$ rpki-client -vvf rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft File: y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft (raw, json) Hash identifier: QT0dx3cn3u8CJ9+JCy2trsNi6uSFNdDrosPOunylcrM= Subject key identifier: BF:00:4A:82:DE:36:CE:4D:BC:10:53:7E:7B:73:B7:F2:44:88:6A:D3 Authority key identifier: CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 Certificate issuer: /CN=A9159FAF/serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Certificate serial: 018A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft Manifest number: 0182 Signing time: Mon 27 Oct 2025 05:37:38 +0000 Manifest this update: Mon 27 Oct 2025 05:37:38 +0000 Manifest next update: Mon 03 Nov 2025 05:37:38 +0000 Files and hashes: 1: y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl (hash: lH59LaPCAM7lW4tgzY8oHW4JQP9UUqh+MY0SM/SfXmM=) 2: A910F37297CE11F0885B0A30C4F9AE02.roa (hash: cQK647yMwwLX45q9mOT0EIccACxOtmPbIGvaw9w+/pc=) 3: B752E03A97CE11F0ADE43030C4F9AE02.roa (hash: UlT/oF85OcS2SKCUgl+PsPTlbGKhNl+SEibXUqkYmEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 05:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 394 (0x18a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159FAF, serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Validity Not Before: Oct 27 05:37:38 2025 GMT Not After : Nov 3 05:37:38 2025 GMT Subject: CN=68ff0522-8965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fe:46:9d:64:bf:2a:9b:fc:91:55:15:80:fb: ee:af:7d:1f:15:3e:81:62:dc:80:1a:3d:d4:32:f9: ac:b5:d0:a6:64:23:34:7d:1d:e9:bf:a0:0d:c6:c6: 04:dc:0c:2f:dc:51:12:47:d9:57:0c:46:a8:5d:40: ee:cc:b4:6b:8d:c0:b7:f1:7d:46:aa:9c:cf:cd:76: 2d:d6:a0:df:de:c9:bf:35:53:3f:43:dc:05:db:65: 0d:cd:01:98:8b:c4:ce:bb:a3:86:96:c6:a4:ff:13: 25:f8:8d:6f:ce:fc:80:32:7f:70:3c:94:0b:d0:d4: 2b:82:31:e7:ec:61:e2:04:9d:3d:20:fd:60:b5:90: 6b:9e:a3:59:07:ff:01:a4:9b:7e:71:a5:4f:72:02: 5a:4f:d3:75:55:bb:e2:92:26:aa:bd:bb:c5:14:28: 40:ff:6c:20:c7:70:bb:55:d8:c8:27:1a:f0:35:7b: 0e:ff:69:0d:96:65:1e:12:40:34:4e:bf:80:e3:7f: 34:e3:b4:43:1b:c1:4e:21:a3:b3:75:68:c8:7f:95: 5c:62:bf:e6:02:9c:f2:e2:30:b1:fb:a2:cd:04:34: b2:66:88:88:21:e9:ca:60:28:7b:50:25:31:d4:72: bb:95:47:9d:81:0d:cb:06:55:5c:19:ce:3f:e7:be: 95:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:00:4A:82:DE:36:CE:4D:BC:10:53:7E:7B:73:B7:F2:44:88:6A:D3 X509v3 Authority Key Identifier: