$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.mft File: YBC8xly5zPAs9-0p7HXk1iK98_A.mft (raw, json) Hash identifier: swrBYKRVg21k/26t8Ja82HiOs7dJd6pHTzPOTMYizbs= Subject key identifier: B9:53:B1:3E:8D:D2:E9:C9:7C:B1:8B:06:EA:39:60:C4:DE:0C:9B:6F Authority key identifier: 60:10:BC:C6:5C:B9:CC:F0:2C:F7:ED:29:EC:75:E4:D6:22:BD:F3:F0 Certificate issuer: /CN=A9144F45/serialNumber=6010BCC65CB9CCF02CF7ED29EC75E4D622BDF3F0 Certificate serial: 04E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBC8xly5zPAs9-0p7HXk1iK98_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.mft Manifest number: 04E4 Signing time: Sun 02 Nov 2025 23:43:38 +0000 Manifest this update: Sun 02 Nov 2025 23:43:37 +0000 Manifest next update: Sun 09 Nov 2025 23:43:37 +0000 Files and hashes: 1: YBC8xly5zPAs9-0p7HXk1iK98_A.crl (hash: BtzPJkTcte6GoqJUuw5je7LYaB/1ywnp5qBc/qBespU=) 2: E225E68E397411EC8120D135C4F9AE02.roa (hash: GWZiL4+KkXKacwwHdWBVfV3QtoEcyH45HgJbisXMlBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.crl rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBC8xly5zPAs9-0p7HXk1iK98_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1256 (0x4e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144F45, serialNumber=6010BCC65CB9CCF02CF7ED29EC75E4D622BDF3F0 Validity Not Before: Nov 2 23:43:37 2025 GMT Not After : Nov 9 23:43:37 2025 GMT Subject: CN=6907ecaa-2253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:62:c2:c5:e9:bd:8f:3e:67:8d:59:77:8c:8c: 19:c5:09:85:06:23:e1:b3:ce:e7:db:85:f6:69:08: e3:28:71:79:f0:05:26:19:65:c9:0c:52:a0:7a:75: 7e:41:39:82:25:32:2a:e9:80:25:d0:c4:0a:b2:5f: 9b:24:ad:a6:5d:d3:de:b9:9b:7a:44:08:18:ec:d1: de:4b:00:66:ba:f0:28:1b:f0:c9:29:4a:57:c5:30: d2:7a:5a:b2:3d:26:9d:d6:0d:ae:b3:47:97:79:04: b6:75:72:4c:3b:bb:28:87:d0:77:b8:1e:48:b6:91: 1a:c2:22:20:8f:dd:43:1b:57:bd:b5:a6:3e:63:a2: 36:0c:b0:64:14:ca:8f:f6:50:8d:d4:02:8f:83:48: 5e:bf:9c:c8:86:d1:f5:17:31:a9:57:e2:d7:62:19: 1c:41:f3:dd:dc:69:63:aa:10:c2:5c:26:7f:a2:9f: 37:cd:94:58:c2:2c:17:7a:51:9d:8f:8e:75:36:31: a2:5e:eb:01:af:05:23:69:a6:3f:20:84:c8:a8:0e: 05:4f:6f:f9:03:34:55:02:5e:69:97:7a:cd:fd:0a: c5:fb:10:a4:c7:29:01:8b:9d:be:fd:7b:a0:6c:42: 9b:db:a9:93:d1:04:c2:17:3a:19:50:85:1d:22:12: e7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:53:B1:3E:8D:D2:E9:C9:7C:B1:8B:06:EA:39:60:C4:DE:0C:9B:6F X509v3 Authority Key Identifier: