$ rpki-client -vvf rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft File: yYWS4c0LLnYQyEsC5mHL8zb_r10.mft (raw, json) Hash identifier: M5iBUKr1rd5Mp3gM20g60oIDBXgUjCKFEM00FokQbco= Subject key identifier: 1E:F2:36:DF:0A:13:FB:61:28:F4:E9:88:1C:77:5D:0E:A3:DF:CA:20 Authority key identifier: C9:85:92:E1:CD:0B:2E:76:10:C8:4B:02:E6:61:CB:F3:36:FF:AF:5D Certificate issuer: /CN=A9168E98/serialNumber=C98592E1CD0B2E7610C84B02E661CBF336FFAF5D Certificate serial: 0833 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft Manifest number: 082D Signing time: Sun 02 Nov 2025 20:45:44 +0000 Manifest this update: Sun 02 Nov 2025 20:45:44 +0000 Manifest next update: Sun 09 Nov 2025 20:45:44 +0000 Files and hashes: 1: yYWS4c0LLnYQyEsC5mHL8zb_r10.crl (hash: fnYeoEnLJEknGsZoEagvgaIYR4jXw4YreD537OHTERc=) 2: 789C2BD0ECCA11EAAE025C70C4F9AE02.roa (hash: EmQdF5GLB5bUu9T1LF70zLmHofep4YvVxF8l/ylf5kA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.crl rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:45:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2099 (0x833) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168E98, serialNumber=C98592E1CD0B2E7610C84B02E661CBF336FFAF5D Validity Not Before: Nov 2 20:45:44 2025 GMT Not After : Nov 9 20:45:44 2025 GMT Subject: CN=6907c2f8-cc15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:04:99:11:3d:8c:da:8c:8f:66:10:ef:4e:4a: 8a:af:6a:9b:b0:25:0b:46:1d:1d:7a:65:99:24:8f: ee:c1:20:1b:b7:17:9a:79:0f:f7:67:26:30:16:a9: 3b:92:49:be:22:e1:e8:55:d0:83:7b:6e:e7:0a:cf: 18:f8:c9:6e:4b:87:7e:b1:19:4e:22:9e:f5:47:75: cd:e0:fb:c8:bc:fe:9f:76:33:d5:57:27:45:52:75: e1:d9:a6:04:fe:9d:37:b3:f7:3e:7c:af:9c:36:0d: 7c:4e:4b:7e:3b:b4:3d:74:9a:d6:a4:8f:55:69:bb: 62:c7:12:0c:d7:c4:2e:6d:77:4b:7f:a4:79:ec:39: 1e:ac:bc:0d:ff:6f:73:4b:b0:f4:0a:ad:4c:2d:72: e8:20:96:51:f3:c4:83:5a:9d:93:0c:15:2b:29:3d: af:46:b9:1c:61:e3:64:33:a9:a2:fc:50:3d:23:6f: e8:2f:05:51:ee:d9:35:ee:31:7a:15:51:27:cb:54: 4a:da:d5:16:f9:00:9c:14:53:5f:3d:fa:e1:e7:c7: 0f:cf:ba:88:e6:d7:59:07:87:63:1a:b3:2e:e0:ec: c0:75:9e:50:15:58:6f:24:a2:db:7e:09:3d:2c:3f: 39:a6:52:df:79:cf:33:fb:34:95:36:50:01:7e:e2: f7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F2:36:DF:0A:13:FB:61:28:F4:E9:88:1C:77:5D:0E:A3:DF:CA:20 X509v3 Authority Key Identifier: keyid:C9:85:92:E1:CD:0B:2E:76:10:C8:4B:02:E6:61:CB:F3:36:FF:AF:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:16:14:fa:9e:03:3e:98:a7:2a:ae:85:ad:03:82:53:f6:30: 