$ rpki-client -vvf rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft File: YQPK5q-yXkC6nl2kxULP4JtndCo.mft (raw, json) Hash identifier: S+aN7JZYiWHRxYl3NypZ5Jms0DoGJng2UzuN3VOgf2o= Subject key identifier: 74:17:2E:BF:B7:E5:37:3B:E5:CA:77:66:DE:93:B3:7E:AE:44:1D:75 Authority key identifier: 61:03:CA:E6:AF:B2:5E:40:BA:9E:5D:A4:C5:42:CF:E0:9B:67:74:2A Certificate issuer: /CN=A9186193/serialNumber=6103CAE6AFB25E40BA9E5DA4C542CFE09B67742A Certificate serial: 09D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft Manifest number: 09CF Signing time: Sun 02 Nov 2025 20:09:48 +0000 Manifest this update: Sun 02 Nov 2025 20:09:48 +0000 Manifest next update: Sun 09 Nov 2025 20:09:48 +0000 Files and hashes: 1: YQPK5q-yXkC6nl2kxULP4JtndCo.crl (hash: 9LJuhgnEhJuGkEanmEQdIYf86kodK3eXRtd82nqCLRc=) 2: B781FD5C8FB411EAA396FB5CC4F9AE02.roa (hash: Ox2JzCz1n/Zcged2uhXaHgWO3+p3E4q9pZj/D0/CtLo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.crl rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:09:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2520 (0x9d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186193, serialNumber=6103CAE6AFB25E40BA9E5DA4C542CFE09B67742A Validity Not Before: Nov 2 20:09:48 2025 GMT Not After : Nov 9 20:09:48 2025 GMT Subject: CN=6907ba8c-dae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e0:94:82:a0:a8:77:06:92:d0:79:ca:bd:6c: 12:7b:04:02:76:d6:5a:3f:e7:69:7a:23:48:07:3f: c2:db:01:82:34:e0:b0:6a:04:d4:75:69:c1:57:8b: e8:bd:3d:de:91:58:09:86:df:fb:b8:da:fa:d9:4b: 04:18:aa:04:ab:64:db:e8:ce:89:4b:69:f3:d4:00: 59:20:34:f7:7f:a9:cc:2c:04:f7:d4:aa:4d:6e:23: 34:f1:a9:c0:8b:e5:27:cb:69:dc:32:89:6a:c8:f0: b8:0a:a4:cf:02:92:c7:25:ae:64:40:2d:f4:e1:ec: 4a:99:17:45:ff:c4:3a:9d:ce:bd:95:54:3e:13:60: 2e:e5:ff:93:07:a5:62:e9:d7:95:03:50:a5:c4:ae: cc:32:ab:e2:1b:77:7f:e4:2d:ed:b9:ad:34:30:5e: f4:f7:e3:9e:ec:9d:73:c7:fb:81:24:6d:a2:02:38: f0:45:f2:eb:a3:dc:75:93:12:b0:f0:8a:36:63:c7: d1:42:bf:46:c9:e5:c8:c4:57:dc:b7:7a:28:6e:52: 7a:3c:bd:4a:cf:37:7b:9b:74:85:2b:44:04:85:f1: d1:71:9a:b3:e1:c8:e9:1e:a4:78:56:5e:13:a8:c3: ef:5a:84:30:67:62:14:37:62:b9:d2:d0:d3:a0:b1: dd:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:17:2E:BF:B7:E5:37:3B:E5:CA:77:66:DE:93:B3:7E:AE:44:1D:75 X509v3 Authority Key Identifier: keyid:61:03:CA:E6:AF:B2:5E:40:BA:9E:5D:A4:C5:42:CF:E0:9B:67:74:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:9f:6e:c1:4a:29:f1:08:af:44:b9:be:dd:9d:17:4a:04:78: 