keyid:60:10:BC:C6:5C:B9:CC:F0:2C:F7:ED:29:EC:75:E4:D6:22:BD:F3:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBC8xly5zPAs9-0p7HXk1iK98_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:8a:0b:45:26:ed:b7:4f:9a:cf:a3:1d:34:d5:01:15:17:34: 91:e6:c4:b3:8a:4d:3d:5e:09:5c:f1:dc:89:b3:47:9d:a9:f5: ef:88:95:23:3c:45:5c:a6:c0:11:19:0a:e2:d4:b1:27:55:9f: dc:c9:93:ec:72:b7:63:8b:e0:58:5e:dd:8b:e1:d0:11:56:91: 52:94:ae:7e:0b:73:23:0d:c6:8e:21:25:03:8d:bd:29:0e:26: 6e:f2:2c:59:90:01:44:ac:ac:22:99:2a:da:f3:2b:83:08:57: 86:91:a3:39:8f:cf:f0:93:03:8a:97:56:f5:6b:ef:e9:65:35: 95:26:dc:07:31:d4:da:89:6b:62:93:5f:e8:2f:1f:68:0d:0f: fa:51:37:fa:cc:9f:f6:27:01:1c:f4:90:90:8c:2a:01:5c:91: 49:66:ad:6d:15:51:33:fa:e5:26:89:5f:2f:d9:4a:76:00:03: 4f:61:4a:9d:79:f3:50:1b:bf:c3:88:34:49:d8:d4:61:7b:fd: 6c:3d:c7:22:cc:ba:fb:40:7f:90:75:0d:3d:45:df:be:60:fd: ed:dc:21:5b:9c:d9:00:f3:7d:48:0d:59:c5:9b:da:ff:e1:b8: 70:c8:0e:46:79:ee:8d:e6:17:ac:05:c9:12:dc:c3:a5:81:89: 31:a4:e8:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGNDUxMTAvBgNVBAUTKDYwMTBCQ0M2NUNCOUNDRjAyQ0Y3RUQyOUVDNzVFNEQ2 MjJCREYzRjAwHhcNMjUxMTAyMjM0MzM3WhcNMjUxMTA5MjM0MzM3WjAYMRYwFAYD VQQDEw02OTA3ZWNhYS0yMjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnWLCxem9jz5njVl3jIwZxQmFBiPhs87n24X2aQjjKHF58AUmGWXJDFKgenV+ QTmCJTIq6YAl0MQKsl+bJK2mXdPeuZt6RAgY7NHeSwBmuvAoG/DJKUpXxTDSelqy PSad1g2us0eXeQS2dXJMO7soh9B3uB5ItpEawiIgj91DG1e9taY+Y6I2DLBkFMqP 9lCN1AKPg0hev5zIhtH1FzGpV+LXYhkcQfPd3GljqhDCXCZ/op83zZRYwiwXelGd j451NjGiXusBrwUjaaY/IITIqA4FT2/5AzRVAl5pl3rN/QrF+xCkxykBi52+/Xug bEKb26mT0QTCFzoZUIUdIhLntwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLlTsT6N 0unJfLGLBuo5YMTeDJtvMB8GA1UdIwQYMBaAFGAQvMZcuczwLPftKex15NYivfPw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEY0NS9ENzZGRjA0NDM5 NzAxMUVDOUI2NUJBMTZDNEY5QUUwMi9ZQkM4eGx5NXpQQXM5LTBwN0hYazFpSzk4 X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lCQzh4bHk1elBBczktMHA3SFhrMWlLOThfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEY0NS9ENzZGRjA0NDM5NzAxMUVDOUI2NUJBMTZDNEY5QUUwMi9ZQkM4eGx5NXpQ QXM5LTBwN0hYazFpSzk4X0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdigtFJu23T5rPox001QEVFzSR5sSzik09Xglc8dyJs0edqfXviJUj PEVcpsARGQri1LEnVZ/cyZPscrdji+BYXt2L4dARVpFSlK5+C3MjDcaOISUDjb0p DiZu8ixZkAFErKwimSra8yuDCFeGkaM5j8/wkwOKl1b1a+/pZTWVJtwHMdTaiWti k1/oLx9oDQ/6UTf6zJ/2JwEc9JCQjCoBXJFJZq1tFVEz+uUmiV8v2Up2AANPYUqd efNQG7/DiDRJ2NRhe/1sPccizLr7QH+QdQ09Rd++YP3t3CFbnNkA831IDVnFm9r/ 4bhwyA5Gee6N5hesBckS3MOlgYkxpOik -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:43 2025 by rpki-client