$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft File: yomQiVxPTQ5f49-BWICyA1kPsno.mft (raw, json) Hash identifier: wdU0dSMccfYAwm6wXZ6cvoz8xz4dH0VSJET6qYpgyKA= Subject key identifier: 10:7D:93:FE:D5:09:44:4D:08:D2:67:96:A6:9B:93:A9:62:D6:CB:F2 Authority key identifier: CA:89:90:89:5C:4F:4D:0E:5F:E3:DF:81:58:80:B2:03:59:0F:B2:7A Certificate issuer: /CN=A9194A8C/serialNumber=CA8990895C4F4D0E5FE3DF815880B203590FB27A Certificate serial: 01A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft Manifest number: 06B2 Signing time: Sun 02 Nov 2025 23:35:12 +0000 Manifest this update: Sun 02 Nov 2025 23:35:12 +0000 Manifest next update: Sun 09 Nov 2025 23:35:12 +0000 Files and hashes: 1: yomQiVxPTQ5f49-BWICyA1kPsno.crl (hash: haGjjPYZHyWNbQbiNkyXZwSBkPPAcCCO8mG4BP0X6Bw=) 2: C885D0C8374B11EEA2157233C4F9AE02.roa (hash: znV1YV1R4QHmzxUCIkShtYBgrQBJHV87NrUXdKtqEAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.crl rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:35:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194A8C, serialNumber=CA8990895C4F4D0E5FE3DF815880B203590FB27A Validity Not Before: Nov 2 23:35:12 2025 GMT Not After : Nov 9 23:35:12 2025 GMT Subject: CN=6907eab0-b165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e7:e2:47:92:ab:1f:78:b0:f3:ef:a8:26:45: 2a:16:56:3f:b2:d6:a1:01:75:a4:89:85:28:23:86: 47:d3:c0:93:29:40:e0:41:a7:b1:b7:62:b0:ee:5a: 02:53:ae:8e:92:64:89:c5:73:85:78:f0:31:68:33: b4:f8:dd:da:97:57:bf:76:0c:7d:96:1f:9f:72:43: e7:a5:ad:00:96:1f:09:f2:a1:4d:7a:a3:37:dd:ee: d4:72:d4:fd:38:1a:ef:31:ef:82:06:68:06:df:3f: 55:6f:51:83:c3:91:e4:b9:dd:3e:7c:c7:95:04:2b: 07:ac:22:35:a7:02:75:ff:df:35:e0:2c:ed:01:b1: 80:38:c0:08:a5:fe:cb:70:29:38:b3:15:d4:94:c5: 83:76:6a:9e:71:24:e6:13:ba:63:b3:79:a8:ea:01: 72:c0:f0:c8:b7:91:ff:d6:f0:56:67:ab:41:40:5b: 16:04:45:bf:98:28:dd:c4:49:50:60:e1:19:52:b2: e7:25:4d:05:a3:a7:89:6f:b4:ce:a6:d8:bc:97:24: 5f:93:d0:74:b4:af:a6:28:d7:bd:9c:c2:9f:04:43: 7d:cb:ae:3c:ad:59:92:b6:bc:75:dd:7d:ee:31:19: 5b:ba:6d:db:b6:cc:21:17:96:18:4a:5b:a0:34:fd: f1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:7D:93:FE:D5:09:44:4D:08:D2:67:96:A6:9B:93:A9:62:D6:CB:F2 X509v3 Authority Key Identifier: keyid:CA:89:90:89:5C:4F:4D:0E:5F:E3:DF:81:58:80:B2:03:59:0F:B2:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:67:f8:17:82:44:0d:73:f9:10:03:92:eb:5b:08:83:6e:10: 