$ rpki-client -vvf rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft File: lyuQ2cUZIlatlkdbOSurGnp5zC0.mft (raw, json) Hash identifier: dfRXZepz4a7OkQdDQhQcBx4tCpYIsnL2zv6BRlBQnos= Subject key identifier: 73:34:D8:6C:F0:92:1D:B4:6B:68:95:8D:58:BF:BC:A6:0E:1D:A9:F9 Authority key identifier: 97:2B:90:D9:C5:19:22:56:AD:96:47:5B:39:2B:AB:1A:7A:79:CC:2D Certificate issuer: /CN=A9132FD9/serialNumber=972B90D9C5192256AD96475B392BAB1A7A79CC2D Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lyuQ2cUZIlatlkdbOSurGnp5zC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft Manifest number: 60 Signing time: Mon 03 Nov 2025 07:06:52 +0000 Manifest this update: Mon 03 Nov 2025 07:06:51 +0000 Manifest next update: Mon 10 Nov 2025 07:06:51 +0000 Files and hashes: 1: lyuQ2cUZIlatlkdbOSurGnp5zC0.crl (hash: GqFLCY5g4WX1h6m2lARbZ4QW0YS6gsP1kjJP08C/e+I=) 2: DCC2224A313011F0BE214A64C4F9AE02.roa (hash: boAAaQY0nzMtC8MdALGWU7uiMFPgsCoPJLOiVmNOgmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.crl rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lyuQ2cUZIlatlkdbOSurGnp5zC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132FD9, serialNumber=972B90D9C5192256AD96475B392BAB1A7A79CC2D Validity Not Before: Nov 3 07:06:51 2025 GMT Not After : Nov 10 07:06:51 2025 GMT Subject: CN=6908548c-d3d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:85:2d:be:2f:4b:69:77:fa:a9:ae:e2:30:26: 1b:2e:fb:28:7b:4b:07:f1:46:91:f7:0d:d3:fa:a6: c3:c3:4f:ef:92:55:58:5c:65:00:e5:96:72:9f:1c: de:d6:b1:dc:ae:64:90:be:04:14:fe:dd:f3:f1:be: 0d:31:22:ad:a6:76:61:d6:66:1d:d6:ef:92:c5:3b: 60:7e:fc:39:ca:38:8c:fa:0f:12:72:99:4c:ae:3d: f0:8d:3a:b6:e9:1d:5f:0a:c1:ae:4e:31:96:c5:ec: ec:0a:76:8c:af:74:1f:2b:12:48:0d:62:5f:06:9e: 24:81:38:4f:98:29:9a:b6:49:92:c6:53:c7:4c:52: 78:d4:34:c6:6c:28:9f:ef:b6:d8:e3:fd:76:d1:87: f7:7b:ae:e7:dc:34:c2:b5:ac:c7:6e:da:bf:ca:b1: 82:a5:84:bf:b6:f2:03:36:aa:e8:5d:5b:19:43:6e: d3:65:94:10:b2:f2:46:c0:c2:4f:97:2b:25:26:53: c9:af:3a:a8:62:0b:3b:1f:c5:d0:69:bb:8c:60:c9: 21:89:fc:68:ca:c3:c7:8a:3b:c9:a5:2b:1a:af:17: 7f:09:a1:9c:87:19:86:3d:64:38:b8:72:df:12:2d: 97:90:54:e2:ee:df:7b:a9:27:44:b4:94:0f:e6:19: 27:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:34:D8:6C:F0:92:1D:B4:6B:68:95:8D:58:BF:BC:A6:0E:1D:A9:F9 X509v3 Authority Key Identifier: keyid:97:2B:90:D9:C5:19:22:56:AD:96:47:5B:39:2B:AB:1A:7A:79:CC:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lyuQ2cUZIlatlkdbOSurGnp5zC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:52:86:59:34:6e:d8:c9:aa:b5:26:97:e9:0a:d3:f9:79:1b: 