keyid:CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:9f:28:9a:0b:e1:e7:32:b7:60:22:4c:c0:69:9f:2c:e0:4f: 24:1f:3b:87:b7:a2:c7:58:cc:16:d7:ba:5d:97:12:47:ea:b5: 47:92:23:7f:ae:2f:2d:f2:ff:e1:c5:15:dc:48:43:e3:99:5a: 0b:f8:65:c5:6b:20:2a:44:05:ab:38:23:90:f9:45:53:18:3b: 27:cc:6d:dc:67:ab:36:4e:b9:02:27:98:31:b7:f3:0d:a8:cc: 65:ed:f7:f9:c9:57:3c:ee:d7:c1:6d:4a:d3:17:49:1e:09:aa: 53:22:86:98:59:ea:b9:8a:22:4a:b7:d8:8b:e1:e8:ad:26:58: f5:62:cb:03:df:e4:4a:b0:24:fb:da:c4:08:aa:33:37:fd:37: 72:ff:f0:9c:f7:7c:46:6c:23:6e:58:9c:3c:69:10:ef:7e:16: 44:36:78:57:7e:34:06:ec:5c:8c:a0:ec:0e:97:58:d9:d1:17: 36:45:3d:d6:34:a9:f0:11:7a:13:fb:4d:21:e4:02:51:e4:e0: 36:d6:e4:aa:a4:f7:b5:63:f7:cd:ab:f7:a6:bd:6c:03:ef:0f: 94:e8:dd:1e:19:1b:81:1a:2d:f2:41:8c:f2:98:c8:28:d2:f8: fd:c9:d9:72:96:96:8a:48:28:c4:27:3e:5c:d7:7f:df:9f:c7: 21:46:e4:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlGQUYxMTAvBgNVBAUTKENCRUM2RjE4MzkwNTQ4NzUyMUM3OTQ3QjRGN0JGRDZD Qjc4REE0NzkwHhcNMjUxMDI3MDUzNzM4WhcNMjUxMTAzMDUzNzM4WjAYMRYwFAYD VQQDEw02OGZmMDUyMi04OTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuv5GnWS/Kpv8kVUVgPvur30fFT6BYtyAGj3UMvmstdCmZCM0fR3pv6ANxsYE 3Awv3FESR9lXDEaoXUDuzLRrjcC38X1GqpzPzXYt1qDf3sm/NVM/Q9wF22UNzQGY i8TOu6OGlsak/xMl+I1vzvyAMn9wPJQL0NQrgjHn7GHiBJ09IP1gtZBrnqNZB/8B pJt+caVPcgJaT9N1VbvikiaqvbvFFChA/2wgx3C7VdjIJxrwNXsO/2kNlmUeEkA0 Tr+A438047RDG8FOIaOzdWjIf5VcYr/mApzy4jCx+6LNBDSyZoiIIenKYCh7UCUx 1HK7lUedgQ3LBlVcGc4/576VbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8ASoLe Ns5NvBBTfntzt/JEiGrTMB8GA1UdIwQYMBaAFMvsbxg5BUh1IceUe097/Wy3jaR5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUZBRi8xMjk1NzVDNDZF NDIxMUVFQUI0QzlDNkNDNEY5QUUwMi95LXh2R0RrRlNIVWh4NVI3VDN2OWJMZU5w SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kteHZHRGtGU0hVaHg1UjdUM3Y5YkxlTnBIay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUZBRi8xMjk1NzVDNDZFNDIxMUVFQUI0QzlDNkNDNEY5QUUwMi95LXh2R0RrRlNI VWh4NVI3VDN2OWJMZU5wSGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCynyiaC+HnMrdgIkzAaZ8s4E8kHzuHt6LHWMwW17pdlxJH6rVHkiN/ ri8t8v/hxRXcSEPjmVoL+GXFayAqRAWrOCOQ+UVTGDsnzG3cZ6s2TrkCJ5gxt/MN qMxl7ff5yVc87tfBbUrTF0keCapTIoaYWeq5iiJKt9iL4eitJlj1YssD3+RKsCT7 2sQIqjM3/Tdy//Cc93xGbCNuWJw8aRDvfhZENnhXfjQG7FyMoOwOl1jZ0Rc2RT3W NKnwEXoT+00h5AJR5OA21uSqpPe1Y/fNq/emvWwD7w+U6N0eGRuBGi3yQYzymMgo 0vj9ydlylpaKSCjEJz5c13/fn8chRuTS -----END CERTIFICATE-----Generated at Mon Oct 27 14:57:42 2025 by rpki-client