$ rpki-client -vvf rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft File: ycx5T_y0zfLZ373rdjgJuH0tj1c.mft (raw, json) Hash identifier: lnzK7HNhXIOIqVCv9h8WSwq5eS6eQfyaVln0Hh34f3s= Subject key identifier: 78:CD:62:18:CF:FB:24:F3:CB:A8:75:F1:93:81:F4:D3:26:AF:4C:09 Authority key identifier: C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57 Certificate issuer: /CN=A9147456/serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57 Certificate serial: 2549 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft Manifest number: 252C Signing time: Tue 04 Nov 2025 15:50:01 +0000 Manifest this update: Tue 04 Nov 2025 15:50:01 +0000 Manifest next update: Tue 11 Nov 2025 15:50:01 +0000 Files and hashes: 1: ycx5T_y0zfLZ373rdjgJuH0tj1c.crl (hash: Oabh3l2vxblCJXLUAeYFoibzPfJW//db22JPZX+yZec=) 2: 297BC4140D4611E794585E2FC4F9AE02.roa (hash: 2tz7LMjITp7vanRGF3Qd5TIIIj7fKWHmsVgw8s6O7nY=) 3: 04CC562A444E11E88204061CC4F9AE02.roa (hash: W5nO0Dm01E1L0J0RrwxDTx9HsKlaz3AShpTaXk9sHks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9545 (0x2549) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147456, serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57 Validity Not Before: Nov 4 15:50:01 2025 GMT Not After : Nov 11 15:50:01 2025 GMT Subject: CN=690a20a9-400d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ec:78:c6:9d:8e:e1:fb:b6:46:19:57:7c:62: 0d:a6:6c:84:7f:53:1d:48:f8:85:c1:a3:2c:d4:86: 52:6f:15:15:eb:37:ac:b8:d2:b4:c1:e4:8b:68:5c: cc:17:e0:ae:79:c4:bc:1e:94:37:88:cf:c8:a5:8c: de:4d:2b:98:95:46:8c:6d:41:7b:65:f5:b3:75:da: 1e:d3:c5:85:8f:42:42:8e:41:53:5f:6f:2e:ec:b8: 3a:de:f1:f2:2b:bd:c3:90:d7:88:7d:12:1f:94:32: 12:3c:f5:b8:5c:58:c8:d4:b1:66:38:03:08:15:16: 93:d3:a7:c0:97:26:7d:36:29:d0:93:fd:05:da:64: 88:6d:69:fa:7e:cc:79:64:1c:3c:9b:85:65:6e:27: 20:54:e1:6c:1e:f6:f8:63:6c:55:69:94:6d:ec:60: bc:16:a4:2c:04:7d:da:c0:8c:a3:23:09:4c:4e:87: 67:86:1b:e4:f2:a5:9e:c1:99:0c:fb:88:fd:fe:bc: 97:a0:0e:53:2b:ca:35:6a:38:3e:aa:01:cd:ac:a9: 25:2c:94:a0:10:8d:5a:1c:a5:14:79:b1:b4:d5:0c: 1c:70:ce:bc:25:0f:93:40:81:9e:82:f8:de:ae:35: c2:bc:b1:31:6b:c1:32:53:04:99:19:3f:6c:5d:ae: 89:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:CD:62:18:CF:FB:24:F3:CB:A8:75:F1:93:81:F4:D3:26:AF:4C:09 X509v3 Authority Key Identifier: keyid:C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:d7:2e:56:fa:f3:f7:56:a2:61:51:2d:68:31:a3:7d:23:a7: b4:b7:23:2d:12:01:8b:ec:0f:75:df:bb:6a:cb:4f:58:a9:09: 2c:a3:8d:72:dd:1a:2f:a1:5e:57:8f:5b:01:91:87:6b:c3:b7: bd:ff:90:3b:67:8b:1a:52:f0:b3:f0:5a:16:a2:70:17:9a:06: 80:83:0d:53:77:f3:d2:66:9b:0f:4a:c2:25:0d:07:ee:a3:1b: 7e:60:67:a3:78:03:7f:8b:68:dc:85:40:69:8c:57:0b:11:6a: 5b:b7:16:a1:9e:f0:2d:d8:a9:97:0d:8b:47:15:03:86:60:91: 29:e7:e2:fb:d2:c6:d6:25:f5:e0:c3:3a:7e:62:03:e1:2a:36: e1:f5:24:eb:33:e1:bb:2a:51:b4:72:17:dc:67:b8:6e:f8:a4: 08:f7:13:cb:e0:58:d1:34:11:26:1c:61:ae:62:fa:81:3f:d1: 9b:42:50:24:ff:92:54:fa:eb:a0:19:05:ea:7e:af:1a:ca:51: c8:40:39:86:de:82:85:31:4a:71:9f:dd:d0:28:f8:f9:1e:17: e6:d0:53:15:8b:6e:92:25:c1:30:cd:5b:dc:08:1f:c5:08:96: f4:49:cc:e6:da:2d:2b:b9:26:78:cf:ee:12:00:c2:e5:13:25: 00:a7:a1:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0NTYxMTAvBgNVBAUTKEM5Q0M3OTRGRkNCNENERjJEOURGQkRFQjc2MzgwOUI4 N0QyRDhGNTcwHhcNMjUxMTA0MTU1MDAxWhcNMjUxMTExMTU1MDAxWjAYMRYwFAYD VQQDEw02OTBhMjBhOS00MDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnOx4xp2O4fu2RhlXfGINpmyEf1MdSPiFwaMs1IZSbxUV6zesuNK0weSLaFzM F+CuecS8HpQ3iM/IpYzeTSuYlUaMbUF7ZfWzddoe08WFj0JCjkFTX28u7Lg63vHy K73DkNeIfRIflDISPPW4XFjI1LFmOAMIFRaT06fAlyZ9NinQk/0F2mSIbWn6fsx5 ZBw8m4VlbicgVOFsHvb4Y2xVaZRt7GC8FqQsBH3awIyjIwlMTodnhhvk8qWewZkM +4j9/ryXoA5TK8o1ajg+qgHNrKklLJSgEI1aHKUUebG01QwccM68JQ+TQIGegvje rjXCvLExa8EyUwSZGT9sXa6JVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHjNYhjP +yTzy6h18ZOB9NMmr0wJMB8GA1UdIwQYMBaAFMnMeU/8tM3y2d+963Y4Cbh9LY9X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ1Ni82MTU0RDE2ODM3 MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpmTFozNzNyZGpnSnVIMHRq MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ljeDVUX3kwemZMWjM3M3JkamdKdUgwdGoxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQ1Ni82MTU0RDE2ODM3MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpm TFozNzNyZGpnSnVIMHRqMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCU1y5W+vP3VqJhUS1oMaN9I6e0tyMtEgGL7A9137tqy09YqQkso41y 3RovoV5Xj1sBkYdrw7e9/5A7Z4saUvCz8FoWonAXmgaAgw1Td/PSZpsPSsIlDQfu oxt+YGejeAN/i2jchUBpjFcLEWpbtxahnvAt2KmXDYtHFQOGYJEp5+L70sbWJfXg wzp+YgPhKjbh9STrM+G7KlG0chfcZ7hu+KQI9xPL4FjRNBEmHGGuYvqBP9GbQlAk /5JU+uugGQXqfq8aylHIQDmG3oKFMUpxn93QKPj5Hhfm0FMVi26SJcEwzVvcCB/F CJb0Sczm2i0ruSZ4z+4SAMLlEyUAp6G+ -----END CERTIFICATE-----Generated at Wed Nov 5 19:34:03 2025 by rpki-client