18:e6:7c:8b:31:d6:70:cd:44:aa:41:a5:24:3a:e8:29:00:21: ee:03:32:16:27:dc:e5:cf:1e:f7:b7:61:44:90:47:15:09:dd: 2d:db:91:67:3d:90:a8:af:54:31:3a:7d:e5:ce:1a:c4:db:20: 66:a4:59:18:94:de:fb:fb:c3:ea:7a:97:02:23:54:25:aa:1b: 5b:e2:7f:aa:91:f7:e6:f2:f7:cf:4f:01:5a:74:8e:c4:e5:49: e2:4e:cd:65:f3:7f:8b:60:1a:e7:91:d3:b0:5b:26:8a:5b:d0: aa:31:be:b9:d9:5d:63:ff:57:91:4c:69:07:90:38:af:38:47: 41:bd:3e:39:ec:36:44:c2:2f:c7:80:44:51:90:51:95:79:81: 0c:81:9e:61:f8:48:9c:7a:65:64:a6:00:43:25:c5:c5:93:6d: 50:e6:05:49:0f:2c:12:21:da:da:a3:28:98:38:2c:67:a3:78: 86:03:80:27:18:3b:a7:fd:b5:1c:f5:d2:8a:ab:99:cc:32:f9: 51:fc:1d:cb:7d:81:58:bc:2a:6d:84:39:97:47:3d:c8:2c:b3: 19:e5:f8:7b:a8:5b:5b:da:b9:39:eb:c0:52:a7:65:5b:7a:c9: 5a:13:1b:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBOEMxMTAvBgNVBAUTKENBODk5MDg5NUM0RjREMEU1RkUzREY4MTU4ODBCMjAz NTkwRkIyN0EwHhcNMjUxMTAyMjMzNTEyWhcNMjUxMTA5MjMzNTEyWjAYMRYwFAYD VQQDEw02OTA3ZWFiMC1iMTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvefiR5KrH3iw8++oJkUqFlY/stahAXWkiYUoI4ZH08CTKUDgQaext2Kw7loC U66OkmSJxXOFePAxaDO0+N3al1e/dgx9lh+fckPnpa0Alh8J8qFNeqM33e7UctT9 OBrvMe+CBmgG3z9Vb1GDw5Hkud0+fMeVBCsHrCI1pwJ1/9814CztAbGAOMAIpf7L cCk4sxXUlMWDdmqecSTmE7pjs3mo6gFywPDIt5H/1vBWZ6tBQFsWBEW/mCjdxElQ YOEZUrLnJU0Fo6eJb7TOpti8lyRfk9B0tK+mKNe9nMKfBEN9y648rVmStrx13X3u MRlbum3btswhF5YYSlugNP3xHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBB9k/7V CURNCNJnlqabk6li1svyMB8GA1UdIwQYMBaAFMqJkIlcT00OX+PfgViAsgNZD7J6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEE4Qy85RTY3MTFBNDJC MUMxMUVDOTU5OTc0MDlDNEY5QUUwMi95b21RaVZ4UFRRNWY0OS1CV0lDeUExa1Bz bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lvbVFpVnhQVFE1ZjQ5LUJXSUN5QTFrUHNuby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEE4Qy85RTY3MTFBNDJCMUMxMUVDOTU5OTc0MDlDNEY5QUUwMi95b21RaVZ4UFRR NWY0OS1CV0lDeUExa1Bzbm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjZ/gXgkQNc/kQA5LrWwiDbhAY5nyLMdZwzUSqQaUkOugpACHuAzIW J9zlzx73t2FEkEcVCd0t25FnPZCor1QxOn3lzhrE2yBmpFkYlN77+8PqepcCI1Ql qhtb4n+qkffm8vfPTwFadI7E5UniTs1l83+LYBrnkdOwWyaKW9CqMb652V1j/1eR TGkHkDivOEdBvT457DZEwi/HgERRkFGVeYEMgZ5h+EicemVkpgBDJcXFk21Q5gVJ DywSIdraoyiYOCxno3iGA4AnGDun/bUc9dKKq5nMMvlR/B3LfYFYvCpthDmXRz3I LLMZ5fh7qFtb2rk568BSp2VbeslaExsf -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:00 2025 by rpki-client