$ rpki-client -vvf rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft File: yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft (raw, json) Hash identifier: OoT9DcjyfGMNRtHFRTLU232e3q69bukP6BXqyhEEzJw= Subject key identifier: 36:2C:89:0C:31:80:CE:19:E8:C8:E0:CE:9E:B7:F8:1B:12:25:B7:A6 Authority key identifier: CA:24:58:31:06:FB:54:98:4C:78:15:89:5E:3E:19:ED:F7:9C:98:BF Certificate issuer: /CN=A9153675/serialNumber=CA24583106FB54984C7815895E3E19EDF79C98BF Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft Manifest number: 0117 Signing time: Mon 03 Nov 2025 04:49:56 +0000 Manifest this update: Mon 03 Nov 2025 04:49:55 +0000 Manifest next update: Mon 10 Nov 2025 04:49:55 +0000 Files and hashes: 1: yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl (hash: atmZqNH350j74/yCuK1mpHYsfcTvYF2JF5+JeUIlqJM=) 2: F8636CC60F9D11EFA1E14343C4F9AE02.roa (hash: tBki4iy/q8HliVYsXbIzEJgcPuIm2NjXgIYSPz8ugw8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:49:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153675, serialNumber=CA24583106FB54984C7815895E3E19EDF79C98BF Validity Not Before: Nov 3 04:49:55 2025 GMT Not After : Nov 10 04:49:55 2025 GMT Subject: CN=69083473-1802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:be:3b:73:10:df:2c:67:84:79:10:b2:94:dc: ea:48:8a:b7:bc:f5:52:78:ff:27:f9:a0:03:6a:5f: b5:32:70:ed:c8:cf:30:06:90:6b:2e:29:60:27:e9: 97:44:24:d2:63:b0:b2:09:82:37:3e:f7:c8:78:6c: 05:58:a9:b4:58:2c:e8:ab:48:1f:b9:3f:6a:92:1f: 31:5f:57:b3:4d:0a:d9:62:ce:15:5a:40:d5:0b:ff: 95:c0:5a:a2:71:73:f8:d1:d6:a5:3a:5d:4f:b8:ae: f9:52:1f:08:d4:d7:41:55:3b:1d:af:fe:ae:0c:0f: aa:38:47:8b:eb:98:99:94:67:4b:bd:22:2a:a7:38: 83:1f:b3:85:ad:2a:5b:58:88:c6:be:9e:3a:c5:b6: 86:6b:d4:df:e8:b0:62:c6:c4:76:97:38:8a:b4:7d: 96:73:81:06:bd:72:47:78:48:20:60:32:86:25:2b: d8:7e:39:61:79:93:59:06:55:d9:31:af:61:fb:b8: d1:0d:64:74:2d:14:a3:01:a9:6a:67:59:c5:a9:98: f0:09:c0:c4:56:db:9d:e9:f8:d7:eb:c6:a9:be:7c: 92:ed:4c:58:02:72:55:51:f0:5e:ae:06:f2:de:ea: 5a:9c:a9:35:07:44:16:e6:01:54:cd:02:04:9a:c1: 4b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:2C:89:0C:31:80:CE:19:E8:C8:E0:CE:9E:B7:F8:1B:12:25:B7:A6 X509v3 Authority Key Identifier: keyid:CA:24:58:31:06:FB:54:98:4C:78:15:89:5E:3E:19:ED:F7:9C:98:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:6f:d3:5d:eb:f7:7d:3c:24:3c:b3:8b:42:5b:d6:45:6d:78: 