33:67:01:8a:c1:c9:f6:2f:c9:32:6b:84:a5:e4:43:98:3a:73: e8:db:38:4a:28:5f:e1:a0:d1:59:28:69:ee:6e:23:53:61:2f: 01:cc:e3:64:fa:a4:af:13:ef:de:ec:79:8b:86:ff:0e:2f:70: 9d:01:24:76:2d:a2:54:40:5d:56:f2:f3:40:ba:18:ee:d5:dd: 6f:26:13:1c:d7:dc:95:cf:18:f4:77:26:1b:ae:fe:b2:19:38: a6:ed:24:f2:73:5e:6e:ae:9b:a5:65:bd:94:0f:15:a6:92:af: 41:60:68:2b:83:94:b0:be:38:c6:7e:50:29:bd:30:97:db:a7: 4a:c9:f7:ba:54:19:03:b0:15:5e:b0:26:0e:e2:d0:64:98:0f: b7:2f:a0:72:da:a3:5d:da:38:5e:e6:88:a9:31:43:a8:77:e3: 62:11:89:35:0b:57:84:29:76:72:f9:0a:4d:43:67:dd:04:88: d0:76:ea:15:16:b5:d7:52:db:d7:1f:3f:36:52:4b:57:35:6e: 5a:32:07:b5:8a:be:ec:75:fc:f8:7b:cf:a8:3f:7f:b1:c7:62: a8:bb:bf:c2:d7:5e:cb:f0:f2:e1:09:ca:ba:22:31:ae:ac:5f: 05:77:88:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhFOTgxMTAvBgNVBAUTKEM5ODU5MkUxQ0QwQjJFNzYxMEM4NEIwMkU2NjFDQkYz MzZGRkFGNUQwHhcNMjUxMTAyMjA0NTQ0WhcNMjUxMTA5MjA0NTQ0WjAYMRYwFAYD VQQDEw02OTA3YzJmOC1jYzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqASZET2M2oyPZhDvTkqKr2qbsCULRh0demWZJI/uwSAbtxeaeQ/3ZyYwFqk7 kkm+IuHoVdCDe27nCs8Y+MluS4d+sRlOIp71R3XN4PvIvP6fdjPVVydFUnXh2aYE /p03s/c+fK+cNg18Tkt+O7Q9dJrWpI9VabtixxIM18QubXdLf6R57DkerLwN/29z S7D0Cq1MLXLoIJZR88SDWp2TDBUrKT2vRrkcYeNkM6mi/FA9I2/oLwVR7tk17jF6 FVEny1RK2tUW+QCcFFNfPfrh58cPz7qI5tdZB4djGrMu4OzAdZ5QFVhvJKLbfgk9 LD85plLfec8z+zSVNlABfuL3XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7yNt8K E/thKPTpiBx3XQ6j38ogMB8GA1UdIwQYMBaAFMmFkuHNCy52EMhLAuZhy/M2/69d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEU5OC8wRUIxMkI0MEVD QzkxMUVBQjgyNTYyNkVDNEY5QUUwMi95WVdTNGMwTExuWVF5RXNDNW1ITDh6Yl9y MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lZV1M0YzBMTG5ZUXlFc0M1bUhMOHpiX3IxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEU5OC8wRUIxMkI0MEVDQzkxMUVBQjgyNTYyNkVDNEY5QUUwMi95WVdTNGMwTExu WVF5RXNDNW1ITDh6Yl9yMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKFhT6ngM+mKcqroWtA4JT9jAzZwGKwcn2L8kya4Sl5EOYOnPo2zhK KF/hoNFZKGnubiNTYS8BzONk+qSvE+/e7HmLhv8OL3CdASR2LaJUQF1W8vNAuhju 1d1vJhMc19yVzxj0dyYbrv6yGTim7STyc15urpulZb2UDxWmkq9BYGgrg5SwvjjG flApvTCX26dKyfe6VBkDsBVesCYO4tBkmA+3L6By2qNd2jhe5oipMUOod+NiEYk1 C1eEKXZy+QpNQ2fdBIjQduoVFrXXUtvXHz82UktXNW5aMge1ir7sdfz4e8+oP3+x x2Kou7/C117L8PLhCcq6IjGurF8Fd4hS -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:32 2025 by rpki-client