$ rpki-client -vvf rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft File: yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft (raw, json) Hash identifier: DosPkyeCY/Rem2s6lksQ/inQGSMougHy1Cb7gtIQ1R8= Subject key identifier: C5:7F:03:13:7B:BC:86:FC:F7:F9:87:F5:22:F3:CC:9E:6C:F4:F0:6D Authority key identifier: CB:1C:80:B4:03:4B:E4:1B:58:C3:C6:4B:24:A0:8C:D9:C7:7B:96:3B Certificate issuer: /CN=A9162914/serialNumber=CB1C80B4034BE41B58C3C64B24A08CD9C77B963B Certificate serial: 02D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxyAtANL5BtYw8ZLJKCM2cd7ljs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft Manifest number: 02CD Signing time: Mon 03 Nov 2025 01:21:37 +0000 Manifest this update: Mon 03 Nov 2025 01:21:37 +0000 Manifest next update: Mon 10 Nov 2025 01:21:37 +0000 Files and hashes: 1: yxyAtANL5BtYw8ZLJKCM2cd7ljs.crl (hash: FoY/OiUGliAgLvmc8PHfWyHDA5ZMfJiPKrR18taPS28=) 2: 755581D40D7E11EDA9F2CA4AC4F9AE02.roa (hash: L/OoYrYOhuGJMFdRgAmm9owGHD6xvG0PlHjA2AQlTLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.crl rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxyAtANL5BtYw8ZLJKCM2cd7ljs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 723 (0x2d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162914, serialNumber=CB1C80B4034BE41B58C3C64B24A08CD9C77B963B Validity Not Before: Nov 3 01:21:37 2025 GMT Not After : Nov 10 01:21:37 2025 GMT Subject: CN=690803a1-d2bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f8:86:1c:fe:de:56:6a:d9:c9:5d:0d:1d:e5: 82:05:c0:b6:eb:8c:75:d9:fe:e6:2b:15:2b:2f:79: 26:80:9f:5b:91:5c:3f:94:62:0a:e8:62:1b:5b:ba: b1:46:f9:8e:2e:f4:ce:3b:41:a5:41:bf:f9:06:02: 1b:b2:f2:fb:bd:97:e9:e2:be:10:94:89:c9:1b:21: 91:92:cb:28:55:e3:09:bb:da:c1:2b:d7:18:6e:af: 0f:4f:6b:2c:2c:8c:4c:c5:48:12:00:db:49:7a:7c: f3:8d:b1:3c:c8:50:f8:88:8c:7b:c1:fc:d8:e3:a0: 69:db:f6:16:c9:50:63:1a:b4:fe:43:7e:99:32:bc: 1f:cc:a4:25:18:4d:f0:00:24:42:c9:bd:dc:72:7c: 1f:6d:ec:34:d7:e0:b2:6b:82:63:ab:c5:3c:17:a6: a5:69:bc:9f:2a:d2:3c:e5:d2:15:7c:29:a2:33:2a: cf:5e:2a:a1:ca:37:e9:f9:86:3e:5e:41:36:86:a9: f8:2c:5c:7a:db:32:a4:93:53:8a:9c:b6:fe:aa:08: 33:b9:64:14:61:e1:6f:8b:9e:ae:7b:29:a3:ef:a2: 66:2f:c4:27:c0:ae:86:72:d3:cd:7d:58:c2:92:65: 0b:62:dc:fa:69:c2:52:08:95:f7:83:06:c9:c6:b8: ad:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:7F:03:13:7B:BC:86:FC:F7:F9:87:F5:22:F3:CC:9E:6C:F4:F0:6D X509v3 Authority Key Identifier: