$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft File: yddu42nMHPDmKcUQpLr0ZeFfteE.mft (raw, json) Hash identifier: +MRWQeLv0AFzAyVqw9Tu/rwby5dDvTJLG9dXcpa7ahc= Subject key identifier: 12:71:B5:83:75:E9:09:09:34:30:A7:4C:39:F8:AE:5D:79:26:D0:FA Authority key identifier: C9:D7:6E:E3:69:CC:1C:F0:E6:29:C5:10:A4:BA:F4:65:E1:5F:B5:E1 Certificate issuer: /CN=A9194E59/serialNumber=C9D76EE369CC1CF0E629C510A4BAF465E15FB5E1 Certificate serial: 0467 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft Manifest number: 0462 Signing time: Mon 03 Nov 2025 00:08:24 +0000 Manifest this update: Mon 03 Nov 2025 00:08:23 +0000 Manifest next update: Mon 10 Nov 2025 00:08:23 +0000 Files and hashes: 1: yddu42nMHPDmKcUQpLr0ZeFfteE.crl (hash: 1aGOhKuS6ewGH13O9M4bzOlsCxaSDRjRDqbW5YkH1aU=) 2: AD9D02406C6811ECB7C0925AC4F9AE02.roa (hash: kw8NlMSw+Nqcx4jBYDikGpkNhg4pIHl7KmPwkj2eC0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.crl rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1127 (0x467) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194E59, serialNumber=C9D76EE369CC1CF0E629C510A4BAF465E15FB5E1 Validity Not Before: Nov 3 00:08:23 2025 GMT Not After : Nov 10 00:08:23 2025 GMT Subject: CN=6907f277-446d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7a:14:72:ca:f1:e2:b0:7d:c1:df:e6:0f:40: 51:ae:9d:1a:01:0c:dc:01:fa:5c:05:22:c1:37:68: ab:0a:7c:58:d0:95:e4:62:c6:7e:1b:de:92:c2:5b: 46:9c:63:e0:65:4a:d0:8b:70:30:29:9c:82:64:6a: 43:1a:4a:ba:bf:fc:4e:24:09:e8:19:ad:08:72:72: 1c:5c:a9:5a:bc:22:ae:9a:7a:12:17:ae:e0:a4:52: ca:56:a5:77:ca:46:99:46:98:a7:56:86:a4:69:8c: 79:0d:5a:65:6e:8b:24:53:57:7a:6a:83:f8:7a:d7: 6d:8a:c2:71:9a:e7:63:14:23:7b:f2:70:d4:f8:38: f4:44:a9:02:b4:7e:d5:e1:b2:cf:69:3f:15:cb:63: 21:07:4a:72:66:69:25:de:f8:2e:a9:72:27:e5:69: 66:ef:7d:b1:2b:8c:e2:d1:43:71:5a:9f:f2:92:7b: 5b:59:c5:a7:8e:10:5c:5b:91:1e:b8:fe:7b:e8:62: 20:e0:33:63:b3:22:dc:98:1a:cd:2e:9c:ff:41:d3: 73:cb:5a:1e:88:0b:61:5c:8b:e3:17:62:a9:bf:63: a6:a5:ab:e9:4f:52:cf:d6:00:bf:11:b0:87:81:ba: 99:10:78:76:a1:67:98:ff:3c:c9:c4:32:da:83:68: 78:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:71:B5:83:75:E9:09:09:34:30:A7:4C:39:F8:AE:5D:79:26:D0:FA X509v3 Authority Key Identifier: keyid:C9:D7:6E:E3:69:CC:1C:F0:E6:29:C5:10:A4:BA:F4:65:E1:5F:B5:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:71:bf:f5:c6:59:87:4e:e0:1f:bb:b8:ce:90:c9:34:ee:cb: