$ rpki-client -vvf rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft File: vY9TgeGI5FgPskcsJxoFQp4tXCI.mft (raw, json) Hash identifier: 1WlOw1qr0dUeuaSFP7rrUE6QQrOnCVAfkc7hKUvNr/s= Subject key identifier: B3:82:D2:09:94:C1:3B:11:3E:00:ED:50:ED:33:B1:C4:C6:41:F4:72 Authority key identifier: BD:8F:53:81:E1:88:E4:58:0F:B2:47:2C:27:1A:05:42:9E:2D:5C:22 Certificate issuer: /CN=A915D66D/serialNumber=BD8F5381E188E4580FB2472C271A05429E2D5C22 Certificate serial: 1B4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft Manifest number: 1B43 Signing time: Sun 02 Nov 2025 16:17:30 +0000 Manifest this update: Sun 02 Nov 2025 16:17:30 +0000 Manifest next update: Sun 09 Nov 2025 16:17:30 +0000 Files and hashes: 1: vY9TgeGI5FgPskcsJxoFQp4tXCI.crl (hash: Lk9+AreWw8NSo+3YXmEfODN/7SxrtShBKmAQXfCMxqM=) 2: 59029A32233A11E78D48837AC4F9AE02.roa (hash: XfYeKxfatX6id5bBv2XHc88RkA9A8XtPbM07HmC0bY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.crl rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6990 (0x1b4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D66D, serialNumber=BD8F5381E188E4580FB2472C271A05429E2D5C22 Validity Not Before: Nov 2 16:17:30 2025 GMT Not After : Nov 9 16:17:30 2025 GMT Subject: CN=6907841a-57a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d7:ac:37:e1:22:ee:e9:ad:70:cf:2a:e4:2f: 18:39:c8:d2:77:29:3b:e1:92:12:7d:fe:94:d8:7c: 66:29:c3:6b:18:27:a9:c8:f3:e6:a5:e1:9d:88:27: 40:81:bd:8a:3e:31:07:06:7c:6f:a0:33:ed:be:64: 25:00:1b:de:37:7c:72:c7:0e:03:d0:d9:7b:a0:d4: 61:0e:8b:fe:64:2f:df:2b:f7:67:73:4c:61:4b:57: d7:c9:68:d7:f1:62:6c:58:47:85:3b:3e:fe:09:e0: 60:c5:91:43:df:f0:f3:84:35:9d:bc:f7:ab:76:25: 69:3f:6b:bc:fd:c5:f0:91:dd:50:08:48:8a:ca:9f: e7:9e:88:bd:c3:7e:7a:83:8c:98:9d:1a:ba:f8:07: 7f:8b:3f:31:e9:ef:28:65:d3:55:81:86:cd:32:52: a1:44:a8:44:80:c8:dd:25:21:d5:96:26:63:4f:22: 21:93:c8:4e:bc:d9:be:dc:81:ca:3b:5f:f3:14:35: 5e:82:4b:a0:40:5f:8f:e4:2e:46:78:46:a1:54:0b: 91:0d:74:99:18:e1:d0:33:13:41:e3:c3:99:b9:df: f1:82:90:90:70:11:68:0b:88:32:06:ce:21:51:4f: 04:52:64:60:7d:fb:21:72:92:29:1d:95:ea:67:16: e4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:82:D2:09:94:C1:3B:11:3E:00:ED:50:ED:33:B1:C4:C6:41:F4:72 X509v3 Authority Key Identifier: keyid:BD:8F:53:81:E1:88:E4:58:0F:B2:47:2C:27:1A:05:42:9E:2D:5C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:0e:62:85:36:65:07:57:18:40:4d:df:15:77:c0:7a:44:80: 