$ rpki-client -vvf rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.mft File: YlWvHFTHD2B02LCsoatcuHg4dic.mft (raw, json) Hash identifier: marNpp0E+B6m8L1zqxVfuNa7g1KPN3BQLhpXFK1hU1o= Subject key identifier: E8:04:9E:22:F1:C8:AC:72:85:3A:93:78:32:28:E5:57:64:CD:48:ED Authority key identifier: 62:55:AF:1C:54:C7:0F:60:74:D8:B0:AC:A1:AB:5C:B8:78:38:76:27 Certificate issuer: /CN=A9148CCE/serialNumber=6255AF1C54C70F6074D8B0ACA1AB5CB878387627 Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YlWvHFTHD2B02LCsoatcuHg4dic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.mft Manifest number: 45 Signing time: Mon 03 Nov 2025 07:22:08 +0000 Manifest this update: Mon 03 Nov 2025 07:22:07 +0000 Manifest next update: Mon 10 Nov 2025 07:22:07 +0000 Files and hashes: 1: YlWvHFTHD2B02LCsoatcuHg4dic.crl (hash: jp33LhjGkIPe1oKeRBXqpbGWg0NF63OuOXifJownXFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.crl rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YlWvHFTHD2B02LCsoatcuHg4dic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148CCE, serialNumber=6255AF1C54C70F6074D8B0ACA1AB5CB878387627 Validity Not Before: Nov 3 07:22:07 2025 GMT Not After : Nov 10 07:22:07 2025 GMT Subject: CN=6908581f-60df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c0:8d:94:b4:0a:04:57:93:de:9c:e2:d6:29: 65:93:3a:94:ae:73:62:70:9a:31:a6:a7:dc:37:98: 6d:c8:f1:85:68:63:af:ff:e9:a3:14:c7:c1:b2:4a: d9:42:4d:8a:8a:e9:28:39:a0:df:d7:e8:c4:ec:19: b4:10:a9:98:95:e9:67:b8:74:81:4e:bf:47:6d:1a: c4:1a:a9:58:57:b6:2c:f4:da:55:0a:f9:75:8a:3d: ba:ee:ec:94:8c:de:7f:b2:f3:98:7c:a5:44:8a:aa: 0f:80:cf:93:1a:69:13:81:44:62:ba:ec:24:19:ea: 26:99:82:26:d6:76:26:a7:b2:b4:39:4f:6e:8e:84: 6d:f1:fe:4e:a4:78:3c:23:56:db:ea:96:63:c7:54: 78:3e:8f:7b:07:f8:2a:9e:f0:32:c9:67:d8:b7:41: 68:72:01:8c:c9:38:7b:88:aa:48:03:a1:95:c0:70: 37:5c:1f:07:c4:2b:b5:23:14:8e:f2:5a:69:e7:0b: 09:ea:41:c0:56:6a:a1:17:96:44:29:f4:57:61:5a: ab:18:17:e7:a1:4f:e5:a6:c8:81:3b:97:ad:1b:af: af:8d:98:af:11:7c:8f:e3:10:78:dc:56:45:f5:da: 56:1a:cf:84:9f:58:72:3f:83:a8:59:d9:54:d7:ff: e2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:04:9E:22:F1:C8:AC:72:85:3A:93:78:32:28:E5:57:64:CD:48:ED X509v3 Authority Key Identifier: keyid:62:55:AF:1C:54:C7:0F:60:74:D8:B0:AC:A1:AB:5C:B8:78:38:76:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YlWvHFTHD2B02LCsoatcuHg4dic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:bf:9d:d2:07:03:3f:ee:b1:bf:3b:de:4d:52:2f:a8:e5:38: 