$ rpki-client -vvf rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft File: YWPctdU7SHLhWVY-kPxeQa0ALC0.mft (raw, json) Hash identifier: psErkMom4ZJxWpC2+TPTOYN3be0f+01+2kTw3+i/gOo= Subject key identifier: 52:B3:66:59:57:CF:77:A0:E1:EA:3C:8D:22:A5:34:D8:76:6C:05:2B Authority key identifier: 61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D Certificate issuer: /CN=A9174282/serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D Certificate serial: 04C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft Manifest number: 04C4 Signing time: Tue 04 Nov 2025 23:57:24 +0000 Manifest this update: Tue 04 Nov 2025 23:57:23 +0000 Manifest next update: Tue 11 Nov 2025 23:57:23 +0000 Files and hashes: 1: YWPctdU7SHLhWVY-kPxeQa0ALC0.crl (hash: 3Z0VKodhcJJsAmYefuvJmgbKGUji4ylNQ+wFZJoHkC8=) 2: BDE72518479C11EC8861323FC4F9AE02.roa (hash: QChsCdLxNdJADtEotr2ALhheVziebQBBztLPRul6Vhs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:57:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1225 (0x4c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174282, serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D Validity Not Before: Nov 4 23:57:23 2025 GMT Not After : Nov 11 23:57:23 2025 GMT Subject: CN=690a92e3-87de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:0d:52:0d:ed:74:15:2f:36:16:09:df:f3:85: c2:7d:ba:d7:f4:ae:b7:5c:5a:aa:9c:ec:2b:f1:76: b3:93:86:d6:14:06:e7:66:ae:4d:40:40:ef:e4:14: b9:6e:0b:08:a8:17:a1:59:06:2c:ad:f6:eb:c9:2c: d0:cb:3d:16:fc:1c:3b:13:5e:27:72:82:66:a4:fb: 97:6a:d3:89:a5:73:87:05:37:f2:0a:86:7b:c0:f1: 97:7f:db:8b:36:e9:8f:73:99:52:d5:3a:a8:ef:5d: 77:a2:78:f3:ca:bb:d6:d2:90:c2:98:64:fd:4d:3c: 78:74:2d:d9:00:1e:51:a6:d5:8f:d8:12:d4:2a:30: 2e:16:b9:19:1f:b4:e3:d9:52:48:3f:a0:e1:ce:77: a3:5b:ac:7e:c2:36:b9:7b:c7:5f:9b:ce:2d:a8:2e: e7:50:ec:4e:b0:50:46:43:13:7a:0c:5a:9b:8a:47: d6:6d:e9:73:ad:b7:43:46:f4:1b:78:74:f4:09:7e: 1f:67:4a:b3:20:dc:10:4a:ad:17:9e:98:53:53:c8: e3:30:a3:6d:af:fb:62:1c:b0:52:ea:8a:38:6d:e5: b8:51:79:2c:fb:f3:56:53:ed:a2:87:ff:ee:f6:17: 2c:a7:b7:02:e2:4d:54:8d:cd:d8:63:77:39:a0:6a: 7e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B3:66:59:57:CF:77:A0:E1:EA:3C:8D:22:A5:34:D8:76:6C:05:2B X509v3 Authority Key Identifier: keyid:61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:73:a0:43:77:64:43:91:e3:e9:1a:5a:d4:9b:a3:7e:6e:4b: e9:ef:46:e7:65:0b:69:fc:cb:13:c1:d1:bd:0a:eb:3e:b0:df: 17:b5:d7:da:52:c2:0a:a4:62:39:f5:62:ff:20:87:b5:11:1a: a9:c1:c0:96:bc:7f:6f:bb:a5:83:07:71:6f:f5:f8:13:0b:18: ad:51:48:bd:88:30:a0:b4:bf:57:0e:cd:d5:78:ca:7b:89:eb: 2c:0f:86:8f:8b:0f:c1:a3:71:93:31:29:61:db:11:a3:3f:f2: 0a:2f:e9:a4:f6:07:4b:d3:94:37:6c:5c:28:54:96:a7:01:58: 1c:0a:90:89:8d:e9:e7:88:ba:34:ab:5a:aa:1c:e6:d8:ba:6c: a2:d9:63:88:1a:fc:f5:b8:84:98:2d:5d:53:f1:02:ba:89:25: 43:30:13:57:36:10:ec:82:3d:91:d0:46:40:02:28:88:6d:55: 7f:db:2e:1c:d5:c2:7c:76:95:20:18:b8:3d:6d:f3:5c:63:12: 12:54:e3:ba:9e:b6:9b:ff:79:3a:07:29:42:63:3b:79:5b:95: 12:01:09:fe:fb:8b:60:75:4e:4c:f3:26:88:e9:d8:fc:f4:c8: 7e:7a:1f:63:9a:9d:6d:8e:f1:63:0c:34:67:8c:d1:54:ba:a9: 82:a5:a2:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQyODIxMTAvBgNVBAUTKDYxNjNEQ0I1RDUzQjQ4NzJFMTU5NTYzRTkwRkM1RTQx QUQwMDJDMkQwHhcNMjUxMTA0MjM1NzIzWhcNMjUxMTExMjM1NzIzWjAYMRYwFAYD VQQDEw02OTBhOTJlMy04N2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6g1SDe10FS82Fgnf84XCfbrX9K63XFqqnOwr8Xazk4bWFAbnZq5NQEDv5BS5 bgsIqBehWQYsrfbrySzQyz0W/Bw7E14ncoJmpPuXatOJpXOHBTfyCoZ7wPGXf9uL NumPc5lS1Tqo7113onjzyrvW0pDCmGT9TTx4dC3ZAB5RptWP2BLUKjAuFrkZH7Tj 2VJIP6DhznejW6x+wja5e8dfm84tqC7nUOxOsFBGQxN6DFqbikfWbelzrbdDRvQb eHT0CX4fZ0qzINwQSq0XnphTU8jjMKNtr/tiHLBS6oo4beW4UXks+/NWU+2ih//u 9hcsp7cC4k1Ujc3YY3c5oGp+AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKzZllX z3eg4eo8jSKlNNh2bAUrMB8GA1UdIwQYMBaAFGFj3LXVO0hy4VlWPpD8XkGtACwt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDI4Mi85NzE0MzM3NjQ3 OTgxMUVDQjAzRDU1MzhDNEY5QUUwMi9ZV1BjdGRVN1NITGhXVlkta1B4ZVFhMEFM QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lXUGN0ZFU3U0hMaFdWWS1rUHhlUWEwQUxDMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDI4Mi85NzE0MzM3NjQ3OTgxMUVDQjAzRDU1MzhDNEY5QUUwMi9ZV1BjdGRVN1NI TGhXVlkta1B4ZVFhMEFMQzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCic6BDd2RDkePpGlrUm6N+bkvp70bnZQtp/MsTwdG9Cus+sN8Xtdfa UsIKpGI59WL/IIe1ERqpwcCWvH9vu6WDB3Fv9fgTCxitUUi9iDCgtL9XDs3VeMp7 iessD4aPiw/Bo3GTMSlh2xGjP/IKL+mk9gdL05Q3bFwoVJanAVgcCpCJjenniLo0 q1qqHObYumyi2WOIGvz1uISYLV1T8QK6iSVDMBNXNhDsgj2R0EZAAiiIbVV/2y4c 1cJ8dpUgGLg9bfNcYxISVOO6nrab/3k6BylCYzt5W5USAQn++4tgdU5M8yaI6dj8 9Mh+eh9jmp1tjvFjDDRnjNFUuqmCpaIc -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:13 2025 by rpki-client