69:38:8a:3c:c2:23:12:c1:1b:d3:2a:42:b7:50:53:69:cd:54: 48:85:82:36:14:6a:11:b2:fd:ff:de:b8:33:1e:37:83:14:00: 7e:11:3e:2e:23:72:1e:10:b7:43:ee:7e:35:70:d7:e3:e5:22: cc:dd:cc:7a:c6:19:b3:32:03:a4:73:d6:0d:92:83:82:11:28: 69:0d:1a:3d:73:f5:99:1a:1b:44:12:ce:bf:0f:28:d0:a4:e1: 16:6e:10:c1:db:48:e0:d9:3a:ef:46:c0:5d:67:7d:a5:4c:01: 59:f0:1b:13:ae:54:26:75:37:91:d9:c1:82:e2:4c:d7:f7:8b: 26:75:37:22:bb:a7:22:b5:49:c1:d3:b6:e8:5d:3f:bc:f0:22: 79:8e:3d:74:86:1a:e9:8f:8b:32:b7:7b:8d:f5:70:19:c8:4d: 12:48:97:9a:a7:5d:f3:ab:73:4f:50:90:dd:ad:78:be:07:8f: 49:a6:a3:79:07:69:c0:65:d5:85:71:f2:4d:6a:6d:d6:2e:53: f2:78:09:62:6d:10:24:af:c3:db:57:48:48:a3:c5:2e:ec:64: 8a:28:4c:ad:76:f6:af:03:13:87:9b:79:84:3c:6f:65:e6:02: b1:d6:2d:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYxOTMxMTAvBgNVBAUTKDYxMDNDQUU2QUZCMjVFNDBCQTlFNURBNEM1NDJDRkUw OUI2Nzc0MkEwHhcNMjUxMTAyMjAwOTQ4WhcNMjUxMTA5MjAwOTQ4WjAYMRYwFAYD VQQDEw02OTA3YmE4Yy1kYWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAouCUgqCodwaS0HnKvWwSewQCdtZaP+dpeiNIBz/C2wGCNOCwagTUdWnBV4vo vT3ekVgJht/7uNr62UsEGKoEq2Tb6M6JS2nz1ABZIDT3f6nMLAT31KpNbiM08anA i+Uny2ncMolqyPC4CqTPApLHJa5kQC304exKmRdF/8Q6nc69lVQ+E2Au5f+TB6Vi 6deVA1ClxK7MMqviG3d/5C3tua00MF709+Oe7J1zx/uBJG2iAjjwRfLro9x1kxKw 8Io2Y8fRQr9GyeXIxFfct3ooblJ6PL1Kzzd7m3SFK0QEhfHRcZqz4cjpHqR4Vl4T qMPvWoQwZ2IUN2K50tDToLHdLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQXLr+3 5Tc75cp3Zt6Ts36uRB11MB8GA1UdIwQYMBaAFGEDyuavsl5Aup5dpMVCz+CbZ3Qq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjE5My8xRDUxNDA1RThG QjMxMUVBQjcxMjZDNTdDNEY5QUUwMi9ZUVBLNXEteVhrQzZubDJreFVMUDRKdG5k Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lRUEs1cS15WGtDNm5sMmt4VUxQNEp0bmRDby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjE5My8xRDUxNDA1RThGQjMxMUVBQjcxMjZDNTdDNEY5QUUwMi9ZUVBLNXEteVhr QzZubDJreFVMUDRKdG5kQ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQn27BSinxCK9Eub7dnRdKBHhpOIo8wiMSwRvTKkK3UFNpzVRIhYI2 FGoRsv3/3rgzHjeDFAB+ET4uI3IeELdD7n41cNfj5SLM3cx6xhmzMgOkc9YNkoOC EShpDRo9c/WZGhtEEs6/DyjQpOEWbhDB20jg2TrvRsBdZ32lTAFZ8BsTrlQmdTeR 2cGC4kzX94smdTciu6citUnB07boXT+88CJ5jj10hhrpj4syt3uN9XAZyE0SSJea p13zq3NPUJDdrXi+B49JpqN5B2nAZdWFcfJNam3WLlPyeAlibRAkr8PbV0hIo8Uu 7GSKKEytdvavAxOHm3mEPG9l5gKx1i1b -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:15 2025 by rpki-client