$ rpki-client -vvf rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft File: YDL2P9JhaBpA9zC5eHJR5jMozW4.mft (raw, json) Hash identifier: GOfjjQObxyzbC+1Dvd1FQD6luluVRPmscBTTMfQNC9w= Subject key identifier: 1F:01:64:69:35:AC:3B:4D:10:D3:55:C9:78:B5:5E:92:65:00:31:C0 Authority key identifier: 60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E Certificate issuer: /CN=A9155098/serialNumber=6032F63FD261681A40F730B9787251E63328CD6E Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft Manifest number: 0123 Signing time: Thu 23 Oct 2025 06:41:17 +0000 Manifest this update: Thu 23 Oct 2025 06:41:16 +0000 Manifest next update: Thu 30 Oct 2025 06:41:16 +0000 Files and hashes: 1: YDL2P9JhaBpA9zC5eHJR5jMozW4.crl (hash: WajcO4VoBQp0+I8GTmLiaJkcV8cXMmLKEtF2O+S2cL8=) 2: 2FA6E74C0E0511F0971F7328C4F9AE02.roa (hash: ZuV1m3RVCFuLNu5PVZ3hMbWj1JgqSl1bBNnQdfczgAE=) 3: 8A27B986FFB811EFB6E16425C4F9AE02.roa (hash: g20Eco9SaLOp8CUCQLbxBAHWlc3BxmlgHVHA64eMjfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 06:41:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155098, serialNumber=6032F63FD261681A40F730B9787251E63328CD6E Validity Not Before: Oct 23 06:41:16 2025 GMT Not After : Oct 30 06:41:16 2025 GMT Subject: CN=68f9ce0c-b9dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:30:ed:33:6c:9e:8c:75:79:2c:56:1d:4f:49: 32:8d:27:88:1a:20:41:f5:8e:42:0a:22:08:89:9a: 24:11:05:de:b3:52:67:8f:1c:f3:eb:5f:0b:9d:ee: ce:87:df:b4:db:6f:e0:17:19:56:72:87:df:ac:e3: 44:53:6f:ef:27:e9:69:fe:0c:6e:dc:c3:08:91:ee: 1b:e7:93:76:62:6f:dc:2f:86:62:9c:87:b2:f4:06: 15:a2:13:c4:3f:b8:96:ac:5b:df:b4:97:45:0d:ab: f8:54:df:da:cb:f3:96:d7:e5:4c:88:43:30:70:d8: a6:07:80:55:d0:5c:ce:20:8b:49:f9:c6:f1:e9:a7: 50:38:7d:26:f0:97:dd:a2:03:c9:3c:c3:a9:e0:c1: 17:32:b0:ee:08:17:51:38:d2:9d:41:44:c1:27:4d: e8:da:90:c8:61:3c:46:ad:b1:df:86:1f:a0:cc:6a: 52:36:3b:0d:28:72:0b:8e:19:be:70:eb:50:8e:af: e5:2c:6a:ef:5d:03:e6:32:4b:9b:d7:10:cd:ad:1d: 2f:9d:e8:15:f6:45:ae:c9:09:70:15:91:9b:7d:b0: 74:34:00:76:92:27:9c:0b:ec:64:9c:98:ea:ef:fd: 4d:9e:55:4c:63:df:9e:29:d1:b1:2d:ac:bb:79:11: 51:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:01:64:69:35:AC:3B:4D:10:D3:55:C9:78:B5:5E:92:65:00:31:C0 X509v3 Authority Key Identifier: keyid:60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:fb:0a:b8:75:a9:96:0f:66:f7:af:2f:54:aa:7c:a1:5a:fe: 