$ rpki-client -vvf rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft File: y7RecR9QOMR1deb07gwOjFZ744g.mft (raw, json) Hash identifier: ABPPSw/XPfG1ufckUtMdWsYXb0t2Dp0sS1MwKHS54WU= Subject key identifier: 30:56:4E:CF:0B:3B:82:07:C6:0C:D2:97:1E:0E:F5:5D:10:3A:0A:2D Authority key identifier: CB:B4:5E:71:1F:50:38:C4:75:75:E6:F4:EE:0C:0E:8C:56:7B:E3:88 Certificate issuer: /CN=A9186CDF/serialNumber=CBB45E711F5038C47575E6F4EE0C0E8C567BE388 Certificate serial: 07CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft Manifest number: 0FA3 Signing time: Tue 04 Nov 2025 21:18:10 +0000 Manifest this update: Tue 04 Nov 2025 21:18:10 +0000 Manifest next update: Tue 11 Nov 2025 21:18:10 +0000 Files and hashes: 1: y7RecR9QOMR1deb07gwOjFZ744g.crl (hash: chKd1rOQKLx+gtXw6iRTXWLA0RXWIvMx2tcrRAP9aXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.crl rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:18:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1998 (0x7ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186CDF, serialNumber=CBB45E711F5038C47575E6F4EE0C0E8C567BE388 Validity Not Before: Nov 4 21:18:10 2025 GMT Not After : Nov 11 21:18:10 2025 GMT Subject: CN=690a6d92-94d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:10:82:2c:35:8d:b4:9b:05:c1:78:72:38:38: ae:5d:9a:86:b4:69:4c:71:ea:2d:d1:fc:86:b0:63: ce:ce:9f:c2:e5:74:a7:32:80:ec:2a:ff:12:7f:b4: 83:71:09:a0:62:04:53:d3:1a:b0:f9:a3:af:a9:9b: ef:5b:33:c7:03:fe:51:ac:0c:56:a7:01:82:9a:a3: 92:7b:d0:f3:38:2b:71:16:29:ee:f8:8c:fe:72:cd: 6c:b0:57:0a:a1:a8:5e:7f:06:49:61:e5:b3:8c:65: a1:a6:58:de:5b:a6:69:a6:55:5c:0f:94:73:9a:78: ab:43:a6:11:6e:c9:33:cb:64:76:d7:65:52:0a:02: de:2d:22:46:bc:e1:25:3e:da:93:ab:f8:c1:d0:59: 74:79:60:59:82:9b:68:20:a5:3b:36:20:d5:81:3a: 5e:84:ed:23:29:66:ce:db:a7:55:4f:98:8e:fc:80: ad:8b:58:19:85:34:fa:56:5a:a6:0d:da:23:cb:b5: 39:9e:58:19:a7:04:55:cb:49:96:32:c1:8d:8f:23: 98:f1:14:8c:bb:b1:0a:5a:9a:74:e8:c6:a2:41:fb: 83:7f:04:fb:c0:98:3a:7d:c6:a9:eb:bb:23:b1:61: 62:6b:11:f4:b3:e2:0c:ee:15:a9:4c:1b:1e:ff:22: b6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:56:4E:CF:0B:3B:82:07:C6:0C:D2:97:1E:0E:F5:5D:10:3A:0A:2D X509v3 Authority Key Identifier: keyid:CB:B4:5E:71:1F:50:38:C4:75:75:E6:F4:EE:0C:0E:8C:56:7B:E3:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:65:1a:90:9d:d2:e0:32:95:2c:aa:56:d0:0c:52:f8:23:4b: 