keyid:CB:1C:80:B4:03:4B:E4:1B:58:C3:C6:4B:24:A0:8C:D9:C7:7B:96:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxyAtANL5BtYw8ZLJKCM2cd7ljs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162914/D66C93FC0D7611ED82ABE24CC4F9AE02/yxyAtANL5BtYw8ZLJKCM2cd7ljs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:0e:63:e5:bb:92:60:ae:0a:c0:b9:4c:aa:12:be:37:ba:51: e9:20:6d:68:8e:c1:2e:a8:c7:2a:0f:7b:e6:30:6d:1f:05:69: 19:ee:e7:fd:b3:20:a3:57:40:09:62:da:7a:a0:cf:fe:e1:ff: 41:fb:ed:86:47:76:b4:56:52:66:0f:89:cc:ca:60:5b:77:ff: b9:7f:b4:6c:93:94:9e:d1:7d:9b:a2:5e:2a:cf:6d:fb:11:58: c7:0f:96:17:72:b7:55:69:dc:11:f8:0c:13:0f:ef:bc:b3:c9: 58:1b:8a:0a:d4:b8:b8:54:7a:f6:7b:34:a4:cc:56:40:26:36: cb:ba:04:cb:ac:b5:69:82:07:75:6a:47:0b:91:c7:72:5d:80: 55:af:95:aa:e5:4d:02:41:41:45:a9:30:ae:8c:8d:6a:b7:a0: 2a:fe:16:d5:3e:00:d3:9a:03:7e:a5:19:de:fb:37:bd:45:01: ef:82:82:55:79:f9:b2:4d:e8:6a:72:a9:04:a7:9a:7e:7c:6b: 51:2c:35:10:2f:c4:7d:11:4a:84:35:4f:1e:a7:6b:66:d9:f1: 40:4f:e3:59:e3:2f:55:ed:b4:41:1c:04:3c:96:0b:30:e4:ef: 8c:86:67:6f:fd:68:ec:ef:a4:c3:6f:03:a7:25:73:25:08:a1: bb:da:a0:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI5MTQxMTAvBgNVBAUTKENCMUM4MEI0MDM0QkU0MUI1OEMzQzY0QjI0QTA4Q0Q5 Qzc3Qjk2M0IwHhcNMjUxMTAzMDEyMTM3WhcNMjUxMTEwMDEyMTM3WjAYMRYwFAYD VQQDEw02OTA4MDNhMS1kMmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2fiGHP7eVmrZyV0NHeWCBcC264x12f7mKxUrL3kmgJ9bkVw/lGIK6GIbW7qx RvmOLvTOO0GlQb/5BgIbsvL7vZfp4r4QlInJGyGRkssoVeMJu9rBK9cYbq8PT2ss LIxMxUgSANtJenzzjbE8yFD4iIx7wfzY46Bp2/YWyVBjGrT+Q36ZMrwfzKQlGE3w ACRCyb3ccnwfbew01+Cya4Jjq8U8F6alabyfKtI85dIVfCmiMyrPXiqhyjfp+YY+ XkE2hqn4LFx62zKkk1OKnLb+qggzuWQUYeFvi56ueymj76JmL8QnwK6GctPNfVjC kmULYtz6acJSCJX3gwbJxritywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMV/AxN7 vIb89/mH9SLzzJ5s9PBtMB8GA1UdIwQYMBaAFMscgLQDS+QbWMPGSySgjNnHe5Y7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjkxNC9ENjZDOTNGQzBE NzYxMUVEODJBQkUyNENDNEY5QUUwMi95eHlBdEFOTDVCdFl3OFpMSktDTTJjZDds anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l4eUF0QU5MNUJ0WXc4WkxKS0NNMmNkN2xqcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjkxNC9ENjZDOTNGQzBENzYxMUVEODJBQkUyNENDNEY5QUUwMi95eHlBdEFOTDVC dFl3OFpMSktDTTJjZDdsanMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsDmPlu5JgrgrAuUyqEr43ulHpIG1ojsEuqMcqD3vmMG0fBWkZ7uf9 syCjV0AJYtp6oM/+4f9B++2GR3a0VlJmD4nMymBbd/+5f7Rsk5Se0X2bol4qz237 EVjHD5YXcrdVadwR+AwTD++8s8lYG4oK1Li4VHr2ezSkzFZAJjbLugTLrLVpggd1 akcLkcdyXYBVr5Wq5U0CQUFFqTCujI1qt6Aq/hbVPgDTmgN+pRne+ze9RQHvgoJV efmyTehqcqkEp5p+fGtRLDUQL8R9EUqENU8ep2tm2fFAT+NZ4y9V7bRBHAQ8lgsw 5O+Mhmdv/Wjs76TDbwOnJXMlCKG72qCz -----END CERTIFICATE-----Generated at Mon Nov 3 18:08:06 2025 by rpki-client