95:88:f7:0c:c2:8f:3b:13:0e:37:98:6b:0d:63:2e:1d:c3:fa: b3:88:7e:7e:38:5f:d9:07:aa:f3:cb:2b:b7:74:d3:c1:74:fe: e8:15:75:a6:83:38:5d:be:08:45:2e:2e:f2:61:c0:74:df:39: b7:c0:80:05:08:19:09:d6:ca:64:31:d6:8c:ff:6a:1c:d2:fb: bb:c6:12:0a:16:72:9f:50:d1:b2:e2:16:7b:4d:3d:19:d6:5d: f4:fa:a4:85:f2:48:c8:54:77:86:1e:c8:2e:8e:ed:f7:26:f6: 22:8d:ca:57:f5:02:4f:cf:e5:16:db:40:8c:62:27:10:2d:46: 41:0f:a5:82:e2:df:91:8e:36:0c:a6:b4:a7:4d:7e:ad:54:45: 50:ac:a7:d1:f1:cc:71:ac:7f:40:b4:93:c7:ec:35:ee:4c:fa: 18:4e:48:97:79:c2:11:a9:e4:31:cc:24:86:86:7c:41:65:3f: d3:96:73:bb:43:65:3b:0e:4f:7e:ea:30:91:12:5e:09:1b:91: 46:06:bd:b7:b1:26:8e:4b:b2:84:41:42:d3:d5:85:16:f8:52: 10:9f:6d:a4:94:0e:be:04:5e:79:66:15:e8:e4:12:29:f2:de: 31:af:ab:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUwOTgxMTAvBgNVBAUTKDYwMzJGNjNGRDI2MTY4MUE0MEY3MzBCOTc4NzI1MUU2 MzMyOENENkUwHhcNMjUxMDIzMDY0MTE2WhcNMjUxMDMwMDY0MTE2WjAYMRYwFAYD VQQDEw02OGY5Y2UwYy1iOWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0zDtM2yejHV5LFYdT0kyjSeIGiBB9Y5CCiIIiZokEQXes1Jnjxzz618Lne7O h9+022/gFxlWcoffrONEU2/vJ+lp/gxu3MMIke4b55N2Ym/cL4ZinIey9AYVohPE P7iWrFvftJdFDav4VN/ay/OW1+VMiEMwcNimB4BV0FzOIItJ+cbx6adQOH0m8Jfd ogPJPMOp4MEXMrDuCBdRONKdQUTBJ03o2pDIYTxGrbHfhh+gzGpSNjsNKHILjhm+ cOtQjq/lLGrvXQPmMkub1xDNrR0vnegV9kWuyQlwFZGbfbB0NAB2kiecC+xknJjq 7/1NnlVMY9+eKdGxLay7eRFRbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8BZGk1 rDtNENNVyXi1XpJlADHAMB8GA1UdIwQYMBaAFGAy9j/SYWgaQPcwuXhyUeYzKM1u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTA5OC9CMkIxQTJCOEZD NzExMUVFQkRDQzRCNTNDNEY5QUUwMi9ZREwyUDlKaGFCcEE5ekM1ZUhKUjVqTW96 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lETDJQOUpoYUJwQTl6QzVlSEpSNWpNb3pXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTA5OC9CMkIxQTJCOEZDNzExMUVFQkRDQzRCNTNDNEY5QUUwMi9ZREwyUDlKaGFC cEE5ekM1ZUhKUjVqTW96VzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0+wq4damWD2b3ry9UqnyhWv6ViPcMwo87Ew43mGsNYy4dw/qziH5+ OF/ZB6rzyyu3dNPBdP7oFXWmgzhdvghFLi7yYcB03zm3wIAFCBkJ1spkMdaM/2oc 0vu7xhIKFnKfUNGy4hZ7TT0Z1l30+qSF8kjIVHeGHsguju33JvYijcpX9QJPz+UW 20CMYicQLUZBD6WC4t+RjjYMprSnTX6tVEVQrKfR8cxxrH9AtJPH7DXuTPoYTkiX ecIRqeQxzCSGhnxBZT/TlnO7Q2U7Dk9+6jCREl4JG5FGBr23sSaOS7KEQULT1YUW +FIQn22klA6+BF55ZhXo5BIp8t4xr6tD -----END CERTIFICATE-----Generated at Thu Oct 23 09:57:49 2025 by rpki-client