$ rpki-client -vvf rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft File: Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft (raw, json) Hash identifier: 8053W3iPo6e3OA69UCJo+MQZsV4c/TwUCIZvOjU5Iy4= Subject key identifier: D7:9C:7F:17:74:D0:0E:52:E2:B2:3D:8B:06:38:7B:5D:CC:9C:78:0F Authority key identifier: 62:7F:A9:96:0E:A2:83:AA:23:92:13:CA:CD:37:50:4D:24:60:A1:04 Certificate issuer: /CN=A9190FEA/serialNumber=627FA9960EA283AA239213CACD37504D2460A104 Certificate serial: 0C95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft Manifest number: 0C84 Signing time: Sun 02 Nov 2025 18:29:01 +0000 Manifest this update: Sun 02 Nov 2025 18:29:00 +0000 Manifest next update: Sun 09 Nov 2025 18:29:00 +0000 Files and hashes: 1: Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl (hash: WI6VZv+KFDDlcNUHqESttRD6Q9uf4QPDZuz00qXY1BM=) 2: EC7403A0B20711EFAADEFA2CC4F9AE02.roa (hash: 41gtdkmTRXbX1drZcFOb/E12vO66zREAaSFWLwXsUVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:29:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3221 (0xc95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190FEA, serialNumber=627FA9960EA283AA239213CACD37504D2460A104 Validity Not Before: Nov 2 18:29:00 2025 GMT Not After : Nov 9 18:29:00 2025 GMT Subject: CN=6907a2ed-a239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:05:d1:d6:5f:40:72:74:40:cd:fe:2e:8d:d6: 56:4d:67:d2:2e:e9:f1:ca:72:42:2d:b8:2a:5d:45: a0:8e:68:14:eb:59:b9:b8:4a:2c:65:b1:18:94:db: d0:f7:cd:50:c0:c5:74:8c:45:36:b5:8d:d2:c6:99: 91:d6:f3:07:45:60:aa:0f:fc:d3:73:69:5f:e6:c9: bd:36:58:3e:90:1a:32:54:9c:bb:72:54:d2:18:dd: a0:89:e3:7c:ca:b9:9f:5d:ff:c7:af:2c:fc:31:17: cd:4f:96:70:9b:27:f3:05:e4:70:d4:73:d7:c2:0d: b9:8e:e8:13:38:c2:7d:63:d8:3a:5d:0a:dc:03:21: c1:3f:f1:71:db:d4:90:8e:1c:9f:0e:59:41:5a:a5: ad:0d:55:14:c4:db:55:5b:0b:ee:d4:87:45:ac:15: 45:95:22:7f:0b:0d:d2:fb:9e:07:f7:f3:01:93:a5: 97:97:5c:dc:9b:b2:40:93:6b:f7:51:f1:37:86:9f: 7f:fc:13:20:61:2f:b8:97:a0:c8:04:da:e2:2a:46: ae:41:cc:4f:13:8e:b2:4f:bd:78:d6:aa:ef:40:ae: 6a:ba:4b:aa:08:cc:a7:a3:00:87:e8:d3:60:9a:e4: 43:81:29:6e:84:f7:ee:6f:0b:7a:69:d9:6b:04:53: f2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:9C:7F:17:74:D0:0E:52:E2:B2:3D:8B:06:38:7B:5D:CC:9C:78:0F X509v3 Authority Key Identifier: keyid:62:7F:A9:96:0E:A2:83:AA:23:92:13:CA:CD:37:50:4D:24:60:A1:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:4a:e4:d6:a2:c7:0a:dc:23:df:aa:75:b6:52:2b:cb:f9:34: c7:8f:0c:61:d8:01:43:91:18:ec:d8:c7:80:1f:ee:b1:3c:6c: af:a5:2a:8f:9e:6b:44:b5:f2:81:73:f8:09:00:dd:9d:95:22: 3c:12:6d:59:7d:5f:7e:c6:80:46:ea:59:57:fc:de:cb:94:30: fd:17:19:1a:1c:d5:d6:32:37:7d:54:d8:a6:e3:4a:c7:45:cb: f8:a9:01:67:e5:dd:05:7e:17:df:cc:33:1b:07:ea:e0:81:d4: 25:fe:93:8b:ea:1d:53:2e:04:08:07:4c:f9:8b:8b:68:0d:82: 8f:75:3f:60:b9:a7:ac:3c:21:af:f7:22:86:23:14:3c:54:46: 75:05:8f:a6:f5:87:ea:87:9b:78:59:14:88:96:e2:a9:c1:46: f5:dd:8c:82:8c:92:02:4a:5d:dc:b4:84:21:0a:e5:40:bb:32: ee:2d:74:47:bf:b9:46:e6:af:36:8b:ee:6c:63:b4:b9:23:47: c5:d7:81:64:2c:24:70:45:e2:47:b6:01:38:ea:c2:f2:e2:82: 71:91:9f:2c:79:e2:08:bf:5d:67:84:5b:17:02:13:d8:db:94: 1a:b1:17:55:4a:39:df:b0:ec:44:da:5f:a3:f1:24:67:9a:dc: 85:59:01:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBGRUExMTAvBgNVBAUTKDYyN0ZBOTk2MEVBMjgzQUEyMzkyMTNDQUNEMzc1MDRE MjQ2MEExMDQwHhcNMjUxMTAyMTgyOTAwWhcNMjUxMTA5MTgyOTAwWjAYMRYwFAYD VQQDEw02OTA3YTJlZC1hMjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygXR1l9AcnRAzf4ujdZWTWfSLunxynJCLbgqXUWgjmgU61m5uEosZbEYlNvQ 981QwMV0jEU2tY3SxpmR1vMHRWCqD/zTc2lf5sm9Nlg+kBoyVJy7clTSGN2gieN8 yrmfXf/Hryz8MRfNT5ZwmyfzBeRw1HPXwg25jugTOMJ9Y9g6XQrcAyHBP/Fx29SQ jhyfDllBWqWtDVUUxNtVWwvu1IdFrBVFlSJ/Cw3S+54H9/MBk6WXl1zcm7JAk2v3 UfE3hp9//BMgYS+4l6DIBNriKkauQcxPE46yT7141qrvQK5qukuqCMynowCH6NNg muRDgSluhPfubwt6adlrBFPyIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNecfxd0 0A5S4rI9iwY4e13MnHgPMB8GA1UdIwQYMBaAFGJ/qZYOooOqI5ITys03UE0kYKEE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEZFQS8yNDBEQUNFQTBC NzIxMUVBQUNGQjY5MTZDNEY5QUUwMi9Zbi1wbGc2aWc2b2praFBLelRkUVRTUmdv UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1luLXBsZzZpZzZvamtoUEt6VGRRVFNSZ29RUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEZFQS8yNDBEQUNFQTBCNzIxMUVBQUNGQjY5MTZDNEY5QUUwMi9Zbi1wbGc2aWc2 b2praFBLelRkUVRTUmdvUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+SuTWoscK3CPfqnW2UivL+TTHjwxh2AFDkRjs2MeAH+6xPGyvpSqP nmtEtfKBc/gJAN2dlSI8Em1ZfV9+xoBG6llX/N7LlDD9FxkaHNXWMjd9VNim40rH Rcv4qQFn5d0FfhffzDMbB+rggdQl/pOL6h1TLgQIB0z5i4toDYKPdT9guaesPCGv 9yKGIxQ8VEZ1BY+m9Yfqh5t4WRSIluKpwUb13YyCjJICSl3ctIQhCuVAuzLuLXRH v7lG5q82i+5sY7S5I0fF14FkLCRwReJHtgE46sLy4oJxkZ8seeIIv11nhFsXAhPY 25QasRdVSjnfsOxE2l+j8SRnmtyFWQGv -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:00 2025 by rpki-client