$ rpki-client -vvf rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft File: yW0SR_XLoniur1KTUbX4HKVxcKM.mft (raw, json) Hash identifier: dL71osBiJJHcEOMXsp/QgHfsYy5IJL4SurJWx9P4Syo= Subject key identifier: 4E:E4:F8:5E:2D:94:D6:4A:B4:81:97:D4:50:82:79:E5:E8:65:39:D8 Authority key identifier: C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3 Certificate issuer: /CN=A9190E6C/serialNumber=C96D1247F5CBA278AEAF529351B5F81CA57170A3 Certificate serial: 0D9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft Manifest number: 0D92 Signing time: Sun 02 Nov 2025 17:56:28 +0000 Manifest this update: Sun 02 Nov 2025 17:56:27 +0000 Manifest next update: Sun 09 Nov 2025 17:56:27 +0000 Files and hashes: 1: yW0SR_XLoniur1KTUbX4HKVxcKM.crl (hash: 9ZdUsl+1n4EGH2QLMTG0gYoPnkqwLyh77X2tAF78F1I=) 2: 07C8CFD0E18F11EF82714B13C4F9AE02.roa (hash: pHVkzfX7SG48uWlsj9xFm7ATtwnDNjsznm3glTtz9F0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.crl rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3486 (0xd9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190E6C, serialNumber=C96D1247F5CBA278AEAF529351B5F81CA57170A3 Validity Not Before: Nov 2 17:56:27 2025 GMT Not After : Nov 9 17:56:27 2025 GMT Subject: CN=69079b4c-6e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:dd:d6:25:cc:8c:76:6c:ae:7a:ba:f8:6c:5d: c8:c9:d3:51:9b:de:e8:9c:ef:70:df:f5:47:99:c6: c1:83:d8:42:d0:fe:3a:aa:0e:85:cb:3b:cc:e0:04: 8a:d0:a1:dd:3b:75:07:cc:db:aa:9e:06:3f:3d:34: 5e:08:2a:cc:28:8f:e5:fe:fb:94:32:dc:cb:c4:ca: 29:94:ac:5c:9d:9d:97:cc:07:fd:6e:94:3d:f4:a6: 2d:be:f0:ef:99:11:86:03:e2:4d:8a:7e:44:e9:f3: 4a:9d:d6:72:d6:32:6e:8e:15:9b:9c:a1:c0:93:a5: d9:30:56:22:ce:b7:6b:80:c7:b5:9d:60:86:49:03: 4d:f4:e2:13:c2:4d:bf:c5:74:b1:48:09:05:89:29: 5b:5b:77:e5:f1:66:37:0a:6b:28:aa:da:5a:43:d6: 40:5c:c8:72:47:99:70:2f:a9:7a:8d:28:a0:96:f2: fb:4b:51:02:2c:e4:e6:ab:04:32:53:c0:47:c4:34: 16:e9:62:26:f4:93:07:0c:64:38:79:73:13:a0:1c: ba:82:e9:56:60:f8:6e:cb:48:98:af:c9:67:e5:05: 43:12:1f:4a:86:38:31:3e:03:03:70:28:62:33:b6: 8e:7d:17:48:3f:99:da:26:15:e4:95:03:83:11:94: 4e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E4:F8:5E:2D:94:D6:4A:B4:81:97:D4:50:82:79:E5:E8:65:39:D8 X509v3 Authority Key Identifier: keyid:C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:fc:27:30:57:95:3c:de:a9:69:d1:e0:ff:29:c9:c3:8e:54: 