53:44:10:c4:1a:a9:0c:b8:4f:97:86:a3:83:d6:a4:13:42:8e: 19:45:20:65:65:d1:f6:af:56:88:66:dd:ed:c4:af:9c:32:4b: c1:45:b2:6a:7d:69:f1:2f:51:82:3f:f4:53:2b:57:49:0b:02: 5e:9d:ac:6c:62:c6:84:51:d8:b8:c9:ff:44:4d:3b:db:49:43: d2:33:89:aa:89:ee:0a:24:e1:21:1a:64:b8:40:51:f1:eb:af: 36:18:66:8e:03:16:a2:0c:41:a5:ac:e9:06:81:99:83:24:d2: 48:d9:b2:22:30:fc:c2:7a:b8:36:4e:dc:12:2a:1c:a2:ab:ac: c7:cc:c3:70:37:2b:d9:17:fc:9f:72:b8:66:bb:d7:bb:ec:4f: ed:1e:6e:7a:11:bd:f3:ae:c7:45:5a:dc:1b:61:f5:d2:1d:b2: 19:89:d8:77:bb:9a:10:52:49:d6:12:2e:ff:dc:f9:6e:1c:cb: 34:f3:e6:bb:fe:a7:c2:3f:ef:20:28:7a:0f:bd:69:c4:af:72: 0e:e5:23:15:b3:c6:8d:36:ca:c9:0a:80:73:b3:e2:68:24:01: 7b:1a:73:ec:f2:18:02:24:0b:89:d7:e9:c3:d4:08:7e:53:7e: cf:20:e6:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM2NzUxMTAvBgNVBAUTKENBMjQ1ODMxMDZGQjU0OTg0Qzc4MTU4OTVFM0UxOUVE Rjc5Qzk4QkYwHhcNMjUxMTAzMDQ0OTU1WhcNMjUxMTEwMDQ0OTU1WjAYMRYwFAYD VQQDEw02OTA4MzQ3My0xODAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr747cxDfLGeEeRCylNzqSIq3vPVSeP8n+aADal+1MnDtyM8wBpBrLilgJ+mX RCTSY7CyCYI3PvfIeGwFWKm0WCzoq0gfuT9qkh8xX1ezTQrZYs4VWkDVC/+VwFqi cXP40dalOl1PuK75Uh8I1NdBVTsdr/6uDA+qOEeL65iZlGdLvSIqpziDH7OFrSpb WIjGvp46xbaGa9Tf6LBixsR2lziKtH2Wc4EGvXJHeEggYDKGJSvYfjlheZNZBlXZ Ma9h+7jRDWR0LRSjAalqZ1nFqZjwCcDEVtud6fjX68apvnyS7UxYAnJVUfBergby 3upanKk1B0QW5gFUzQIEmsFL1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDYsiQwx gM4Z6Mjgzp63+BsSJbemMB8GA1UdIwQYMBaAFMokWDEG+1SYTHgViV4+Ge33nJi/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzY3NS85MTVBMjg2NjBF QjMxMUVGODlDQUQxMkNDNEY5QUUwMi95aVJZTVFiN1ZKaE1lQldKWGo0WjdmZWNt TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lpUllNUWI3VkpoTWVCV0pYajRaN2ZlY21MOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzY3NS85MTVBMjg2NjBFQjMxMUVGODlDQUQxMkNDNEY5QUUwMi95aVJZTVFiN1ZK aE1lQldKWGo0WjdmZWNtTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3b9Nd6/d9PCQ8s4tCW9ZFbXhTRBDEGqkMuE+XhqOD1qQTQo4ZRSBl ZdH2r1aIZt3txK+cMkvBRbJqfWnxL1GCP/RTK1dJCwJenaxsYsaEUdi4yf9ETTvb SUPSM4mqie4KJOEhGmS4QFHx6682GGaOAxaiDEGlrOkGgZmDJNJI2bIiMPzCerg2 TtwSKhyiq6zHzMNwNyvZF/yfcrhmu9e77E/tHm56Eb3zrsdFWtwbYfXSHbIZidh3 u5oQUknWEi7/3PluHMs08+a7/qfCP+8gKHoPvWnEr3IO5SMVs8aNNsrJCoBzs+Jo JAF7GnPs8hgCJAuJ1+nD1Ah+U37PIOaY -----END CERTIFICATE-----Generated at Tue Nov 4 19:10:51 2025 by rpki-client