87:a6:0e:e8:fb:f4:21:f1:14:c3:76:fc:38:76:d0:89:56:ef: c8:e0:92:32:eb:7d:b4:26:45:51:f6:ba:b3:65:60:99:ec:fc: 01:3a:f2:32:48:c0:64:c1:d2:0a:a1:44:b0:e2:79:55:b3:d0: 55:4b:f9:0a:91:18:b7:2a:26:97:a2:a9:d5:af:0a:7b:06:e5: b4:2f:cb:45:b3:1d:c6:2b:f9:c6:d1:06:01:de:0e:25:ea:38: 9f:79:87:74:66:53:e9:40:80:3c:9d:91:e5:67:28:df:7f:da: 25:6c:0c:24:fb:93:1c:ac:f6:5a:4c:45:29:68:46:10:63:82: 1a:89:4c:74:5f:f8:cb:e2:d2:a2:37:c1:bb:fd:cd:0d:dc:07: 52:05:d3:a6:1a:91:0c:c2:fa:e0:78:c1:ba:74:82:8a:c4:a2: 46:26:f5:c9:f1:1e:aa:97:39:45:77:25:4d:a6:d4:d8:48:77: ce:cd:f6:d9:cd:b9:bf:d8:0b:56:ba:56:53:31:d5:eb:f4:65: d6:2e:2d:d1:44:1c:0e:dc:51:c6:e6:36:7a:7f:bf:ff:05:33: d1:ec:27:85:b6:a0:ce:7a:3e:67:0a:0d:cf:17:24:fd:89:86: 87:84:6d:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZDREYxMTAvBgNVBAUTKENCQjQ1RTcxMUY1MDM4QzQ3NTc1RTZGNEVFMEMwRThD NTY3QkUzODgwHhcNMjUxMTA0MjExODEwWhcNMjUxMTExMjExODEwWjAYMRYwFAYD VQQDEw02OTBhNmQ5Mi05NGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhCCLDWNtJsFwXhyODiuXZqGtGlMceot0fyGsGPOzp/C5XSnMoDsKv8Sf7SD cQmgYgRT0xqw+aOvqZvvWzPHA/5RrAxWpwGCmqOSe9DzOCtxFinu+Iz+cs1ssFcK oahefwZJYeWzjGWhpljeW6ZpplVcD5RzmnirQ6YRbskzy2R212VSCgLeLSJGvOEl PtqTq/jB0Fl0eWBZgptoIKU7NiDVgTpehO0jKWbO26dVT5iO/ICti1gZhTT6Vlqm Ddojy7U5nlgZpwRVy0mWMsGNjyOY8RSMu7EKWpp06MaiQfuDfwT7wJg6fcap67sj sWFiaxH0s+IM7hWpTBse/yK2YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDBWTs8L O4IHxgzSlx4O9V0QOgotMB8GA1UdIwQYMBaAFMu0XnEfUDjEdXXm9O4MDoxWe+OI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkNERi80NDgxRjBBODEx REUxMUVCQjlGOUY3NzdDNEY5QUUwMi95N1JlY1I5UU9NUjFkZWIwN2d3T2pGWjc0 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3UmVjUjlRT01SMWRlYjA3Z3dPakZaNzQ0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkNERi80NDgxRjBBODExREUxMUVCQjlGOUY3NzdDNEY5QUUwMi95N1JlY1I5UU9N UjFkZWIwN2d3T2pGWjc0NGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8ZRqQndLgMpUsqlbQDFL4I0uHpg7o+/Qh8RTDdvw4dtCJVu/I4JIy 6320JkVR9rqzZWCZ7PwBOvIySMBkwdIKoUSw4nlVs9BVS/kKkRi3KiaXoqnVrwp7 BuW0L8tFsx3GK/nG0QYB3g4l6jifeYd0ZlPpQIA8nZHlZyjff9olbAwk+5McrPZa TEUpaEYQY4IaiUx0X/jL4tKiN8G7/c0N3AdSBdOmGpEMwvrgeMG6dIKKxKJGJvXJ 8R6qlzlFdyVNptTYSHfOzfbZzbm/2AtWulZTMdXr9GXWLi3RRBwO3FHG5jZ6f7// BTPR7CeFtqDOej5nCg3PFyT9iYaHhG1m -----END CERTIFICATE-----Generated at Wed Nov 5 11:24:46 2025 by rpki-client