$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft File: YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft (raw, json) Hash identifier: mtNRu656WBFeywI0xZW2hxJL820ZNdkYAiMK29ST33Y= Subject key identifier: DC:5D:83:57:98:BB:84:A7:40:79:02:0A:01:FC:DF:83:52:86:24:CB Authority key identifier: 63:23:E5:6C:D9:92:AB:8F:CE:38:75:31:5A:E6:1A:C5:E4:71:AC:BD Certificate issuer: /CN=A9144C70/serialNumber=6323E56CD992AB8FCE3875315AE61AC5E471ACBD Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft Manifest number: 04A6 Signing time: Mon 03 Nov 2025 00:37:09 +0000 Manifest this update: Mon 03 Nov 2025 00:37:09 +0000 Manifest next update: Mon 10 Nov 2025 00:37:09 +0000 Files and hashes: 1: YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl (hash: J2HBsNzgtmKSxwS3+qGfIoYRIzfRZWlUX2XKV52PzOo=) 2: 2BE1E33A9C7D11F0BD6FFF71C4F9AE02.roa (hash: vft+eU4CpaMMVegJX2IoSc61ijnWeC2pmFFJGifleEc=) 3: B39CC5D0999C11F0B916112DC4F9AE02.roa (hash: 6q41hoRYSlGeQU/2jAswtSG8NBRB1otmd5Vb7tbOxSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144C70, serialNumber=6323E56CD992AB8FCE3875315AE61AC5E471ACBD Validity Not Before: Nov 3 00:37:09 2025 GMT Not After : Nov 10 00:37:09 2025 GMT Subject: CN=6907f935-ca9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a9:bc:2e:23:c5:88:22:bb:04:1d:10:24:28: bc:e5:2d:a1:20:d3:0f:27:1c:96:e0:15:4f:fe:6f: e3:1f:8e:41:78:8f:cc:c0:0f:7f:8a:0e:b1:8e:61: ed:26:4c:4f:ca:72:f1:50:33:46:c7:71:df:31:b5: 75:05:a4:9d:e0:48:86:74:a2:11:aa:e4:09:3c:bd: d4:34:4a:bb:b6:ae:ca:01:4a:40:98:12:c1:35:b2: f2:b0:63:ff:5d:33:75:92:c8:bb:d5:7c:be:41:ef: e3:0d:9f:41:be:b8:e2:22:75:0b:ae:84:2d:c3:df: 7c:f8:35:11:88:67:06:71:b5:66:b7:b1:39:fe:c1: 29:d0:c0:98:a9:b5:87:76:fc:9d:aa:04:ba:71:ec: 8d:8f:51:ef:39:ce:83:e0:e3:42:0f:fa:30:8f:ae: db:ce:6d:1a:ab:01:05:e4:df:76:59:3d:f3:1b:ae: 79:c2:12:51:7d:c1:31:55:83:62:2c:5a:23:ad:1a: e1:de:97:7e:f8:63:85:29:aa:63:7d:04:21:70:e2: 0b:84:97:80:e1:af:21:0e:59:1c:89:43:de:70:78: 2a:97:fe:36:cd:69:f5:ca:b0:35:35:b9:9e:5b:ec: 9f:d4:18:b7:41:34:29:3d:91:c1:d4:75:99:0c:5a: 28:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:5D:83:57:98:BB:84:A7:40:79:02:0A:01:FC:DF:83:52:86:24:CB X509v3 Authority Key Identifier: keyid:63:23:E5:6C:D9:92:AB:8F:CE:38:75:31:5A:E6:1A:C5:E4:71:AC:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:86:b2:37:b5:a1:f1:67:c7:92:a0:3d:02:68:99:9a:02:33: 