92:bc:ab:f5:bd:e0:bc:b1:19:15:97:fe:63:b3:df:17:ea:b4: 0a:e4:01:a4:fc:04:08:a7:41:a5:dc:a3:2b:0d:d2:82:37:6e: c9:65:c5:1b:16:74:c7:a6:b6:77:37:9f:f7:b2:62:71:17:38: 23:54:9c:3f:d6:04:f8:f7:fb:83:0f:d9:13:5b:6d:d4:69:fe: 9c:9c:53:48:4c:54:cb:3f:ca:dc:a4:4c:c9:9a:2f:9b:fa:59: 02:12:66:f2:42:03:dc:68:fb:e6:85:a6:d7:24:2e:44:7e:9e: 6e:1b:26:21:5b:39:79:45:90:de:b5:bf:57:e4:4d:88:4b:0f: 3d:74:82:68:d9:42:a9:50:79:1c:69:2f:42:25:8f:06:32:af: 13:95:7b:f3:d1:09:c2:8d:b8:d3:83:5d:a8:7c:f8:e8:fe:42: 46:b0:e8:01:7c:c0:56:76:53:ea:46:36:04:10:65:52:3a:22: eb:1b:f4:f8:e0:00:cc:31:86:a6:be:67:14:e9:4d:b8:6c:dd: 4f:f8:29:00:e8:38:b4:fd:46:c5:38:cf:d1:04:ba:fd:e4:13: b5:da:0d:8e:8f:54:39:41:a1:3e:3c:dd:09:3e:76:dc:2d:f0: 3b:f8:9e:55 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OENDRTExMC8GA1UEBRMoNjI1NUFGMUM1NEM3MEY2MDc0RDhCMEFDQTFBQjVDQjg3 ODM4NzYyNzAeFw0yNTExMDMwNzIyMDdaFw0yNTExMTAwNzIyMDdaMBgxFjAUBgNV BAMTDTY5MDg1ODFmLTYwZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQwI2UtAoEV5PenOLWKWWTOpSuc2JwmjGmp9w3mG3I8YVoY6//6aMUx8GyStlC TYqK6Sg5oN/X6MTsGbQQqZiV6We4dIFOv0dtGsQaqVhXtiz02lUK+XWKPbru7JSM 3n+y85h8pUSKqg+Az5MaaROBRGK67CQZ6iaZgibWdiansrQ5T26OhG3x/k6keDwj VtvqlmPHVHg+j3sH+Cqe8DLJZ9i3QWhyAYzJOHuIqkgDoZXAcDdcHwfEK7UjFI7y WmnnCwnqQcBWaqEXlkQp9FdhWqsYF+ehT+WmyIE7l60br6+NmK8RfI/jEHjcVkX1 2lYaz4SfWHI/g6hZ2VTX/+KPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6ASeIvHI rHKFOpN4MijlV2TNSO0wHwYDVR0jBBgwFoAUYlWvHFTHD2B02LCsoatcuHg4dicw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4Q0NFLzkzRUZFMkI0NEZF RTExRjA4MDM3OTQ4MkM0RjlBRTAyL1lsV3ZIRlRIRDJCMDJMQ3NvYXRjdUhnNGRp Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWWxXdkhGVEhEMkIwMkxDc29hdGN1SGc0ZGljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4 Q0NFLzkzRUZFMkI0NEZFRTExRjA4MDM3OTQ4MkM0RjlBRTAyL1lsV3ZIRlRIRDJC MDJMQ3NvYXRjdUhnNGRpYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJC/ndIHAz/usb873k1SL6jlOJK8q/W94LyxGRWX/mOz3xfqtArkAaT8 BAinQaXcoysN0oI3bsllxRsWdMemtnc3n/eyYnEXOCNUnD/WBPj3+4MP2RNbbdRp /pycU0hMVMs/ytykTMmaL5v6WQISZvJCA9xo++aFptckLkR+nm4bJiFbOXlFkN61 v1fkTYhLDz10gmjZQqlQeRxpL0IljwYyrxOVe/PRCcKNuNODXah8+Oj+Qkaw6AF8 wFZ2U+pGNgQQZVI6Iusb9PjgAMwxhqa+ZxTpTbhs3U/4KQDoOLT9RsU4z9EEuv3k E7XaDY6PVDlBoT483Qk+dtwt8Dv4nlU= -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:17 2025 by rpki-client