bd:1f:c0:2c:60:36:a8:67:04:42:b4:24:a0:6e:56:9f:39:a7: 7f:f7:b3:f3:bb:15:6b:00:84:7c:50:fa:9d:46:46:4c:fc:34: 6a:45:9e:f6:ab:2f:65:1e:fe:53:90:a1:73:f9:7d:4d:f0:cb: ec:f8:f7:f8:ee:53:b9:53:05:93:d0:aa:1f:e2:67:b4:80:03: 0c:9c:76:71:f4:b1:cc:78:8d:38:b1:d8:db:1c:64:73:97:c3: ed:08:11:80:bc:7a:1e:ae:56:ff:dc:3b:6c:b0:7a:21:01:49: 3b:86:01:e2:7d:6d:39:1b:7d:ba:25:e3:6f:0f:5e:f2:f8:58: f9:07:cc:a4:fb:7b:c9:b7:08:7c:63:5c:f1:f0:3e:0a:7b:e0: 1a:94:1f:f5:ee:c4:0d:c3:bf:32:6f:e5:70:69:7b:9f:02:6f: d0:08:a1:0f:f5:6b:d7:3a:ba:db:9a:8d:50:56:7c:9c:eb:56: 8f:9c:30:3d:a8:6f:3d:b2:7b:1d:f8:e4:ee:df:9a:3d:51:69: f2:b0:81:10:df:8b:4d:d8:e6:aa:d3:a2:f9:63:46:28:cd:b3: 62:b1:e0:a8:f8:15:27:9d:9c:99:8d:54:d8:7c:e3:27:55:7f: 2d:fd:73:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFNTkxMTAvBgNVBAUTKEM5RDc2RUUzNjlDQzFDRjBFNjI5QzUxMEE0QkFGNDY1 RTE1RkI1RTEwHhcNMjUxMTAzMDAwODIzWhcNMjUxMTEwMDAwODIzWjAYMRYwFAYD VQQDEw02OTA3ZjI3Ny00NDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXoUcsrx4rB9wd/mD0BRrp0aAQzcAfpcBSLBN2irCnxY0JXkYsZ+G96SwltG nGPgZUrQi3AwKZyCZGpDGkq6v/xOJAnoGa0IcnIcXKlavCKumnoSF67gpFLKVqV3 ykaZRpinVoakaYx5DVplboskU1d6aoP4etdtisJxmudjFCN78nDU+Dj0RKkCtH7V 4bLPaT8Vy2MhB0pyZmkl3vguqXIn5Wlm732xK4zi0UNxWp/ykntbWcWnjhBcW5Ee uP576GIg4DNjsyLcmBrNLpz/QdNzy1oeiAthXIvjF2Kpv2OmpavpT1LP1gC/EbCH gbqZEHh2oWeY/zzJxDLag2h4bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJxtYN1 6QkJNDCnTDn4rl15JtD6MB8GA1UdIwQYMBaAFMnXbuNpzBzw5inFEKS69GXhX7Xh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEU1OS9BQjYxMTFCNDZD NjQxMUVDQkVBQTE4NTJDNEY5QUUwMi95ZGR1NDJuTUhQRG1LY1VRcExyMFplRmZ0 ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lkZHU0Mm5NSFBEbUtjVVFwTHIwWmVGZnRlRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEU1OS9BQjYxMTFCNDZDNjQxMUVDQkVBQTE4NTJDNEY5QUUwMi95ZGR1NDJuTUhQ RG1LY1VRcExyMFplRmZ0ZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBecb/1xlmHTuAfu7jOkMk07su9H8AsYDaoZwRCtCSgblafOad/97Pz uxVrAIR8UPqdRkZM/DRqRZ72qy9lHv5TkKFz+X1N8Mvs+Pf47lO5UwWT0Kof4me0 gAMMnHZx9LHMeI04sdjbHGRzl8PtCBGAvHoerlb/3DtssHohAUk7hgHifW05G326 JeNvD17y+Fj5B8yk+3vJtwh8Y1zx8D4Ke+AalB/17sQNw78yb+VwaXufAm/QCKEP 9WvXOrrbmo1QVnyc61aPnDA9qG89snsd+OTu35o9UWnysIEQ34tN2Oaq06L5Y0Yo zbNiseCo+BUnnZyZjVTYfOMnVX8t/XMG -----END CERTIFICATE-----Generated at Tue Nov 4 08:30:11 2025 by rpki-client