$ rpki-client -vvf rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft File: ylWUEuKiOAIalO8nGO2wAe-W6oU.mft (raw, json) Hash identifier: 3jVB8naJUh8UrrJym7pp8xKDCygm9zEU9cDKgstFEok= Subject key identifier: 9B:BD:3F:01:B8:9A:0D:7A:B2:0C:D3:01:EE:48:43:D3:1D:E1:61:9A Authority key identifier: CA:55:94:12:E2:A2:38:02:1A:94:EF:27:18:ED:B0:01:EF:96:EA:85 Certificate issuer: /CN=A9142BA8/serialNumber=CA559412E2A238021A94EF2718EDB001EF96EA85 Certificate serial: 0459 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylWUEuKiOAIalO8nGO2wAe-W6oU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft Manifest number: 0455 Signing time: Wed 05 Nov 2025 00:17:00 +0000 Manifest this update: Wed 05 Nov 2025 00:17:00 +0000 Manifest next update: Wed 12 Nov 2025 00:17:00 +0000 Files and hashes: 1: ylWUEuKiOAIalO8nGO2wAe-W6oU.crl (hash: kddPgJRIiVtPkgLhZr2MehCJm1aJL6LWvRYqodBANMk=) 2: 4A9AA792720D11EC90C07770C4F9AE02.roa (hash: VxhE0yOw2UpFEmn9cUfGr5NqfhjBpOy+NCMi8LSn31o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.crl rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylWUEuKiOAIalO8nGO2wAe-W6oU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:16:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1113 (0x459) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142BA8, serialNumber=CA559412E2A238021A94EF2718EDB001EF96EA85 Validity Not Before: Nov 5 00:17:00 2025 GMT Not After : Nov 12 00:17:00 2025 GMT Subject: CN=690a977c-bb69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:66:e0:14:32:bb:86:00:81:72:84:06:38:5f: d2:76:a1:c9:d3:18:75:72:bd:c4:71:2b:05:a9:81: 65:b7:ee:7c:7d:59:ce:9c:c6:df:41:95:39:c7:d1: 0b:cd:7a:69:d4:80:0d:ee:d1:e3:a3:84:83:69:8d: 22:24:ae:7f:6f:84:00:5b:73:70:47:55:58:38:64: a1:c4:19:98:37:3a:dc:3d:7a:1a:96:b9:0d:25:7c: d3:ec:7f:0f:81:ef:ae:df:c9:86:84:f9:01:ad:37: a8:3f:f0:66:87:3e:69:d9:4c:5e:71:a1:6e:b5:8b: 82:54:36:24:aa:47:25:e0:ca:0e:ab:f1:1b:b5:06: 43:16:4a:42:97:cd:fc:a5:a9:81:fb:94:e6:e5:d4: fe:fe:49:ba:19:b2:2d:cd:2d:1c:1a:23:e8:c7:ba: e1:33:0a:13:c1:2e:e6:0d:f4:34:ef:76:e9:4d:6e: 5a:29:e4:97:2a:d4:0c:18:8b:1e:b4:82:9d:52:67: e7:43:6d:48:b3:99:6b:73:3d:ed:b8:ca:c5:bc:7b: 93:80:f4:63:58:b9:ca:65:80:42:54:de:c0:9e:e7: 6f:39:e7:c8:20:eb:2d:05:f9:b7:af:08:07:95:bd: 10:d0:65:f2:f9:8b:a8:fb:dc:d9:08:fc:55:e9:2d: 0a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BD:3F:01:B8:9A:0D:7A:B2:0C:D3:01:EE:48:43:D3:1D:E1:61:9A X509v3 Authority Key Identifier: keyid:CA:55:94:12:E2:A2:38:02:1A:94:EF:27:18:ED:B0:01:EF:96:EA:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylWUEuKiOAIalO8nGO2wAe-W6oU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:5b:76:b8:8b:77:88:a3:2b:19:02:db:42:a8:42:f7:3f:77: af:ac:26:94:82:a7:04:c0:23:45:91:7b:e4:31:4e:25:1a:d0: de:5d:df:0b:6c:50:2b:f4:50:4c:88:b4:15:52:bf:1b:e9:71: 0d:18:4f:4c:1a:70:7e:24:4d:5a:de:bd:5b:81:6f:01:88:ed: 26:9f:63:50:c7:9e:e5:82:54:c7:4e:46:6b:c2:69:30:d0:9c: 39:e8:e5:09:c4:16:97:87:56:b6:a1:3a:d7:0f:95:9f:44:c3: 06:bc:43:71:72:94:9f:c3:63:c2:64:ae:7a:6b:5e:d0:36:d4: 44:ef:19:2f:ba:a7:f3:56:1c:63:33:df:b0:9d:bb:52:9d:da: 24:23:b7:b3:a4:47:ce:b6:7b:4e:cb:af:b2:a9:b6:91:37:64: 33:b7:38:c3:8a:05:75:0c:b8:0a:14:74:d4:0b:86:ac:8a:73: 2d:d5:82:ea:07:27:b1:f1:fb:82:5a:fc:86:d6:9e:f1:55:83: e3:77:34:1e:fd:3e:7d:67:88:75:42:10:a2:c6:dd:c9:2b:b1: eb:d0:a4:ca:84:75:6b:5e:4a:e5:21:b9:4b:7e:f3:b8:7a:99: ee:e3:ba:7d:c9:49:6a:75:bc:f9:a6:67:41:96:27:18:d0:8e: 1b:5c:9a:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJCQTgxMTAvBgNVBAUTKENBNTU5NDEyRTJBMjM4MDIxQTk0RUYyNzE4RURCMDAx RUY5NkVBODUwHhcNMjUxMTA1MDAxNzAwWhcNMjUxMTEyMDAxNzAwWjAYMRYwFAYD VQQDEw02OTBhOTc3Yy1iYjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6GbgFDK7hgCBcoQGOF/SdqHJ0xh1cr3EcSsFqYFlt+58fVnOnMbfQZU5x9EL zXpp1IAN7tHjo4SDaY0iJK5/b4QAW3NwR1VYOGShxBmYNzrcPXoalrkNJXzT7H8P ge+u38mGhPkBrTeoP/Bmhz5p2UxecaFutYuCVDYkqkcl4MoOq/EbtQZDFkpCl838 pamB+5Tm5dT+/km6GbItzS0cGiPox7rhMwoTwS7mDfQ073bpTW5aKeSXKtQMGIse tIKdUmfnQ21Is5lrcz3tuMrFvHuTgPRjWLnKZYBCVN7AnudvOefIIOstBfm3rwgH lb0Q0GXy+Yuo+9zZCPxV6S0KzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJu9PwG4 mg16sgzTAe5IQ9Md4WGaMB8GA1UdIwQYMBaAFMpVlBLiojgCGpTvJxjtsAHvluqF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkJBOC9ERTc4RDU4Qzcy MDkxMUVDOUQ5M0JCNkNDNEY5QUUwMi95bFdVRXVLaU9BSWFsTzhuR08yd0FlLVc2 b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lsV1VFdUtpT0FJYWxPOG5HTzJ3QWUtVzZvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkJBOC9ERTc4RDU4QzcyMDkxMUVDOUQ5M0JCNkNDNEY5QUUwMi95bFdVRXVLaU9B SWFsTzhuR08yd0FlLVc2b1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATW3a4i3eIoysZAttCqEL3P3evrCaUgqcEwCNFkXvkMU4lGtDeXd8L bFAr9FBMiLQVUr8b6XENGE9MGnB+JE1a3r1bgW8BiO0mn2NQx57lglTHTkZrwmkw 0Jw56OUJxBaXh1a2oTrXD5WfRMMGvENxcpSfw2PCZK56a17QNtRE7xkvuqfzVhxj M9+wnbtSndokI7ezpEfOtntOy6+yqbaRN2QztzjDigV1DLgKFHTUC4asinMt1YLq Byex8fuCWvyG1p7xVYPjdzQe/T59Z4h1QhCixt3JK7Hr0KTKhHVrXkrlIblLfvO4 epnu47p9yUlqdbz5pmdBlicY0I4bXJpZ -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:19 2025 by rpki-client