18:51:00:91:92:b7:71:d0:05:01:f8:31:d7:aa:14:76:a6:4c: c7:82:16:4c:1b:5f:7d:ae:5f:85:3f:27:e7:3b:1a:68:8f:52: 15:3e:37:75:ec:db:65:e9:6b:49:af:e6:f4:05:f9:5b:93:c7: e8:0e:a1:83:1b:13:cf:e5:8b:f8:09:e7:5f:6c:6e:49:f7:eb: d5:da:0f:d9:2f:06:fa:b2:a6:3e:8e:fa:fa:72:7f:ce:2d:15: 68:f1:ca:c3:a5:61:73:b6:83:e3:4b:01:c5:f1:1c:bb:b6:6e: d8:59:5e:92:9e:7d:c7:a2:f1:f1:18:66:5d:d1:e3:cd:bc:e7: 3c:84:ba:01:9f:47:7c:aa:86:a7:d4:a4:a1:53:9e:3a:8c:2d: ab:cd:d7:c0:84:b9:24:4a:e0:04:ce:c5:4b:f0:e0:34:43:35: 65:15:0c:a8:63:e2:f1:d3:b0:ca:b3:5b:f9:1e:22:89:e8:45: 0f:8c:1d:5f:82:07:da:90:56:f5:ea:bb:53:ba:e2:ff:25:4c: 1e:89:7c:d3:c9:59:b9:3b:f9:9b:40:a1:62:fa:5a:83:36:16: 46:14:5c:50:63:a6:cc:71:71:c0:5b:bf:2e:f4:d2:e7:8c:6b: 0c:73:98:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2NkQxMTAvBgNVBAUTKEJEOEY1MzgxRTE4OEU0NTgwRkIyNDcyQzI3MUEwNTQy OUUyRDVDMjIwHhcNMjUxMTAyMTYxNzMwWhcNMjUxMTA5MTYxNzMwWjAYMRYwFAYD VQQDEw02OTA3ODQxYS01N2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2tesN+Ei7umtcM8q5C8YOcjSdyk74ZISff6U2HxmKcNrGCepyPPmpeGdiCdA gb2KPjEHBnxvoDPtvmQlABveN3xyxw4D0Nl7oNRhDov+ZC/fK/dnc0xhS1fXyWjX 8WJsWEeFOz7+CeBgxZFD3/DzhDWdvPerdiVpP2u8/cXwkd1QCEiKyp/nnoi9w356 g4yYnRq6+Ad/iz8x6e8oZdNVgYbNMlKhRKhEgMjdJSHVliZjTyIhk8hOvNm+3IHK O1/zFDVegkugQF+P5C5GeEahVAuRDXSZGOHQMxNB48OZud/xgpCQcBFoC4gyBs4h UU8EUmRgffshcpIpHZXqZxbkJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLOC0gmU wTsRPgDtUO0zscTGQfRyMB8GA1UdIwQYMBaAFL2PU4HhiORYD7JHLCcaBUKeLVwi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDY2RC8xRUIwOTI1NDIz MzkxMUU3QTA2QjI1NzlDNEY5QUUwMi92WTlUZ2VHSTVGZ1Bza2NzSnhvRlFwNHRY Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZZOVRnZUdJNUZnUHNrY3NKeG9GUXA0dFhDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDY2RC8xRUIwOTI1NDIzMzkxMUU3QTA2QjI1NzlDNEY5QUUwMi92WTlUZ2VHSTVG Z1Bza2NzSnhvRlFwNHRYQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZDmKFNmUHVxhATd8Vd8B6RIAYUQCRkrdx0AUB+DHXqhR2pkzHghZM G199rl+FPyfnOxpoj1IVPjd17Ntl6WtJr+b0Bflbk8foDqGDGxPP5Yv4CedfbG5J 9+vV2g/ZLwb6sqY+jvr6cn/OLRVo8crDpWFztoPjSwHF8Ry7tm7YWV6Snn3HovHx GGZd0ePNvOc8hLoBn0d8qoan1KShU546jC2rzdfAhLkkSuAEzsVL8OA0QzVlFQyo Y+Lx07DKs1v5HiKJ6EUPjB1fggfakFb16rtTuuL/JUweiXzTyVm5O/mbQKFi+lqD NhZGFFxQY6bMcXHAW78u9NLnjGsMc5gE -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:07 2025 by rpki-client