2e:71:54:a5:8a:50:af:1d:eb:05:2f:af:05:c6:b5:83:6d:98: 8c:47:65:49:38:ce:5d:cf:3e:4a:2c:80:da:7c:27:c2:70:95: 0f:ea:8e:a6:46:5f:d7:6e:7d:bf:73:61:cb:91:75:ca:3f:79: 53:c0:3b:35:93:cd:6d:c4:f2:48:7e:f5:5f:92:e8:72:e0:1a: 3b:64:2c:54:80:23:c1:6a:c2:60:4d:11:22:05:e1:6b:78:33: 67:1d:ef:86:06:9e:9a:0c:54:2e:68:0b:72:d3:5e:4c:84:4e: 75:37:d9:81:6d:83:f6:fe:09:2b:0c:ea:26:14:ca:e5:a8:96: 78:fd:c3:74:6a:0c:1b:fd:f9:c8:5c:50:a1:3d:a2:cc:b4:6b: 63:42:39:e5:21:12:47:1e:fc:b2:20:43:ae:7b:05:18:23:93: 5e:a9:b2:1d:b9:16:31:0e:1e:53:eb:d7:68:00:1d:ad:f6:03: fe:5c:1b:71:9c:e0:12:56:a7:ef:5b:2b:9b:8c:29:03:2e:96: 47:c6:6f:fd:26:86:18:45:88:6d:ea:3f:7f:4d:ed:6f:81:45: fc:a1:a1:c7:f2:8e:ee:36:b7:d0:89:47:21:8c:ef:72:17:f0: e1:ff:23:cf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MkZEOTExMC8GA1UEBRMoOTcyQjkwRDlDNTE5MjI1NkFEOTY0NzVCMzkyQkFCMUE3 QTc5Q0MyRDAeFw0yNTExMDMwNzA2NTFaFw0yNTExMTAwNzA2NTFaMBgxFjAUBgNV BAMTDTY5MDg1NDhjLWQzZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbhS2+L0tpd/qpruIwJhsu+yh7SwfxRpH3DdP6psPDT++SVVhcZQDllnKfHN7W sdyuZJC+BBT+3fPxvg0xIq2mdmHWZh3W75LFO2B+/DnKOIz6DxJymUyuPfCNOrbp HV8Kwa5OMZbF7OwKdoyvdB8rEkgNYl8GniSBOE+YKZq2SZLGU8dMUnjUNMZsKJ/v ttjj/XbRh/d7rufcNMK1rMdu2r/KsYKlhL+28gM2quhdWxlDbtNllBCy8kbAwk+X KyUmU8mvOqhiCzsfxdBpu4xgySGJ/GjKw8eKO8mlKxqvF38JoZyHGYY9ZDi4ct8S LZeQVOLu33upJ0S0lA/mGSfPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUczTYbPCS HbRraJWNWL+8pg4dqfkwHwYDVR0jBBgwFoAUlyuQ2cUZIlatlkdbOSurGnp5zC0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyRkQ5LzdGOUE3MDM0MkJC NTExRjA5REU1QkE0RUM0RjlBRTAyL2x5dVEyY1VaSWxhdGxrZGJPU3VyR25wNXpD MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbHl1UTJjVVpJbGF0bGtkYk9TdXJHbnA1ekMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMy RkQ5LzdGOUE3MDM0MkJCNTExRjA5REU1QkE0RUM0RjlBRTAyL2x5dVEyY1VaSWxh dGxrZGJPU3VyR25wNXpDMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAClShlk0btjJqrUml+kK0/l5Gy5xVKWKUK8d6wUvrwXGtYNtmIxHZUk4 zl3PPkosgNp8J8JwlQ/qjqZGX9dufb9zYcuRdco/eVPAOzWTzW3E8kh+9V+S6HLg GjtkLFSAI8FqwmBNESIF4Wt4M2cd74YGnpoMVC5oC3LTXkyETnU32YFtg/b+CSsM 6iYUyuWolnj9w3RqDBv9+chcUKE9osy0a2NCOeUhEkce/LIgQ657BRgjk16psh25 FjEOHlPr12gAHa32A/5cG3Gc4BJWp+9bK5uMKQMulkfGb/0mhhhFiG3qP39N7W+B Rfyhocfyju42t9CJRyGM73IX8OH/I88= -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:24 2025 by rpki-client