4d:02:08:ac:ac:a7:ca:7e:9a:5c:c9:8e:84:88:02:9b:0e:f6: 90:cb:d9:eb:31:a3:ca:29:01:ff:60:66:08:14:3b:a7:4b:99: 9c:d4:7c:57:63:45:a0:71:31:8d:0b:82:55:56:10:2f:dc:ab: ef:ca:8e:c4:91:b6:ca:62:9d:bf:30:7f:6b:84:8b:53:be:31: 83:70:d3:ac:36:06:d1:4f:47:86:81:d5:aa:59:6d:d5:7a:10: 4b:64:97:33:4a:60:78:f7:e3:81:46:40:19:c8:4e:24:66:b4: 4b:6a:14:46:fc:12:65:2d:97:89:64:87:d7:86:87:81:3b:b3: a6:d1:2a:fd:60:d5:94:dc:ea:a4:17:eb:1f:fb:45:de:f6:8c: 56:56:66:fa:6f:00:24:0c:f5:64:56:43:db:36:4d:40:f8:c2: 34:f9:c8:42:1f:57:99:05:d8:a4:c9:15:4a:80:9b:23:22:2b: e9:db:ca:43:a4:bb:70:e6:a7:9d:c5:44:53:0a:56:cd:d0:5c: a5:e5:52:53:a1:17:32:30:f5:ec:0a:8e:95:a8:9a:de:a5:c8: d5:2e:23:42:83:78:22:fa:60:53:f3:e2:6a:3a:99:fc:0b:4c: cd:79:8c:2d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NEM3MDExMC8GA1UEBRMoNjMyM0U1NkNEOTkyQUI4RkNFMzg3NTMxNUFFNjFBQzVF NDcxQUNCRDAeFw0yNTExMDMwMDM3MDlaFw0yNTExMTAwMDM3MDlaMBgxFjAUBgNV BAMTDTY5MDdmOTM1LWNhOWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4qbwuI8WIIrsEHRAkKLzlLaEg0w8nHJbgFU/+b+MfjkF4j8zAD3+KDrGOYe0m TE/KcvFQM0bHcd8xtXUFpJ3gSIZ0ohGq5Ak8vdQ0Sru2rsoBSkCYEsE1svKwY/9d M3WSyLvVfL5B7+MNn0G+uOIidQuuhC3D33z4NRGIZwZxtWa3sTn+wSnQwJiptYd2 /J2qBLpx7I2PUe85zoPg40IP+jCPrtvObRqrAQXk33ZZPfMbrnnCElF9wTFVg2Is WiOtGuHel374Y4UpqmN9BCFw4guEl4DhryEOWRyJQ95weCqX/jbNafXKsDU1uZ5b 7J/UGLdBNCk9kcHUdZkMWihHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3F2DV5i7 hKdAeQIKAfzfg1KGJMswHwYDVR0jBBgwFoAUYyPlbNmSq4/OOHUxWuYaxeRxrL0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0QzcwLzgyQkM4NEVFQUM2 NzExRUNCNzVDREEyNEM0RjlBRTAyL1l5UGxiTm1TcTRfT09IVXhXdVlheGVSeHJM MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWXlQbGJObVNxNF9PT0hVeFd1WWF4ZVJ4ckwwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 QzcwLzgyQkM4NEVFQUM2NzExRUNCNzVDREEyNEM0RjlBRTAyL1l5UGxiTm1TcTRf T09IVXhXdVlheGVSeHJMMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADmGsje1ofFnx5KgPQJomZoCM00CCKysp8p+mlzJjoSIApsO9pDL2esx o8opAf9gZggUO6dLmZzUfFdjRaBxMY0LglVWEC/cq+/KjsSRtspinb8wf2uEi1O+ MYNw06w2BtFPR4aB1apZbdV6EEtklzNKYHj344FGQBnITiRmtEtqFEb8EmUtl4lk h9eGh4E7s6bRKv1g1ZTc6qQX6x/7Rd72jFZWZvpvACQM9WRWQ9s2TUD4wjT5yEIf V5kF2KTJFUqAmyMiK+nbykOku3Dmp53FRFMKVs3QXKXlUlOhFzIw9ewKjpWomt6l yNUuI0KDeCL6YFPz4mo6mfwLTM15jC0= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:55 2025 by rpki-client