c:fc:57:14:3a:ee: ca:75:1f:be -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Nzc2MDExMC8GA1UEBRMoQ0IyRTZFQzE1NTlFQTQ3NjM5NDQwQjQwQUFENzVGOTVF NkZEQkM1RjAeFw0yNTEwMTcxMTM1MjRaFw0yNTEwMjQxMTM1MjRaMBgxFjAUBgNV BAMTDTY4ZjIyOWZjLWYyZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2DJgOfsOtUY+W1GjbSCBg5k8sed34nc0/jS9+WFQomKW4HUQ8D8RrocIPaU3d d714et8UHYf0S84XB2rv1hde21EFYVOc0WfpdY7y83gqg5yEInDMvzVM9OcJnMtX in8fIMkegWUXvaUaxTAE52Ixkgj3HmEuud42Wp+APrBPGkcUvLaKULHy6Cv1a+n5 JekdsC5gENb6u49ism09dzAAiiG3MPW7TBPWR/g1VPK4PTtBXa7RDRemykZvd6Sq jBgkynM7f7n4jqFhm0gLl1gAhdNsHdYAcsuxXEms3lfhf33I6Km7GFAyilFJeNaU 6LqSWUjX84NgJE/q6xqfgL1FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKpC8qnKb QRhigCgwIdmAvgdZbTswHwYDVR0jBBgwFoAUyy5uwVWepHY5RAtAqtdfleb9vF8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3NzYwLzc0M0QxNjdFN0Uz RjExRjBBQjA4OUIxRUM0RjlBRTAyL3l5NXV3VldlcEhZNVJBdEFxdGRmbGViOXZG OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveXk1dXdWV2VwSFk1UkF0QXF0ZGZsZWI5dkY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 NzYwLzc0M0QxNjdFN0UzRjExRjBBQjA4OUIxRUM0RjlBRTAyL3l5NXV3VldlcEhZ NVJBdEFxdGRmbGViOXZGOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABcY5Gn2PkUC/865Mx14Xn9pCmlZJDFCs3do8PohGJNsa5CRVJOSnJSt +3i446c2sOp0+wSRf2DwP8FlOQkRW/2tJXlBsWQu2xTdLbHxTePkPhtiVm9KckO+ k+gAQKEndQfFW4cEOPcweUYmdFy7FkJnSjVqcQDCPrskmapGoRcaIaWA1aU7sPfq E6ZFCXftzzPkhws3TIBi8J6wEkgdmSIMst3LuYzZ2laXlOK1DniSIO0S2KYJvM+k fle661T85KKJ9OqknoyDaMkx9Uq/fVn2tPvJqNFz11kGxSrqgNV/+e274arHyE7l fjSVIZDMukcSBo6qj5z8VxQ67sp1H74= -----END CERTIFICATE-----Generated at Sat Oct 18 23:38:45 2025 by rpki-client