3f:63:13:02:6e:92:f3:97:90:64:47:36:67:b1:22:fc:b6:60: f3:a7:d2:4d:d0:32:27:2d:51:8a:b9:57:09:ca:69:0c:90:f7: b6:7a:08:12:b2:c7:e9:2d:f5:c1:0c:5c:57:0f:b1:08:7b:ec: 09:61:46:73:2b:2d:56:77:27:9d:dd:6d:4d:10:2c:da:97:1d: c8:83:34:bd:56:16:e5:28:85:45:73:c9:6b:1b:b9:49:0c:a2: 1c:c4:b2:df:9b:79:e4:20:f2:04:6c:8c:5b:b6:80:73:74:39: 4c:ab:0d:ee:df:05:70:ec:96:1b:ea:37:48:ef:8c:14:43:dc: 1e:31:2d:90:d6:84:6b:40:52:53:4d:77:a8:f9:2c:0b:89:cc: 4c:be:35:f6:d1:3a:1e:0a:20:9a:bd:80:f7:d5:0e:a0:2e:71: f8:fc:c7:04:0f:f8:18:fe:3e:83:f3:09:2a:4e:fe:36:f1:35: d9:34:9b:f9:b6:a0:56:36:55:34:1d:c7:d0:08:59:66:69:d0: c2:06:84:4a:b3:81:21:12:aa:15:9b:5b:15:59:d5:a2:54:cc: a2:a1:6d:b7:fc:c2:9f:69:a4:32:ba:af:ad:bd:70:88:0d:79: 5d:2e:be:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBFNkMxMTAvBgNVBAUTKEM5NkQxMjQ3RjVDQkEyNzhBRUFGNTI5MzUxQjVGODFD QTU3MTcwQTMwHhcNMjUxMTAyMTc1NjI3WhcNMjUxMTA5MTc1NjI3WjAYMRYwFAYD VQQDEw02OTA3OWI0Yy02ZThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8N3WJcyMdmyuerr4bF3IydNRm97onO9w3/VHmcbBg9hC0P46qg6FyzvM4ASK 0KHdO3UHzNuqngY/PTReCCrMKI/l/vuUMtzLxMoplKxcnZ2XzAf9bpQ99KYtvvDv mRGGA+JNin5E6fNKndZy1jJujhWbnKHAk6XZMFYizrdrgMe1nWCGSQNN9OITwk2/ xXSxSAkFiSlbW3fl8WY3CmsoqtpaQ9ZAXMhyR5lwL6l6jSiglvL7S1ECLOTmqwQy U8BHxDQW6WIm9JMHDGQ4eXMToBy6gulWYPhuy0iYr8ln5QVDEh9KhjgxPgMDcChi M7aOfRdIP5naJhXklQODEZROpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7k+F4t lNZKtIGX1FCCeeXoZTnYMB8GA1UdIwQYMBaAFMltEkf1y6J4rq9Sk1G1+BylcXCj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEU2Qy85QzY5QTczMkQ0 OTIxMUU5QUFFM0MwMkJDNEY5QUUwMi95VzBTUl9YTG9uaXVyMUtUVWJYNEhLVnhj S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lXMFNSX1hMb25pdXIxS1RVYlg0SEtWeGNLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEU2Qy85QzY5QTczMkQ0OTIxMUU5QUFFM0MwMkJDNEY5QUUwMi95VzBTUl9YTG9u aXVyMUtUVWJYNEhLVnhjS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0/CcwV5U83qlp0eD/KcnDjlQ/YxMCbpLzl5BkRzZnsSL8tmDzp9JN 0DInLVGKuVcJymkMkPe2eggSssfpLfXBDFxXD7EIe+wJYUZzKy1Wdyed3W1NECza lx3IgzS9VhblKIVFc8lrG7lJDKIcxLLfm3nkIPIEbIxbtoBzdDlMqw3u3wVw7JYb 6jdI74wUQ9weMS2Q1oRrQFJTTXeo+SwLicxMvjX20ToeCiCavYD31Q6gLnH4/McE D/gY/j6D8wkqTv428TXZNJv5tqBWNlU0HcfQCFlmadDCBoRKs4EhEqoVm1sVWdWi VMyioW23/MKfaaQyuq+tvXCIDXldLr7C -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:30 2025 by rpki-client