$ rpki-client -vvf rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft File: YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft (raw, json) Hash identifier: xppOEINrpXiXtXWBAtMfFfUjZ5mng0eNM3P0g/8MjIM= Subject key identifier: 5E:90:82:2C:25:7D:72:E9:D5:22:23:AC:5D:26:B6:9C:51:CD:75:D5 Authority key identifier: 60:76:C5:13:9D:4C:CF:DE:BC:A4:4A:14:BD:B7:31:68:88:FA:63:44 Certificate issuer: /CN=A9148488/serialNumber=6076C5139D4CCFDEBCA44A14BDB7316888FA6344 Certificate serial: 0A0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft Manifest number: 0A06 Signing time: Sun 02 Nov 2025 19:47:28 +0000 Manifest this update: Sun 02 Nov 2025 19:47:28 +0000 Manifest next update: Sun 09 Nov 2025 19:47:28 +0000 Files and hashes: 1: YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl (hash: M19GdXNbkkKXGLUtbRocSSmLeViTOu8DvzBduivp81M=) 2: 5C8929C8839011EAB5B82263C4F9AE02.roa (hash: Jr5A5EFDHOtjVbEZUPlRHjoDRI+w8P0c18JoA/Eyebg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:47:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2572 (0xa0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148488, serialNumber=6076C5139D4CCFDEBCA44A14BDB7316888FA6344 Validity Not Before: Nov 2 19:47:28 2025 GMT Not After : Nov 9 19:47:28 2025 GMT Subject: CN=6907b550-56a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f0:a4:64:f5:19:00:bb:c7:38:fa:11:c0:3a: 39:dd:c7:aa:78:4e:01:20:c6:ca:d2:3a:7c:5e:34: a2:53:d0:51:61:7c:a6:1f:2d:06:b1:2c:25:cb:ee: 74:13:f7:aa:40:10:78:2d:a7:9e:58:ee:88:be:e1: ea:e1:b1:ad:80:59:fc:41:c7:3a:6c:56:5e:90:76: 90:8d:04:e2:46:6b:30:99:5c:d0:34:dc:f8:36:97: 89:7e:f9:53:a9:a4:ec:82:6f:03:aa:8b:6a:a8:4e: 26:05:6f:76:ee:01:b9:20:9e:ae:c7:4c:d9:29:a7: 74:f4:61:1a:1e:b2:c1:c6:b7:5e:c0:73:1b:d9:1d: c6:d0:1f:dd:e5:df:cc:53:0b:33:39:a2:7a:d0:23: ef:ed:b4:99:93:52:f4:19:a2:52:70:56:1e:d6:20: 2a:5b:bd:ae:d3:4c:29:85:8c:37:a1:dc:ac:9d:cc: ba:1c:da:92:2a:b4:59:d2:5c:37:7c:7e:4e:3b:9a: 76:ed:b3:19:94:74:19:37:11:2e:da:c3:78:f5:2d: 58:46:f7:d9:0f:18:aa:25:d5:f9:bd:8f:dc:8d:4e: 26:db:25:62:8c:13:9b:09:f4:52:e3:1f:94:6f:b4: b7:66:1b:55:6a:51:1f:c6:48:1e:de:53:83:99:e7: a0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:90:82:2C:25:7D:72:E9:D5:22:23:AC:5D:26:B6:9C:51:CD:75:D5 X509v3 Authority Key Identifier: keyid:60:76:C5:13:9D:4C:CF:DE:BC:A4:4A:14:BD:B7:31:68:88:FA:63:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:55:fe:3d:2c:13:69:8a:8c:0f:ab:5b:23:58:b6:03:c6:20: de:5f:c0:b2:36:9d:cb:5b:6a:ae:c7:c5:90:d4:33:0b:04:b0: 5b:36:2c:1d:1b:d2:80:d3:83:33:39:95:f3:53:5c:03:9e:ea: bd:b7:42:53:a1:f4:71:d4:22:2d:e4:e3:06:2c:9a:c8:0f:a1: d6:94:ed:7b:83:3b:af:5b:ae:0b:8d:6d:52:1d:63:fa:09:79: e0:04:77:65:af:26:50:cc:1e:cd:f9:bd:76:dd:46:28:e9:6b: 14:e5:cb:f5:64:2f:51:f4:3a:99:54:cf:a7:09:9b:c0:4a:6c: db:f6:02:8f:e0:c1:5d:95:c3:92:b4:de:3a:e9:ec:61:ad:7a: 45:5b:fc:60:e1:b3:b2:b4:14:f4:04:a7:aa:bf:2d:a4:7b:e8: c5:50:5b:4a:8b:68:23:a0:6a:19:80:0a:8a:af:a2:d0:c1:0e: 24:d4:94:e8:5c:59:b7:9a:52:bb:1c:12:1f:fc:9c:0a:ea:68: df:a2:4f:37:2e:56:e0:94:6c:8a:7f:15:88:f3:ed:86:78:40: 18:f1:32:7a:75:52:13:f8:a8:88:5f:11:31:bf:8d:77:e9:d1: 2f:10:30:4d:de:71:06:3d:bc:ea:d2:47:07:98:02:56:87:39: 59:d7:5b:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg0ODgxMTAvBgNVBAUTKDYwNzZDNTEzOUQ0Q0NGREVCQ0E0NEExNEJEQjczMTY4 ODhGQTYzNDQwHhcNMjUxMTAyMTk0NzI4WhcNMjUxMTA5MTk0NzI4WjAYMRYwFAYD VQQDEw02OTA3YjU1MC01NmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPCkZPUZALvHOPoRwDo53ceqeE4BIMbK0jp8XjSiU9BRYXymHy0GsSwly+50 E/eqQBB4LaeeWO6IvuHq4bGtgFn8Qcc6bFZekHaQjQTiRmswmVzQNNz4NpeJfvlT qaTsgm8DqotqqE4mBW927gG5IJ6ux0zZKad09GEaHrLBxrdewHMb2R3G0B/d5d/M UwszOaJ60CPv7bSZk1L0GaJScFYe1iAqW72u00wphYw3odysncy6HNqSKrRZ0lw3 fH5OO5p27bMZlHQZNxEu2sN49S1YRvfZDxiqJdX5vY/cjU4m2yVijBObCfRS4x+U b7S3ZhtValEfxkge3lODmeeg6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6Qgiwl fXLp1SIjrF0mtpxRzXXVMB8GA1UdIwQYMBaAFGB2xROdTM/evKRKFL23MWiI+mNE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODQ4OC81RDI2ODM0QTgz OEYxMUVBQjcwMzE4NjJDNEY5QUUwMi9ZSGJGRTUxTXo5NjhwRW9VdmJjeGFJajZZ MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lIYkZFNTFNejk2OHBFb1V2YmN4YUlqNlkwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODQ4OC81RDI2ODM0QTgzOEYxMUVBQjcwMzE4NjJDNEY5QUUwMi9ZSGJGRTUxTXo5 NjhwRW9VdmJjeGFJajZZMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdVf49LBNpiowPq1sjWLYDxiDeX8CyNp3LW2qux8WQ1DMLBLBbNiwd G9KA04MzOZXzU1wDnuq9t0JTofRx1CIt5OMGLJrID6HWlO17gzuvW64LjW1SHWP6 CXngBHdlryZQzB7N+b123UYo6WsU5cv1ZC9R9DqZVM+nCZvASmzb9gKP4MFdlcOS tN466exhrXpFW/xg4bOytBT0BKeqvy2ke+jFUFtKi2gjoGoZgAqKr6LQwQ4k1JTo XFm3mlK7HBIf/JwK6mjfok83LlbglGyKfxWI8+2GeEAY8TJ6dVIT+KiIXxExv413 6dEvEDBN3nEGPbzq0kcHmAJWhzlZ11sV -----END CERTIFICATE-----Generated at Tue Nov 4 14:06:06 2025 by rpki-client